Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 280
  • Last Modified:

WSUS Updates Install.

in the WSUS policy, I set it up to:
-auto Donwload and schedule the install, every day at 3:00
-Allow Automatic Updates immediate installation
Automatic Updates detection frequency:Check for updates at the following interval (hours):  20

on Thursday morning at 8:00 am  when I checked the computer to which the policy is applied I saw the following logs in the event viewer:


3:00:20 Windows Server 2003 Hotfix KB967715 was installed.
3:00:26 Installation Successful: Windows successfully installed the following update: Update for Windows Server 2003 (KB967715)
3:00:26 Windows Server 2003 Hotfix KB956802 was installed.

Then the computer rebooted at 3:00:27

then it threw this log:

Installation Ready: The following updates are downloaded and ready for installation. This computer is currently scheduled to install these updates on Friday, May 15, 2009 at 3:00 AM:
- Update for Windows Server 2003 (KB955839)
- Security Update for Windows Server 2003 (KB938464)

My question is why it didn't install all the updates at one time instead of installing just a few of them and leaving the rest(it shows just 2) for the next day?
Actually there are around 60 updates needed on this computer.

Any idea why the updates are not installed at one time ?

Thanks
0
jskfan
Asked:
jskfan
  • 3
1 Solution
 
PeteJThomasCommented:
Hi again jskfan :)

This is almost definitely because some updates require a restart before the update process can continue. For example, some updates are reliant on other updates already being installed - So once all the 'prerequisite' updates have gone on, the machine reboots, to finalise installing those updates.

After that reboot, it will not attempt to install the rest until the next scheduled install time. This is exactly what happens on all of our clients too, and is normal behaviour... :)

Pete
0
 
jskfanAuthor Commented:
in this case you will always see in the WSUS console that the computer has updates "Not Approved" and "Not Installed" is this normal ? even if you see 60-70 updates Not approved, Not Installed?

I am afraid if I Approve them from WSUS console, it will install immediately and reboot the computer if required. which is not convenient if it's not at the scheduled time.
0
 
PeteJThomasCommented:
Yes, this is perfectly normal. If you want the updates to be installed, approve them - The clients will then download the updates the next time the auclient checks in with the WSUS server, but the updates will NOT install until the scheduled time.

If you're worried, approve the updates for ONLY a test machine that is near you, and you can watch the behaviour on this machine and see for yourself. I know it doesn't always help to be told these things, especially if there are bad consequences if the info is wrong... :)

If in doubt, try it out... (but carefully and in a test environment) :D

Pete
0
 
PeteJThomasCommented:
Oh and I'm afraid WSUS is quite messy, which is why I only ever use the filtered view that I created myself. There's always LOADS of updates not installed etc, and this is not a problem. As a best practise I try to decline as many updates as possible so that they disappear from the view completely.

This keeps the list of updates to look through and possibly approve down to a manageable level... :)

Pete
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now