WSUS question

Posted on 2010-01-08
Last Modified: 2013-11-21
My company is running SBS2003. WSUS has been enabled in order to save our slow internet connection from workstations downloading updates on their own. Sounds logical; except our organization doesn't have a network administrator to approve and release the updates to the workstations; that's where I come into play. I am going to college for a networking major. So now I find on our server that there are 4,000+ updates that need installed on the workstations in our facility. Some of the workstations here are running on 128MB ram, 20GB hard drives, etc. Outdated to say the least. I am afraid if I release all of these updates to the workstations, they may literally explode from information overload!! LOL. On a serious note, what should I do?
Question by:BrettP77
    LVL 11

    Accepted Solution

    Indeed they will explode.

    In WSUS you can create groups of computers. You can also create policies to automatically approve updates (Options, Automatic approvals). In that policy you can define what updates and over which groups they will automatically approve.

    Create a group of "Very old computers" and exclude them from automatically approve the updates, just allow the critical security updates. Other groups of more advanced PCs can receive all the updates.

    Whenever I install a new WSUS server I found this same scenario. That case we left all PCs on all the night until next morning. Over the night they get updated. The effect in the workstation performance is not the only issue here, but also the bandwidth usage of the process over the local network. With updates service packs are also downloaded and they are bigger than a patch.


    Author Closing Comment

    Great! I'll get to work.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now