WSUS Administration

I am looking at some best IT Administrator practices people use when using WSUS.

I currently only approve updates when updates are needed, rather than worrying about any update that has No Status. For example, I currently have no updates that are unapproved when the status is Needed/Failed. But ..... there are over 20000 updates listed for what seems to be software that no computers in my network have. Is this normal? (see attached)
WSUS
LVL 6
FlippAsked:
Who is Participating?
 
Donald StewartConnect With a Mentor Network AdministratorCommented:
0
 
Rob WilliamsCommented:
You can clean up unneeded or expired updates in the same console under Options then "Server Clean Up Wizard".
If you haven't run it before check one box at a time and it can still take a very long time.
That should cut those with no status down to a few hundred
0
 
FlippAuthor Commented:
Nope - I have run this multiple times but they still seem to hang around?
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
FlippAuthor Commented:
Should Updates that are not required for any machine be 'Declined' or will these updates simply be cleaned up? For Example I have updates in this No Status list for x64, but I have no machines of this type.
0
 
Rob WilliamsCommented:
I assume you have SBS if no 64bit devices
You can't specify 32/64 bit and it will download updates for all that you select. So if you select Win7 and you have no 64 bit Win7, it will still download those. If you approve them they will at least be removed form the list :-)
0
 
FlippAuthor Commented:
I do approve the ones that are required, but what about all the ones that are not approved? They are not filtered to be needed by any system, so am I suppose to see them listed when I change the status to 'No Status'?
0
 
Rob WilliamsCommented:
You need to decline the others, then run the clean up wizard and they should "go away".
0
 
Donald StewartNetwork AdministratorCommented:
Do you have automatic approval rules set up?


http://technet.microsoft.com/en-us/library/cc708458%28WS.10%29.aspx


0
 
FlippAuthor Commented:
Yes automatic approvals are setup, but only for certain categories.

Do you recommend anything as far as what should / should not be setup?

re. Declining - If I decline all updates for 64bit XP, then a 64bit XP comes online weeks later, would this not make sense to decline in the start?
0
 
FlippAuthor Commented:
Why have I not seen this before .... :)

Cheers
0
All Courses

From novice to tech pro — start learning today.