?
Solved

WSUS Administration

Posted on 2011-02-17
10
Medium Priority
?
1,153 Views
Last Modified: 2012-06-27
I am looking at some best IT Administrator practices people use when using WSUS.

I currently only approve updates when updates are needed, rather than worrying about any update that has No Status. For example, I currently have no updates that are unapproved when the status is Needed/Failed. But ..... there are over 20000 updates listed for what seems to be software that no computers in my network have. Is this normal? (see attached)
WSUS
0
Comment
Question by:Flipp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
10 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34921976
You can clean up unneeded or expired updates in the same console under Options then "Server Clean Up Wizard".
If you haven't run it before check one box at a time and it can still take a very long time.
That should cut those with no status down to a few hundred
0
 
LVL 6

Author Comment

by:Flipp
ID: 34921982
Nope - I have run this multiple times but they still seem to hang around?
0
 
LVL 6

Author Comment

by:Flipp
ID: 34921999
Should Updates that are not required for any machine be 'Declined' or will these updates simply be cleaned up? For Example I have updates in this No Status list for x64, but I have no machines of this type.
0
Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

 
LVL 77

Expert Comment

by:Rob Williams
ID: 34922124
I assume you have SBS if no 64bit devices
You can't specify 32/64 bit and it will download updates for all that you select. So if you select Win7 and you have no 64 bit Win7, it will still download those. If you approve them they will at least be removed form the list :-)
0
 
LVL 6

Author Comment

by:Flipp
ID: 34923024
I do approve the ones that are required, but what about all the ones that are not approved? They are not filtered to be needed by any system, so am I suppose to see them listed when I change the status to 'No Status'?
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34923057
You need to decline the others, then run the clean up wizard and they should "go away".
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34923142
Do you have automatic approval rules set up?


http://technet.microsoft.com/en-us/library/cc708458%28WS.10%29.aspx


0
 
LVL 6

Author Comment

by:Flipp
ID: 34923159
Yes automatic approvals are setup, but only for certain categories.

Do you recommend anything as far as what should / should not be setup?

re. Declining - If I decline all updates for 64bit XP, then a 64bit XP comes online weeks later, would this not make sense to decline in the start?
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 750 total points
ID: 34923225
0
 
LVL 6

Author Closing Comment

by:Flipp
ID: 34923245
Why have I not seen this before .... :)

Cheers
0

Featured Post

Bringing Advanced Authentication to the SMB Market

WatchGuard announces the acquisition of advanced authentication provider, Datablink, with one mission – to bring secure authentication to SMB, mid-market, and distributed enterprises with a cloud-based solution, ideal for resale via their established channel & MSSP community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question