Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1173
  • Last Modified:

WSUS Administration

I am looking at some best IT Administrator practices people use when using WSUS.

I currently only approve updates when updates are needed, rather than worrying about any update that has No Status. For example, I currently have no updates that are unapproved when the status is Needed/Failed. But ..... there are over 20000 updates listed for what seems to be software that no computers in my network have. Is this normal? (see attached)
WSUS
0
Flipp
Asked:
Flipp
  • 5
  • 3
  • 2
1 Solution
 
Rob WilliamsCommented:
You can clean up unneeded or expired updates in the same console under Options then "Server Clean Up Wizard".
If you haven't run it before check one box at a time and it can still take a very long time.
That should cut those with no status down to a few hundred
0
 
FlippAuthor Commented:
Nope - I have run this multiple times but they still seem to hang around?
0
 
FlippAuthor Commented:
Should Updates that are not required for any machine be 'Declined' or will these updates simply be cleaned up? For Example I have updates in this No Status list for x64, but I have no machines of this type.
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
Rob WilliamsCommented:
I assume you have SBS if no 64bit devices
You can't specify 32/64 bit and it will download updates for all that you select. So if you select Win7 and you have no 64 bit Win7, it will still download those. If you approve them they will at least be removed form the list :-)
0
 
FlippAuthor Commented:
I do approve the ones that are required, but what about all the ones that are not approved? They are not filtered to be needed by any system, so am I suppose to see them listed when I change the status to 'No Status'?
0
 
Rob WilliamsCommented:
You need to decline the others, then run the clean up wizard and they should "go away".
0
 
Donald StewartNetwork AdministratorCommented:
Do you have automatic approval rules set up?


http://technet.microsoft.com/en-us/library/cc708458%28WS.10%29.aspx


0
 
FlippAuthor Commented:
Yes automatic approvals are setup, but only for certain categories.

Do you recommend anything as far as what should / should not be setup?

re. Declining - If I decline all updates for 64bit XP, then a 64bit XP comes online weeks later, would this not make sense to decline in the start?
0
 
Donald StewartNetwork AdministratorCommented:
0
 
FlippAuthor Commented:
Why have I not seen this before .... :)

Cheers
0

Featured Post

Lessons on Wi-Fi & Recommendations on KRACK

Simplicity and security can be a difficult  balance for any business to tackle. Join us on December 6th for a look at your company's biggest security gap. We will also address the most recent attack, "KRACK" and provide recommendations on how to secure your Wi-Fi network today!

  • 5
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now