Solved

WSUS Administration

Posted on 2011-02-17
10
1,136 Views
Last Modified: 2012-06-27
I am looking at some best IT Administrator practices people use when using WSUS.

I currently only approve updates when updates are needed, rather than worrying about any update that has No Status. For example, I currently have no updates that are unapproved when the status is Needed/Failed. But ..... there are over 20000 updates listed for what seems to be software that no computers in my network have. Is this normal? (see attached)
WSUS
0
Comment
Question by:Flipp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
10 Comments
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34921976
You can clean up unneeded or expired updates in the same console under Options then "Server Clean Up Wizard".
If you haven't run it before check one box at a time and it can still take a very long time.
That should cut those with no status down to a few hundred
0
 
LVL 6

Author Comment

by:Flipp
ID: 34921982
Nope - I have run this multiple times but they still seem to hang around?
0
 
LVL 6

Author Comment

by:Flipp
ID: 34921999
Should Updates that are not required for any machine be 'Declined' or will these updates simply be cleaned up? For Example I have updates in this No Status list for x64, but I have no machines of this type.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 77

Expert Comment

by:Rob Williams
ID: 34922124
I assume you have SBS if no 64bit devices
You can't specify 32/64 bit and it will download updates for all that you select. So if you select Win7 and you have no 64 bit Win7, it will still download those. If you approve them they will at least be removed form the list :-)
0
 
LVL 6

Author Comment

by:Flipp
ID: 34923024
I do approve the ones that are required, but what about all the ones that are not approved? They are not filtered to be needed by any system, so am I suppose to see them listed when I change the status to 'No Status'?
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34923057
You need to decline the others, then run the clean up wizard and they should "go away".
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 34923142
Do you have automatic approval rules set up?


http://technet.microsoft.com/en-us/library/cc708458%28WS.10%29.aspx


0
 
LVL 6

Author Comment

by:Flipp
ID: 34923159
Yes automatic approvals are setup, but only for certain categories.

Do you recommend anything as far as what should / should not be setup?

re. Declining - If I decline all updates for 64bit XP, then a 64bit XP comes online weeks later, would this not make sense to decline in the start?
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 250 total points
ID: 34923225
0
 
LVL 6

Author Closing Comment

by:Flipp
ID: 34923245
Why have I not seen this before .... :)

Cheers
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the biggest threats facing all high-value targets are APT's.  These threats include sophisticated tactics that "often starts with mapping human organization and collecting intelligence on employees, who are nowadays a weaker link than network…
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question