nakoz69
asked on
WSUS - Group Approval Installation Status
Excuse if this is very elementary, but I am trying to fully explain the question.
When approving patches for groups in WSUS (Ver 3.2), I have 3 Groups:
Unassigned
Group A
Group B
After selecting the patches I want to approve, I right click the selected patch list and choose Approve. Then I am prompted with the group list. I select the drop down to the left of All Computers and choose "Approved for Install" then I choose the drop down for Group A and select "Approved for Install" again, not touching the other groups with a status of "Keep existing Approvals", and also NOT selecting the "Apply to children" option in the "All Computers" group.
However when I look at a status report of a specific patch I approved for ONLY Group A it gives me the following:
All computers - Install
Unassigned - Install (inherited)
Group A - Install
Group B - Install (inherited)
Here is what confuses me:
How is it that the Unassigned group and Group B are showing "install (inherited)" when I only approved patches for Group A? Is this due to the fact that ALL of the groups are children of the "All Computers" parent group, and if that is the case then why even include an "Apply to children" option or a "Same as parent" option for the child groups?
Do I need to change my method and instead of choosing Approved for Install for All Computers to only Group A and leave everything else untouched?
When approving patches for groups in WSUS (Ver 3.2), I have 3 Groups:
Unassigned
Group A
Group B
After selecting the patches I want to approve, I right click the selected patch list and choose Approve. Then I am prompted with the group list. I select the drop down to the left of All Computers and choose "Approved for Install" then I choose the drop down for Group A and select "Approved for Install" again, not touching the other groups with a status of "Keep existing Approvals", and also NOT selecting the "Apply to children" option in the "All Computers" group.
However when I look at a status report of a specific patch I approved for ONLY Group A it gives me the following:
All computers - Install
Unassigned - Install (inherited)
Group A - Install
Group B - Install (inherited)
Here is what confuses me:
How is it that the Unassigned group and Group B are showing "install (inherited)" when I only approved patches for Group A? Is this due to the fact that ALL of the groups are children of the "All Computers" parent group, and if that is the case then why even include an "Apply to children" option or a "Same as parent" option for the child groups?
Do I need to change my method and instead of choosing Approved for Install for All Computers to only Group A and leave everything else untouched?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
To make things clear the default settings are for all subgroups to be "Same as Parent" where "All computers" is the parent group.
But if you have not approve the patch on group B and Unassigned the status is approved(inherited) as you have approved on all computer group and not specific to both group.
I would recommend whenever you are approving the patch select all computers as well as all groups.