WSUS Initial Approval
Posted on 2012-09-12
I know volumes have been written about WSUS but I'm having a hard time understanding something specific...
I just finished installing a WSUS box and all went according to Microsoft's step-by-step deployment guide. Where I'm stumbling is knowing how to handle the initial approval of updates. Until now, all clients have been set to update themselves automatically so most likely 5 workstation are going to be patched up 5 different ways. I have created 'Views' for each OS in the WSUS console which helped things but now I am wondering how to start the task of sifting through all of the patches. One thing I should note, I went ahead and approved all Critical Updates which just makes sense I think. Any guidance on where to start with this ominous task.
Also, I do not want IE9 installed just yet. However, some workstations already have it installed and rather than rock the boat with users I would like to just leave them installed but still provide updates. If I don't approve the actual update of IE9 but approve the updates to IE9 will they still be installed. Probably a stupid question but I'm not assuming anything with WSUS at this point.
Thanks in advance for your help.