WSUS Initial Approval

Posted on 2012-09-12
Last Modified: 2012-09-13
I know volumes have been written about WSUS but I'm having a hard time understanding something specific...

I just finished installing a WSUS box and all went according to Microsoft's step-by-step deployment guide.  Where I'm stumbling is knowing how to handle the initial approval of updates.  Until now, all clients have been set to update themselves automatically so most likely 5 workstation are going to be patched up 5 different ways.  I have created 'Views' for each OS in the WSUS console which helped things but now I am wondering how to start the task of sifting through all of the patches.  One thing I should note, I went ahead and approved all Critical Updates which just makes sense I think.  Any guidance on where to start with this ominous task.

Also, I do not want IE9 installed just yet.  However, some workstations already have it installed and rather than rock the boat with users I would like to just leave them installed but still provide updates.  If I don't approve the actual update of IE9 but approve the updates to IE9 will they still be installed.  Probably a stupid question but I'm not assuming anything with WSUS at this point.

Thanks in advance for your help.
Question by:Ryat66
    1 Comment
    LVL 38

    Accepted Solution

    If you set your view of the update list in WSUS to see all unapproved updates that are "Failed or Needed" this should give you an accurate list of those updates that are not installed on your workstations. It will, of course, show failed or needed updates for ALL of the workstations.  

    As for your IE9 question, what I would be inclined to do would be to put the workstations that already have IE9 installed into a separate group so that you can approve the IE9 updates separately for that group.  I would normally expect that WSUS would not try to install an IE9 update on a workstation that doesn't have IE9 already installed, but I'm just being super cautious.  IE9 itself will show up on your list of updates to be installed, so you have to be careful not to approve that to be installed until you're ready. I would NOT decline it, which would remove it from the list completely.

    Featured Post

    Promote certifications in your email signature

    Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

    Join & Write a Comment

    Remote Desktop Protocol or RDP has become an essential tool in many offices. This article will show you how to set up an external IP to point directly to an RDP session. There are many reasons why this is beneficial but perhaps the top reason is con…
    Problem Description: Actually I found the below issue with some customers after migration from SMS 2003 to SCCM 2007 and epically if they change site code, some clients may appear in the console with old site code, plus old sites still appearing …
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now