Solved

Tips for configuring updates that WSUS manages...

Posted on 2013-05-20
6
530 Views
Last Modified: 2013-06-06
I have installed my first WSUS server on Server 2012 (WSUS 6.2 I believe).

Everything seems to be OK.  I have a test GPO and machines will check in.  The part that is overwhelming me is the sheer amount of updates that have been imported for management.  

I selected just the products that I want patched (Windows (client and server), SQL, etc), but there are still over 6400 updates.

Should I just approve all 6400+ of them?  The hard drive on this server is not very big, so that's a bit of a concern for me.

Short of going through the updates one by one, it seems like there should be a better way than blanket approving 6400+ updates...

What do you folks say?
0
Comment
Question by:Jared Luker
  • 3
  • 2
6 Comments
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 500 total points
ID: 39184683
You can look at the computers and approve the ones that are needed. I personally let WSUS approve all needed patches. I don't have time to go researching every patch, or to even look at WSUS on a monthly basis.
0
 
LVL 17

Author Comment

by:Jared Luker
ID: 39184885
Where do you set up those preferences?
0
 
LVL 42

Assisted Solution

by:kevinhsieh
kevinhsieh earned 500 total points
ID: 39185616
Under WSUS 3.0, go to your WSUS console, and in the left hand pane under your WSUS server go to Options, and then Automatic Approvals in the center pane. My default rule is to approve Critical Updates, Security Updates, Update Rollups, and Updates. You may or may not want to add any of the others such as hot fixes and Service Packs.

I image that the interface is similar in your version.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 17

Author Comment

by:Jared Luker
ID: 39188715
I'm just curious.  If you blanket accept everything, then why use WSUS at all?  Why not just use Windows Update?
0
 
LVL 4

Expert Comment

by:vak73
ID: 39189988
0
 
LVL 17

Author Closing Comment

by:Jared Luker
ID: 39226812
Thanks
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question