• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 541
  • Last Modified:

Tips for configuring updates that WSUS manages...

I have installed my first WSUS server on Server 2012 (WSUS 6.2 I believe).

Everything seems to be OK.  I have a test GPO and machines will check in.  The part that is overwhelming me is the sheer amount of updates that have been imported for management.  

I selected just the products that I want patched (Windows (client and server), SQL, etc), but there are still over 6400 updates.

Should I just approve all 6400+ of them?  The hard drive on this server is not very big, so that's a bit of a concern for me.

Short of going through the updates one by one, it seems like there should be a better way than blanket approving 6400+ updates...

What do you folks say?
0
Jared Luker
Asked:
Jared Luker
  • 3
  • 2
2 Solutions
 
kevinhsiehCommented:
You can look at the computers and approve the ones that are needed. I personally let WSUS approve all needed patches. I don't have time to go researching every patch, or to even look at WSUS on a monthly basis.
0
 
Jared LukerAuthor Commented:
Where do you set up those preferences?
0
 
kevinhsiehCommented:
Under WSUS 3.0, go to your WSUS console, and in the left hand pane under your WSUS server go to Options, and then Automatic Approvals in the center pane. My default rule is to approve Critical Updates, Security Updates, Update Rollups, and Updates. You may or may not want to add any of the others such as hot fixes and Service Packs.

I image that the interface is similar in your version.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
Jared LukerAuthor Commented:
I'm just curious.  If you blanket accept everything, then why use WSUS at all?  Why not just use Windows Update?
0
 
Jared LukerAuthor Commented:
Thanks
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now