Why does wsus console show thousands of old updates to be approved?

I have an SBS2011 server that has updates managed from the sbs console. Updates are set to automatically approve to level "High" for Client Updates and the schedule is set install every day and restart if necessary.

This seems to be working fine but if I check in the WSUS console in the To Do it shows thousands of security updates and critical updates waiting to be approved. If I review the updates awaiting approval they show as being superseded with a note to say that before declining superseded updates check that the superseding update is approved first. This is impractical with thousands outstanding.

I have run the server cleanup wizard but that doesn't seem to change the status of these unapproved updates.

There is nothing outstanding on the SBS console for updates.

How can I get WSUS to have nothing showing as outstanding too?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cris HannaCommented:
You should not be attempting to manage updates from the WSUS Console...only from the SBS Console...with few exceptions.   To run the server clean up tool or if a computer is not in the correct group and you need to move it.   On the rarest of occassions, you might need to go into the console to decline an update already in pending by mistake.  Then overnight it should be removed from pending.

How often are you running the synchronization...I don't recall what the default is, but it's best to run it daily.
David Johnson, CD, MVPOwnerCommented:
you have to approve them, then run the cleanup wizard
Milkybar-kidAuthor Commented:
I have approved them and run the cleanup wizard but the WSUS directory is now very large 64Gb - It was only 36Gb prior to the approvals. I have run the cleanup wizard. The WSUS folder is continuing to grow as we speak.
I have sorted updates by superseded selected all superseded updates and declined them.
What can I do now to stop the system downloading all of these updates I do not need before it kills the server?
Cloud Class® Course: Amazon Web Services - Basic

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

Milkybar-kidAuthor Commented:
I seem to have stemmed the downloads by going to Update Files and Languages under options and switched to "Do not store files locally; computers install from Microsoft Update"

This now seems to have the system hung with a message "Cannot save configuration because the server is still processing a previous configuration change"
Cris HannaCommented:
I strongly encourage you to go here http://technet.microsoft.com/en-us/library/gg680316.aspx  Repair Windows Server Update Services.  This is specific  to SBS 2011   Scroll to the section called How to manually recover WSUS and then scroll to Step 4  and verify all the configurations from that step on.    If you have not already done so, install the SBS 2011 BPA.  Make sure to get it up to 1.5
Milkybar-kidAuthor Commented:
Thank you for the link.
I acknowledge your reference to getting to step 4.
But if I follow it as far as step g
In Options, click Update Files and Languages, and then verify that Store update files locally on this server and Download update files to this server only when updates are approved are selected.

This will reinstate the downloading of the files locally which I did as advised by David Johnson and this started the downloading of what I can only assume are ALL critical and security updates in the Microsoft Update catalogue.

How can I ensure in the first instance that the downloads will stop. Should I consider uninstalling WSUS altogether and make sure all updates are deleted before starting the repair?

I can also not get as far as making those recommended settings because the WSUS console keeps saying "The snap-in is not responding"
Cris HannaCommented:
How much RAM in your server
How much free space on your C:\?
You might have to do a complete rip and repair...the instructions are in that document

The whole purpose behind WSUS is to control bandwidth and control what updates are installed and when they are installed.   Downloading the updates to the server is the default and preferred method.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Milkybar-kidAuthor Commented:
The server has, given time, settled down. There is probably not enough RAM in there in truth so I am awaiting delivery of maore memory to increase the RAM to the maximum 32Gb on this SBS2011.
I will then follow your advice and do a full rip and repair following your link Cris.
Thank you for your assistance.
[Note to self:] "Listen to the advice of an SBS MVP when resolving problems on a Small Business Server ;)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.