Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 100
  • Last Modified:

WSUS updates not appearing as approved on the downstream server

I set up a downstream server that appears to be registering with the upstream server, as its name appears in the downstream server listing on the upstream.

Updates are installing on the downstream server, but they are all unapproved. Do the updates that the downstream server pulls from the upstream need to be re-approved? I would have thought that the status of the update would be pulled to the downstream server long with the update itself.
0
nurturer69
Asked:
nurturer69
  • 3
  • 3
2 Solutions
 
Don S.Commented:
On the downstream server, check that you are synchronizing periodically.  approvals and content only get updated on downstream servers through synchronization.
0
 
nurturer69Author Commented:
Synchronizing daily at 2am at for the downstream, and 12am for the upstream. I've added screenshots of my downstream server "Options" configurations. I did notice that I didn't have "The server is a replica of the upstream server" button checked. System times are synchronized.

To populate the downstream server's Computer Groups via GPO, I'm specifying http://<downstream_server>:8530 (not the upstream server), linked to the OU where the servers / WS's reside.

Also, in checking the GPO for I have "Configure Automatic Updates" enabled. Not sure if this should be disabled for the downstream.
Update-Source-and-Proxy-Server-config.JP
Downsteam-synchronizations.JPG
automatic-approvals.JPG
Specify-intranet-Microsoft-update-servic
Products-and-Classifications.JPG
Configure-Automatic-Updates-for-downstre
0
 
Don S.Commented:
If you don't have the "server is a replica" box checked, then it is not going to replicate approvals.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
nurturer69Author Commented:
OK. Thanks. Is there any way, apart from uninstalling WSUS and reinstalling again, to empty or delete the updates that are currently on the downstream?
0
 
Don S.Commented:
I'm not sure what you are trying to accomplish - an update that has not been approved isn't really on a server - it's just an entry in the database.  superceeded updates can be purged using the WSUS cleanup wizard available in the options section.  Otherwise if you get the down stream server synched with the up stream, and then run the cleanup, you will only have what has been approved and not superceded on the downstream.
0
 
nurturer69Author Commented:
Got it. Thanks for the help. I'll give it a try.
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now