Which takes precedence in WSUS, Automatic Approvals, or Manually Declined Updates?

Posted on 2014-08-18
Last Modified: 2014-08-19

I was wondering, which takes precedence, automatic approvals that would approve a botched update, or an administrator explicitly denying that same update?  In retrospect I vaguely remember when declining an update it warning me that its prior approvals would be removed.  Ordinarily I am not this micromanagement or OCD'ish, I just want to make sure that this is what actually happens because of the scope of potential problems.

Finally, does this approval get rescinded from a computer that the night prior has connected to WSUS and seen it as approved, but has the setting to not download or install without user intervention?  Like will the declined command, remove that update from the list on the local computer the following night (or whatever default time interval) when it next contacts the WSUS server?

Question by:CnicNV
    LVL 14

    Accepted Solution

    Decline and Approval are mutually exclusive, so if  an  update is declined -- it is declined. Nothing will change that.

    Automatic Approvals are only applied at synchronization.

    have a look on that

    WSUS does not automatically decline superseded updates, and it is recommended that you do
    not assume that superseded updates should be declined in favor of the new, superseding update.
    Before declining a superseded update, make sure that it is no longer needed by any of your client
    computers. The following are examples of scenarios in which you might need to install a
    superseded update:
    - If a superseding update supports only newer versions of an operating system, and some of
    your client computers run earlier versions of the operating system.
    -If a superseding update has more restricted applicability than the update it supersedes, which
    would make it inappropriate for some client computers.
    - If an update no longer supersedes a previously released update because of new changes. It
    is possible that through changes at each release, an update no longer supersedes an update
    it previously superseded in an earlier version. In this scenario, you will still see a message
    about the superseded update, even though the update that supersedes it has been replaced
    by an update that does not.

    Author Closing Comment

    Ok perfect, this was what I was after.  Just wanted to be sure.

    Thanks a lot.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    A Bare Metal Image backup allows for the restore of an entire system to a similar or dissimilar hardware. They are highly useful for migrations and disaster recovery. Bare Metal Image backups support Full and Incremental backups. Differential backup…
    If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
    Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
    The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now