Solved

WSUS: always ignore superseded ?

Posted on 2014-12-19
3
186 Views
Last Modified: 2016-02-19
Does this sound ok as a way of making administration of WSUS less onerous:

1.      Unless it’s for software we don’t use (e.g. office 2013 since we are office 2007 users): We shall always approve superseding updates.

2.      We shall always disapprove superseded updates.

3.      Two weeks after Microsoft publishes updates, we will approve all updates (unless for products we don’t use).

4.      Even if ALL pc’s on our network are up-to-date for superseding updates, we will keep that update around until it gets superseded in case we spin up a new pc which has not received the updates yet.

We do realize that we disapprove the superseded updates and have not yet approved the superseding update,  there could be two weeks where the PC’s might be vulnerable.  However, in practice, if a user complies and applies updates and reboots as we release updates, chances are, this should not be a big problem.

Any glaring problems with this strategy?

If there’s a better approach to make WSUS less terrible to administer, I’d love to hear any suggestions.  

Sorry for sounded like such a woose but I hate applying these updates!

Thanks,
Mike
0
Comment
Question by:mike2401
  • 2
3 Comments
 
LVL 34

Accepted Solution

by:
Seth Simmons earned 500 total points
ID: 40509921
Unless it’s for software we don’t use...

then uncheck that category so it won't look for office 2003

We shall always disapprove superseded updates.

agree. decline updates that have been replaced with something else

Two weeks after Microsoft publishes updates, we will approve all updates

that's more of a business decision but if that works for you, then ok

we will keep that update around until it gets superseded

not sure i understand this one correctly
if you bring up a new system, install the superseded update and not the old one first
0
 

Author Comment

by:mike2401
ID: 40524941
I am so sorry for loosing track of this question.

Your answers make sense,
Thank you!

Mike
0
 

Author Closing Comment

by:mike2401
ID: 40524942
Thank you!

(My EE email notice went into my gmail promo folder which I don't check often :-)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Windows Server Update Service (WSUS) is free for everyone, but it lacks of some desirable features like send an e-mail to the administrator with the status of all computers on the WSUS server. This article is based on my PowerShell script …
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now