WSUS - Approval update advice

Hi, a quick bit of advice please.
I have set up a few groups on my WSUS server, PCs, Laptops, Servers, Test
When I get an email from the server with a list of the newly synchronized updates I check the approval status of the updates.
If I search for an update, I will often get listed several versions of the update, i.e  "for Windows Server 2012 R2", "for Windows 8.1" etc
Do I need to click on each variant, and for example I click on the update relevant to Windows server, unapprove the groups relating to PC, Laptops.
Or can I leave all the groups checked for each variant that I want to approve.
I have a scheduled script that unapproves all the itanium versions and I regularly run the clean up tool
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Don S.Commented:
I usually only a prove updates that are listed as actually needed, leaving the ones that are for environments that I don't have unapproved.  Yes, you need to approve an update for every different os that you have.
Rick_PenneyAuthor Commented:
Hi, many thanks for your comments but I still need further clarification.
I only pre approve Critical, definition and security updates.
Using KB3087038 as an example, the update relating to IE 11 is listed 6 times, windows 7(x86 & x64), windows 8.1 (x86 & x64), windows server 2008, windows server 2012
If I were to click on each of these 6 entries one at a time, every one would show that its been approved for all my groups.
My question is if I open up the entry for Windows 7, do I need to uncheck the server group?
If I open up the entry for Windows Server 2012, do I need to uncheck the PCs, laptops group?
Seth SimmonsSr. Systems AdministratorCommented:
My question is if I open up the entry for Windows 7, do I need to uncheck the server group?

doesn't matter
when the server checks for updates, that one won't show anyway because it's for a different operating system; it won't show a windows 7 approved update on a 2008 server

same for the server updates; no need to remove for clients since a windows 7 system won't pull a 2012 update

i would also suggest adding the 'needed count' column (right click on any column heading to customize) in the updates list as it will show how many systems actually need that update.  no sense in approving and downloading an update that nobody needs

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rick_PenneyAuthor Commented:
many thanks for the information and the additional tip
kind regards
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.