Solved

Turn off Automatic Approval on WSUS

Posted on 2016-09-14
6
64 Views
Last Modified: 2016-09-16
Hello,
I  just installed a Server 2012 R2 machine and installed WSUS.  In the past, I know it was setup for automatic approvals, and it would blast down updates to the computers without any interaction.  I've had to do something to stop this from happening, but I can't remember where this setting is located.
Does anyone happen to know where I set that in WSUS?

Thank you in advance!
0
Comment
Question by:zito2000
6 Comments
 
LVL 17

Accepted Solution

by:
pjam earned 250 total points
ID: 41798795
You will need to go into Update Services\Options and edit Automatic Approvals:
WSUS auto approve
0
 
LVL 2

Assisted Solution

by:Brad99
Brad99 earned 250 total points
ID: 41798813
Hi,
check this good doc from MS -> https://technet.microsoft.com/de-de/library/cc708458(v=ws.10).aspx

It describes in detail options like "Automatically Approve Updates for Installation" and others.

To automatically approve updates installation

    On the WSUS console toolbar, click Options, and then click Automatic Approval Options.

    In Updates, under Approve for Installation, select the Automatically approve updates for installation by using the following rule check box (if it is not already selected).

    If you want to specify update classifications to automatically approve during synchronization, do the following:
        Next to Classifications, click Add/Remove Classifications.

        In the Add/Remove Classifications dialog box, select the update classifications that you want to automatically approve, and then click OK.

    If you want to specify the computer groups for which to automatically approve updates during synchronization:
        Next to Computer groups, click Add/Remove Computer Groups.

        In the Add/Remove Computer Groups dialog box, select the computer groups for which you want to automatically approve updates, and then click OK.

    Under Tasks, click Save settings, and then click OK.

BR
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 41800123
Unchecking the "Auto Approve" within WSUS isn't going to have an effect on the updates that are already approved.

What exactly is your issue with computers installing all their updates??
0
U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

 
LVL 47

Expert Comment

by:Donald Stewart
ID: 41800128
The setting that you're probably referring to is

"4 - Auto download and schedule the install"

https://support.microsoft.com/en-us/kb/328010
0
 

Author Closing Comment

by:zito2000
ID: 41801604
Thank you both for your help.
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 41801667
Again "Unchecking" that option isn't going to change the fact that all previously approved updates are still approved.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 2012 R2 Server -- SERIVCES checklist ? 4 97
WSUS Migration Question 3 33
sql 2012 cluster  SSRS cluster aware 2 26
RDP in EC2 Shows As Black Screen 8 36
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
A procedure for exporting installed hotfix details of remote computers using powershell
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now