Solved

Keep Existing Approvals for Microsoft Windows Updates

Posted on 2016-09-29
23
54 Views
Last Modified: 2016-10-10
I select a list of updates I wish to approve.  I right click and select Approve.  I then Select All Computers and Select Approve.  All subgourps stay as Keep Existing Approvals.  What does that mean for the subgroups?  Do they get the updates or not?  If not, is this a default behavior that I can change and if so how?

Thanks all!
0
Comment
Question by:Michael Paniak
  • 10
  • 10
  • 3
23 Comments
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
It works on the same concept as file inheritance.  I don't have my WSUS server in front of me, but if I recall, they should be greyed out if it is getting inherited.  I will have to check...

My ¢2
0
 

Author Comment

by:Michael Paniak
Comment Utility
Thx loeftworm, looking forward to what you find out
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
Yep, the greyed out is inheritance.  I found this, and it is a good starter read;
http://www.grouppolicy.biz/2011/06/best-practices-group-policy-for-wsus/
0
 

Author Comment

by:Michael Paniak
Comment Utility
Thanks.  Looks like that might be tips on GPO in a Windows 2003/08 environment.  Unfortunately it's not applicable for me running 2012 R2
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
I think it is, the inheritance is still acting the same way
0
 

Author Comment

by:Michael Paniak
Comment Utility
Thanks, but I need something more definitive than that since this is not for personal use.
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
I am certain.  I just checked my 2012 box, and the pic I have attached is an excellent example.  greyed out is inherited, and the colored are being set.
2016-09-30_5-26-00.jpg
0
 

Author Comment

by:Michael Paniak
Comment Utility
Why aren't our screen shots the same?
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
Here is the official answer from MS, for WSUS 3.0 Update2
https://technet.microsoft.com/en-us/library/dd939929(v=ws.10).aspx

2012 is version 3.2,
https://technet.microsoft.com/en-us/library/hh852345.aspx
but that document is pretty sparse having only the minor changes made to the 2012 version, and forwards you to the 3.0 sp2 document above.

Anyway, that's the best I can do.  Maybe someone else has a better answer

My ¢2
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
I do not see a screen shot from you
0
 

Author Comment

by:Michael Paniak
Comment Utility
Sorry about that.

Approve Updates ScreenLet's try attaching it again.
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
I think I see the confusion.  It appears that at one point they we not approved and changed to approved.  You may need to reset them.  Not sure how off hand, but if I recall, there is an option to force the inheritance.
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
How about this?
2016-09-30_6-08-46.jpg
0
 

Author Comment

by:Michael Paniak
Comment Utility
I get that they can be changed but what I want to know is what does "Keep Existing approvals" mean and can the default behavior change and if so where.
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
What you are seeing there is just what it says, no new approvals.  There is a default behavior, but it is built in at first, and has since been changed.  You would have to revert back using the options mentioned.
0
 

Author Comment

by:Michael Paniak
Comment Utility
Thanks loftyworm, still confused.  It doesn't say no new approvals it says keep existing approvals.  Even when I changed one once it went back to Keep Existing Approvals which is still unknown what that does./mean
0
 
LVL 11

Expert Comment

by:loftyworm
Comment Utility
When all else fails, test it out
1
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
Unless you apply approvals to children, there is no approvals to be inherited(Inheritance doesn't get set).
1
 

Author Comment

by:Michael Paniak
Comment Utility
@dstewartjr

Thanks for replying.  So Keeping existing approvals is meaningless?
0
 
LVL 47

Expert Comment

by:dstewartjr
Comment Utility
I'm sure it's probably meant for if you were to go back and make a change to an approval, Like if you had "Automatic approvals" set and the update you are approving was already approved.
0
 

Author Comment

by:Michael Paniak
Comment Utility
which begs the question how do you know what was previously used?
0
 
LVL 47

Accepted Solution

by:
dstewartjr earned 500 total points
Comment Utility
You can run reports on any update, right click and select "Status report"
0
 

Author Comment

by:Michael Paniak
Comment Utility
Thank you dstewartjr.  That will work for me.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
In this Micro Tutorial viewers will learn how they can get their files copied out from their unbootable system without need to use recovery services. As an example non-bootable Windows 2012R2 installation is used which has boot problems.
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now