WSUS server 3

[netadmin06]

Hello I have installed WSUS Server on my Windows 2003 Server which is also a Domain Controller. IT is very confusing to understand what is going on. I have configured the Options under "automatic approvals" so that the default automatic aproval rule does this: "when an update is in critical updates, Definition Updates Feature Packs Security Updates Service PAcks Tools Update Rollups then approve the update for ALL Computers"..........however when I go to the "All updates screen" I see that there are a whole bunch of updates that are "Not approved"..why would this happen if I have it configured to approve all updates???....I dont understand.......also under "installed/not applicable percentage" some updates have 100% and some 98%...what do these percentages mean??....if this updates are in "not approved status shouldn't the percentages be at 0%??.........

One more thing.. how do i make it so that the updates are immediately downloaded from the WSUS server by the clients and installed automatically with out having users to install them themselves by clicking on the windows update system tray icon and clicking "install:

 

[pjscott13]

If in the options for Automatic Approval you have selected "ALL CLASSIFICATIONS" (from your list you said in your post you are missing "Drivers" and "Updates") then there is no reason for there to be updates that are "Not Approved"... unless these updates were downloaded before you set the Automatic Approval option.

If you have not selected the "Drivers" and "Updates" options then these items will not automatically approve.

I too also don't understand WSUS reporting of those percentages. That is a bit confusing!

As for getting your computers to automatically install the updates, you can use group policy for that.

 

[netadmin06]

pjscott13 what you said makes total sense, thanks for the response...you are correct. I have not selected drivers and updates.....i thought that by not selecting them then WSUS would NOT download them, I guess I was wrong and the updates still get downloaded but not approved right??...

 

[GrimR]

Just remember some updates have [bugs] that cause problems. For example with the release of Office 2003 SP3 it messed up the Auto correct in Outlook, and M$ still have not released a public fix for the problem, and you need to request it. I always wait to see/hear if any new updates have major issues before approving them. I set a calendar reminder for the last day of every month to check for updates. I have created new update views for all Os'es so XP, Vista etc all have there own folders, then I always manually approve updates and set a deadline normally for a Saturday.

 

[netadmin06]

Thanks Grimr, also do you know why some percentage have fracions next to them? For example some may say 98% 1/3

 

[Davetoo]

You have three groups but have only approved the update for one of the groups.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

 

[netadmin06]

Thanks Davetoo, but I only have 2 groups the default "unassigned group" and then group that I created manually, or are you referring to something else?