none
Schedule Approval of Updates

    Question

  • I have WSUS 3.2.7600.226.

    Is there a way to schedule the approval of updates for a specific group?

    For example, I want certain updates approved at 10:30pm on a certain date for a specific computer group.

    Please let me know if this is possible and thanks for the help.

    Friday, February 28, 2014 6:29 PM

Answers

  • Hi,

    As far as I know, powershell can be used to manage WSUS updates, such as Approve or Decline WSUS Updates, we can use it to create a script and automatically approve updates, please refer to the below links to get more information:

    https://blogs.technet.com/b/heyscriptingguy/archive/2012/01/18/approve-or-decline-wsus-updates-by-using-powershell.aspx

    https://blogs.technet.com/b/heyscriptingguy/archive/2012/01/22/use-the-free-poshwsus-powershell-module-for-wsus-administrative-work.aspx

    Hope this helps.

    Regards,

    Yan Li


    Regards, Yan Li

    Monday, March 03, 2014 1:20 PM
    Moderator
  • Is there a way to schedule the approval of updates for a specific group?

    For example, I want certain updates approved at 10:30pm on a certain date for a specific computer group.

    No. You cannot schedule the *APPROVAL* of updates. Period. It is an interactive-only task.

    But, methinks it's not the approval that you're interested in scheduling, but rather the installation.

    So, with that presumption, let me offer this answer:

    • It is NOT possible to schedule updates to install at half past the hour (with the WSUS native console); it is possible to schedule updates to install at the TOP of the hour.
    • It is NOT possible to schedule installation by WSUS Target Group (with the WSUS native console).
    • To schedule update installations to a specific group, use a GPO with the appropriate scheduled installation time and Security Group Filtering on that GPO to apply the GPO to the specific computer group (i.e. AD Security Group) of interest.

    However, it is worthy of note that my employer's Patch Manager product does allow the scheduling of approvals and installations with one-minute granularity, if approvals is really what you meant.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, March 07, 2014 3:18 AM
    Moderator
  • As far as I know, powershell can be used to manage WSUS updates, such as Approve or Decline WSUS Updates, we can use it to create a script and automatically approve updates

    True.. one could also create a PowerShell script (when using WSUS v6) and schedule that script using Task Scheduler.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, March 07, 2014 3:20 AM
    Moderator

All replies

  • serverfault.com/questions/463573/wsus-report-approvals-for-a-group

    Refer This Link 


    DushYant'

    Saturday, March 01, 2014 6:02 AM
  • Not built-in to my knowledge.
    ConfigMgr can do very advanced scheduling, but I don't think WSUS offers that at all.
    You could probably find some 3rd party extension or integration might offer that, or, write something yourself with the SDK or scripting etc.

    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)


    • Edited by DonPick Saturday, March 01, 2014 7:27 AM
    Saturday, March 01, 2014 7:27 AM
  • Hi,

    As far as I know, powershell can be used to manage WSUS updates, such as Approve or Decline WSUS Updates, we can use it to create a script and automatically approve updates, please refer to the below links to get more information:

    https://blogs.technet.com/b/heyscriptingguy/archive/2012/01/18/approve-or-decline-wsus-updates-by-using-powershell.aspx

    https://blogs.technet.com/b/heyscriptingguy/archive/2012/01/22/use-the-free-poshwsus-powershell-module-for-wsus-administrative-work.aspx

    Hope this helps.

    Regards,

    Yan Li


    Regards, Yan Li

    Monday, March 03, 2014 1:20 PM
    Moderator
  • Is there a way to schedule the approval of updates for a specific group?

    For example, I want certain updates approved at 10:30pm on a certain date for a specific computer group.

    No. You cannot schedule the *APPROVAL* of updates. Period. It is an interactive-only task.

    But, methinks it's not the approval that you're interested in scheduling, but rather the installation.

    So, with that presumption, let me offer this answer:

    • It is NOT possible to schedule updates to install at half past the hour (with the WSUS native console); it is possible to schedule updates to install at the TOP of the hour.
    • It is NOT possible to schedule installation by WSUS Target Group (with the WSUS native console).
    • To schedule update installations to a specific group, use a GPO with the appropriate scheduled installation time and Security Group Filtering on that GPO to apply the GPO to the specific computer group (i.e. AD Security Group) of interest.

    However, it is worthy of note that my employer's Patch Manager product does allow the scheduling of approvals and installations with one-minute granularity, if approvals is really what you meant.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, March 07, 2014 3:18 AM
    Moderator
  • serverfault.com/questions/463573/wsus-report-approvals-for-a-group


    Which doesn't really address the question as asked.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, March 07, 2014 3:19 AM
    Moderator
  • As far as I know, powershell can be used to manage WSUS updates, such as Approve or Decline WSUS Updates, we can use it to create a script and automatically approve updates

    True.. one could also create a PowerShell script (when using WSUS v6) and schedule that script using Task Scheduler.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, March 07, 2014 3:20 AM
    Moderator