WSUS First use.
-
Thursday, April 26, 2012 3:58 PM
I have WSUS 3.0 (I'm not sure which service pack). I have many many updates, some that say they are superceded by other updates. Would it hurt to approve all the updates and let them get installed throughout the office? I've set up a group policy for this to install and restart without user response. Also, can I set it to download and install non-critical updates?
Also, how do I know which SP I have (Help...About only shows "WSUS 3.0"). Is SP2 ok to install without serious results (the only reason I ask is that I remember SBS 2003 and SP2. What a nightmare). I look forward to hearing from you. I don't like seeing some users with so many updates to install.
All Replies
-
Friday, April 27, 2012 5:33 AMModerator
Hi,
> Would it hurt to approve all the updates and let them get installed throughout the office?
Because a superseding update typically enhances a fix provided by a previously released, superseded update, it is recommended that you first see how many client computers will be compliant with the new update, and work backward from there. Use the following process.
To approve a superseding update
- Check the status of the update on client computers. Note which computers show status as Not applicable for the update, and then compare the properties of those computers with the properties of the update.
- Use the information available in the update properties to help you determine which previously released versions are available. You can look under Updates superseded by this update in the update's properties, and check the Description and KB article number entries if appropriate.
- Look at the properties of the superseded versions of the updates.
- When you find a superseded update that seems appropriate for the remaining client computers, approve the update for installation.
> I've set up a group policy for this to install and restart without user response. Also, can I set it to download
> and install non-critical updates?How you configured group policy?
We have a Group Policy item at: Computer Configuration-->Administrative Template-->Windows Components-->Windows Update-->No Auto-restart for Scheduled Automatic Update Installation Options
If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation
Note:
This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the Configure Automatic Updates policy is disabled, this policy has no effect.
> how do I know which SP I have
1. The installation of SP2 can be verified from Add/Remove Programs, launch Add/Remove programs and check whether you can find “Windows Server Update Services 3.0 SP2”
2. Check WSUS services pack level form console-->Help-->About Update Services-->Version
3. Check WSUS Services Pack level form registry
HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\ServicePackLevel
For more information please refer to following MS articles:
Approving the Updates
http://technet.microsoft.com/en-us/library/cc708474(v=WS.10).aspx
Configure Automatic Updates by Using Group Policy
http://technet.microsoft.com/en-us/library/dd939933(v=WS.10).aspx
Lawrence
TechNet Community Support
- Edited by Lawrence LvMicrosoft Contingent Staff, Moderator Wednesday, May 02, 2012 7:09 AM update product version
- Marked As Answer by Lawrence LvMicrosoft Contingent Staff, Moderator Monday, May 07, 2012 2:17 AM
-
Friday, April 27, 2012 6:11 PMModerator
Use the information in the update properties to help you determine which previously released version of the updates are available. For example, in WSUS 2.0, look under "Supersedes" on the Details tab, and check the "Description" and KB article number entries if appropriate.
-
For more information please refer to following MS articles:
About Updates
http://technet.microsoft.com/en-us/library/cc708465(v=WS.10).aspx
Approve Updates
http://technet.microsoft.com/en-us/library/cc719842(v=WS.10).aspx
Configure Automatic Updates by Using Group Policy
http://technet.microsoft.com/en-us/library/cc720539(v=WS.10).aspx
Could you PLEASE stop citing WSUS v2 resources in this forum. WSUS v2 has been dead for five years!Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
Microsoft MVP - Software Distribution (2005-2012)
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin

