Answered WSUS First use.

  • 2012년 4월 26일 목요일 오후 3:58
     
     

    I have WSUS 3.0 (I'm not sure which service pack).  I have many many updates, some that say they are superceded by other updates.  Would it hurt to approve all the updates and let them get installed throughout the office?  I've set up a group policy for this to install and restart without user response.  Also, can I set it to download and install non-critical updates?

    Also, how do I know which SP I have (Help...About only shows "WSUS 3.0").  Is SP2 ok to install without serious results (the only reason I ask is that I remember SBS 2003 and SP2.  What a nightmare).  I look forward to hearing from you.  I don't like seeing some users with so many updates to install.

모든 응답

  • 2012년 4월 27일 금요일 오전 5:33
    중재자
     
     답변됨

    Hi,

    > Would it hurt to approve all the updates and let them get installed throughout the office?

    Because a superseding update typically enhances a fix provided by a previously released, superseded update, it is recommended that you first see how many client computers will be compliant with the new update, and work backward from there. Use the following process.

    To approve a superseding update

    1. Check the status of the update on client computers. Note which computers show status as Not applicable for the update, and then compare the properties of those computers with the properties of the update.
    2. Use the information available in the update properties to help you determine which previously released versions are available. You can look under Updates superseded by this update in the update's properties, and check the Description and KB article number entries if appropriate.
    3. Look at the properties of the superseded versions of the updates.
    4. When you find a superseded update that seems appropriate for the remaining client      computers, approve the update for installation.

    > I've set up a group policy for this to install and restart without user response. Also, can I set it to download
    > and install non-critical updates?

    How you configured group policy?

    We have a Group Policy item at: Computer Configuration-->Administrative Template-->Windows Components-->Windows Update-->No Auto-restart for Scheduled Automatic Update Installation Options

    If the status is set to Disabled or Not Configured, Automatic Updates will notify the user that the computer will automatically restart in 5 minutes to complete the installation

    Note:

    This policy applies only when Automatic Updates is configured to perform scheduled installations of updates. If the Configure Automatic Updates policy is disabled, this policy has no effect.

    > how do I know which SP I have

    1. The installation of SP2 can be verified from Add/Remove Programs, launch Add/Remove programs and check whether you can find “Windows Server Update Services 3.0 SP2”

    2. Check WSUS services pack level form console-->Help-->About Update Services-->Version

    3. Check WSUS Services Pack level form registry

    HKEY_LOCAL_MACHINE\Software\Microsoft\Update Services\Server\Setup\ServicePackLevel

    For more information please refer to following MS articles:

    Approving the Updates
    http://technet.microsoft.com/en-us/library/cc708474(v=WS.10).aspx
    Configure Automatic Updates by Using Group Policy
    http://technet.microsoft.com/en-us/library/dd939933(v=WS.10).aspx


    Lawrence

    TechNet Community Support


  • 2012년 4월 27일 금요일 오후 6:11
    중재자
     
     

    Use the      information in the update properties to help you determine which      previously released version of the updates are available. For example, in      WSUS 2.0, look under "Supersedes" on the Details tab, and check      the "Description" and KB article number entries if appropriate.

      For more information please refer to following MS articles:

    About Updates
    http://technet.microsoft.com/en-us/library/cc708465(v=WS.10).aspx
    Approve Updates
    http://technet.microsoft.com/en-us/library/cc719842(v=WS.10).aspx
    Configure Automatic Updates by Using Group Policy
    http://technet.microsoft.com/en-us/library/cc720539(v=WS.10).aspx



    Could you PLEASE stop citing WSUS v2 resources in this forum. WSUS v2 has been dead for five years!

    Lawrence Garvin, M.S., MCITP:EA, MCDBA, MCSA
    Microsoft MVP - Software Distribution (2005-2012)
    My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin