locked
Most efficient WSUS strategy for basic Test and Production groups? RRS feed

  • Question

  • I'm trying to setup a basic WSUS update strategy with a Testing Computer group and Production Computer group. I'll just talk about Windows 7 to keep it simple.

    I've created a custom Update View called Windows 7 to show me only updates for Windows 7 products (W7 updates, Office updates, Silverlight). I have also created two computer groups: Testing Computers and Production Computers (they're both nested under All Computers). What I want to do is through my custom Windows 7 update view, select the updates and approve them for the Testing Computer group, then once I've verified the updates are good, I then want to approve those same updates to the Production Computers group. So far I have not figured out an intuitive way to keep track of what updates have been approved for the Testing Computer group and Production Computer group.

    So to make it easy to do this, I've created two custom update views named "Approved Updates for Testing Computers" and "Approved Updates for Production Computers." I've selected these custom update views to only show approved updates for the respective group. I then ideally can go into the Approved Updates for Testing Computers update view and select all of those updates and approve them for the Production Computers group once tested and verified. Is there a simpler way to set this up and accomplish the same thing?

    Any help would be appreciated.



    • Edited by CB79LLD Wednesday, July 2, 2014 12:30 AM
    Tuesday, July 1, 2014 7:37 PM

Answers

  • What I want to do is through my custom Windows 7 update view, select the updates and approve them for the Testing Computer group, then once I've verified the updates are good, I then want to approve those same updates to the Production Computers group. So far I have not figured out an intuitive way to keep track of what updates have been approved for the Testing Computer group and Production Computer group.

    So to make it easy to do this, I've created two custom update views named "Approved Updates for Testing Computers" and "Approved Updates for Production Computers." I've selected these custom update views to only show approved updates for the respective group. I then ideally can go into the Approved Updates for Testing Computers update view and select all of those updates and approve them for the Production Computers group once tested and verified. Is there a simpler way to set this up and accomplish the same thing?

    Nope. This is effectively how you do it.

    I wrote a blog article that describes this process.

    See Duplicating Approvals From a Test Group to a Production Group


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by CB79LLD Tuesday, July 8, 2014 11:57 PM
    Wednesday, July 2, 2014 1:28 PM
  • If you create this kind of update view (like I did with the Testing Computers group), and then set the status at the top to only show you Approved updates with a status of failed or needed, it will show you all updates that are failed or needed for ANY computer regardless of computer group membership.

    Correct. in the console VIEW you are looking only at UPDATES that have been approved for the specified group(s). If you also want to filter for computers that are members of those group(s), you need to run the report for "Approved Updates".

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by CB79LLD Tuesday, July 8, 2014 11:57 PM
    Friday, July 4, 2014 3:45 PM

All replies

  • Hi,

    If current views didn't resolve your problem, you can refer to WSUS public views:

    Using WSUS Views

    http://msdn.microsoft.com/en-us/library/bb410149(v=vs.85).aspx

    Hope this helps.

    Wednesday, July 2, 2014 10:01 AM
  • What I want to do is through my custom Windows 7 update view, select the updates and approve them for the Testing Computer group, then once I've verified the updates are good, I then want to approve those same updates to the Production Computers group. So far I have not figured out an intuitive way to keep track of what updates have been approved for the Testing Computer group and Production Computer group.

    So to make it easy to do this, I've created two custom update views named "Approved Updates for Testing Computers" and "Approved Updates for Production Computers." I've selected these custom update views to only show approved updates for the respective group. I then ideally can go into the Approved Updates for Testing Computers update view and select all of those updates and approve them for the Production Computers group once tested and verified. Is there a simpler way to set this up and accomplish the same thing?

    Nope. This is effectively how you do it.

    I wrote a blog article that describes this process.

    See Duplicating Approvals From a Test Group to a Production Group


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by CB79LLD Tuesday, July 8, 2014 11:57 PM
    Wednesday, July 2, 2014 1:28 PM
  • Thanks for the reply, Lawrence. Good to find out I set it up the best possible way for my needs. I was pulling my hair out thinking there must be a better way.

    I was hoping I could get your input on another problem I'm experiencing with custom update views for "approved updates for a specific computer group." If you create this kind of update view (like I did with the Testing Computers group), and then set the status at the top to only show you Approved updates with a status of failed or needed, it will show you all updates that are failed or needed for ANY computer regardless of computer group membership. For example, I only have 1 testing computer in the Testing Computer group and that computer is 100% fully patched, but when I select to only show Approved and failed or needed status, it shows me all the updates even though they're already installed on the test computer. I believe it's showing me all those updates because the custom update view is also looking at computers in other groups and not just the specific computer group I selected when I created the update view. Is this the intended behavior? It would be extremely helpful if it would only show the failed or needed status for the particular computers in that group. Thanks.

    Wednesday, July 2, 2014 6:01 PM
  • If you create this kind of update view (like I did with the Testing Computers group), and then set the status at the top to only show you Approved updates with a status of failed or needed, it will show you all updates that are failed or needed for ANY computer regardless of computer group membership.

    Correct. in the console VIEW you are looking only at UPDATES that have been approved for the specified group(s). If you also want to filter for computers that are members of those group(s), you need to run the report for "Approved Updates".

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by CB79LLD Tuesday, July 8, 2014 11:57 PM
    Friday, July 4, 2014 3:45 PM