Previously approved updates for a new "Computer Group" in the WSUS console RRS feed

  • Question

  • I need to create a few new Computer Groups in WSUS for new servers (Windows 2016 member servers), but am concerned that they will not get any past approved updates since this new group will have never had any updates approved to it. I've read through the Help in the WSUS console along with https://www.experts-exchange.com/articles/28340/Understanding-Microsoft-Windows-Update-Agent.html, but am not clear on how this will work.

    Example: I create a new Computer Group in WSUS called "RebootDuringBusinessHours". Any new server I create (2012 R2 or 2016) that can be patched and rebooted during business hours will get manually moved there. However, how will those computers get all the updates that have already been approved in WSUS since they will be in a new group that has only had this month's patches approved once November's are released? Should I just keep them as members in a pre-existing group as well since WSUS allows that?

    Do I need to create this new group as a sub-group as outlined here (see Lawrence's comments)



    Tuesday, November 7, 2017 3:50 PM


  • Hi,

    >>Do I need to create this new group as a sub-group as outlined here (see Lawrence's comments)

    If you need to apply same approved updates to a new group , the direct path would be create a sub-group of existing group .

    If it doesn't cover you needs , you can do "copy settings" from existing group by means of Scripting .


    Hope it is useful to you .

    Best Regards,


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by Jack Leidu Wednesday, November 8, 2017 2:40 PM
    Wednesday, November 8, 2017 4:44 AM