locked
How to temporarily stop synchronizing new updates to the wsus ? RRS feed

  • Question

  • Hi,

    I have a customer that has a stage of testing servers and a stage of production ones.

    Only Testing servers have Automatic Approvals updates enabled in order to install important updates inmediately, and production ones don´t. They want to stop synchronization in order to make a testing window time, to test the updates and in some scheduled time apply the same updates to production servers. The question is, how to stop the synchronization in order to temporaly cancel Automatic Approvals? (by a scheduled task with a script or something like that, in a automatically way). Is possible just stopping the "Update Services" service? Or is there any other way?

    Thanks in advance


    Cristian L Ruiz


    Monday, August 29, 2016 8:54 PM

All replies

  • Hi Cristian Ruiz,

    >The question is, how to stop the synchronization in order to temporaly cancel Automatic Approvals?

    If you want the WSUS server for product sync later then the WSUS server for test, you may configuration here: Options>synchronization schedule

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, August 30, 2016 2:55 AM
  • Hi Anne,

    Sorry for my poor english, but there is only one WSUS. The testing and production areas are for other servers controlled by the same WSUS server. They install several updates to testing servers, see what happen for 3 weeks for example, and if nothing happenned approve the same updates to production ones. They want to be all automatic. That is why they want to know how to stop the synchronization from Microsoft, in order to see what happen for 3 weeks whitout installing new updates.


    Cristian L Ruiz

    Wednesday, August 31, 2016 7:12 PM
  • Hi Cristian Ruiz,

    If so, then we need to configure the approval behavior instead of the sync behavior, approve related updates for test group first, if they are stable, approve them for production groups later.

    On the WSUS GUI, we can't set a time order to the automatic approval. One workaround is to approve the updates for the production group manually, another is to seek a script to achieve the goal.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, September 1, 2016 2:24 AM
  • Hi Cristian Ruiz,

    Could the above replies be of help? If yes, you may mark useful replies as answer, if not, feel free to feed back.
    Best Regards,
    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, September 6, 2016 1:50 AM
  • Hi Cristian Ruiz,

    If so, then we need to configure the approval behavior instead of the sync behavior, approve related updates for test group first, if they are stable, approve them for production groups later.

    On the WSUS GUI, we can't set a time order to the automatic approval. One workaround is to approve the updates for the production group manually, another is to seek a script to achieve the goal.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    You are right about to approve related updates for test group first, if they are stable, approve them for production groups later.

    But they are going to do this with the following steps:

    Situation

    WSUS has auto synchronization set daily in order to see what new updates are in Microsoft. There are 2 groups, testing servers, and production servers. Testing servers has Automatic Approval set for Security Updates, and Production Servers has Manual Approval.

    1) Day 1: Stop synchronization, because of the Automatic Approval set for Testing Servers, they want to stop synchronization in order to test the "same" set of approved updates for 3 weeks.

    2) Day 21: Running a script in order to copy the approved updates that have testing servers to production servers. Start synchronization for testing servers, in order to continue the installation of updates for the testing ones.

    They already have a script that copy the approved updates in testing group to production group. But! The only think that they do not know is how to stop or start synchronization automatically, for example by running a script with a task scheduled or something like that.


    Cristian L Ruiz

    Wednesday, September 7, 2016 11:44 PM
  • Hi Cristian Ruiz,

    Could the above replies be of help? If yes, you may mark useful replies as answer, if not, feel free to feed back.
    Best Regards,
    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.


    I have already marked as not being useful, and continue asking. Thanks

    Cristian L Ruiz


    Wednesday, September 7, 2016 11:46 PM
  • Hi Cristian Ruiz,

    It's pity that the above reply didn't help, I'm doing more research and trying to give a better reply.

    Best Regards,

    Anne


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, September 9, 2016 9:09 AM