update needed question for devs. wwwguy1 5/18/2007 6:26:00 PM Here is my issue. I have approved IE7 for a specific group of computers that i want it to install on, and i obviously have another group that i don't want it installed on, but since WSUS 3.0 scans all computers for updates that arn't declined, my group of computers that IE7 has not been approved on shows up with yellow ! and say that updates are neede. The fact is that i have said (through the approval process and the groups) that i don't want them to have IE7 and therefore to me I should not have it reporting to me that IE7 is needed by them. This new setup in WSUS 3.0 essentionaly makes the report of computers needing updates useless. Thoughts? Thanks.

Re: update needed question for devs. "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 5/21/2007 1:47:29 AM "wwwguy1" <wwwguy1[ at ]discussions.microsoft.com> wrote in message news:7E58DB44-8B6D-404A-9E98-60648C975483[ at ]microsoft.com... [Quoted Text] > Here is my issue. I have approved IE7 for a specific group of computers > that > i want it to install on, and i obviously have another group that i don't > want > it installed on, but since WSUS 3.0 scans all computers for updates that > arn't declined, my group of computers that IE7 has not been approved on > shows > up with yellow ! and say that updates are neede. The fact is that i have > said (through the approval process and the groups) that i don't want them > to > have IE7 and therefore to me I should not have it reporting to me that IE7 > is > needed by them. This is a natural manifestation of WSUS 3.0's "Approve for Detect" default configuration. Consider the phrase "Needed to mean "Not Installed", and accept the rest of the situation at face value. Same issue happens for .NET Framework v2.0 which I haven't (and I'm sure you haven't) installed on most workstations (not needed, don't install it, right?!). > This new setup in WSUS 3.0 essentionaly makes the report of computers > needing updates useless. > > Thoughts? Unfortunately, us beta testers, including a few MVPs (myself included, for sure), and Microsoft, only discovered this quirk late in the cycle (around late February) and there was no way to get it 'fixed' for the release product without significantly impacting the promised 2Qtr delivery date. The good news is that a third-party is developing a customized reporting solution that will take this situation into account an only report on those workstations who actually have updates approved for /installation/. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....

Re: update needed question for devs. David Andrews 5/21/2007 10:07:01 AM Lawrence This fooled me to begin with as well and made me think the updates were not getting installed correctly. With WSUS 2 I would see the 'Computers requireing Updates' figure reduce after approving updates but since there are some I don't approve, the figure in WSUS 3 would not reduce. Can you give any more details of the reporting tool being developed so we can monitor its progress and availability? Is this likely to be linked to from Microsoft's WSUS page? Regards David "Lawrence Garvin (MVP)" wrote: [Quoted Text] > "wwwguy1" <wwwguy1[ at ]discussions.microsoft.com> wrote in message > news:7E58DB44-8B6D-404A-9E98-60648C975483[ at ]microsoft.com... > > Here is my issue. I have approved IE7 for a specific group of computers > > that > > i want it to install on, and i obviously have another group that i don't > > want > > it installed on, but since WSUS 3.0 scans all computers for updates that > > arn't declined, my group of computers that IE7 has not been approved on > > shows > > up with yellow ! and say that updates are neede. The fact is that i have > > said (through the approval process and the groups) that i don't want them > > to > > have IE7 and therefore to me I should not have it reporting to me that IE7 > > is > > needed by them. > > This is a natural manifestation of WSUS 3.0's "Approve for Detect" default > configuration. > > Consider the phrase "Needed to mean "Not Installed", and accept the rest of > the situation at face value. > > Same issue happens for .NET Framework v2.0 which I haven't (and I'm sure you > haven't) installed on most workstations (not needed, don't install it, > right?!). > > > This new setup in WSUS 3.0 essentionaly makes the report of computers > > needing updates useless. > > > > Thoughts? > > Unfortunately, us beta testers, including a few MVPs (myself included, for > sure), and Microsoft, only discovered this quirk late in the cycle (around > late February) and there was no way to get it 'fixed' for the release > product without significantly impacting the promised 2Qtr delivery date. > > The good news is that a third-party is developing a customized reporting > solution that will take this situation into account an only report on those > workstations who actually have updates approved for /installation/. > > -- > Lawrence Garvin, M.S., MCTS, MCP > Independent WSUS Evangelist > MVP-Software Distribution (2005-2007) > https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E > > Everything you need for WSUS is at > http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx > > And, almost everything else is at > http://wsusinfo.onsitechsolutions.com > ..... > > >

Re: update needed question for devs. wwwguy1 5/21/2007 3:42:03 PM Thanks for your repsonse Lawrence. I will keep my eyes open for updates to the WSUS. "Lawrence Garvin (MVP)" wrote: [Quoted Text] > "wwwguy1" <wwwguy1[ at ]discussions.microsoft.com> wrote in message > news:7E58DB44-8B6D-404A-9E98-60648C975483[ at ]microsoft.com... > > Here is my issue. I have approved IE7 for a specific group of computers > > that > > i want it to install on, and i obviously have another group that i don't > > want > > it installed on, but since WSUS 3.0 scans all computers for updates that > > arn't declined, my group of computers that IE7 has not been approved on > > shows > > up with yellow ! and say that updates are neede. The fact is that i have > > said (through the approval process and the groups) that i don't want them > > to > > have IE7 and therefore to me I should not have it reporting to me that IE7 > > is > > needed by them. > > This is a natural manifestation of WSUS 3.0's "Approve for Detect" default > configuration. > > Consider the phrase "Needed to mean "Not Installed", and accept the rest of > the situation at face value. > > Same issue happens for .NET Framework v2.0 which I haven't (and I'm sure you > haven't) installed on most workstations (not needed, don't install it, > right?!). > > > This new setup in WSUS 3.0 essentionaly makes the report of computers > > needing updates useless. > > > > Thoughts? > > Unfortunately, us beta testers, including a few MVPs (myself included, for > sure), and Microsoft, only discovered this quirk late in the cycle (around > late February) and there was no way to get it 'fixed' for the release > product without significantly impacting the promised 2Qtr delivery date. > > The good news is that a third-party is developing a customized reporting > solution that will take this situation into account an only report on those > workstations who actually have updates approved for /installation/. > > -- > Lawrence Garvin, M.S., MCTS, MCP > Independent WSUS Evangelist > MVP-Software Distribution (2005-2007) > https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E > > Everything you need for WSUS is at > http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx > > And, almost everything else is at > http://wsusinfo.onsitechsolutions.com > ..... > > >

Re: update needed question for devs. "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 5/21/2007 9:55:42 PM "David Andrews" <DavidAndrews[ at ]discussions.microsoft.com> wrote in message news:A0591DAB-A9DA-4499-BF9E-B90E06C94C06[ at ]microsoft.com... [Quoted Text] > Lawrence > > This fooled me to begin with as well and made me think the updates were > not > getting installed correctly. With WSUS 2 I would see the 'Computers > requireing Updates' figure reduce after approving updates but since there > are > some I don't approve, the figure in WSUS 3 would not reduce. > > Can you give any more details of the reporting tool being developed so we > can monitor its progress and availability? Is this likely to be linked to > from Microsoft's WSUS page? All that I know, (or that I can share at this time), is that a third party developer committed to developing an alternative tool to address this quirk of behavior. I've received no new information in the past six weeks. My best suggestion is to follow the WSUS blog at the technet link in my sig. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://technet2.microsoft.com/windowsserver/en/technologies/featured/wsus/default.mspx And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....