"GMan" <GMan[ at ]discussions.microsoft.com> wrote in message news:8E867EB6-D516-45C3-A9B8-A82C21FC3906[ at ]microsoft.com...
[Quoted Text] > If a computer receives it's update from a wsus server on a local lan/wan > nad > the user of that computer goes to windows update website . . . . > > Does the Windows update see anything that would prevent it from installing > updates that were not approved by WSUS.
No.
> Can someone explain to me how that process works??
Basically it's first-come, first-served.
When the WUA executes a detection against the WSUS Server it gets a filtered list of available updates (those that the WSUS Administrator has synchronized to the WSUS Server) and then is able to download those updates that the WSUS Administrator has marked as "Approved".
When the WUA executes a detection against the WU/MU website, it gets an UNfiltered list of available updates (the whole catalog, already approved) and is able to download whichever updates the local user chooses to install (by checking the updates via the web interface at WU/MU). Imagine a scenario where a WSUS Administrator synchronizes all products/all classifications, and then configures an auto-approval rule to approve ALL updates. Essentially that's what the WUA sees at the WU/MU website.
-- Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal/CTO, Onsite Technology Solutions, Houston, Texas Microsoft MVP - Software Distribution (2005-2009)
MS WSUS Website: http://www.microsoft.com/wsus My Websites: http://www.onsitechsolutions.com; http://wsusinfo.onsitechsolutions.com My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
|