Automatic Approval rules under WSUS 3.0 Usenet <usenet[ at ]nospam.please> 11/22/2008 10:36:25 AM Under WSUS 3.0 can someone please clarify exactly how Automatic Approvals rules work under WSUS please? For example if I setup a rule to automatically accept security and critical updates to a test group, will WSUS only approve updates that are reported as needed, or will it "back track" and approve any and all updates that could possible apply to that group in WSUS?

Re: Automatic Approval rules under WSUS 3.0 "Lawrence Garvin \(MVP\)" <lawrence[ at ]news.postalias> 11/22/2008 5:47:42 PM "Usenet" <usenet[ at ]nospam.please> wrote in message news:usenet-A3524D.10362522112008[ at ]eu.usenet-news.net... [Quoted Text] > Under WSUS 3.0 can someone please clarify exactly how Automatic > Approvals rules work under WSUS please? > > For example if I setup a rule to automatically accept security and > critical updates to a test group, will WSUS only approve updates that > are reported as needed, or will it "back track" and approve any and all > updates that could possible apply to that group in WSUS? Neither. It will approve any updates synchronized *after* you enable the rule, regardless of whether the update is needed in your organization or not. Presumably one would only engage an auto-approval rule on updates you reasonably expect to be needed. For example, I have an auto-approval rule on all Defender updates and Exchange IMF updates. It will not retroactively approve updates that already exist on WSUS when you enable the rule. For those updates, you will still need to manually approve the updates that are needed. -- Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP Principal/CTO, Onsite Technology Solutions, Houston, Texas Microsoft MVP - Software Distribution (2005-2009) MS WSUS Website: http://www.microsoft.com/wsus My Websites: http://www.onsitechsolutions.com; http://wsusinfo.onsitechsolutions.com My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin