> "gerryR" <gerryr[ at ]noSPAM.com> wrote in message
> news:e1wxDYGYJHA.760[ at ]TK2MSFTNGP02.phx.gbl...
>
>> Looking at deploying WSUS and I'm a bit unclear on this line in the MS
>> guide:
>>
>> If you do not approve an update, its approval status remains Not
>> approved, and your WSUS server allows clients to evaluate whether or not
>> they need the update.
>
> The default behavior of WSUS v3 is that any update synchronized to a WSUS
> Server is "detectable" by a client system as to whether the update is
> Needed (Applicable but not Installed) by that client system.
>
> Only after the WSUS Administrator actively marks the update as "Approved"
> (For Installation), will the client system actually be authorized to
> download and install the update.
>
>
>> Basically we just want to approve updates that we require and want
>> nothing else to install. With the above description, how will the
>> clients themselves evalulate it the update is required?
>
> Evaluating whether an update is needed is performed independently of
> whether any given update is authorized for installation.
>
>> Take an XP box that doesnt have update XYZ installed. We don't approve
>> it as we don't want it installed, whats to stop the XP client saying "I
>> need that update" and going off and installing it?
>
> The fact that you haven't approved it for installation. :-)
>
>
> --
> Lawrence Garvin, M.S., MCITP(x2), MCTS(x5), MCP(x7), MCBMSP
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website:
http://www.microsoft.com/wsus> My Websites:
http://www.onsitechsolutions.com;>
http://wsusinfo.onsitechsolutions.com> My MVP Profile:
http://mvp.support.microsoft.com/profile/Lawrence.Garvin>