Wsus automatic updates

Answered by:. Archived Forums. Configuration Manager General. Sign in to vote. Hello, I'm a little confused. Thanks so much for your help, Mark. Monday, July 22, PM. Tuesday, July 23, AM. Thanks, Mark. Say I want to set automatic approvals for security and critical updates and I want these computers to be rebooted at Thursday at 5am.

Would a deadline approval be required? How do I go about scheduling the reboot? If you want to ensure that happens that the day and time specified then you should set this. Website URL. Notify me of follow-up comments by email. Notify me of new posts by email. Email Address. RootUsers Guides, tutorials, reviews and news for System Administrators.

Summary We have shown you how to manually approve Windows updates through WSUS to specific computer groups , as well as create custom approval rules that will automatically apply a defined selection of updates to a set of computers. Leave a comment? Francis June 6, at pm. If the update has been approved successfully, the message Result: Success will be displayed. Close this window. As you can see, it is how the specific update is approved manually.

It is quite time-consuming, since you have to approve each update individually. Automatic approval allows you to approve new updates that appeared on your WSUS server automatically without an administrator involvement and assign their installation on the target computers. Automatic approval of WSUS updates is based on approval rules. In the next window, there is only one rule with the name Default Automatic Approval Rule it is disabled by default in the Update Rules tab.

To create a new rule, click New Rule. An approval rule configuration consists of 3 steps. You must select the update properties, the WSUS computer target group you want to install the update on and the name of the rule. For example, you can enable automatic approval of security updates for your test servers. In the Advanced tab, you can check the corresponding options: if you want to automatically approve updates to the WSUS product itself or automatically approve the updates that have been changed by Microsoft.

Usually all options in this tab are checked. Now, when your WSUS server downloads new updates on the next second Tuesday of the month or if you import them manually , they will be approved and automatically installed on the test server group. In order critical computers get new updates as soon as possible, you can change the synchronization frequency using the Automatic Update detection frequency policy see the case WSUS error: Exceeded max server round trips and set it to once in several hours you can also scan for updates manually using PSWindowsUpdate module.

If one of the approved updates has caused any problems on computers or servers, a WSUS administrator can decline it. After you have installed and tested updates in your test groups and made sure that there have been no problems usually the testing takes days , you can approve new updates on the productive systems.