Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

# 139410 8-Feb-2014 08:47
Send private message

So, having a long weekend and all, I decided to audit my workstations and server updates. I have no errors, however, I have many "updates needed". When I look at the report, they are approved for install, but not installed. When I access the server itself, it reports everything is good, so I checked online against Microsoft and they are a large number of updates offered.

I have so far only been reviewing and approving updates that are listed as "Failed or Needed" (to preserve bandwidth), is there something I'm missing or do I need to brute force (approve everything) to get these in?

Create new topic

JWR

757 posts

Ultimate Geek
+1 received by user: 238


  # 982331 8-Feb-2014 16:45

Are you sure your PCs are connecting to the WSUS server? i.e. are they listed if you search for status = 'any' under 'computers/all computers'?

You can either manually approve everything or set rules under 'options/automatic approvals'. For example, you can set a rule to allow all critical updates to be automatically approved or approve all windows defender updates etc..

956 posts

Ultimate Geek
+1 received by user: 346
Inactive user


  # 982336 8-Feb-2014 16:56
Send private message

Might be an issue with superseeded updates waiting for the superseeding update to install?

WSUS has never handled this properly

 
 
 
 


gjm

754 posts

Ultimate Geek
+1 received by user: 92


  # 982337 8-Feb-2014 16:58
Send private message

If you have used images or copied VM files and not sysprepped then WSUS can do weird things like this




[Amstrad CPC 6128: 128k Memory: 3 inch floppy drive: Colour Screen]



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 982339 8-Feb-2014 17:11
Send private message

JamesL: Might be an issue with superseeded updates waiting for the superseeding update to install?

WSUS has never handled this properly


To avoid downloading everything, I selected supersceding updates only, so I'm hoping this is not the case.



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 982340 8-Feb-2014 17:11
Send private message

gjm: If you have used images or copied VM files and not sysprepped then WSUS can do weird things like this


All machines a fresh installs, so this shouldn't be an issue.



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 982341 8-Feb-2014 17:13
Send private message

JWR: Are you sure your PCs are connecting to the WSUS server? i.e. are they listed if you search for status = 'any' under 'computers/all computers'?

You can either manually approve everything or set rules under 'options/automatic approvals'. For example, you can set a rule to allow all critical updates to be automatically approved or approve all windows defender updates etc..


I believe so. Domain machines are applied by group policy, and they list correctly in the WSUS server console. Those not on the domain, have a local policy applied (I use those so they don't attempt to update when away from home, i.e. tethered).



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 982343 8-Feb-2014 17:15
Send private message

p.s. I don't have anything set to automatically approve, as I want to control when machine restart, esp. Hyper-V hosts.

 
 
 
 




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 982661 9-Feb-2014 12:35
Send private message

I think I'll just have to download everything and let the clients decide what to install, trying to controll if from WSUS side is too unpredictable. I tried to create a "test" group, where I could auto approve updates as they arrive, and then when I'm happy with it, roll out to the rest, but that left me in a mess of approved/unapproved updates depending on groups.



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 1027920 19-Apr-2014 21:03
Send private message

With an ever spiralling gap between updates offered by WSUS and that from Windows Update directly I've decided to take the 45 GB hit and download all the updates, there goes a third of my allowance.

JWR

757 posts

Ultimate Geek
+1 received by user: 238


  # 1027953 19-Apr-2014 22:00

lyonrouge: With an ever spiralling gap between updates offered by WSUS and that from Windows Update directly I've decided to take the 45 GB hit and download all the updates, there goes a third of my allowance.


FWIW...

I download the following:
 Critical Updates
 Definition Updates
 Feature Packs
 Service Packs
 Update Rollups
 Updates


I skip:
 Drivers
 Tools


I don't think its worth downloading drivers. There are so many supported devices. But, I only use a few of them. Also, a lot of drivers I prefer to get directly from the hardware supplier.

I have about a years worth of WSUS updates on my disk. So far, I am at about 60GB of storage.






1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 1028047 20-Apr-2014 08:41
Send private message

Thanks.

For now I'm just trying to get up to date with Critical and Security. I don't sync Service Packs (these are rolled out as a manual, stand alone exercise) and I'm very selective with "Updates" as these contain a lot of new feature roll-outs, such as IE, .NET, etc.

The WSUS server crash in the evening at 17GB our of 40GB complete, after restarting I have seen more security and critical updates displaying, so bringing the supersceded updates through appears to have started to trigger the download of the missing ones.



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  # 1028529 21-Apr-2014 11:45
Send private message

Is there a "Point-in-time Release" functionality in WSUS 6? The objective would be to deploy a set of updates as today to a set of test hosts, leave them running for a week, and then, assuming nothing bad happened, roll those (and only those) updates out across the remaining hosts.

JWR

757 posts

Ultimate Geek
+1 received by user: 238


  # 1028872 22-Apr-2014 03:20

lyonrouge: Is there a "Point-in-time Release" functionality in WSUS 6? The objective would be to deploy a set of updates as today to a set of test hosts, leave them running for a week, and then, assuming nothing bad happened, roll those (and only those) updates out across the remaining hosts.


I think the best things about WSUS are:

 1- You only need to download updates once for your network.
 2- You can choose when you deploy those updates.

A lot of minor updates e.g Windows Defender, I automatically approve.

For major updates, I tend to delay and let the Internet test them.

If I really wanted to test an update, then I would create a WSUS Computer\group and only approve for computers in that group.

But, I think delay is a better plan.




Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Zealand government unveils new digital service to make business easier
Posted 16-Jul-2019 17:35


Scientists unveil image of quantum entanglement
Posted 13-Jul-2019 06:00


Hackers to be challenged at University of Waikato
Posted 12-Jul-2019 21:34


OPPO Reno Z now available in New Zealand
Posted 12-Jul-2019 21:28


Sony introduces WF-1000XM3 wireless headphones with noise cancellation
Posted 8-Jul-2019 16:56


Xero announces new smarter tools, push into the North American market
Posted 19-Jun-2019 17:20


New report by Unisys shows New Zealanders want action by social platform companies and police to monitor social media sites
Posted 19-Jun-2019 17:09


ASB adds Google Pay option to contactless payments
Posted 19-Jun-2019 17:05


New Zealand PC Market declines on the back of high channel inventory, IDC reports
Posted 18-Jun-2019 17:35


Air New Zealand uses drones to inspect aircraft
Posted 17-Jun-2019 15:39


TCL Electronics launches its first-ever 8K TV
Posted 17-Jun-2019 15:18


E-scooter share scheme launches in Wellington
Posted 17-Jun-2019 12:34


Anyone can broadcast with Kordia Pop Up TV
Posted 13-Jun-2019 10:51


Volvo and Uber present production vehicle ready for self-driving
Posted 13-Jun-2019 10:47


100,000 customers connected to fibre broadband network through Enable
Posted 13-Jun-2019 10:35



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.