Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1990 posts

Uber Geek

Trusted
Lifetime subscriber

# 139410 8-Feb-2014 08:47
Send private message

So, having a long weekend and all, I decided to audit my workstations and server updates. I have no errors, however, I have many "updates needed". When I look at the report, they are approved for install, but not installed. When I access the server itself, it reports everything is good, so I checked online against Microsoft and they are a large number of updates offered.

I have so far only been reviewing and approving updates that are listed as "Failed or Needed" (to preserve bandwidth), is there something I'm missing or do I need to brute force (approve everything) to get these in?

Create new topic

JWR

761 posts

Ultimate Geek


  # 982331 8-Feb-2014 16:45

Are you sure your PCs are connecting to the WSUS server? i.e. are they listed if you search for status = 'any' under 'computers/all computers'?

You can either manually approve everything or set rules under 'options/automatic approvals'. For example, you can set a rule to allow all critical updates to be automatically approved or approve all windows defender updates etc..

956 posts

Ultimate Geek
Inactive user


  # 982336 8-Feb-2014 16:56
Send private message

Might be an issue with superseeded updates waiting for the superseeding update to install?

WSUS has never handled this properly

 
 
 
 


gjm

754 posts

Ultimate Geek


  # 982337 8-Feb-2014 16:58
Send private message

If you have used images or copied VM files and not sysprepped then WSUS can do weird things like this




[Amstrad CPC 6128: 128k Memory: 3 inch floppy drive: Colour Screen]



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 982339 8-Feb-2014 17:11
Send private message

JamesL: Might be an issue with superseeded updates waiting for the superseeding update to install?

WSUS has never handled this properly


To avoid downloading everything, I selected supersceding updates only, so I'm hoping this is not the case.



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 982340 8-Feb-2014 17:11
Send private message

gjm: If you have used images or copied VM files and not sysprepped then WSUS can do weird things like this


All machines a fresh installs, so this shouldn't be an issue.



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 982341 8-Feb-2014 17:13
Send private message

JWR: Are you sure your PCs are connecting to the WSUS server? i.e. are they listed if you search for status = 'any' under 'computers/all computers'?

You can either manually approve everything or set rules under 'options/automatic approvals'. For example, you can set a rule to allow all critical updates to be automatically approved or approve all windows defender updates etc..


I believe so. Domain machines are applied by group policy, and they list correctly in the WSUS server console. Those not on the domain, have a local policy applied (I use those so they don't attempt to update when away from home, i.e. tethered).



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 982343 8-Feb-2014 17:15
Send private message

p.s. I don't have anything set to automatically approve, as I want to control when machine restart, esp. Hyper-V hosts.

 
 
 
 




1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 982661 9-Feb-2014 12:35
Send private message

I think I'll just have to download everything and let the clients decide what to install, trying to controll if from WSUS side is too unpredictable. I tried to create a "test" group, where I could auto approve updates as they arrive, and then when I'm happy with it, roll out to the rest, but that left me in a mess of approved/unapproved updates depending on groups.



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 1027920 19-Apr-2014 21:03
Send private message

With an ever spiralling gap between updates offered by WSUS and that from Windows Update directly I've decided to take the 45 GB hit and download all the updates, there goes a third of my allowance.

JWR

761 posts

Ultimate Geek


  # 1027953 19-Apr-2014 22:00

lyonrouge: With an ever spiralling gap between updates offered by WSUS and that from Windows Update directly I've decided to take the 45 GB hit and download all the updates, there goes a third of my allowance.


FWIW...

I download the following:
 Critical Updates
 Definition Updates
 Feature Packs
 Service Packs
 Update Rollups
 Updates


I skip:
 Drivers
 Tools


I don't think its worth downloading drivers. There are so many supported devices. But, I only use a few of them. Also, a lot of drivers I prefer to get directly from the hardware supplier.

I have about a years worth of WSUS updates on my disk. So far, I am at about 60GB of storage.






1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 1028047 20-Apr-2014 08:41
Send private message

Thanks.

For now I'm just trying to get up to date with Critical and Security. I don't sync Service Packs (these are rolled out as a manual, stand alone exercise) and I'm very selective with "Updates" as these contain a lot of new feature roll-outs, such as IE, .NET, etc.

The WSUS server crash in the evening at 17GB our of 40GB complete, after restarting I have seen more security and critical updates displaying, so bringing the supersceded updates through appears to have started to trigger the download of the missing ones.



1990 posts

Uber Geek

Trusted
Lifetime subscriber

  # 1028529 21-Apr-2014 11:45
Send private message

Is there a "Point-in-time Release" functionality in WSUS 6? The objective would be to deploy a set of updates as today to a set of test hosts, leave them running for a week, and then, assuming nothing bad happened, roll those (and only those) updates out across the remaining hosts.

JWR

761 posts

Ultimate Geek


  # 1028872 22-Apr-2014 03:20

lyonrouge: Is there a "Point-in-time Release" functionality in WSUS 6? The objective would be to deploy a set of updates as today to a set of test hosts, leave them running for a week, and then, assuming nothing bad happened, roll those (and only those) updates out across the remaining hosts.


I think the best things about WSUS are:

 1- You only need to download updates once for your network.
 2- You can choose when you deploy those updates.

A lot of minor updates e.g Windows Defender, I automatically approve.

For major updates, I tend to delay and let the Internet test them.

If I really wanted to test an update, then I would create a WSUS Computer\group and only approve for computers in that group.

But, I think delay is a better plan.




Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Kiwi workers still falling victim to old cyber tricks
Posted 12-Aug-2019 20:47


Lightning Lab GovTech launches 2019 programme
Posted 12-Aug-2019 20:41


Epson launches portable laser projector
Posted 12-Aug-2019 20:27


Huawei launches new distributed HarmonyOS
Posted 12-Aug-2019 20:20


Lenovo introduces single-socket servers for edge and data-intensive workloads
Posted 9-Aug-2019 21:26


The Document Foundation announces LibreOffice 6.3
Posted 9-Aug-2019 16:57


Symantec sell enterprise security assets for US$ 10.7 billion to Broadcom
Posted 9-Aug-2019 16:43


Artificial tongue can distinguish whisky and identify counterfeits
Posted 8-Aug-2019 20:20


Toyota and Preferred Networks to develop service robots
Posted 8-Aug-2019 20:11


Vodafone introduces new Vodafone TV device
Posted 7-Aug-2019 17:16


Intel announces next-generation Intel Xeon Scalable processors with up to 56 cores
Posted 7-Aug-2019 15:41


Nokia 2.2 released in New Zealand
Posted 5-Aug-2019 19:38


2degrees celebrating ten years
Posted 5-Aug-2019 05:00


Sure Petcare launches SureFeed microchip pet feeder
Posted 2-Aug-2019 17:00


Symantec Threat Intelligence: revival and rise of email extortion scams
Posted 2-Aug-2019 16:55



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.