11

I'v looked through all the settings in the Automatic Approval menu, but it could not find anything about automatically approve only the needed updates.

Because if I check, for instance, to auto-approve only the "Definition updates", it will approve any Definition updates, whether they are needed by my workstations or not.

This is because I dont want my WSUS server to download and store updates that are not needed by any of my workstations.

Also we are a lazy SMB, and we dont want to waste time to manually approve updates and stuff.

Is this even possible ?

Jonathan Rioux
  • 1,878
  • 6
  • 33
  • 57

2 Answers2

7

There is a third party tool called WSUS Smart Approve which is doing exactly that.

However, if you just need to auto-approve everything that is needed, consider not using WSUS at all but just let the clients download everything off the web. Bandwidth is cheap anyway and you may alleviate any contention problems by using a simple HTTP caching proxy which would be way easier to administer than WSUS.

the-wabbit
  • 40,319
  • 13
  • 105
  • 169
  • @the-wabbit: Can you name a simple fire and forget solution proxy that will do this? – StackzOfZtuff Dec 09 '14 at 13:00
  • @StackzOfZtuff not as such, but the [Squid wiki](http://wiki.squid-cache.org/SquidFaq/WindowsUpdate) has some data on what is needed to cache Windows Update files and which Squid-specific options need to be set to support that. – the-wabbit Dec 09 '14 at 19:31
1

your solution is not good for each.... (download all updates direct from web) if clients is in separated network wsus is solution for updating clients PC/servers

Milos Stancik
  • 11
  • 1