Before an update is sent to a client, the
system administrator (that would be you) must approve it. WSUS gives
you a hard way to do this (by hand), and an easy way (using a rule).
Approving Updates by Hand
Use
the hard way if you want to maintain complete control over the updates
that are sent to your client computers. Here’s how it works:
1. | In the Update Services snap-in, open the Update Services, SERVER, Updates branch.
|
2. | Click the type of updates you want to work with: All Updates, Critical Updates, Security Updates, or WSUS Updates.
|
3. | In the Approval list, select Unapproved.
|
4. | In the Status list, select Any.
|
5. | Click Refresh to see a list of unapproved updates, as shown in Figure 1.
|
6. | Select the update or updates you want to approve.
|
7. | In the Actions pane, click Approve. The Approve Updates dialog box appears.
|
8. | Click the arrow to the right of All Computers, and then click Approved for Install.
|
9. | Click OK. WSUS approves the updates.
|
10. | Click Close.
|
11. | Repeat steps 2 through 10 to approve other updates.
|
Approving Updates Using a Rule
The easy route is to take advantage of the approval
rules that you can set up in WSUS. In fact, WSUS comes with a default
rule that you can run to automatically approve all critical and
security updates for all computers.
First, follow these steps to edit the rule to include all the update classifications you want to approve automatically:
1. | In the Update Services snap-in, open the Update Services, SERVER, Options branch.
|
2. | Click Automatic Approvals to open the Automatic Approvals dialog box.
|
3. | Select Default Automatic Approval Rule.
|
4. | Click Edit to open the Edit Rule dialog box.
|
5. | In
the Step 2: Edit the Properties text box, click the Critical Updates,
Security Updates link. The Choose Update Classifications dialog box
appears.
|
6. | Activate the check box beside each type of update classification you want to approve automatically, and then click OK.
|
7. | Click OK to save the rule.
|
To run the rule, activate the check box
beside Default Automatic Approval Rule, and then click Run Rule. WSUS
automatically approves all the updates in the classifications you
selected.