question

Marshall1111 avatar image
0 Votes"
Marshall1111 asked RitaHu-MSFT commented

"Set a deadline for the approval" in Automatic approval rule

Hi all,
I am trying to figure out what is meant by "Set a deadline for the approval".

in my wsus, i have several test and prod groups and i would like to set the automatic approval of updates at different times and then decide when to download, when to install and when to restart via gpo.

With the "Set a deadline for the approval" can I decide for example:
- approve the updates for group A on day x
- approve updates for group B on day y
- approve updates for group C on day z
- ....
??

Basically I would like to have time to check the updates before they are approved and approve them first in test groups and then in prod ones.

Really thanks

windows-serverwindows-server-update-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AJTek-Adam-J-Marshall avatar image
1 Vote"
AJTek-Adam-J-Marshall answered

WSUS alone does not have the capability you're looking for. Microsoft Endpoint Manager: Configuration Manager (ConfigMgr/SCCM/MEMCM/MECM) has that ability with Automatic Deployment Rules (ADRs).

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
1 Vote"
RitaHu-MSFT answered RitaHu-MSFT commented

@Marshall1111
Thanks for your posting on Q&A.

I found the following Official Document and I want to share on this forum.

https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/21669596#approving-updates

Set a deadline for automatic installation. When you select this option, you set specific times and dates to install updates, overriding any settings on the client computers. In addition, you can specify a past date for the deadline if you want to approve an update immediately (to be installed the next time client computers contact the WSUS server).

https://docs.microsoft.com/de-de/security-updates/windowsupdateservices/18127631

You can specify a deadline when you approve an update or set of updates on the WSUS server. Setting a deadline will cause clients to install the update at a specific time, but there are a number of different situations, depending on whether the deadline has expired, whether there are other updates in the queue for the client to install, and whether the update (or another update in the queue) requires a restart.

Best regards,
Rita


If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Marshall1111
There are no updates for three days. May I know the related links I posted above is helpful or not?

Please keep us in touch if there are any updates of the case.

Best regards,
Rita

0 Votes 0 ·