WSUS server approval update

After the WSUS server is synchronized, the corresponding update list is obtained based on the configuration. You need to approve the updates for installation or detection. You can select one or more updates for approval. If you select multiple updates, the client computer will install the updates at a time. There are five ways to approve updates:

1. Detect only

When you approve an update, the update is not installed on the client computer. However, WSUS checks the computer group to which the approval update dialog box is applied to determine whether the update is applicable to the client computer or the client computer. This check action is scheduled to occur when the client computer communicates with the WSUS server next time. You can view the result by updating the report status or clicking the update program status tag on the Update page. If it is displayed as needed, it indicates that the client computer needs this update. By default, key updates and security updates are automatically approved for detection.

2. Installation

Approval update is installed in the computer group specified in the approval update dialog box. When you approve the update, you can select different methods for installing the update on the client computer:

Use the settings of the client computer to determine how to install updates. When you use this method, the client computers in the computer group that approve the update will decide how to install the update program based on your settings, and may prompt the current user to install the update program, you can also perform automatic installation Based on the Group Policy settings.

Defines the deadline for automatic installation. When you use this method, you can specify the date and time when the update program is installed on the client computer. This setting will overwrite any settings on the client computer. You can specify an expiration time. This will cause the client computer to immediately install the server when it accesses the WSUS server the next time. Note: you cannot perform automatic installation of the deadline definition for the update program that requires user input. Otherwise, the installation will fail. In the update program details, you can check that the user may be required to enter a field to determine whether the update program requires user input, and a prompt will be displayed in the approval update dialog box when the update is approved.

3. Update rejected
This option only exists in the update task list on the Update page. If you select this option, the update will be deleted from the available update list without any other operations. It is visible only when you select view rejected or all updates in view.

4. Delete
You can approve the deletion of an update, that is, detach it from the corresponding client computer. This option appears only when updates support deletion. For the delete update operation, you can also define the deadline. When you want the client computer to immediately execute the operation, you can specify an expiration time as the deadline.

5. Unauthorized
This is the default approval option. After the WSUS server synchronously updates the program, the default status of the update program is license. In this status, the WSUS server does not perform any operations on the update program, and the client computer cannot detect or install the update. You must manually approve the update for installation or detection.

Update approval automatically

In the automatic approval option, you can configure the WSUS server to download the update program in the same step and then automatically approve the check or installation. You can decide whether to automatically approve the inspection or install by updating the program category and computer group. When there is a conflict between the two rules, the rules that automatically approve the installation shall prevail. By default, security updates and key updates are automatically approved for detection on all computer groups.

In addition, you can choose to automatically approve the latest revision of the update, which is also the default option. The revision is based on the original update. For example, the original update may have expired or the EULA may not be applicable. If you cancel this option, you must manually approve the new update program. Another concept similar to the revision is replaced. An update may replace another update or be replaced by another update. You can see this information from the update program details. WSUS does not automatically approve an update that replaces a previous update. This is because the previous update may be applicable to different old versions or objects. In this case, you should approve this replacement update for detection, and then observe the status after this replacement update detection to check whether the client computer needs this replacement update, then, approve the installation as needed.

Another option that is enabled by default is to automatically approve WSUS updates. This option is used to automatically approve the installation of updates used by the WSUS service. You should always use this option.