Why does WSUS list lots of unapproved updates even with automatic approvals on?

[edutech4schools]

I Recently re-installed WSUS about 2 Months ago and enabled automatic approvals for all classifications except drivers, but when I click on 'All Updates' and select 'unapproved' I get a long list of unapproved updates listed.

 

I just about understand WSUS enough to install it but that's about it, so not sure if this is OK or not.

[Steve21]

WSUS auto approve by standard only does high importance/security updates. What's your rule setup as?

 

Also there's the "auto decline" of expired/superseeded updates, which would unapprove ones that aren't required anymore.

 

Steve

[edutech4schools]

WSUS auto approve by standard only does high importance/security updates. What's your rule setup as?

 

I have all these ticked

Crytical Updates

Definition Updates

Feature Packs

Security Updates

Service Packs

Tools

Update Rollups

Updates

 

Not ticked

Drivers

 

It's odd as I have another school that has had WSUS installed and running for a few years but it only has about 10 items listed as unapproved but at the school with lots of items listed it has only been running for 2 Months.

[Steve21]

Going back to your original post, when you reinstalled did you keep your old WSUScache, or get a new one? As the rules don't "back-date" to updates already downloaded, only apply to new ones etc.

 

Assuming the classifications are selected within the "products" bit too?

 

Steve

[edutech4schools]

when you reinstalled did you keep your old WSUScache, or get a new one?

 

Think I selected to un-install all items which I would assume includes the cache before doing a full re-install.

 

Assuming the classifications are selected within the "products" bit too?

 

Just double checked and yes correct classifications are selected.

[edutech4schools]

Might run the WSUS clean-up wizard and see if that does anything

[Steve21]

Don't think the cleanup would help if it is old updates, as they won't get redownloaded if the wizard removes them.

 

Only way I could think to test that would be manually download some new updates from WSUS catalog (and don't pick the auto import option), then it "should" go by the normal approval rules etc.

 

Steve