WSUS updates not being auto-approved.

[kennysarmy]

I must have something misconfigured but I can't work out what it is.

 

I've set my default automatic approval rule to approve critical updates for the group W10PC's and yet there is a security update which is set as not approved.

 

Screenshot:

 

 

Can anyone advise what I've done wrong.

 

Thanks.

[sted]

did you tick the default rule before or after you syncronysed for the first time as you may need to go in and retroactively apply approval by clicking run rule

[kennysarmy]

did you tick the default rule before or after you syncronysed for the first time as you may need to go in and retroactively apply approval by clicking run rule

 

That's probably it but when I click the run rule after a while I get:

 

The WSUS administration console was unable to connect to the WSUS Server via the remote API.

 

Verify that the Update Services service, IIS and SQL are running on the server. If the problem persists, try restarting IIS, SQL, and the Update Services Service.

 

System.Net.WebException -- The operation has timed out

 

Source

System.Web.Services

 

Stack Trace:

at System.Web.Services.Protocols.WebClientProtocol.GetWebResponse(WebRequest request)

at System.Web.Services.Protocols.HttpWebClientProtocol.GetWebResponse(WebRequest request)

at Microsoft.UpdateServices.Internal.DatabaseAccess.ApiRemotingCompressionProxy.GetWebResponse(WebRequest webRequest)

at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)

at Microsoft.UpdateServices.Internal.ApiRemoting.ApplyAutomaticUpdateApprovalRule(Int32 ruleId)

at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.ApplyAutomaticUpdateApprovalRule(Int32 ruleId)

at Microsoft.UpdateServices.Internal.BaseApi.AutomaticUpdateApprovalRule.ApplyRule()

at Microsoft.UpdateServices.UI.SnapIn.Dialogs.RuleSettingsDialog.RunRuleAsync(Object state)

[sted]

not seen that one before but check permissions on your wsus folder network service needs full control of d:\wsus (or wherever you installed it)

[kennysarmy]

not seen that one before but check permissions on your wsus folder network service needs full control of d:\wsus (or wherever you installed it)

 

Network service has full control permissions on : D:\WSUS\WsusContent and on D:\WSUS\UpdateServicesPackages

 

Maybe it was just timing out .....it seems to have approved the updates now...and the test windows 10 PC's are seeing them.

 

Thanks for your help.