WSUS classifications - Windows 10

[Ertech]

Hi all,

 

 

I was just wondering which WSUS classifications do you select for Windows 10?

 

Thanks

[jthompson]

Do you mean which classifications (critical, security, drivers, etc.) or do you mean which products?

[Ertech]

The classifications (critical, security, drivers, etc.)

[jthompson]

We've got Critical Updates, Definition Updates and security Security Updates on automatic approval.

We also have Update Rollups, Updates and Upgrades currently selected, but without automatic approval. IIRC, Upgrades is the one that version upgrades for Windows 10 will normally come in under (i.e. 1809 to 1903, etc.) so we wouldn't want that on automatic approval.

[Ertech]

If we have already selected Critical Updates, Definition Updates , Security Updates and UPDATES on auto approval do we still need to select "Update Rollups"?

 

[jthompson]

If there are any that you're not sure of like that, the best thing to do would be to select them, but not have automatic approval on them. You can then see whether any such updatess arrive that are needed by clients but not approved (setting the filters accordingly in the All Updates view).

[ajs]

I don't think Update Rollups are useful anymore since Microsoft when to the cumulative update model with Windows 10 but that doesn't mean they won't change their minds again in the future. If you have the disk space then it wouldn't hurt to have them enabled.

[Ertech]

anyone happy to share their selected classifications on WSUS?

 

Thanks

Edited February 28, 2020 by Ertech

[Koldov]

We are running Win 10 LTSB (1607) so YMMV.

 

For Windows and Office 2016...

 

Products:

 

Office 2016

Windows 10 LTSB

Windows 10

Windows Defender

 

Classifications:

 

Critical Updates

Definition Updates

Security Updates

Update Rollups

Updates

 

- I have a seperate 'Update View' for the Update Rollups classification and 'Windows Malicious Software Removal Tool' appears in there...

 

- The default automatic approval rule is set for Critical, Definition and Security updates only (we do NOT have Updates or Update Rollups on automatic approval).

[sigma]

I have nothing on automatic approvals. There have been too many bad updates recently. I wait a week, if nothing bad is reported on Woody or Ghacks then approve to my test group. If all is well or a week then approve to others. We are not unpaid beta testers for Microsoft.

[Michael]

I agree with the above, I only have Definition Updates as auto approved. Everything else is manually approved.

[3s-gtech]

Exactly the same - Definition Updates only. I also use manual approvals so during exams period our exams laptops aren’t trying to update while being used.

[jthompson]

We auto approve definitions, critical and security, although I do see the sense in more manual approvals.

 

When we have computers being used for exams, we apply a GPO that changes their Windows Update settings to download but not auto-install. It also puts them into a different WSUS group, where the auto-approval rules will approve updates but not set a deadline on them.

[Ertech]

Thanks - I will make sure these are selected:

 

Critical Updates

Definition Updates

Security Updates

Update Rollups

Updates

Edited March 2, 2020 by Ertech