WSUS - General question for superseded updates

[AlexInspireTrust]

Hi all!

 

I've been tasked with checking up on our WSUS servers at our sites and was wondering;

- When it comes to an update such as Cumulative Updates for .NET Framework 2022-08 which has been superseded by 2022-10

a. Do you still approve the 2022-08 update still or do you decline this

b. What affect would declining this do?

c. If I was to approve the older update, would machines with newer versions (2022-10) still try to pull the 2022-08 update?

 

Any tips on WSUS in general would be greatly appreciated. The auto approval process is already set up, it's just updates like Edge and .NET / any other random unapproved updates that come through I'm struggling with.

[sigma]

Not sure exactly why I do this, but in the case of the Cumulative .NET Famework updates, I approve the latest (one month in arrears as I'm not paid to debug by Microsoft) for a small group of non-critical devices. Once it is installed and there are no problems approve for the rest. I would then un-approve the next oldest, then I decline the next oldest, but that would have been previously unapproved.

 

So, in

a: Leave (or set) 2022-08 unapproved until I'm happy with 2022-10

b: When you decline something, you are deleting and cleaning from your database.

c: No.

 

I don't auto approve. It means I get only the updates I want to be installed when I want them. There have been a number of problematic updates recently and depending what else is in them, I will bypass until the next month's cleaned up updates are released.

 

There are always some devices that for whatever reason don't get updated when they should - ususally if they are not used, and it slows down the catchup process if superceeded updates get installed. Sometimes Microsoft gets this automatically sorted, but not always.

 

Its now so routine it doesn't take too long. The longest part is researching the updates to make sure they are solid.