How much of Windows Update does WSUS control?

[Koldov]

Just wondering if there was any setting to separate out any parts of Windows Update using WSUS.

 

I've used WSUS for years and am very happy with it, but I've recently had to install Edge and notice that WSUS gets updates for it almost every other day (also it's not fine grained enough to set it to ignore Dev/Beta/Extended Stable versions let alone ARM andx86 versions too - a bit like I wish I could only set it to get updates for the Windows version we use) so it just means there's an additional management overhead declining/sorting.

 

I could set them to automatic approval, but it still means all the other versions clog up the WSUS console.

 

I had the same issue with Defender (multiple definitions per day) so I have that set to automatic (the only category that is), but as that's Anti-Virus I'm OK with that. I just found that without it set, the other 'general' Windows Update settings (wait to update) seemed to stop it installing, plus I'd have to approve and I thought they needed to be more up to date than just whenever I had time.

 

Does anyone know if I don't manage Edge through WSUS (but still manage Windows Updates through WSUS) is it separate enough to find it's own updates?

 

I mean Edge knows that 'Updates are managed by your organization' (sic), but is that taking it's cue from the fact that Windows Updates are done by WSUS or that I have added the category (so if I took the category out of WSUS would Edge update itself)?

 

Just as a bit of clarification I only use WSUS to 'manage' updates, but it does not download or store them. I have it set so although I can approve/release/recall updates the actual files are downloaded to directly to the machines from Windows Update.

[mavhc]

Is it worth managing the updates? Let the spice flow. Use WUfB.

[3s-gtech]

As you don't download them, I'd set them to auto-approve. One less thing to worry about.

[sigma]

I only release updates for Edge once they have been stable for at least 4 days.

[FN-GM]

I only release updates for Edge once they have been stable for at least 4 days.

 

We release directly into production. Edge seems to have a lot of critical security updates.

[sigma]

It does and doesn’t. Some of those daily releases fix problems introduced by the previous release. Usually, I’m still releasing once a week. Microsoft updates are not particularly reliable, and I’m not prepared to be an unpaid beta tester. I break my own conventions and release updates that fix threats that would impact us straight away of course.

[mavhc]

What updates have broken things for you? I can only think of one, and that was because printer makers can't write software.