WSUS Approval Update

PrasadWF 421 Reputation points
2024-11-14T06:32:58.3666667+00:00

Hi All,

I have setup WSUS for patching of servers and end-user devices but I have one confusion which is
if I don't approve the updates on WSUS , will the client (i.e servers and end-user devices) be able to get updates on windows setting ?

Thanks

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,532 questions
0 comments No comments
{count} votes

Accepted answer
  1. Adam J. Marshall 9,591 Reputation points MVP
    2024-11-15T22:49:14.9466667+00:00

    If WSUS is in use and GPOs point the computers there, YOU are the one responsible for approving the updates. If you don't approve any updates, or you don't sync the correct products/classifications, the computers will not get the updates they need. If you do approve any updates, the computers will only find their needed updates and install them according to the GPO settings (4 automatically and the appropriate setting, or 3, manual and wait for install).

    What is your goal here?

    I'd recommend reading through my 8 part blog series on How to Setup, Manage, and Maintain WSUS - part 4 deals with GPO Policies.

    https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-4-creating-your-gpos-for-an-inheritance-setup/


1 additional answer

Sort by: Most helpful
  1. Hania Lian 18,271 Reputation points Microsoft Vendor
    2024-11-15T07:55:58.0966667+00:00

    Hello.

    If you don't approve updates on WSUS, client devices won't be able to get those updates directly from Microsoft's update servers through Windows settings. When devices are configured to use WSUS, they rely on the WSUS server to get updates.

    If you want client devices to be able to get updates directly from Microsoft's update server, you need to change the setting in Group Policy to remove the device's dependency on the WSUS server.

    Best Regards,

    Hania Lian

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.