One of the questions that I continue to encounter from new WSUS Administrators relates to taking approvals for updates deployed to a testing group, and easily duplicating those approvals onto one or more production groups. In this article we’re going to look at how to do that using the WSUS native console.
It’s actually a very simple process, but we’re going to do a step-by-step in the article. The process goes like this:
- Create a Custom Update View to show the updates approved for the test group.
- Select the newly created view and customize the view.
- Select the updates to be approved for the production group and approve.
Step 1: Create a Custom Update View to show the updates approved for the test group.
In the WSUS console, select the Updates node in the console.
Right click and select New Update View…
In the section Step 1: Select properties” check the third option in the list “Updates are approved for a specific group”.
In the section Step 2: Edit the properties click on the hyperlink for “a specific group” and select your test group from the list of groups. In this example we've selected "Test Computers".(If you have multiple different test groups, you’ll need to create a custom update view for each test group.)
In the section Step 3: Specify a name enter a view name appropriate to the defined content. Here we've named the view "Test Group Approvals".
Step 2: Select the newly created view and customize the view.
After selecting the view, you’ll likely want to modify the view a bit to make it more efficient for this use.
- On the filters, set Approval=”Approved” and Status=”Any”.
- Right click on the column header and add the Release Date and Arrival Date columns in the view.
- Click on the Release Date column header to sort the view with newest release date on top.
The Approval column can provide a key indicator as to the updates you’re interested in selecting. Aside from focusing on the updates with a release date consistent with your patch collection, the Approval column can be used to provide hints to the updates approved only for the test group. In the Approval column it’s likely the case that the entry looks like “Install (1/#)” where the value ‘1’ represents the test group as the only current approval target, and the value ‘#’ represents the total number of target groups configured on your WSUS server. We can see that this server has ten target groups defined (including "All Computers" and "Unassigned Computers").
Step 3: Select updates to be approved for the production group and approve.
Using the Release Date column and/or the Approval column, identify the updates to be approved for the production group(s). Select the updates using Shift-Click or Ctrl-Click. Right click and select "Approve" from the context menu.
Here I’ve selected three updates approved for the Test Group and will approve them for the Win2008R2 group.
Update Views are Per-User
Make special note that these custom update views in the WSUS Admin Console are created on a per-user basis, so if multiple administrators need this view, it will need to be created on each console.
SolarWinds Patch Manager