auto approve options

[rmp]

Is it possible to delay new updates from being auto approved? What I want
to do is wait a week before approving updates so that my computers do not
get the new updates as soon as they come out. Can I do this without
changing to manual approvals?

[Lawrence Garvin [MVP]]

Post by rmp
Is it possible to delay new updates from being auto approved?

No.

Post by rmp
What I want to do is wait a week before approving updates so that my
computers do not get the new updates as soon as they come out.

That's why WSUS exists.. to provide the *human* factor in a system that
already exists with Automatic Updates.

Post by rmp
Can I do this without changing to manual approvals?

No.


What you *could* do . . . in order to introduce a delay in the actual
installation, although this is *not* a recommendation, merely a factual
description of a capability that exists in the core environment -- is
configure your installation event to be weekly. Assuming patches arrive on
Tuesday (which they do in 90% of instances), and are auto-approved, they
won't actually install until the scheduled installation event -- which could
be set for Monday evening, thus giving you six days to review (and rescind)
your automatic approvals.

However, before doing that, you should research and review all of the other
ramifications that come about from using weekly installation events.

I suspect you'll find that being an active WSUS Administrator and issuing
approvals after testing on validated updates will be a much preferable
solution.