Approving Updates in WSUS

At this point, WSUS is configured to receive and deploy updates. In addition, clients in the domain are configured through Group Policy to receive updates from the WSUS server. However, updates will not be deployed to the clients automatically, and they aren't even downloaded to the WSUS server automatically.

Instead, an administrator must take several steps to deploy updates. These steps are as follows:

• Locate the update in the WSUS console.
• Right-click the update and select Approve.
• Select either the All Computers group or individual computer groups where the update should be deployed.
• Right-click the computer group(s), select Approved for Install, and click OK.

TipIf desired, you can configure auto-approval rules for WSUS. This allows you to identify updates that should be automatically approved based on a classification, a product, or a deadline (in days) when the update should be automatically approved.

Once an update is approved, it will be scheduled for download from Microsoft's website to the WSUS server. When the client checks in with the WSUS server, it will see that the server has the new update, and the client will download and install it (unless the GPO settings were confi gured to handle the update differently).

Updates are downloaded to the WSUS server when the server synchronizes with the Microsoft website. Synchronization can be done manually, or a synchronization schedule can be created using the WSUS Options page.