{"id":113,"date":"2013-03-31T19:58:34","date_gmt":"2013-03-31T19:58:34","guid":{"rendered":"http:\/\/www.lukestratton.co.uk\/blog\/?p=113"},"modified":"2013-09-13T15:06:25","modified_gmt":"2013-09-13T15:06:25","slug":"bulk-approval-of-updates-in-windows-small-business-server-2008-and-2011","status":"publish","type":"post","link":"https:\/\/www.lukestratton.co.uk\/blog\/2013\/03\/31\/bulk-approval-of-updates-in-windows-small-business-server-2008-and-2011\/","title":{"rendered":"Bulk Approval of Updates in Windows Small Business Server 2008 and 2011"},"content":{"rendered":"<div id=\"attachment_132\" style=\"width: 283px\" class=\"wp-caption alignright\"><a href=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/1.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-132\" class=\"size-medium wp-image-132\" alt=\"Most updates can be auto approved using an option in the SBS Console\" src=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/1-273x300.png\" width=\"273\" height=\"300\" srcset=\"https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/1-273x300.png 273w, https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/1.png 506w\" sizes=\"auto, (max-width: 273px) 100vw, 273px\" \/><\/a><p id=\"caption-attachment-132\" class=\"wp-caption-text\">Most updates can be auto approved using an option in the SBS Console<\/p><\/div>\n<p>The inclusion of <a href=\"http:\/\/technet.microsoft.com\/en-us\/windowsserver\/bb332157.aspx\" target=\"_blank\">WSUS<\/a> in <a href=\"http:\/\/technet.microsoft.com\/en-us\/sbs\/gg985345\" target=\"_blank\">Windows SBS (Small Business Server)<\/a>, is extremely useful for larger small business networks of more than 5 machines, and provides functionality for installation of all applicable Windows Updates to all machines on the network.<\/p>\n<p>Updates can be set to be auto-approved by the SBS Console by selecting the <strong>High<\/strong> option in the <strong>Software Update Settings<\/strong> dialog. However, optional updates can never be auto-approved.<\/p>\n<p>I came across a server recently with over 100 unapproved optional updates, including Internet Explorer 9\/10. So in this scenario, I thought&#8230; &#8220;OK, I&#8217;ll just hold the shift key, and select them all&#8221;.. but no. In Microsoft&#8217;s infinite wisdom, this time-saving feature is not deemed important enough. Sigh.<\/p>\n<p>&nbsp;<\/p>\n<div id=\"attachment_133\" style=\"width: 622px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/2.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-133\" class=\" wp-image-133 \" alt=\"Several optional updates can pile up over a short period of time.\" src=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/2.png\" width=\"612\" height=\"443\" srcset=\"https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/2.png 1020w, https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/2-300x217.png 300w\" sizes=\"auto, (max-width: 612px) 100vw, 612px\" \/><\/a><p id=\"caption-attachment-133\" class=\"wp-caption-text\">Several optional updates can pile up over a short period of time.<\/p><\/div>\n<p>So, I was obviously not going to sit there clicking each update, approving it, and acknowledging two message boxes, and then waiting 10-15 seconds for the list to refresh, that would be like picking rice krispies off the floor one by one, painstaking!<\/p>\n<p>To get around this problem, you can use the big boys&#8217; tools provided by WSUS, known as the <strong>Update Services Console<\/strong>.<\/p>\n<p>As many admins will know, SBS is a very specific and highly tuned installation of Windows Server, Exchange, WSUS and Sharepoint, so it&#8217;s not recommended to go fiddling about with stuff behind the scenes which can otherwise be done in the console, otherwise you may end up having to follow one of <a href=\"http:\/\/technet.microsoft.com\/en-us\/library\/gg697169.aspx\" target=\"_blank\">these repair guides<\/a>. However in this situation, I think we can safely approve some updates using the native WSUS tools, however there are a couple of things you do have to watch out for.<\/p>\n<h3>Approving Updates<\/h3>\n<div id=\"attachment_134\" style=\"width: 310px\" class=\"wp-caption alignright\"><a href=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/3.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-134\" class=\"size-medium wp-image-134 \" alt=\"SBS's WSUS Computer Groups\" src=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/3-300x238.png\" width=\"300\" height=\"238\" srcset=\"https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/3-300x238.png 300w, https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/3.png 538w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-134\" class=\"wp-caption-text\">SBS&#8217;s WSUS Computer Groups<\/p><\/div>\n<p>SBS creates three additional groups which it uses to control which machines receive updates, and which don&#8217;t (see right). They are fairly self explanatory, <strong>Excluded Computers<\/strong> can be controlled via the SBS Console, <strong>Client Computers<\/strong> are machines running XP, Vista, 7 or 8, and <strong>Server Computers<\/strong> are servers. <strong>Unassigned Computers<\/strong> is a default group, and is not normally used in SBS.<\/p>\n<p>To approve remaining optional updates, select <strong>All Updates<\/strong> from the left pane, and select <strong>Unapproved<\/strong>, and <strong>Failed or Needed<\/strong> from the two drop down lists at the top of the window.<\/p>\n<p>After clicking the <strong>Refresh<\/strong> button, you should see a similar number of updates to what is displayed in the console.<\/p>\n<p>In this view, you can now use the <strong>Shift<\/strong> and <strong>CTRL<\/strong> keys to select multiple updates. Scroll through the list and select all updates which are applicable to client machines (i.e XP, Vista, 7 or 8), including any other software such as Office, and&#8230; believe it or not, Skype.<\/p>\n<div id=\"attachment_135\" style=\"width: 310px\" class=\"wp-caption alignleft\"><a href=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/4.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-135\" class=\"size-medium wp-image-135\" alt=\"Select the appropriate group to approve the updates for.\" src=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/4-300x183.png\" width=\"300\" height=\"183\" srcset=\"https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/4-300x183.png 300w, https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/4.png 527w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><p id=\"caption-attachment-135\" class=\"wp-caption-text\">Select the appropriate group to approve the updates for.<\/p><\/div>\n<p>Click the <strong>Approve<\/strong> button on the actions pane, and under <strong>Update Services Client Computers<\/strong> click the button, and select <strong>Approved for Install<\/strong>. Click <strong>OK<\/strong>, accept any license agreements, and after a few seconds you should see them all approved. Click <strong>Close<\/strong>, and then refresh the list. Do the same for all the server updates, except choose <strong>Update Services Server Computers<\/strong>.<\/p>\n<p>There are some updates which may be applicable to both groups. If you are in doubt about any updates, go back to the SBS Console, refresh the list, and approve them there.<\/p>\n<p>You should now end up with a clear list!<\/p>\n<p>&nbsp;<\/p>\n<div id=\"attachment_136\" style=\"width: 583px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/5.png\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-136\" class=\" wp-image-136  \" alt=\"All updates have now been approved.\" src=\"http:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/5.png\" width=\"573\" height=\"414\" srcset=\"https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/5.png 1023w, https:\/\/www.lukestratton.co.uk\/blog\/wp-content\/uploads\/2013\/03\/5-300x216.png 300w\" sizes=\"auto, (max-width: 573px) 100vw, 573px\" \/><\/a><p id=\"caption-attachment-136\" class=\"wp-caption-text\">All updates have now been approved.<\/p><\/div>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The inclusion of WSUS in Windows SBS (Small Business Server), is extremely useful for larger small business networks of more than 5 machines, and provides functionality for installation of all applicable Windows Updates to all machines on the network. Updates can be set to be auto-approved by the SBS Console by selecting the High option [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[10,11],"tags":[50,51],"class_list":["post-113","post","type-post","status-publish","format-standard","hentry","category-microsoft","category-networking","tag-small-business-server","tag-wsus","count-0","even alt","author-luke","last"],"_links":{"self":[{"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/posts\/113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=113"}],"version-history":[{"count":12,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/posts\/113\/revisions"}],"predecessor-version":[{"id":129,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/posts\/113\/revisions\/129"}],"wp:attachment":[{"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lukestratton.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}