Auto Approval Rule Isn't Approving Several Updates

New to Intune, so probably have something configured incorrectly....
We set up an auto-approval rule and machines received the updates that were needed.  After the next check for updates, 5 more were found as needed.  These 5 are not yet approved, and the rule is not auto-approving them.  We tried running the
rule manually and it isn't approving them.  We assume that we don't have either the Category or the Classification set up correctly.  However one of the updates that won't approve automatically is Silverlight, and it is checked in both.
Is there a way to tell why that is happening?  We can easily approve them, but are wondering if we will have to do this regularly once we start getting a lot of machines connecting.
Thanks for any help you can provide.

Is there anything specific that would give you a better understanding of what we are seeing?
We have an auto-approval rule set up with some, but not all, products selected.  We then have the update classifications configured as all but "Feature Packs" and "Tools" selected.  In this instance, Silverlight is checked in
the products.
The update for Silverlight showing as needing approval is KB2977218.  It has a classification of "Update Rollups", which as I mentioned above we have that checked to be included.
In the documentation we see that when you create an auto-approval rule it only applies to new updates.  However if you want to apply it to older (existing) updates, you can run it manually.  Running manually isn't having any effect on the
approval of the updates.
Thanks!

Similar Messages

  • Auto approve all updates forever

    I do not care to approve updates is there away to just approve them automaticly?

    You can create Automatic Approval rules
    https://technet.microsoft.com/en-us/library/dn646968.aspx?f=255&MSPPError=-2147217396
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • Auto Approval EBP Purchase Order is not updating the status at the header

    Hi There ,
    We are facing an issue in EBP auto approval PO ,
    The process level schema is set to Auto Approval  (Standard 9CBUS2201_EX01_55)
    During the PO creation , the standard schema is triggered and it gets approved .
    The status of the PO in the Approval Tab is showing as Approved .
    But in the docuemnt level the status is still Awaiting Approval .
    While checking in SWI1 we came to know that an error has happened in the Task TS40007972
    and the Guid ID of SRM Purchase is initial that has made the status(EV_STATUS) as initial .
    The ERROR is from the below class & method.
    Class: /SAPSRM/CL_WF_PROCESS_MGR_SBWF
    Method:GET_PROCESS_DECISION_STATUS
    Can anyone suggest to overcome this issue .It will be very usefull if anyone could suggest debugging possibility if any .
    Regards,
    Arun.

    Have you tried notes?
    1625513 - Workflow without approval is Awaiting approval status
    1724251 - Workflow log error: CREATE_DECISION_SETS cannot be executed

  • GRC 10.0 - Auto Approve default roles

    Hello All,
    Could you please help out me in the below scenarios.
         1) We have maintained default roles in NBWC- Access Management - Default roles.
         Also set the parameter 2038 to Yes- Auto approve roles without approver.
    In MSMP we have maintained Escape path if approver is not found at the role level.
    As default roles have no approver maintained request is taking the Escape Path which should not happen.
    We just want to auto approve the defualt roles and other than defualt roles request should take escape path if no approver found.
         2) In other action its quite same as the above one.
         When we are using provisioning type REMOVE for role removal. Request also takes the Escape path as Defualt roles has no approver.
    Once the ,Manager at first stage is approved, request should close for the removal type access.
    Please advise. Thanks in advance.

    In your custom initiator, you need to have mapped out all the scenarios of which path each line item in your request goes to.
    The condition columns can be an array of attributes, i.e. Request Type, Role name, Role Connector (System the Role is in), Functional area etc.
    In your case, if you want "default roles" auto approved, easiest thing to so is create an empty path (i.e. No stages) and have the initiator set so that if the "Role Name" is "X" (i.e. your default role), go to the path with no stages.
    BRF plus Flate Rule - GRC Integration - Governance, Risk and Compliance - SCN Wiki

  • Sharepoint 2013 designer workflow auto approve task after due date is passed

    sharepoint 2013 designer workflow auto approve task after due date is passed.
    Could we approve the task automatically once due date is apssed?
    MCTS Sharepoint 2010, MCAD dotnet, MCPDEA, SharePoint Lead

    Hi Amit,
    If your task is created by a workflow (first) and stored in a separate task list, you can create another workflow on this particular task list, then each workflow instance would check if current task is expired (not approved/rejected), then
    determine if update current task's "Task Outcome" as approved (and update task status as complete), and then create a retention policy on this paricular task list to trigger the workflow on due date .
    Thanks,
    Daniel Yang
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]
    Daniel Yang
    TechNet Community Support

  • Leave for employee without approver is auto-approved.

    Hi,
    I'm trying to customize the HR_APPROVAL_CUSTOM pkg whereby I would want the leave for an employee without an approver not to auto-approve and instead raise an error message to sysadmin. Currently, when an employee who applies for leave has no approver, the leave will be auto-approved.
    We are using position hierarchy in our system and also AME rules.
    Appreciate if anyone can guide as to what would need to be done so that the leave does not get auto-approved.
    Thanks in advanced.
    Rgds.

    Closing the message

  • Operation level not getting auto approved

    Hi ,
    Can anyone help me to make operation level request auto completed in oim 11g R2

    use Identity System Administration console and create new approval policy:
    - select request type
    - set Auto Approval check box
    - select scope
    - set rule (meet your requirement)
    a.

  • Self Register User Auto Approval Scenario in OIM 11g

    Hello,
    I was working on scenario of suppressing approval while Self-Registrating user, following steps were performed
    1) Export SelfCreateUserDataSet.xml using weblogicExportMetadata.sh
    2) Modified SelfCreateUserDataSet.xml [removed approver-only tag from organization attribuite]
    3) Imported SelfCreateUserDataSet.xml using weblogicImportMetadata.sh
    4) Restarted OIM & SOA server.
    5) Created approval policies i.e. Request Level & Operational Level bote with Auto Approve condition.
    6) Made a clone of Self-Register User template & added organization restriction & added Self Operator role.
    7) When tested above scenario then xelsysadm had to approve for request & operational level,organization was already selected ,so shouldnt it get approved
    automatically as i have mentioned Auto-Approve in approval policy ?
    Tested using following link:
    http://hostname:port/oim/faces/pages/USelf.jspx?E_TYPE=USELF&OP_TYPE=SELF_REGISTRATION&T_ID=Clone of Self-Register User
    Thanks,
    Rahul

    Hello,
    No i cannot see organization field as i have restricted organization to 'xyz' .
    My Issue is resolved & problem was that i had changed password of OIM,weblogic also updated boot.properties file in oim & soa,but for some reason my SOA was not working although SOA server was running,so changed password of SOAADMIN from EM,restarted all 3 servers & now my scenario of Self Register Auto Approve works.
    Now only thing i am curious is that when i self register user,it shows Request failed,but when checked in OIM user is created .
    Thank-You
    Rahul

  • Requisition auto-approval in AME

    Hi,
    Is there a way to handle a scenario with AME where we need to have the requisition auto-approved whenever the amount is less than 1K.
    I am able to use AME for all other scenarios, where the requistion moves for a different person's approval. But what about auto-approval ?
    Pls help me on this.
    Regards,
    Sambit

    Hi Sanjay,
    How are you setting up approval greater than 1000 USD?
    I guess u have created a condition called requisition total > 1000
    then u would hv also created a approval group XXX (with either static or dynamic list)
    Then u would hv created a rule with this condition requisition total > 1000, then use this approval group XXX...
    when u create a req for 1001 USD, the person in approval group XXX will come as approvers...but when u create for 1000 USD or less than that,
    there is not rule(condition) satisfying and hence no approval group will be picked up...
    the trickiest point here is, if there is no approvers, AME will throw an error. To override or suppress this error for empty approval list,
    In AME, set the attribute 'Allow empty approval groups' and 'Auto Approve' to true for this transaction type and it should get auto approved.
    Regards,
    Praveen

  • OIM11g auto approval

    Hi,
    We are following the below link for Auto-Approval for self registration
    http://identityandaccessmanager.blogspot.com/2011/03/suppress-approval-self-registration.html
    here what it says:
    1. Export "SelfCreateUserDataset.xml".
    2. Remove Approver-Only tag from Organization Field
    3. Import it back into MDS
    4. Restart the Server
    5. Create an Approval Policy "Request Level Approval" & select Auto Approve check box with some basic Approval Rule
    6. Create one more Approval Policy with "Operation Level Approval" as Auto Approve with some simple Approval Rule
    we are not sure how to perform the step NO 3.(import back to MDS).
    for this we followed the following link
    http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14309/request.htm#OMDEV2869
    when we ran weblogicImportMetadata.bat we are getting the following error
    Problem invoking WLST - Traceback (innermost last):
    File "C:\Oracle\Middleware\Oracle_IDM1\server\bin\weblogicImportMetadata.py", line 21, in ?
    File "C:\Oracle\MIDDLE~1\ORACLE~1\common\wlst\mdsWLSTCommands.py", line 268, in importMetadata
    File "C:\Oracle\MIDDLE~1\ORACLE~1\common\wlst\mdsWLSTCommands.py", line 733, in executeAppRuntimeMBeanOperation
    File "C:\Oracle\MIDDLE~1\ORACLE~1\common\wlst\mdsWLSTCommands.py", line 996, in saveStackAndRaiseException
    WLSTException: java.lang.SecurityException: MBean operation access denied.
    MBean: oracle.mds.lcm:name=MDSAppRuntime,type=MDSAppRuntime,Application=OIMMetadata,ApplicationVersion=11.1.1.3.0
    *Operation: importMetadata(java.lang.String, [Ljava.lang.String;, [Ljava.lang.String;, boolean, boolean, boolean, boolean, boolean)*
      *Detail: Access denied. Required roles: Admin, executing subject: principals=[SYSTEM ADMINISTRATORS, oimusers, xelsysadm]*
    MDS-91009: Operation "importMetadata" failure. Use dumpStack() to view the full stacktrace.
    can anybody please let us know where we are making mistake???
    Thank you.

    http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14309/utils.htm#BEIHDGCD
    Run weblogicImportMetaData.sh
    It will ask for username and password ... provide weblogic and password for user weblogic (Example)
    It will ask for URL: give URL for admin console: t3://domainname:7001 (Example)
    Done !!!
    Either restart the server or run PurgeCache.sh All

  • Auto approve PO's for specific users?

    I'm looking in PORPOCHA and I need to auto approve PO's for a specific user, are there any example's I could look at? I'm new to WF.
    Thanks!

    Hi,
    You need to create a Vacation Rule for the user for that notification. From the Workflow administration pages, go to the Administration tab, and choose "Vacation Rules" from there. Create the rule to automatically approve the notifications that you want to.
    HTH,
    Matt
    WorkflowFAQ.com - the ONLY independent resource for Oracle Workflow development
    Alpha review chapters from my book "Developing With Oracle Workflow" are available via my website http://www.workflowfaq.com
    Have you read the blog at http://www.workflowfaq.com/blog ?
    WorkflowFAQ support forum: http://forum.workflowfaq.com

  • Code for Custom Workflow to auto approve the task

    Hi All,
    Can any body help me with the java code to complete the Auto Approval Task.in OIM 11.1.1.5.
    Thank you

    1. Get the requester information from the payload. (In the Oracle sample the request Id is brought from the payload, similarly you can get the requester id and etc).
    2. Get the target user information from the payload along with target user's manager.
    3. Set the data from the two above into global variables and copy them into your .task variables.
    4. In the task use two serial stages and inside the stage use the skip rule condition with the variables from step 3.
    -Bikash

  • How to stop auto approval  of requests by xelsysadm ?

    Hello OIM-SOA experts, when I submit role request using xelsysadm user, the operational level request is auto approved eventhough I have custom approval in place. But requests submitted by others will go for approval process. How to avoid auto approval of xelsysadm requests for opearational level ? Is it possible to configure this ?
    appreciate your suggestion
    Thanks

    How did you create Approval Policy ?
    Did you create Request Level and Operation Level Policies ?
    Did you select proper Request Type ?
    Did you create proper rule which satisfy your expected results ?

  • Accidentally auto-approved Language Packs

    When setting up a new WSUS 4.0 server I accidentally synchronized language packs and auto-approved them. I have disabled synchronization of language packs under products but they are still being detected as needed. I have already ran the WSUS Server Cleanup
    Wizard. How can I completely clear the language packs out of WSUS?

    When setting up a new WSUS 4.0 server I accidentally synchronized language packs and auto-approved them. I have disabled synchronization of language packs under products but they are still being detected as needed. I have already ran the WSUS Server
    Cleanup Wizard. How can I completely clear the language packs out of WSUS?
    The fact that they are detected as "Needed" is just a function of reality.
    The real challenge here is that they were auto-approved, but you're not actually interested in deploying them.
    DECLINE the updates and be done with it. :-)
    This won't completely clear them out ... you're stuck with their presence, but by declining them you will effectively hide them from the clients, and thus no longer have to deal with them reported as "needed" updates.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • Auto Approving the Work Items.

    Hi,
    I am working on scenario where if manager is requesting something for user, like Course Approval or Cancellation then WF should auto approve the WI.
    If initiator = manager
    then auto approve WI and send notification.
    How can i achieve it.

    Can you please let us know what is module you are working, because , there is a possibility that you might have specific process function modules to approve the workitem from back ground and at the same time the FM will update teh respective tables infotypes or master tables with new updated status.. so first preference should always be searching for the module or process sepcific standard function modules..
    If at all you dont find any function mdoules then you can make use of the workitem specific fm like SAP_WAPI_EXECUTE_WORKITEM or SAP_WAPI_Decision_Complete and to write the new values into the workitem container then you can make use of the fm SAP_WAPI_WRITE_CONTAINER.....

Maybe you are looking for

  • Merging 2 indd documents, how do you alternate pages?

    I have one file that is a completed mail merge mailer file.  Each page is identical except for the address.  I have another file that is the same number of pages and each page is identical.  I want both of these files to merge every other page (like

  • Portal Issue with Characters

    How come portal has trouble understanding the following characters: ?

  • IPod Touch 4g on iOS 5 not emptying space

    Recently, my iPod is not emptying any space at all. I tried deleting apps and music but still, there is no space that has been freed. Any ideas on fixing this? Because I don't want to lose my data on the iPod. Thanks!

  • Weird rectangular box replaced the white-space for san serif

    I opened up a pdf that used to have a normal san serif text, but now, it has little square boxes for every spacebar spaces. The text comes out good but it's the white spaces that come up in square characters. Most other fonts don't do this but some o

  • Loadjava question/problem (ssohash.class)

    I am attempting to run the loadjava command like this: loadjava -resolve -thin -user portal30_sso/[email protected]:1521:orcl SSOHash.class I get the following error: Error while resolving class oracle/security/sso/SSOHash ORA-04043: object oracle/se