WSUS Manage Approval for different Groups

We have different products the the company hosts and they require that servers be patched on Test servers prior to a code release. Once the the servers are tested then the same set of patches should be deployed to the production servers during a scheduled
time when the code is released to the production servers. And that is the case for other products but the cycle between the product is always different. So we always want test group be product match the production group by product. What is the best solution
to implement for this type of environment to be able to approve any missing update to the test group for a product and when time comes how to push the same updates to production groups.
The way I have it seems messy because i have bunch of nested groups by datacenter > product name > purpose of the server "wether it is QA webserver, prod webserver, dev webserver, other servers,
etc... and what i do is from Update Reports, run "Update Status Summary" report on the test group that has a status of "Needed, Failed, No Status" and from there approve the updates to that test group. Install the updates, etc... and then
when I want to deploy the updates to certain groups, I run the "Updated Tabular Status for Approved Updates", select the same test group that was deployed to and the option "Installed/NotApplicable, Needed" and approve to the Production
group. Seems like I am doing this all wrong. Appreciate the help. Thanks.

Hi,
I’m not sure if I have got your idea correctly. After you approved for test group, and there is any problem. You need approve for production group or all computer group.
A similar question here:
How does the WSUS approval process work ?
For more information about approval process please refer to:
Approving the Updates
http://technet.microsoft.com/en-us/library/cc708474(v=ws.10).aspx
Step 7: Approve and Deploy Updates in WSUS 3.0
http://technet.microsoft.com/en-us/library/cc708475(v=ws.10).aspx
Hope this helps.

Similar Messages

  • Managing updates for different groups

    Hi
    I have installed WSUS on a Server 2008 R2 VM and have configure WSUS computer groups using group policy. These groups have all updated and I can see the computers in there containers within WSUS.
    Does anyone have any advice on how to manage the updates for each group?
    I am just a bit confused, when I click on the updates section of the WSUS console and show all updates, how do I know what updates have been approved for what group of computers already?
    Thanks in advance
    Shane

    Hi Shane,
    We can use Update View.
    We can filter updates by classification, product, the group for which they have been approved, and synchronization date. We can sort the list by clicking the appropriate column heading in the title bar.
    To create a new update view, please follow the steps below,
    In the WSUS administration console, expand the Updates node, and then click
    All Updates.
    In the Actions pane, click New Update View.
    In the Add Update View window, under
    Step 1: Select properties, select the properties you need to filter the update view:
    Select Updates are in a specific classification to filter on updates belonging to one or more update classifications.
    Select Updates are for a specific product to filter on updates for one or more products or product families.
    Select Updates are approved for a specific group to filter on updates approved for one or more computer groups.
    Select Updates were synchronized within a specific time period to filter on updates synchronized at a specific time.
    Select Updates are WSUS updates to filter on WSUS updates.
    Under Step 2: Edit the properties, click the underlined words to pick the values you want.
    Under Step 3: Specify a name, give your new view a name.
    Click OK.
    Your new view will appear in the tree view pane under Updates. It will be displayed, like the standard views, in the center pane when you select it.
    Best Regards.
    Steven Lee
    TechNet Community Support

  • Is update approved for specific group via powershell?

    Hello, 
    I have a script that auto approves updates based on release date for specific groups. The script checks to see if the update has already been approved (e.g. isApproved) and either skips it if it's already been approved or approves it for my specific group
    (e.g. $update.approve("install",$wsus_group)). The problem I'm running into is if I approve Update1 for GroupA, then later check Update1's isApproved to see whether or not I need to approve it for GroupB, Update1's isApproved is $true and therefor
    my script skips approving it for GroupB. I've checked the update's object and I don't see a multi-valued var for groups that its been approved for. I've started to poke around with other
    Microsoft.UpdateServices.Administration namespaces but I don't see one that has the info I'm looking for. 
    So, how can I view what updates have been approved for GroupA vs GroupB?
    Thanks! 

    Hi Joey,
    If you want to approve updates to multiple groups, and also want to check if the updates have been approved to the groups, please check the script below:
    This can examine one computerGroup and find updates not approved for one or multiple other computer groups.
    $serverName="localhost"
    $targetComputerGroup="BaselineGroup"
    $checkForMissing="MissingGroup1,MissingGroup2"
    [void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
    $wsus=[Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($serverName,$false)
    $computerGroup=$wsus.GetComputerTargetGroups()|ForEach-Object -Process {if ($_.Name -eq $targetComputerGroup) {$_}}
    $UpdateScope=New-Object Microsoft.UpdateServices.Administration.UpdateScope
    $UpdateScope.ApprovedStates="Any"
    $updateScope.ApprovedComputerTargetGroups.Add($computerGroup)
    $Approvals = $wsus.GetUpdateApprovals($UpdateScope)
    #At this point we have all of the updates assigned to the $targetComputerGroup
    $report= @()
    write-host "Querying for all Updates approved for $targetComputerGroup"
    foreach ($Approval in $approvals) {
    $record=""|Select-Object ComputerGroup,UpdateName, UpdateID
    $record.ComputerGroup=$wsus.GetComputerTargetGroup($Approval.ComputerTargetGroupID).Name
    $record.UpdateName=$wsus.GetUpdate($Approval.UpdateID).Title
    $record.UpdateID=$wsus.GetUpdate($Approval.UpdateID).ID.UpdateID
    $report +=$record
    #Now group the results by UpdateName
    $GR=$report|group -Property UpdateName
    $CheckForMissing=$CheckForMissing.Split(",")
    foreach ($entry in $gr) {
    $groups=@()
    foreach ($g in $entry.Group) {
    $groups += $g.ComputerGroup
    foreach ($missing in $checkForMissing) {
    if ($groups -Contains $missing) {}
    else{
    New-Object PSObject -Property @{
    Name = $entry.Name
    UpdateID = $entry.Group[0].UpdateID
    GroupMissing = $missing
    Reference from:
    WSUS report approvals for a group
    I hope this helps.

  • Set different ringtone for different group of people

    I can not set different ringtomes within iphone 4s for different group people in order to know the different rigntone from which group of people.

    You can't and need to assign the ringtones to your contacts on by one.

  • How to retrieve Min(startDate) and Max(endDate) for different groups of data? (sql server 2000)

    My sample dataset (below) contains 3 groups -- 'a', 'b', 'c'.  I need to retrieve the Min(startDate) and Max(EndDate) for each group so that the output looks something like this (date format not an issue):
    fk   minStart       maxEnd
    a    1/13/1985    12/31/2003
    b    2/14/1986    12/31/2003
    c    4/26/1987    12/31/2002
    What is the Tsql to perform this type of operation?  Note:  the actual data resides in a sql server 2000 DB.  If the Tsql is different between version 2000 and the later versions -- I would be grateful for both versions of the Tsql
    --I noticed that multiple lines of Insert values doesn't work in Sql Server 2000 -- this sample is in Sql Server 2008
    create table #tmp2(rowID int Identity(1,1), fk varchar(1), startDate datetime, endDate datetime)
    insert into #tmp2
    values
    ('a', '1/13/1985', '12/31/1999'),
    ('a', '3/17/1992', '12/31/1997'),
    ('a', '4/21/1987', '12/31/2003'),
    ('b', '2/14/1986', '12/31/2003'),
    ('b', '5/30/1993', '12/31/2001'),
    ('b', '6/15/1994', '12/31/2003'),
    ('b', '7/7/2001', '12/31/2003'),
    ('c', '4/26/1987', '12/31/1991'),
    ('c', '8/14/1992', '12/31/1998'),
    ('c', '9/10/1995', '12/31/2002'),
    ('c', '10/9/1996', '12/31/2000')
    Thanks
    Rich P

    Rich
    It is unclear what you are trying to achieve, you said that it is SQL Server 2000 but provide a sample data with SQL Server 2008 syntax
    Is it possible to use UNION ALL for your queries to make its one 
    select * from
    select * from #tmp2 t1 where exists
    (select * from (select top 1 * from #tmp2 t2 where t2.fk = t1.fk order by t2.startdate) x where x.rowID = t1.rowID)
    UNION ALL
    select * from #tmp2 t1 where exists
    (select * from (select top 1 * from #tmp2 t2 where t2.fk = t1.fk order by t2.Enddate desc) x where x.rowID = t1.rowID)
     as  der order by fk
    Best Regards,Uri Dimant SQL Server MVP,
    http://sqlblog.com/blogs/uri_dimant/
    MS SQL optimization: MS SQL Development and Optimization
    MS SQL Consulting:
    Large scale of database and data cleansing
    Remote DBA Services:
    Improves MS SQL Database Performance
    SQL Server Integration Services:
    Business Intelligence

  • Web application for different groups

    I need to develop an application, which is used by 3 different group of people (each group from a different state, I might need to distinguish orders from different state). All the users data is stored in central LDAP server.
    I need to design schema for datbase and come up with a good architecture for web application (Servlets/jsp's etc).
    Guys, if you have worked on a similar project or if you have any suggestions on how to structure the application, please reply me with your suggestions and hints. I have to start working on this project from next week..I am planning to take few days for designing the application then I want to start coding

    I need to develop an application, which is used by 3
    different group of people (each group from a different
    state, I might need to distinguish orders from
    different state). All the users data is stored in
    central LDAP server.
    I need to design schema for datbase and come up with a
    good architecture for web application (Servlets/jsp's
    etc).
    Guys, if you have worked on a similar project or if
    you have any suggestions on how to structure the
    application, please reply me with your suggestions and
    hints. I have to start working on this project from
    next week..I am planning to take few days for
    designing the application then I want to start codingAre you getting paid? Are you willing to split that payment to those who help?

  • Default favorites portlet for different groups in oid

    Hi,
    We are using Portal 10.1.4.
    I want to use the favorites portlet to have default favorites for different user groups (So different set of default favourites for diffrent portal group)
    Is this possible? Is the portlet cached at the system level? can this be changed?
    Also, How do I hide the help link and image from the 'personalize' wizard?
    Can the display in the wizards be modified in other ways?
    cheers
    Kev

    Vijay, that doesn't seem to work. What I need (and I think it is the same as the original poster ) is to have several different instances of the favorites portlet or one instance that can have its links access controlled. e.g. A favorites portlet for the students group with links that only that OID group can see, a favorites portlet for staff with links that only the staff OID group can see. I am using portal 10.1.4 and cannot see any way to access control the default favourites.
    Thanks,
    Steven.

  • How can I manage playlists for different users with home sharing?

    I have two teenagers with no taste in music, my wife who appreciates Abba my own music to manage across a fleet of devices.  My kids dont like Ozarks or Pink Floyd, and I would rather skin myself with a cheese grater than have One direction on my phone.  Does home sharing allow for different devices to sync different playlists???  And furthermore is the icloud Match thing worth the trouble???
    thanks

    After researching through the forums, I figured it out. You have to make sure you are logged in under the same account on both computers. At first I was logged under my account on my computer and logged in under my father's account on my father's computer. You have to choose one account to log in under on both computers and then you will be abler to import songs from both computers. If you do not log in under the same account, you will be able to listen to both computers' music, but not import.

  • Paint different color for different group

    Hello guys,
    I want to make the report colorful, the color should be same for same group, the color should be change for every other group. Kind of did some research but cannot figure out yet, I will appreciate all your helps. Thank you in advance!
    -Bill

    Tim,
    Thank you for your fast response, actually I should have made my question clearer. Let's take your sample data, what I need is like this:
    For group 1 Nuts and Bolts Limited, make background yellow,
    981110 10-NOV-04 Standard EUR 122
    100000 28-MAY-04 Standard FIM 122
    100001 28-MAY-04 Standard FIM 200
    1 03-JUN-04 Standard FIM 400
    100004 28-MAY-04 Standard FIM 100
    00s 07-JUN-04 Standard FIM 100
    FI1009 10-MAY-04 Standard FIM 1220
    Stop make background yellow.
    For group 2 Tick Tock Clocks, make background blue,
    100002 28-MAY-04 Standard DEM 235
    100003 28-MAY-04 Standard DEM 100
    2001 01-JUN-04 Standard EUR 1000
    2002 01-JUN-04 Standard EUR 1500
    2003 01-JUN-04 Standard DEM 1000
    2004 01-JUN-04 Standard DEM 2000
    3001 04-JUN-04 Standard EUR 1000
    FI1011 25-MAY-04 Standard DEM 2000
    Stop make background blue.
    For group 3, make background back to yellow
    Big Bike Motorsports
    3001 01-JUN-04 Standard SEK 1000
    FI1013 02-JUN-04 Standard USD 25000
    Stop make background back to yellow
    For group 4, make background back to blue
    Second Cars
    FI1010 20-MAY-04 Standard FIM 2440
    Stop make background back to blue
    That is, I need the xml change the background every time the group is changed.
    Message was edited by:
    billzheng2004

  • How best to manage AppleIDs for different countries?

    We live in Canada, but have a recreational property in the U.S. where we spend several months each winter.
    We use AppleTV in both locations, and as such, we have to have AppleIDs associated with both the US iTunes Store and the Canada iTunes Store (which of course means that we have to have credit cards in both countries, which we do).
    This is frustrating as we often have to buy the same content twice so as to be able to watch it in two countries... but I understand that this is probably a content owner imposed issue about distribution rights, and not due to Apple.
    We used to easily manage this by just switching the AppleID (& country of store) on our MacBooks as we travelled back and forth.
    Then Apple introduced a constraint that one could no longer switch between AppleIDs on hardware such as MacBooks and iPads (I believe that one can switch to a new account any time, but cannot switch back to a previously used account until a period of time passes, which I believe used to be 90 days).
    Now it seems that one cannot do these account reversals more often than one per year.
    It seems like it is getting to the point that one has to have a portable hardware device for each country and use a different AppleID on each in order to have access while travelling to the content that one has paid for in the past.
    This was not the case years ago when much of this content was purchased.
    Further, when doing upgrades, it is easy when prompted to enter the "wrong" AppleID and then unintentionally lose access to the store in the country that one is currently in (now for up to a year!)
    Is there a better way to manage one's accounts across different countries?
    Given the constraints on AppleIDs, it is not something that is easy to figure out through experimentation.

    We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens.
    Thanks, Eric.  Perhaps I wasn't clear in the above.  I realize we can start applications in certain desktops, but that is NOT what I'm after.
    What I would like is the icons (i.e., shortcuts, directories, files) that appear on the desktop, to be different for each desktop.  Such that if I go to Desktop 2, I can place all my game icons/shortcuts there.  Then if I switch to Desktop 3, I might have all my Office programs there, but not my games.  Does that make sense?
    Eventually I might also want my Dock to have different icons based on what desktop I'm using, but I figure that's even more difficult.

  • How to manage shortcuts for different desktops

    If you've set up multiple desktops (e.g., via Mission Control), how can you manage shortcuts independently?
    It would be nice to have a dedicated desktop for:
    Games
    Multimedia / Photo / Video
    Graphic Design
    Programming / Development
    Writing
    Tutorial Recording
    We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens.  At least, that's the problem I'm facing.
    If it is possible, to hide/show icons on particular screens I would really like to know.  Until then, it seems like Virtual Machines are the best way to do this, despite them eating up the extra resources.

    We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens.
    Thanks, Eric.  Perhaps I wasn't clear in the above.  I realize we can start applications in certain desktops, but that is NOT what I'm after.
    What I would like is the icons (i.e., shortcuts, directories, files) that appear on the desktop, to be different for each desktop.  Such that if I go to Desktop 2, I can place all my game icons/shortcuts there.  Then if I switch to Desktop 3, I might have all my Office programs there, but not my games.  Does that make sense?
    Eventually I might also want my Dock to have different icons based on what desktop I'm using, but I figure that's even more difficult.

  • HOW DO I MAKE A FOLder FOR DIFFERENT GROUPS IN MY EMAIL ACCOUNTS

    as above and how do i make the letter bigger for the email coming in without having to click on them

    Perhaps first you could get a grip on the caps lock key. (Man that is hard to read)
    Right click a folder and select new folder
    This add-on will probably help with display fonts.
    https://addons.mozilla.org/en-us/thunderbird/addon/theme-font-size-changer/
    Instructions to install http://chrisramsden.vfast.co.uk/3_How_to_install_Add-ons_in_Thunderbird.html

  • Is update not approved for a specific group via powershell.

    My apologies in advance for asking a similar question to the one I asked two months ago,
    is update approved for specific group via powershell? I thought I had this covered, but as I've found time to continue to work on this project I see that it does not.
    I have a script that iterates through updates and if the release date is older than 30 days and they have not already been “Approved for Install” or “Approved for Removal” for a specific group it approves them. I am currently faced with the dilemma that
    when an update is set to “Not Approved” for the specific group I’m working on it does not come across in my group’s approvals and there for I cannot detect its current state to know if I should approve it. In other words, I don’t want to approve an update
    that I set to not approved for a specific group.
    I am currently achieving all this so far by connecting to my WSUS server and getting any and all updates via $all = $wsus.GetUpdates(). I Then get my group’s approved updates via $groupApproved = $wsus.GetUpdateApprovals($GroupScope) where ApprovedStates
    = "Any" and ApprovedComputerTargetGroups.Add($current_wsus_group). While iterating through $all I grab updates that are older than 30 days and check to see if the updateID exists in my $groupApproved. If it does not, I approve the update. Like I
    said before, an explicitly unapproved update for my group does not show up in my $groupApproved. I understand it’s because of my GetUpdateApprovals($GroupScope) being just that and only getting approved for install or uninstall, but even when I try to simply
    GetUpdates($GroupScope) I am still not returned explicitly unapproved updates. Below is a screen shot of what I mean by explicitly setting an update to unapproved for a group. I’ve read up on
    ApprovedStates and possible enumerated values and it does include "NotApproved" defined as "Includes updates that have not been approved or declined.".
    Hope all that makes sense, thanks for the help.

    So, I've decided to go about this a different way. Rather than getting all updates and comparing them to approvals via a scope of updates for my specific group (which includes all actions but Not Approved), I am going to look at specific approvals for each
    update and see if there is a match for my group. A simplfied version of this is below. 
    $AnyAllUpdates = $wsus.GetUpdates()
    foreach ($udpate in $AnyAllUpdates)
    if ($update IsNOTDeclined IsNOTSuperseded LegacyNameNOTIA64 CreationDateLTDATE yada yada yada)
    # get the approvals for this udpate as they relate to my group
    $uApprovals = $update.GetUpdateApprovals() | ?{$_.ComputerTargetGroupId -eq $wsus_group.Id}
    if ($uApprovals)
    if ($uApprovals.action -eq "Install")
    # do nothing, the udpate was approved for install
    elseif ($uApprovals.action -eq "Uninstall")
    # do nothing, the update was approved for uninstall
    elseif ($uApprovals.action -eq "NotApproved")
    # do nothing, the udpate was not approved for install
    else
    # since there was no specific action then it must be an inherited not approved from teh parent group
    # approve the update!

  • Creating management accounts for protected accounts and groups in Active Directory

    I'm following step-by-step instruction for creating management accounts for protected groups that I found in Microsoft book "Best Practise for Securing Active Directory", published april 2013.
    What is confusing me is the "Enabling management accounts to modify the membership of protected groups" step. When I use DSACLS command:
    Dsacls "CN=AdminSDHolder,CN=System,DC=MyDomain,DC=com"/G
    [email protected]:RPWP;member
    what I have to type insted of "member".
    When I use previous command with simple "member" at the end I dont get this:
    Verify that the account has been granted only Read Members and
    Write Members permissions on the DA group, and click OK.
    My account have flag on all properties.
    I hope You understand me.

    The last field is for the attribute to delegate. You can read about it here: https://technet.microsoft.com/en-us/library/cc772662%28v=ws.10%29.aspx
    You can also refer to this for updating AdminSDHolder container: http://social.technet.microsoft.com/wiki/contents/articles/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • How to create a dynamic menu for each group of responsibility and  user

    Hi
    I am using Jdev 11.1.1.6 and new to ADF, my application require to populate menu which would be different for different groups of user, and the user in each group would have different submenu depends on their responsibilities assigned to each one of them.
    so on the top level would be menu_top_item1, menue_top_item2
    |-->submenu1_1 |-->submenu2_1
    |-->submenu1_2 |-->submenu2_2
    also the menu would need to be on_mouse_over to show the submenu items or collapsed back.
    any idea what would be the best approch? or is there any example around?
    thanks a lot

    You can use ADF Security to control access to menu options.
    More about ADF Security here:
    http://download.oracle.com/otn_hosted_doc/jdeveloper/11gdemos/AdfSecurity/AdfSecurity.html
    If you also use WebCenter you might use their menuing option:
    https://blogs.oracle.com/shay/entry/webcenter_portal_intro_for_adf

Maybe you are looking for

  • Image change on rollover effect

    How is this effect achieved with database driven data: 1. Roll over any image for a larger view. 2. Click to select photos can be viewed on this webpage: https://www.schooloutfitters.com/catalog/product_info/pfam_id/PFAM2691/products_id/PRO8702

  • Icons keep shrinking in Application folder...

    In the last week or so, whenever I open my Applications folder, the application icons keep shrinking (to 32 x 32). So I choose the Show View Options and switch the icon size back (to 128 x 128 which I prefer for this folder.) and then I choose Snap t

  • How to achieve SSO in R12

    Hi, I have a requirement to integrate the third party application with Oracle iSupplier Module. What is the best way to do that.............. Can we directly do changes without using third party applications.......... can any body already done please

  • For loop doesn't stop at any point

    public function getLabel(jail):String        var frameLabel:String = mc.currentLabel;       for(var i=0; i<jail.currentLabels.length; i++)              if(jail.currentLabel == jail.currentLabels[i].name)                    trace(jail.currentLabels[i]

  • Windows XP SP 2 DHCP failure connecting to OS X Tiger Server

    Hello, Standard setup for DHCP Server on OS X Tiger Server... latest version. Mac's acquire 192.168.7.x just fine from OS X Server. When XP SP2 client attempts, shows self-assigned ip and subnet. Looking at the DHCP log in Server Admin, the server se