WSUS Manage Approval for different Groups

We have different products the the company hosts and they require that servers be patched on Test servers prior to a code release. Once the the servers are tested then the same set of patches should be deployed to the production servers during a scheduled
time when the code is released to the production servers. And that is the case for other products but the cycle between the product is always different. So we always want test group be product match the production group by product. What is the best solution
to implement for this type of environment to be able to approve any missing update to the test group for a product and when time comes how to push the same updates to production groups.
The way I have it seems messy because i have bunch of nested groups by datacenter > product name > purpose of the server "wether it is QA webserver, prod webserver, dev webserver, other servers,
etc... and what i do is from Update Reports, run "Update Status Summary" report on the test group that has a status of "Needed, Failed, No Status" and from there approve the updates to that test group. Install the updates, etc... and then
when I want to deploy the updates to certain groups, I run the "Updated Tabular Status for Approved Updates", select the same test group that was deployed to and the option "Installed/NotApplicable, Needed" and approve to the Production
group. Seems like I am doing this all wrong. Appreciate the help. Thanks.

Hi,
I’m not sure if I have got your idea correctly. After you approved for test group, and there is any problem. You need approve for production group or all computer group.
A similar question here:
How does the WSUS approval process work ?
For more information about approval process please refer to:
Approving the Updates
http://technet.microsoft.com/en-us/library/cc708474(v=ws.10).aspx
Step 7: Approve and Deploy Updates in WSUS 3.0
http://technet.microsoft.com/en-us/library/cc708475(v=ws.10).aspx
Hope this helps.

Similar Messages

Managing updates for different groups

Hi
I have installed WSUS on a Server 2008 R2 VM and have configure WSUS computer groups using group policy. These groups have all updated and I can see the computers in there containers within WSUS.
Does anyone have any advice on how to manage the updates for each group?
I am just a bit confused, when I click on the updates section of the WSUS console and show all updates, how do I know what updates have been approved for what group of computers already?
Thanks in advance
Shane

Hi Shane,
We can use Update View.
We can filter updates by classification, product, the group for which they have been approved, and synchronization date. We can sort the list by clicking the appropriate column heading in the title bar.
To create a new update view, please follow the steps below,
In the WSUS administration console, expand the Updates node, and then click
All Updates.
In the Actions pane, click New Update View.
In the Add Update View window, under
Step 1: Select properties, select the properties you need to filter the update view:
Select Updates are in a specific classification to filter on updates belonging to one or more update classifications.
Select Updates are for a specific product to filter on updates for one or more products or product families.
Select Updates are approved for a specific group to filter on updates approved for one or more computer groups.
Select Updates were synchronized within a specific time period to filter on updates synchronized at a specific time.
Select Updates are WSUS updates to filter on WSUS updates.
Under Step 2: Edit the properties, click the underlined words to pick the values you want.
Under Step 3: Specify a name, give your new view a name.
Click OK.
Your new view will appear in the tree view pane under Updates. It will be displayed, like the standard views, in the center pane when you select it.
Best Regards.
Steven Lee
TechNet Community Support

Is update approved for specific group via powershell?

Hello,
I have a script that auto approves updates based on release date for specific groups. The script checks to see if the update has already been approved (e.g. isApproved) and either skips it if it's already been approved or approves it for my specific group
(e.g. $update.approve("install",$wsus_group)). The problem I'm running into is if I approve Update1 for GroupA, then later check Update1's isApproved to see whether or not I need to approve it for GroupB, Update1's isApproved is $true and therefor
my script skips approving it for GroupB. I've checked the update's object and I don't see a multi-valued var for groups that its been approved for. I've started to poke around with other
Microsoft.UpdateServices.Administration namespaces but I don't see one that has the info I'm looking for.
So, how can I view what updates have been approved for GroupA vs GroupB?
Thanks!

Hi Joey,
If you want to approve updates to multiple groups, and also want to check if the updates have been approved to the groups, please check the script below:
This can examine one computerGroup and find updates not approved for one or multiple other computer groups.
$serverName="localhost"
$targetComputerGroup="BaselineGroup"
$checkForMissing="MissingGroup1,MissingGroup2"
[void][reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")
$wsus=[Microsoft.UpdateServices.Administration.AdminProxy]::getUpdateServer($serverName,$false)
$computerGroup=$wsus.GetComputerTargetGroups()|ForEach-Object -Process {if ($_.Name -eq $targetComputerGroup) {$_}}
$UpdateScope=New-Object Microsoft.UpdateServices.Administration.UpdateScope
$UpdateScope.ApprovedStates="Any"
$updateScope.ApprovedComputerTargetGroups.Add($computerGroup)
$Approvals = $wsus.GetUpdateApprovals($UpdateScope)
#At this point we have all of the updates assigned to the $targetComputerGroup
$report= @()
write-host "Querying for all Updates approved for $targetComputerGroup"
foreach ($Approval in $approvals) {
$record=""|Select-Object ComputerGroup,UpdateName, UpdateID
$record.ComputerGroup=$wsus.GetComputerTargetGroup($Approval.ComputerTargetGroupID).Name
$record.UpdateName=$wsus.GetUpdate($Approval.UpdateID).Title
$record.UpdateID=$wsus.GetUpdate($Approval.UpdateID).ID.UpdateID
$report +=$record
#Now group the results by UpdateName
$GR=$report|group -Property UpdateName
$CheckForMissing=$CheckForMissing.Split(",")
foreach ($entry in $gr) {
$groups=@()
foreach ($g in $entry.Group) {
$groups += $g.ComputerGroup
foreach ($missing in $checkForMissing) {
if ($groups -Contains $missing) {}
else{
New-Object PSObject -Property @{
Name = $entry.Name
UpdateID = $entry.Group[0].UpdateID
GroupMissing = $missing
Reference from:
WSUS report approvals for a group
I hope this helps.

Set different ringtone for different group of people

I can not set different ringtomes within iphone 4s for different group people in order to know the different rigntone from which group of people.

You can't and need to assign the ringtones to your contacts on by one.

How to retrieve Min(startDate) and Max(endDate) for different groups of data? (sql server 2000)

My sample dataset (below) contains 3 groups -- 'a', 'b', 'c'. I need to retrieve the Min(startDate) and Max(EndDate) for each group so that the output looks something like this (date format not an issue):
fk   minStart      maxEnd
a    1/13/1985    12/31/2003
b    2/14/1986    12/31/2003
c    4/26/1987    12/31/2002
What is the Tsql to perform this type of operation? Note: the actual data resides in a sql server 2000 DB. If the Tsql is different between version 2000 and the later versions -- I would be grateful for both versions of the Tsql
--I noticed that multiple lines of Insert values doesn't work in Sql Server 2000 -- this sample is in Sql Server 2008
create table #tmp2(rowID int Identity(1,1), fk varchar(1), startDate datetime, endDate datetime)
insert into #tmp2
values
('a', '1/13/1985', '12/31/1999'),
('a', '3/17/1992', '12/31/1997'),
('a', '4/21/1987', '12/31/2003'),
('b', '2/14/1986', '12/31/2003'),
('b', '5/30/1993', '12/31/2001'),
('b', '6/15/1994', '12/31/2003'),
('b', '7/7/2001', '12/31/2003'),
('c', '4/26/1987', '12/31/1991'),
('c', '8/14/1992', '12/31/1998'),
('c', '9/10/1995', '12/31/2002'),
('c', '10/9/1996', '12/31/2000')
Thanks
Rich P

Rich
It is unclear what you are trying to achieve, you said that it is SQL Server 2000 but provide a sample data with SQL Server 2008 syntax
Is it possible to use UNION ALL for your queries to make its one
select * from
select * from #tmp2 t1 where exists
(select * from (select top 1 * from #tmp2 t2 where t2.fk = t1.fk order by t2.startdate) x where x.rowID = t1.rowID)
UNION ALL
select * from #tmp2 t1 where exists
(select * from (select top 1 * from #tmp2 t2 where t2.fk = t1.fk order by t2.Enddate desc) x where x.rowID = t1.rowID)
as der order by fk
Best Regards,Uri Dimant SQL Server MVP,
http://sqlblog.com/blogs/uri_dimant/
MS SQL optimization: MS SQL Development and Optimization
MS SQL Consulting:
Large scale of database and data cleansing
Remote DBA Services:
Improves MS SQL Database Performance
SQL Server Integration Services:
Business Intelligence

Web application for different groups

I need to develop an application, which is used by 3 different group of people (each group from a different state, I might need to distinguish orders from different state). All the users data is stored in central LDAP server.
I need to design schema for datbase and come up with a good architecture for web application (Servlets/jsp's etc).
Guys, if you have worked on a similar project or if you have any suggestions on how to structure the application, please reply me with your suggestions and hints. I have to start working on this project from next week..I am planning to take few days for designing the application then I want to start coding

I need to develop an application, which is used by 3
different group of people (each group from a different
state, I might need to distinguish orders from
different state). All the users data is stored in
central LDAP server.
I need to design schema for datbase and come up with a
good architecture for web application (Servlets/jsp's
etc).
Guys, if you have worked on a similar project or if
you have any suggestions on how to structure the
application, please reply me with your suggestions and
hints. I have to start working on this project from
next week..I am planning to take few days for
designing the application then I want to start codingAre you getting paid? Are you willing to split that payment to those who help?

Default favorites portlet for different groups in oid

Hi,
We are using Portal 10.1.4.
I want to use the favorites portlet to have default favorites for different user groups (So different set of default favourites for diffrent portal group)
Is this possible? Is the portlet cached at the system level? can this be changed?
Also, How do I hide the help link and image from the 'personalize' wizard?
Can the display in the wizards be modified in other ways?
cheers
Kev

Vijay, that doesn't seem to work. What I need (and I think it is the same as the original poster ) is to have several different instances of the favorites portlet or one instance that can have its links access controlled. e.g. A favorites portlet for the students group with links that only that OID group can see, a favorites portlet for staff with links that only the staff OID group can see. I am using portal 10.1.4 and cannot see any way to access control the default favourites.
Thanks,
Steven.

How can I manage playlists for different users with home sharing?

I have two teenagers with no taste in music, my wife who appreciates Abba my own music to manage across a fleet of devices. My kids dont like Ozarks or Pink Floyd, and I would rather skin myself with a cheese grater than have One direction on my phone. Does home sharing allow for different devices to sync different playlists??? And furthermore is the icloud Match thing worth the trouble???
thanks

After researching through the forums, I figured it out. You have to make sure you are logged in under the same account on both computers. At first I was logged under my account on my computer and logged in under my father's account on my father's computer. You have to choose one account to log in under on both computers and then you will be abler to import songs from both computers. If you do not log in under the same account, you will be able to listen to both computers' music, but not import.

Paint different color for different group

Hello guys,
I want to make the report colorful, the color should be same for same group, the color should be change for every other group. Kind of did some research but cannot figure out yet, I will appreciate all your helps. Thank you in advance!
-Bill

Tim,
Thank you for your fast response, actually I should have made my question clearer. Let's take your sample data, what I need is like this:
For group 1 Nuts and Bolts Limited, make background yellow,
981110 10-NOV-04 Standard EUR 122
100000 28-MAY-04 Standard FIM 122
100001 28-MAY-04 Standard FIM 200
1 03-JUN-04 Standard FIM 400
100004 28-MAY-04 Standard FIM 100
00s 07-JUN-04 Standard FIM 100
FI1009 10-MAY-04 Standard FIM 1220
Stop make background yellow.
For group 2 Tick Tock Clocks, make background blue,
100002 28-MAY-04 Standard DEM 235
100003 28-MAY-04 Standard DEM 100
2001 01-JUN-04 Standard EUR 1000
2002 01-JUN-04 Standard EUR 1500
2003 01-JUN-04 Standard DEM 1000
2004 01-JUN-04 Standard DEM 2000
3001 04-JUN-04 Standard EUR 1000
FI1011 25-MAY-04 Standard DEM 2000
Stop make background blue.
For group 3, make background back to yellow
Big Bike Motorsports
3001 01-JUN-04 Standard SEK 1000
FI1013 02-JUN-04 Standard USD 25000
Stop make background back to yellow
For group 4, make background back to blue
Second Cars
FI1010 20-MAY-04 Standard FIM 2440
Stop make background back to blue
That is, I need the xml change the background every time the group is changed.
Message was edited by:
billzheng2004

How best to manage AppleIDs for different countries?

We live in Canada, but have a recreational property in the U.S. where we spend several months each winter.
We use AppleTV in both locations, and as such, we have to have AppleIDs associated with both the US iTunes Store and the Canada iTunes Store (which of course means that we have to have credit cards in both countries, which we do).
This is frustrating as we often have to buy the same content twice so as to be able to watch it in two countries... but I understand that this is probably a content owner imposed issue about distribution rights, and not due to Apple.
We used to easily manage this by just switching the AppleID (& country of store) on our MacBooks as we travelled back and forth.
Then Apple introduced a constraint that one could no longer switch between AppleIDs on hardware such as MacBooks and iPads (I believe that one can switch to a new account any time, but cannot switch back to a previously used account until a period of time passes, which I believe used to be 90 days).
Now it seems that one cannot do these account reversals more often than one per year.
It seems like it is getting to the point that one has to have a portable hardware device for each country and use a different AppleID on each in order to have access while travelling to the content that one has paid for in the past.
This was not the case years ago when much of this content was purchased.
Further, when doing upgrades, it is easy when prompted to enter the "wrong" AppleID and then unintentionally lose access to the store in the country that one is currently in (now for up to a year!)
Is there a better way to manage one's accounts across different countries?
Given the constraints on AppleIDs, it is not something that is easy to figure out through experimentation.

We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens.
Thanks, Eric. Perhaps I wasn't clear in the above. I realize we can start applications in certain desktops, but that is NOT what I'm after.
What I would like is the icons (i.e., shortcuts, directories, files) that appear on the desktop, to be different for each desktop. Such that if I go to Desktop 2, I can place all my game icons/shortcuts there. Then if I switch to Desktop 3, I might have all my Office programs there, but not my games. Does that make sense?
Eventually I might also want my Dock to have different icons based on what desktop I'm using, but I figure that's even more difficult.

How to manage shortcuts for different desktops

If you've set up multiple desktops (e.g., via Mission Control), how can you manage shortcuts independently?
It would be nice to have a dedicated desktop for:
Games
Multimedia / Photo / Video
Graphic Design
Programming / Development
Writing
Tutorial Recording
We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens. At least, that's the problem I'm facing.
If it is possible, to hide/show icons on particular screens I would really like to know. Until then, it seems like Virtual Machines are the best way to do this, despite them eating up the extra resources.

We can start applications in a particular screen, since Snow Leopard, similar to what Linux has been able to do for some time; however, these screens are not really desktops, since we can't dedicate certain shortcuts/icons to only appear on certain screens.
Thanks, Eric. Perhaps I wasn't clear in the above. I realize we can start applications in certain desktops, but that is NOT what I'm after.
What I would like is the icons (i.e., shortcuts, directories, files) that appear on the desktop, to be different for each desktop. Such that if I go to Desktop 2, I can place all my game icons/shortcuts there. Then if I switch to Desktop 3, I might have all my Office programs there, but not my games. Does that make sense?
Eventually I might also want my Dock to have different icons based on what desktop I'm using, but I figure that's even more difficult.

HOW DO I MAKE A FOLder FOR DIFFERENT GROUPS IN MY EMAIL ACCOUNTS

as above and how do i make the letter bigger for the email coming in without having to click on them

Perhaps first you could get a grip on the caps lock key. (Man that is hard to read)
Right click a folder and select new folder
This add-on will probably help with display fonts.
https://addons.mozilla.org/en-us/thunderbird/addon/theme-font-size-changer/
Instructions to install http://chrisramsden.vfast.co.uk/3_How_to_install_Add-ons_in_Thunderbird.html

Is update not approved for a specific group via powershell.

My apologies in advance for asking a similar question to the one I asked two months ago,
is update approved for specific group via powershell? I thought I had this covered, but as I've found time to continue to work on this project I see that it does not.
I have a script that iterates through updates and if the release date is older than 30 days and they have not already been “Approved for Install” or “Approved for Removal” for a specific group it approves them. I am currently faced with the dilemma that
when an update is set to “Not Approved” for the specific group I’m working on it does not come across in my group’s approvals and there for I cannot detect its current state to know if I should approve it. In other words, I don’t want to approve an update
that I set to not approved for a specific group.
I am currently achieving all this so far by connecting to my WSUS server and getting any and all updates via $all = $wsus.GetUpdates(). I Then get my group’s approved updates via $groupApproved = $wsus.GetUpdateApprovals($GroupScope) where ApprovedStates
= "Any" and ApprovedComputerTargetGroups.Add($current_wsus_group). While iterating through $all I grab updates that are older than 30 days and check to see if the updateID exists in my $groupApproved. If it does not, I approve the update. Like I
said before, an explicitly unapproved update for my group does not show up in my $groupApproved. I understand it’s because of my GetUpdateApprovals($GroupScope) being just that and only getting approved for install or uninstall, but even when I try to simply
GetUpdates($GroupScope) I am still not returned explicitly unapproved updates. Below is a screen shot of what I mean by explicitly setting an update to unapproved for a group. I’ve read up on
ApprovedStates and possible enumerated values and it does include "NotApproved" defined as "Includes updates that have not been approved or declined.".
Hope all that makes sense, thanks for the help.

So, I've decided to go about this a different way. Rather than getting all updates and comparing them to approvals via a scope of updates for my specific group (which includes all actions but Not Approved), I am going to look at specific approvals for each
update and see if there is a match for my group. A simplfied version of this is below.
$AnyAllUpdates = $wsus.GetUpdates()
foreach ($udpate in $AnyAllUpdates)
if ($update IsNOTDeclined IsNOTSuperseded LegacyNameNOTIA64 CreationDateLTDATE yada yada yada)
# get the approvals for this udpate as they relate to my group
$uApprovals = $update.GetUpdateApprovals() | ?{$_.ComputerTargetGroupId -eq $wsus_group.Id}
if ($uApprovals)
if ($uApprovals.action -eq "Install")
# do nothing, the udpate was approved for install
elseif ($uApprovals.action -eq "Uninstall")
# do nothing, the update was approved for uninstall
elseif ($uApprovals.action -eq "NotApproved")
# do nothing, the udpate was not approved for install
else
# since there was no specific action then it must be an inherited not approved from teh parent group
# approve the update!

Creating management accounts for protected accounts and groups in Active Directory

I'm following step-by-step instruction for creating management accounts for protected groups that I found in Microsoft book "Best Practise for Securing Active Directory", published april 2013.
What is confusing me is the "Enabling management accounts to modify the membership of protected groups" step. When I use DSACLS command:
Dsacls "CN=AdminSDHolder,CN=System,DC=MyDomain,DC=com"/G
[email protected]:RPWP;member
what I have to type insted of "member".
When I use previous command with simple "member" at the end I dont get this:
Verify that the account has been granted only Read Members and
Write Members permissions on the DA group, and click OK.
My account have flag on all properties.
I hope You understand me.

The last field is for the attribute to delegate. You can read about it here: https://technet.microsoft.com/en-us/library/cc772662%28v=ws.10%29.aspx
You can also refer to this for updating AdminSDHolder container: http://social.technet.microsoft.com/wiki/contents/articles/22331.adminsdholder-protected-groups-and-security-descriptor-propagator.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

How to create a dynamic menu for each group of responsibility and user

Hi
I am using Jdev 11.1.1.6 and new to ADF, my application require to populate menu which would be different for different groups of user, and the user in each group would have different submenu depends on their responsibilities assigned to each one of them.
so on the top level would be menu_top_item1, menue_top_item2
|-->submenu1_1 |-->submenu2_1
|-->submenu1_2 |-->submenu2_2
also the menu would need to be on_mouse_over to show the submenu items or collapsed back.
any idea what would be the best approch? or is there any example around?
thanks a lot

You can use ADF Security to control access to menu options.
More about ADF Security here:
http://download.oracle.com/otn_hosted_doc/jdeveloper/11gdemos/AdfSecurity/AdfSecurity.html
If you also use WebCenter you might use their menuing option:
https://blogs.oracle.com/shay/entry/webcenter_portal_intro_for_adf

WSUS Manage Approval for different Groups

Similar Messages

Maybe you are looking for