Share via

WSUS Declined Updates

Lorin Davis 21 Reputation points
2023-10-18T23:05:58.2933333+00:00

Hi,

We have a SCCM 2207 Primary Site server with WSUS database installed. WSUS maintenance options are enabled in ConfigMgr site. However, the SUSDB shows there are 15000+ 'Declined Updates'. Therefore, as part of regular maintenance of the SUSDB, need help with the following questions:

  1. Is it safe to delete the declined updates as the clients will not scan for declined updates?
  2. Will there be any impact on the WSUS database by removing the declined updates?
  3. By deleting the declined updates, will the WSUS performance improve?

Thanks!

Microsoft Security | Intune | Configuration Manager | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AllenLiu-MSFT 49,441 Reputation points Microsoft External Staff
    2023-10-19T02:26:09.0033333+00:00

    Hi, @Lorin Davis

    Thank you for posting in Microsoft Q&A forum.

    1. It is safe to delete declined updates as clients will not scan for declined updates.
    2. Removing declined updates will not have any impact on the WSUS database.
    3. Deleting declined updates can improve WSUS performance.

    I always run the PowerShell command as administrator to remove the declined updates:

    [reflection.assembly]::LoadWithPartialName("Microsoft.UpdateServices.Administration")

$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer();

$declined=$wsus.GetUpdates() | Where {$_.IsDeclined -eq $true}

$declined| ForEach-Object {$wsus.DeleteUpdate($_.Id.UpdateId.ToString()); Write-Host $_.Title removed }

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.