Share via

"Set a deadline for the approval" in Automatic approval rule

Marshall 1 Reputation point
2022-04-20T11:45:05.73+00:00

Hi all,
I am trying to figure out what is meant by "Set a deadline for the approval".

in my wsus, i have several test and prod groups and i would like to set the automatic approval of updates at different times and then decide when to download, when to install and when to restart via gpo.

With the "Set a deadline for the approval" can I decide for example:

  • approve the updates for group A on day x
  • approve updates for group B on day y
  • approve updates for group C on day z
  • ....
    ??

Basically I would like to have time to check the updates before they are approved and approve them first in test groups and then in prod ones.

Really thanks

Windows for business | Windows Server | User experience | Other
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Adam J. Marshall 10,356 Reputation points MVP
    2022-04-20T13:16:50.7+00:00

    WSUS alone does not have the capability you're looking for. Microsoft Endpoint Manager: Configuration Manager (ConfigMgr/SCCM/MEMCM/MECM) has that ability with Automatic Deployment Rules (ADRs).

    1 person found this answer helpful.
    0 comments
  2. Rita Hu -MSFT 9,661 Reputation points
    2022-04-21T01:44:47.54+00:00

    @Marshall
    Thanks for your posting on Q&A.

    I found the following Official Document and I want to share on this forum.

    https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/21669596#approving-updates

    Set a deadline for automatic installation. When you select this option, you set specific times and dates to install updates, overriding any settings on the client computers. In addition, you can specify a past date for the deadline if you want to approve an update immediately (to be installed the next time client computers contact the WSUS server).

    https://learn.microsoft.com/de-de/security-updates/windowsupdateservices/18127631

    You can specify a deadline when you approve an update or set of updates on the WSUS server. Setting a deadline will cause clients to install the update at a specific time, but there are a number of different situations, depending on whether the deadline has expired, whether there are other updates in the queue for the client to install, and whether the update (or another update in the queue) requires a restart.

    Best regards,
    Rita

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.