WSUS Needed Count

Question

Hello,

I create wsus and by default not approve any available updates, we want to approve update manually to minimize the risk.

Currently now i have 2 updates approved, but if we see in the computer, there are 1 computer which needed 32 updates. So i just want to know can we change update needed by the computer only compare to the update which has been approved? So if i have 2 updates approved and if the computer not having that updates, i want update needed count is 2 rather than 32.

Answer 1

Approving random updates doesn't do anything. I say random, because the NEEDED count comes from the computer device letting WSUS know which updates it NEEDS. Not WSUS telling the computer what it needs.

Follow my guide - I'll link to the approvals process, but I recommend you read the whole series from start to finish because each section builds from the previous sections.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-6-selecting-your-test-systems-the-approvals-process/

The short answer is that your computer requires 32 updates that you have not approved, and ONLY 1 computer is needing KB5026362 right now - likely due to prerequisites - likely 1 of those 32 updates are a prerequisite to needing KB5025288.

Answer 2

Hello!

Just wanted to share some tips on how to reduce the number of updates needed by a computer in WSUS. Basically, it all comes down to being selective and filtering out unnecessary updates.

First, you can manually review and approve only the updates that are necessary or relevant to your environment. This way, you'll minimize the number of updates needed by the computers.

Second, you can decline updates that are not applicable to your environment or that you don't want to deploy. By declining these updates, they won't be listed as needed by the computers, reducing the update count.

Third, you can filter updates based on classifications and specific products. By filtering updates based on your organization's needs, you can reduce the number of updates shown as needed for the computers.

Finally, you can create automatic approval rules based on specific criteria. By configuring these rules, you can automatically approve relevant updates, streamlining the update process and reducing the number of updates needed.

Remember, the number of updates needed by a computer can vary based on different factors. So, it's important to regularly review and manage the approved updates in WSUS based on your organization's requirements. This will help keep the update count manageable and minimize any potential risks.

Hope this helps!