Delete updates from WSUS console with PowerShell

Question

I have a WSUS used with SCCM, I see too many unwanted updates in WSUS console, can I delete multiple updates manually by PowerShell?

Additionally, does SCCM recognize that deleted updates no longer exist and automatically remove the updates in SCCM console?

Answer 1

Hi, @Menta Elise

Thank you for posting in Microsoft Q&A forum.

Yes, you can delete updates in WSUS using PowerShell. However, it's recommended to decline updates instead of deleting them to ensure there are no unforeseen consequences on the SCCM server's update management.

SCCM recognizes that declined updates no longer need to be installed on clients and won't deploy them unless they're approved again in WSUS. SCCM can also synchronize with WSUS and remove declined updates from its list of updates available for deployment.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Answer 2

Yes, it's possible to delete updates from the database using PowerShell's APIs - this is what WSUS Automated Maintenance (Full disclosure - WAM is our software) does.

Declining does help as computers will no longer scan against declined updates, but keeping things nice and clean sometimes requires removals.

Ensure you're revisiting your Product list (in your case, from the Software Update Point Component Properties in ConfigMgr) every few months (we recommend twice a year) and removing that are no longer in your environment or adding products that you now have in your environment.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-8-wsus-server-maintenance/