wsus 3.0 sp1 automatic approvals

Hello all

I am using wsus 3.0 sp1 to automatically install Forefront definition
updates to servers, i also want to automatically install Foreftront updates
servers, but i am concerned that if i check "updates" for automatic approval
that *all updates* evan updates that are not forefront updates will be
automaticall installed on servers? Basically what i want is definition
updates and forefront product updates to be automatically installed, but
nothing else

What i have selected so far is

when an update is in "definition updates,updates"
when an update is in "Forefront Client Security"
Approve the update for "production"

Is the automatic approval an "and or an "or" type of method?

thanks

"Sawyer" <> wrote in message
news:E7F3C122-1713-478C-94CC-...
> Hello all
>
> I am using wsus 3.0 sp1 to automatically install Forefront definition
> updates to servers, i also want to automatically install Foreftront
> updates servers, but i am concerned that if i check "updates" for
> automatic approval that *all updates* evan updates that are not forefront
> updates will be automaticall installed on servers?

This will happen, yes.

> Basically what i want is definition updates and forefront product updates
> to be automatically installed, but nothing else

Definition updates are easy.. they have their own classification.

Product Updates, however, are not so easy, and there's no way to create
auto-approval rules for specific product updates, but you can do it for
product categories .. as you've done here.

> when an update is in "definition updates,updates"
> when an update is in "Forefront Client Security"
> Approve the update for "production"


> Is the automatic approval an "and or an "or" type of method?

It's an *and* operation... so for this rule to apply, an update would have
to be in the Forefront Client Security product category *and* would have to
be classified as (Definition Updates -or- Updates).



--
Lawrence Garvin, M.S., MCITP:EA, MCDBA
Principal/CTO, Onsite Technology Solutions, Houston, Texas
Microsoft MVP - Software Distribution (2005-2009)

MS WSUS Website: http://www.microsoft.com/wsus
My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin

Ok thanks again Lawrence!
"Lawrence Garvin [MVP]" <> wrote in message
news:F08F20D0-F07D-4693-96FD-...
> "Sawyer" <> wrote in message
> news:E7F3C122-1713-478C-94CC-...
>> Hello all
>>
>> I am using wsus 3.0 sp1 to automatically install Forefront definition
>> updates to servers, i also want to automatically install Foreftront
>> updates servers, but i am concerned that if i check "updates" for
>> automatic approval that *all updates* evan updates that are not forefront
>> updates will be automaticall installed on servers?
>
> This will happen, yes.
>
>> Basically what i want is definition updates and forefront product updates
>> to be automatically installed, but nothing else
>
> Definition updates are easy.. they have their own classification.
>
> Product Updates, however, are not so easy, and there's no way to create
> auto-approval rules for specific product updates, but you can do it for
> product categories .. as you've done here.
>
>> when an update is in "definition updates,updates"
>> when an update is in "Forefront Client Security"
>> Approve the update for "production"
>
>
>> Is the automatic approval an "and or an "or" type of method?
>
> It's an *and* operation... so for this rule to apply, an update would have
> to be in the Forefront Client Security product category *and* would have
> to be classified as (Definition Updates -or- Updates).
>
>
>
> --
> Lawrence Garvin, M.S., MCITP:EA, MCDBA
> Principal/CTO, Onsite Technology Solutions, Houston, Texas
> Microsoft MVP - Software Distribution (2005-2009)
>
> MS WSUS Website: http://www.microsoft.com/wsus
> My MVP Profile: http://mvp.support.microsoft.com/pro...awrence.Garvin
>