Deploying Multiple Updates to Multiple Computer Groups problem

I upgraded WSUS to 3.0 from 2.0 recently. On our first deployment with the
new version we noticed that if you set multiple patches (for example every
patch released in the last 30 days) to approve for one group (for example a
group called Group A) then come back and try to approve the same group of
patches for another group (called Group B) by default this dissables the
Group A patches unless you also recheck them off to deploy to.

My question is in 2.0 we had an option not to overwrite previous approvals
just to add the new ones but I dont see this option in 3.0. Is there
something I'm doing wrong or is there a script or 3rd party solution for this
problem? I have a few thousand servers in about 30 groups that have
different rules concerning deployment times so this is a pain to re aprove
for each deployment. Thanks

 

You are doing nothing wrong, Neto. This is a change from WSUS 2.0 to WSUS
3.0. However, the dialog box for the subsequent updates *will* show the
current approval status if applying the approval on a one-update-at-a-time
basis; however, it's impossible for the dialog box to display the approval
status of a collection of updates. To that end, the UI relys upon the admin
to have a familiarity with what updates are in place, and the programmed
behavior is to make the selection in the current dialog box what is applied
to all groups.


--
Lawrence Garvin, M.S., MCTS, MCP
MVP - Software Distribution (2005-2007)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin