Set certain WSUS updates to auto-install

Posted by Nicolas on Server Fault See other posts from Server Fault or by Nicolas
Published on 2011-02-24T06:25:13Z Indexed on 2011/02/24 7:26 UTC
Read the original article Hit count: 469

Filed under:

We're running a WSUS server for the simple purpose of caching updates. Since we are a very small network of all "power users", we've got the domain group policy for WSUS updates on the clients set to prompt for download/install. i.e. We don't want updates to install without our knowledge.

But there are a few cases where it would be nice to be able to set a certain update to auto-install. e.g. Windows Defender updates, Malicious Software Removal Tool, Outlook Junk Email Filter, etc. Basically all the silly little updates that you would always install anyway and don't require a restart.

Is there a way to set the general policy to prompt for download/install, but auto-install certain regular updates?

P.S. WSUS itself does have the facility to auto-approve certain updates. That part works.

Facts & Figures: SBS 2003 domain Windows 7 Pro clients Windows XP Pro clients

© Server Fault or respective owner

Related posts about wsus