Excluding Servers from "Update" Patches

it discovered our wsus server deploying "critical" , "security" level patches.  we want add "updates" list of patches available, not want our servers receive these patches moment, workstations.

i have servers , workstations split separate groups in wsus, in ad in different ou's.  however, once check box "updates" under "products , classifications", don't see way in wsus groups can exclude servers group picking updates start synchronizing.  how go doing this?

it discovered our wsus server deploying "critical" , "security" level patches.  we want add "updates" list of patches available, not want our servers receive these patches moment, workstations.

so.... turn on rest of update classifications, , don't approve updates don't want deploy.

however, once check box "updates" under "products , classifications", don't see way in wsus groups can exclude servers group picking updates start synchronizing.

correct. synchronization of updates based on updates in selected product category , selected update classification. enabling "updates" give updates workstation , server categories selected. don't manage operation synchronization; manage not approving updates in first place.

my gut tells me, given nature of question, you're using default automatic approval rule (for critical , security updates), , have never dealt question of approvals (or removing approvals once no longer needed). since there isn't automatic approval rule "updates" classification, you'd 1 of 2 things:

• create automatic approval rule "updates" classification , product categories desktop operating systems (i.e. windows xp, vista, 7, , 8), , groups should them, or
• manually approve updates when arrive *groups* want deploy them.

---

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
solarwinds head geek
microsoft mvp - software packaging, deployment & servicing (2005-2013)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
http://www.solarwinds.com/gotmicrosoft
the views expressed on post mine , not reflect views of solarwinds.

Windows Server  >  WSUS