Configuring WSUS auto-approvals
WSUS organizes Windows updates under different classifications. You can view these classifications by using the Get-WsusClassification cmdlet. Two particularly important classifications you should check regularly are Critical Updates and Definition Updates. The Critical Updates classification includes updates that address severe security flaws and zero-day vulnerabilities. The Definition Updates classification includes definition files for Windows Defender to identify and remove malware.
These two classifications are important enough to approve them automatically. Auto-approval ensures WSUS installs these updates on client computers as soon as possible. In this recipe, you will create an auto-approval rule for these updates.
Getting ready
Run this recipe on the WSUS1 server.
How to do it...
Run this recipe to configure auto-approval of WSUS update:
- Create the auto-approval rule:
$WSUSServer = Get-WsusServer
$ApprovalRule = $WSUSServer.CreateInstallApprovalRule...
