WSUS 3.0 Showing Updates not asked for in Product Classifi..

Thanks.
Shouldn't the cleanup wizard remove them though ?
If all the old superceded updates get left in the list it will become a
large list won't it ?

"Augusto Alvarez" <augusto.alvarez82.TakeThisOut@gmail.com> wrote in message
news:u5wnYsLGIHA.3548@TK2MSFTNGP06.phx.gbl...
> Don't worry about those updates, they didnt actually downloaded, they are
> old critical updates for Microsoft Office but those are superseeded by
> newer updates.
>
> If you select updates for WindowsXP will also appear critical updates
> published on 2002, but again, all of those are superseeded and they didnt
> download.
>
> Cheers!
>
> --
> augusto alvarez | it pro | southworks s.r.l.
> http://staff.southworks.net/aalvarez
>
>
> "Arthur" <mynewsgroupaccount.TakeThisOut@googlemail.com> wrote in message
> news:%23Er8GQIGIHA.5208@TK2MSFTNGP04.phx.gbl...
>> I'm a little confused with WSUS showing updates for products that are not
>> selected in the Products list.
>>
>> In the Products and classifications I have selected for only Office 2003
>> and Office 2007
>>
>> I also have a default rule
>> When an update is in Critical Updates, Definition Updates, Sceurity
>> Updates
>> Approve the update for All Computers.
>>
>> In the WSUS console when I go to
>> Update Services -> Server
>>
>> In the To Do list it shows up that 23 Security updates are waiting to be
>> approved.
>>
>> When I look at these updates they are all updates that are not part of
>> the product selection that I have asked WSUS to download. It consists of
>> Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>>
>> Two things that confuse me. Firstly why are they showing up as unapproved
>> when the default rule has auto approval set for Security updates, and why
>> is it showing up products that are not in the Product and Classification
>> List.
>>
>> I have run the cleanup wizard but this has no affect.
>
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

Arthur wrote:

>I'm a little confused with WSUS showing updates for products that are not
>selected in the Products list.
>
>In the Products and classifications I have selected for only Office 2003
>and Office 2007
>
>I also have a default rule
>When an update is in Critical Updates, Definition Updates, Sceurity Updates
>Approve the update for All Computers.
>
>In the WSUS console when I go to
>Update Services -> Server
>
>In the To Do list it shows up that 23 Security updates are waiting to be
>approved.
>
>When I look at these updates they are all updates that are not part of the
>product selection that I have asked WSUS to download. It consists of
>Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>
>Two things that confuse me. Firstly why are they showing up as unapproved
>when the default rule has auto approval set for Security updates, and why
>is it showing up products that are not in the Product and Classification
>List.

The most likely explanation is that WSUS thinks that these are patches you
need, but because they're not in the categories you've selected, they
can't be automatically approved.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

"Steve Foster [SBS MVP]" <steve.foster DeleteThis @picamar.co.uk> wrote in message
news:xn0fczhhw3rc54y003@msnews.microsoft.com...
> Arthur wrote:
>
>>I'm a little confused with WSUS showing updates for products that are not
>>selected in the Products list.
>>
>>In the Products and classifications I have selected for only Office 2003
>>and Office 2007
>>
>>I also have a default rule
>>When an update is in Critical Updates, Definition Updates, Sceurity
>>Updates
>>Approve the update for All Computers.
>>
>>In the WSUS console when I go to
>>Update Services -> Server
>>
>>In the To Do list it shows up that 23 Security updates are waiting to be
>>approved.
>>
>>When I look at these updates they are all updates that are not part of the
>>product selection that I have asked WSUS to download. It consists of
>>Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>>
>>Two things that confuse me. Firstly why are they showing up as unapproved
>>when the default rule has auto approval set for Security updates, and why
>>is it showing up products that are not in the Product and Classification
>>List.
>
> The most likely explanation is that WSUS thinks that these are patches you
> need, but because they're not in the categories you've selected, they
> can't be automatically approved.

OK That's interesting. Why would it think they're needed if they're not in
selected categories ?

I wonder if it is because I synchronised with the categories selected and
then changed the categories.
If that is the case I assume that I can safely decline them but I would have
expected the cleanup wizard to take care of that ?


>
> --
> Steve Foster [SBS MVP]
> ---------------------------------------
> MVPs do not work for Microsoft. Please reply only to the newsgroups.
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

The cleanup wizard does not and should not decline updates. How is WSUS to know
that you will never bring in a pre XP SP2 (for example) system for update. Only
you can know that you will never have a pre SP2 system that needs the superceded
updates.


On Sun, 28 Oct 2007 16:18:51 -0000, "Arthur" <mynewsgroupaccount DeleteThis @googlemail.com>
wrote:

>
>"Steve Foster [SBS MVP]" <steve.foster DeleteThis @picamar.co.uk> wrote in message
>news:xn0fczhhw3rc54y003@msnews.microsoft.com...
>> Arthur wrote:
>>
>>>I'm a little confused with WSUS showing updates for products that are not
>>>selected in the Products list.
>>>
>>>In the Products and classifications I have selected for only Office 2003
>>>and Office 2007
>>>
>>>I also have a default rule
>>>When an update is in Critical Updates, Definition Updates, Sceurity
>>>Updates
>>>Approve the update for All Computers.
>>>
>>>In the WSUS console when I go to
>>>Update Services -> Server
>>>
>>>In the To Do list it shows up that 23 Security updates are waiting to be
>>>approved.
>>>
>>>When I look at these updates they are all updates that are not part of the
>>>product selection that I have asked WSUS to download. It consists of
>>>Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>>>
>>>Two things that confuse me. Firstly why are they showing up as unapproved
>>>when the default rule has auto approval set for Security updates, and why
>>>is it showing up products that are not in the Product and Classification
>>>List.
>>
>> The most likely explanation is that WSUS thinks that these are patches you
>> need, but because they're not in the categories you've selected, they
>> can't be automatically approved.
>
>OK That's interesting. Why would it think they're needed if they're not in
>selected categories ?
>
>I wonder if it is because I synchronised with the categories selected and
>then changed the categories.
>If that is the case I assume that I can safely decline them but I would have
>expected the cleanup wizard to take care of that ?
>
>
>>
>> --
>> Steve Foster [SBS MVP]
>> ---------------------------------------
>> MVPs do not work for Microsoft. Please reply only to the newsgroups.
--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

Arthur wrote:

>
>"Steve Foster [SBS MVP]" <steve.foster.DeleteThis@picamar.co.uk> wrote in message
>news:xn0fczhhw3rc54y003@msnews.microsoft.com...
>>Arthur wrote:
>>
>>>I'm a little confused with WSUS showing updates for products that are not
>>>selected in the Products list.
>>>
>>>In the Products and classifications I have selected for only Office 2003
>>>and Office 2007
>>>
>>>I also have a default rule
>>>When an update is in Critical Updates, Definition Updates, Sceurity
>>>Updates
>>>Approve the update for All Computers.
>>>
>>>In the WSUS console when I go to
>>>Update Services -> Server
>>>
>>>In the To Do list it shows up that 23 Security updates are waiting to be
>>>approved.
>>>
>>>When I look at these updates they are all updates that are not part of the
>>>product selection that I have asked WSUS to download. It consists of
>>>Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>>>
>>>Two things that confuse me. Firstly why are they showing up as unapproved
>>>when the default rule has auto approval set for Security updates, and why
>>>is it showing up products that are not in the Product and Classification
>>>List.
>>
>>The most likely explanation is that WSUS thinks that these are patches you
>> need, but because they're not in the categories you've selected, they can't be automatically approved.
>
>OK That's interesting. Why would it think they're needed if they're not in
>selected categories ?

Because the Automatic Update client has the complete list of available
patches, not just your limited selection. If it thinks a machine needs a
patch, it gets flagged up as needed, regardless of your choices in WSUS.
At least, that's AIUI.

--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

Dave,

If you check the Clean Up Wizard, you will see on the options that this
wizard does in fact decline expired and superseded updates. Take the example
if you have machines with XP SP1... there is no need on having several
updates pre SP2 stored, when the WSUS downloads the SP2 for XP, all the
previous updates are now superseded and no longer necessary.

Cheers!

--
augusto alvarez | it pro | southworks s.r.l.
http://staff.southworks.net/aalvarez


"DaveMills" <DaveMills.RemoveThis@newsgroup.nospam> wrote in message
news:b5tai3dluq05ab0sknkcr4dd239qn0ba6i@4ax.com...
> The cleanup wizard does not and should not decline updates. How is WSUS to
> know
> that you will never bring in a pre XP SP2 (for example) system for update.
> Only
> you can know that you will never have a pre SP2 system that needs the
> superceded
> updates.
>
>
> On Sun, 28 Oct 2007 16:18:51 -0000, "Arthur"
> <mynewsgroupaccount.RemoveThis@googlemail.com>
> wrote:
>
>>
>>"Steve Foster [SBS MVP]" <steve.foster.RemoveThis@picamar.co.uk> wrote in message
>>news:xn0fczhhw3rc54y003@msnews.microsoft.com...
>>> Arthur wrote:
>>>
>>>>I'm a little confused with WSUS showing updates for products that are
>>>>not
>>>>selected in the Products list.
>>>>
>>>>In the Products and classifications I have selected for only Office 2003
>>>>and Office 2007
>>>>
>>>>I also have a default rule
>>>>When an update is in Critical Updates, Definition Updates, Sceurity
>>>>Updates
>>>>Approve the update for All Computers.
>>>>
>>>>In the WSUS console when I go to
>>>>Update Services -> Server
>>>>
>>>>In the To Do list it shows up that 23 Security updates are waiting to be
>>>>approved.
>>>>
>>>>When I look at these updates they are all updates that are not part of
>>>>the
>>>>product selection that I have asked WSUS to download. It consists of
>>>>Outlook 2002, Excel 2003, Project 2002, Visio 2002 etc...
>>>>
>>>>Two things that confuse me. Firstly why are they showing up as
>>>>unapproved
>>>>when the default rule has auto approval set for Security updates, and
>>>>why
>>>>is it showing up products that are not in the Product and Classification
>>>>List.
>>>
>>> The most likely explanation is that WSUS thinks that these are patches
>>> you
>>> need, but because they're not in the categories you've selected, they
>>> can't be automatically approved.
>>
>>OK That's interesting. Why would it think they're needed if they're not in
>>selected categories ?
>>
>>I wonder if it is because I synchronised with the categories selected and
>>then changed the categories.
>>If that is the case I assume that I can safely decline them but I would
>>have
>>expected the cleanup wizard to take care of that ?
>>
>>
>>>
>>> --
>>> Steve Foster [SBS MVP]
>>> ---------------------------------------
>>> MVPs do not work for Microsoft. Please reply only to the newsgroups.
> --
> Dave Mills
> There are 10 type of people, those that understand binary and those that
> don't.
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

"Augusto Alvarez" <augusto.alvarez82.RemoveThis@gmail.com> wrote in message
news:Oq3LUfiGIHA.1316@TK2MSFTNGP02.phx.gbl...

> "DaveMills" <DaveMills.RemoveThis@newsgroup.nospam> wrote in message
> news:b5tai3dluq05ab0sknkcr4dd239qn0ba6i@4ax.com...
>> The cleanup wizard does not and should not decline updates.


> If you check the Clean Up Wizard, you will see on the options that this
> wizard does in fact decline expired and superseded updates.

It should also be noted that this declination will only occur if those
updates have not been reported as "Needed" by a client system for at least
30 days.

--
Lawrence Garvin, M.S., MCTS, MCP
MVP - Software Distribution (2005-2007)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

"Steve Foster [SBS MVP]" <steve.foster DeleteThis @picamar.co.uk> wrote in message
news:xn0fd0wc3576ejp004@msnews.microsoft.com...

>>>The most likely explanation is that WSUS thinks that these are patches
>>>you need, but because they're not in the categories you've selected, they
>>>can't be automatically approved.

>>OK That's interesting. Why would it think they're needed if they're not in
>>selected categories ?

> Because the Automatic Update client has the complete list of available
> patches, not just your limited selection. If it thinks a machine needs a
> patch, it gets flagged up as needed, regardless of your choices in WSUS.
> At least, that's AIUI.

Steve, I believe your answer was correct, that the patches exist, were
detected, but are no longer in an auto-approval rule because of previously
selected categories, but the more recent explanation of why this is the case
may not be entirely accurate.

The AU client only knows what the WSUS Server (or WU/MU site) provides to it
as "available" updates during each individual detection. In the case of
WU/MU, that's "all available" updates, all of the time. In the case of a
WSUS 3.0 server, it's the updates contained in the current local database
(synchronized with microsoft.com, as it were). Since ALL updates contained
in the WSUS database are automatically enabled as 'detectable', the mere
presence of an update can result in a client reporting that update as
"Needed", even though the update is not approved for installation anywhere,
and not even selected as a current Product or Classification to be
synchronized.

Arthur's original questions were:

[1]
>> Firstly why are they showing up as unapproved when the default rule has
>> auto approval set for Security updates


[2]
>> [W]hy is it showing up products that are not in the Product and
>> Classification List.


Your explanation of an update present, but no longer in a selected category,
was spot-on, and confirmed by Arthur in his previous reply:

>I wonder if it is because I synchronised with the categories selected and
>then changed the categories.

That's exactly how those updates ended up in the database, visible to the
admin console, the AU client, but no longer associated with a viable
auto-approval rule -- because auto-approval rules can only be applied to
products/classification selected for synchronization. Unselecting a
product/classification does not remove previously synchronized update
metadata (though it can be removed via a feature in the SCW).


--
Lawrence Garvin, M.S., MCTS, MCP
MVP - Software Distribution (2005-2007)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

> metadata (though it can be removed via a feature in the SCW).

Lawrence - can you elaborate on this please ?
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi.. 

"Arthur" <mynewsgroupaccount.TakeThisOut@googlemail.com> wrote in message
news:ebJ4zdrIIHA.4808@TK2MSFTNGP05.phx.gbl...
>> metadata (though it can be removed via a feature in the SCW).
>
> Lawrence - can you elaborate on this please ?

Hmm.. I don't even remember what the conversation was about....

<..Searching through message archives...>

=============
>>I wonder if it is because I synchronised with the categories selected and
>>then changed the categories.

>That's exactly how those updates ended up in the database, visible to the
>admin console, the AU client, but no longer associated with a viable
>auto-approval rule -- because auto-approval rules can only be applied to
>products/classification selected for synchronization. Unselecting a
>product/classification does not remove previously synchronized update
>metadata (though it can be removed via a feature in the SCW).
==============


I'm not sure which it is that you want me to elaborate on -- "why they're
still in the database", or "removing stale metadata using the Server Cleanup
Wizard".

Assuming the latter, since you only quoted the one line -- the Server
Cleanup Wizard is designed to help maintain unneeded content in the database
and the content filesystem. The best place to obtain an "elaboration" on how
to use the SCW is to:
[a] Go to the Options page, run the SCW, and read the screens in the
wizard, or
[b] Review the WSUS Operations Guide.

Addressing the specific issue here, though. The SCW is capable of removing
metadata entries for updates that are "no longer needed" by any client
system -- that's one of several features of the tool.

To "elaborate" on the several features of the SCW would take quite a bit of
space.




--
Lawrence Garvin, M.S., MCTS, MCP
MVP - Software Distribution (2005-2007)
MS WSUS Website: http://www.microsoft.com/wsus
My Websites: http://www.onsitechsolutions.com;
http://wsusinfo.onsitechsolutions.com
My MVP Profile: http://mvp.support.microsoft.com/profile/Lawrence.Garvin
 >> Stay informed about: WSUS 3.0 Showing Updates not asked for in Product Classifi..