Hi, I was wondering how I could following result. It's probably easier to explain the workflow first
We use WSUS computer groups to approve new updates first to a particular group to be tested before they are approved for the rest of the organization. I've automated the approval process now so that on the 2nd Wednesday around noon, all newly released updates are approved to the test computer group. And a week later I will approve those same patches to the other computer groups. When you approve an update, it will change the approval state in the WSUS console to Install [x/x] (meaning approved to x out of all computer groups). Sure I can loop the approval process for each computer group, but the result will show "Install [7/7]". And when you manually look at the approvals of one of those updates, it will show a green checkmark in front of it. As seen below [cid:[email protected]] However what I would prefer, would be that the approval of all sub groups is inherited from the all computers. As shown below [cid:[email protected]] This would result in the next time I approve the updates to the test group, that only those specific updates will be visible from the custom WSUS view [cid:[email protected]] So I guess the question is, instead of using [Microsoft.UpdateServices.Administration.UpdateApprovalAction]::Install with the Approve method, how can I either remove the specific approval so it reverts to "Install (inherited)". Or how can I approve to All computers and then force all child groups to be reset and use its parent? Kind regards, Stephan Schwarz ================================================ Did you know you can also post and find answers on PowerShell in the forums? http://www.myitforum.com/forums/default.asp?catApp=1
