Hi,
# First, you delete all the approvals for a specific update like this
$kb = '3088195'
(Get-WsusServer).SearchUpdates($kb) | Select -Fi 1 | % {
$_.GetUpdateApprovals() |% { $_.Delete()} }
# Then to approve it to the all computers and have it applied by
inheritance on child, you do:
((Get-WsusServer).SearchUpdates($kb) | Select -First 1 ).Approve('Install',
(Get-WsusServer).GetComputerTargetGroup('a0a08746-4dbe-4a37-9adf-9e7652c0b421'))
On Wed, Oct 21, 2015 at 7:35 PM, Stephan Schwarz <[email protected]>
wrote:
> Hi,
>
>
>
> I was wondering how I could following result.
>
> It’s probably easier to explain the workflow first
>
>
>
> We use WSUS computer groups to approve new updates first to a particular
> group to be tested before they are approved for the rest of the
> organization.
>
>
>
> I’ve automated the approval process now so that on the 2nd Wednesday
> around noon, all newly released updates are approved to the test computer
> group.
>
> And a week later I will approve those same patches to the other computer
> groups.
>
>
>
> When you approve an update, it will change the approval state in the WSUS
> console to Install [x/x] (meaning approved to x out of all computer groups).
>
> Sure I can loop the approval process for each computer group, but the
> result will show “Install [7/7]”. And when you manually look at the
> approvals of one of those updates, it will show a green checkmark in front
> of it.
>
> As seen below
>
>
>
>
>
> However what I would prefer, would be that the approval of all sub groups
> is inherited from the all computers. As shown below
>
>
>
>
>
>
>
> This would result in the next time I approve the updates to the test
> group, that only those specific updates will be visible from the custom
> WSUS view
>
>
>
>
>
> So I guess the question is, instead of using [
> Microsoft.UpdateServices.Administration.UpdateApprovalAction]::Install
> with the Approve method, how can I either remove the specific approval so
> it reverts to “Install (inherited)”. Or how can I approve to All computers
> and then force all child groups to be reset and use its parent?
>
>
>
> Kind regards,
>
> Stephan Schwarz
>
>
>
> ================================================
> Did you know you can also post and find answers on PowerShell in the
> forums?
> http://www.myitforum.com/forums/default.asp?catApp=1
================================================
Did you know you can also post and find answers on PowerShell in the forums?
http://www.myitforum.com/forums/default.asp?catApp=1
