Join Brien Posey for an in-depth discussion in this video Monitor update deployments in WSUS, part of Windows 10: Plan and Implement Software Updates.
- Once you've approved updates for deployment within the Windows Server Update Services it's a good idea to be able to monitor that deployment so that you can see how it's progressing. One of the easiest ways to do that is by using the Update Information that's provided within the Management Interface. So if you look you can see that we have an Updates container and if I expand that container we have a number of subcontainers. We've got a container for All Updates, Critical Updates, Security Updates, and WSUS Updates.
So let's take a look at the All Updates container. And when I click on that container you can see that there's a lot of information that's being presented to us. Truthfully, there's probably too much information because there may be thousands of updates listed and not all of those updates are going to be applicable for resources that are running on our network. So, if we want to monitor the status of updates that we've approved for installation then we need to filter this list down a little bit. And the way that we do that is by using these drop downs up here.
So you can see the first drop down is marked Approval and right now this is set to Any Except Declined, so any update that we haven't explicitly declined is going to be presented on this list. So let's narrow this down and take a look at instead, only updates that we've approved. So I'm going to select Approved and the list doesn't automatically change. We have to Refresh it before there is a change. But, we also can filter things down by Status. So right now the Status is set to Any. But, maybe I want to instead look at updates that are Failed or Needed.
So I'm going to choose the Failed or Needed option and I'm going to click Refresh. Now sometimes the refresh process can take a little while because there are so many updates to filter through. When the refresh completes you can see that we have zero updates of 70,753 showing. And the reason for that is because we don't have any updates that we've approved that have failed or that are still needed. So, let's take a look at something else. We'll continue looking at Approved updates, but maybe instead of Failed or Needed updates we want to look at updates for which there's no status information.
So I'm going to choose the No Status option and I'll click Refresh. And so now I'm starting to see some data. So for each one of these updates we can see several different pieces of information. We can see the update Title, we can see the Classification, so this particular update is a Driver, the one beneath that is a Security Update. Then, we can see the Installed/Not Applicable Percentage and it looks like for these updates that are on the screen right now we're showing 80% across the board. And then there's an Approval column.
And this one needs a little bit of explaining because if you look and see that 80% of the systems have this update either installed or it's not applicable. But if you look at the Install, this is showing one out of four and that doesn't really mesh with 80%. So what's going on here? Well, what's happening is that not all of the computers actually needed this update. It's applicable to four computers, but out of those four the update was only needed on one of those systems so that's where the one of four comes in.
You'll notice that the update above this is showing two out of four. So, 80% of the systems to which this update was applicable have either had the update installed or the update was already there. So that's where this information comes into play and we could watch these particular updates over time to see how the update process is progressing. So that's how you monitor the deployment of updates through the Windows Server Update Services.
- Deploying updates manually
- Monitoring deployments
- Configuring automatic deployment rules
- Analyzing log files
- Approving and declining updates in Intune
- Deploying software from SCCM, WSUS, and Intune