B
Bill Sanderson MVP
We've a new step by step, courtesy of Dave Mills from
microsoft.public.windows.server.update_services.
"Why don't I see any Windows Defender Updates in WSUS"
Definition updates for Windows Defender are available via WSUS but have to
be
added in the WSUS console before they become available (as does any product
or
classification that is added to the list made available by Microsoft).
First you must add the Product "Windows Update" to the list of Products and
"Definition Updates" to the list of classification. You do this in the WSUS
admin console/Options/Synchronisation Options.
Next you must arrange for any updates to be available for detections. By
default
the update metadata will be downloaded with the approval set to "Not
Approved"
so no clients will see the updates. You can change this default behaviour
on the
Options/Automatic Approval Options page. Simply add "Definition Updates" to
the
classifications list under "Approve for Detection". If you wish your can
also
approve for installation in the pane below. Please note though that update
metadata already downloaded will retain the status "Not Approved", only new
updates with be set to "Detect" or "Install" by these rules.
Finally if you want to change the approval of existing updates in the
metadata
you must do so manually in the WSUS admin console. To do this in the WSUS
Updates page create a "custom view", call it "Windows Defender" maybe and
select
the "Windows Defender" product. Chose the classifications you want although
there is little reason not to select all of them. Save the Custom View then
run
the report selecting "Any Approval" and "Any Time" and then click Apply to
list
the updates. You can then change the approval status as required for each
update.
Remember to decline superceded updates from time to time so that the
downloaded
content can be removed during normal housekeeping.
microsoft.public.windows.server.update_services.
"Why don't I see any Windows Defender Updates in WSUS"
Definition updates for Windows Defender are available via WSUS but have to
be
added in the WSUS console before they become available (as does any product
or
classification that is added to the list made available by Microsoft).
First you must add the Product "Windows Update" to the list of Products and
"Definition Updates" to the list of classification. You do this in the WSUS
admin console/Options/Synchronisation Options.
Next you must arrange for any updates to be available for detections. By
default
the update metadata will be downloaded with the approval set to "Not
Approved"
so no clients will see the updates. You can change this default behaviour
on the
Options/Automatic Approval Options page. Simply add "Definition Updates" to
the
classifications list under "Approve for Detection". If you wish your can
also
approve for installation in the pane below. Please note though that update
metadata already downloaded will retain the status "Not Approved", only new
updates with be set to "Detect" or "Install" by these rules.
Finally if you want to change the approval of existing updates in the
metadata
you must do so manually in the WSUS admin console. To do this in the WSUS
Updates page create a "custom view", call it "Windows Defender" maybe and
select
the "Windows Defender" product. Chose the classifications you want although
there is little reason not to select all of them. Save the Custom View then
run
the report selecting "Any Approval" and "Any Time" and then click Apply to
list
the updates. You can then change the approval status as required for each
update.
Remember to decline superceded updates from time to time so that the
downloaded
content can be removed during normal housekeeping.