Microsoft

System Center Configuration Manager Feedback

Suggestion box powered by UserVoice

How can we improve Configuration Manager?

When Expiring Updates based on Supersedence Rules also Decline them in WSUS

When SCCM expires updates based on the configured Supersedence Rules it only does so in SCCM, not WSUS. Additionally, SCCM does not approve updates in WSUS.
Because of these two facts the WSUS Cleanup Wizard will never decline superseded updates. They are neither expired (as they are in SCCM) nor are their superseding updates approved (a requirement for the WSUS Cleanup Wizard). This causes a bloated Update Catalog that can cause very real client issues. There are scripts available to handle this situation but this is the last mile issue in regards to WSUS maintenance. If the product declined the updates in WSUS when it expires them in SCCM then there would be no additional steps that admins needed to take.

96 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    bdam shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

    6 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      Submitting...
      • Michiel Wouters commented  ·   ·  Flag as inappropriate

        Found this user voice after reading numerous posts about WSUS and SUP maintenance. @bdam is propably right. The team should really look into the synchronization and cleanup process. For now I'll continue to use the tasks as described in The complete guide to Microsoft WSUS and Configuration Manager SUP maintenance.

      • bdam commented  ·   ·  Flag as inappropriate

        @Bjj The doc update was the doc team's revision of my submission. However, they revised it to say the exact opposite of what I sent. I do not believe ConfigMgr will _ever_ decline an update in WSUS and experience bears this out.

      • Bjj commented  ·   ·  Flag as inappropriate

        They have finally updated docs.


        When Configuration Manager sets a superseded software update to Expired, it does not set the update to Declined in WSUS. However, when the WSUS cleanup task runs, the updates set to Expired in Configuration Manager are set to a status of Declined on the WSUS server and the Windows Update Agent on computers will no longer scan for these updates. This means that clients will continue to scan for an expired update until the cleanup task runs. For information about the WSUS cleanup task, see Software updates maintenance.”

      • Peter S commented  ·   ·  Flag as inappropriate

        I agree. The WSUS vs SCCM nightmare could be finally resolved. The lack of documentation on this feature simply blows me away.

      Feedback and Knowledge Base