is update not approved for a specific group via powershell.

my apologies in advance asking similar question 1 asked 2 months ago, update approved specific group via powershell? thought had covered, i've found time continue work on project see not.

i have script iterates through updates , if release date older 30 days , have not been “approved install” or “approved removal” specific group approves them. faced dilemma when update set “not approved” specific group i’m working on not come across in group’s approvals , there cannot detect current state know if should approve it. in other words, don’t want approve update set not approved specific group.

i achieving far connecting wsus server , getting , updates via $all = $wsus.getupdates(). group’s approved updates via $groupapproved = $wsus.getupdateapprovals($groupscope) approvedstates = "any" , approvedcomputertargetgroups.add($current_wsus_group). while iterating through $all grab updates older 30 days , check see if updateid exists in $groupapproved. if not, approve update. said before, explicitly unapproved update group not show in $groupapproved. understand it’s because of getupdateapprovals($groupscope) being , getting approved install or uninstall, when try getupdates($groupscope) still not returned explicitly unapproved updates. below screen shot of mean explicitly setting update unapproved group. i’ve read on approvedstates and possible enumerated values , include "notapproved" defined "includes updates have not been approved or declined.".

hope makes sense, help.

hi joey,

to approve wsus updates, these scripts may helpful you:

powershell wsus approval between targets

approve or decline wsus updates using powershell

wsus: approving , declining updates with powershell

i hope helps.

Windows Server  >  Windows PowerShell