Below is the default settings. These apply updates to all machines that need them, will approve stale updates, and approve any update that needs a license agreement.

Note: WSUS can be set to approve stale updates, the only stale updates it won't approve are those requiring a License Agreement.

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
	<configSections>
		<section name="ApplicationSettings" type="SmartApprove.Model.ApplicationSettings, smartapprove, Version=1.0.0.2" />
	</configSections>
	<ApplicationSettings>
		<Server Hostname="localhost" Port="8530" Secure="false" />
		<NoRunSet AcceptLicenseAgreement="true" ApproveStaleUpdates="true" ApproveSupersededUpdates="true" ApproveNeededUpdates="true" />
	</ApplicationSettings>
</configuration>

For a more complex setup you can base your config upon:
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
	<configSections>
		<section name="ApplicationSettings" type="SmartApprove.Model.ApplicationSettings, smartapprove, Version=1.0.0.2" />
	</configSections>
	<ApplicationSettings>
		<Server Hostname="localhost" Port="8530" Secure="false" />
		<NoRunSet AcceptLicenseAgreement="true" ApproveStaleUpdates="true" ApproveSupersededUpdates="true" ApproveNeededUpdates="true" />
		<RunSets>
			<add Name="Normal">
				<TargetGroups>
					<!-- All Computers -->
					<add Guid="a0a08746-4dbe-4a37-9adf-9e7652c0b421">
						<Classifications>
							<!-- Critical Updates -->
							<add Guid="e6cf1350-c01b-414d-a61f-263d14d133b4" AcceptLicenseAgreement="true" ApproveStaleUpdates="true" ApproveSupersededUpdates="false" ApproveNeededUpdates="true">
								<Products>
									<!-- Windows -->
									<add Guid="6964aab4-c5b5-43bd-a17d-ffb4346a8e1d" />
								</Products>
							</add>
						</Classifications>
					</add>
				</TargetGroups>
			</add>
		</RunSets>
	</ApplicationSettings>
</configuration>

Detailed breakdown

Server

Server lets you specify the connection settings for a server, so you can connect to a remote or local instance of WSUS.
Arguement Name Type Description
Hostname string name of the server to connect to
Port unsigned int port to connect to
Secure boolean whether to use SSL or not

NoRunSet

This is run when you don’t specify a /norunset on the command line. This follows the “apply to all” approach of V1.0.0.0, the difference being that you can specify what is applied
Arguement Name Type Description
AcceptLicenseAgreement Boolean Whether to accept a license agreement . If you set this to false and an update needs a license accepting first, it won’t be approved.
ApproveStaleUpdates Boolean Whether to approve new revisions of already approved updates.
ApproveSupersededUpdates Boolean Whether to approve an update that replaces a previous update, that has already been approved.
ApproveNeededUpdates Boolean Approve updates that are reported as needed.

RunSets

New to V1.0.0.1 is the ability to specify a runset via the command line. This allows you to set up approval settings that can be run at different times (For example if you only want to check for a specific target group, or a certain type of update)
Arguement Name Type Description
Name String Name of a runset

TargetGroups

TargetGroups are the TargetGroups defined in WSUS, the config requires a GUID which can be obtained by the ListGuids tool.

Classifications

Classifications match the Classifications defined in WSUS, the config requires a GUID which can be obtained by the ListGuids tool. It also takes the same 4 arguments regarding the approval of updates.
Arguement Name Type Description
AcceptLicenseAgreement Boolean Whether to accept a license agreement . If you set this to false and an update needs a license accepting first, it won’t be approved.
ApproveStaleUpdates Boolean Whether to approve new revisions of already approved updates
ApproveSupersededUpdates Boolean Whether to approve an update that replaces a previous update, that has already been approved.
ApproveNeededUpdates Boolean Approve updates that are reported as needed.

Products (new in V1.0.0.2)

Products match the Product Categories defined in WSUS, the config requires a GUID which can be obtained by the ListGuids tool. If the products section is missing the classification rules will be applied to ALL products.

Last edited Mar 12, 2010 at 6:50 PM by dpvreony, version 9

Comments

No comments yet.