WSUS organizes Windows updates under different classifications. You can view these classifications by using the Get-WsusClassification
cmdlet. Two particularly important classifications you should check regularly are Critical Updates
and Definition Updates
. The Critical Updates
classification includes updates that address severe security flaws and zero-day vulnerabilities. The Definition Updates
classification includes definition files for Windows Defender to identify and remove malware.
These two classifications are important enough to approve them automatically. Auto-approval ensures WSUS installs these updates on client computers as soon as possible. In this recipe, you will create an auto-approval rule for these updates.