An update is available to enable automatic approval of definition updates and to fix two problems in the Update Services component of Windows Small Business Server 2003 R2

INTRODUCTION

An update is available for the Update Services component of Microsoft Windows Small Business Server 2003 R2. This update enables the automatic approval of definition updates. This update also fixes two other problems in Update Services. These problems are described in the "More information" section.

More Information

Update information

Automatic approval of definition updates

In a Windows Small Business Server 2003 R2-based domain, client computers can obtain definition updates from Update Services. Definition updates include Windows Defender updates, Microsoft Exchange Server phishing filters, and other maintenance updates. Currently, the definition updates that have arrived remain in the Waiting for Review node. Administrators must manually approve these definition updates. However, definition updates may be released very frequently. Therefore, you may have to use lots of administrative resources to manually approve these definition updates. Additionally, the installation of important definition updates may be delayed.

After you apply this update, Update Services automatically approves the definition updates that are in the Definition Updates category. This change in design reduces the need for administrative resources, helps secure the network, and improves efficiency when you manage updates.

Problems that this update fixes

Problem 1

When the update level is set to Low, Update Services is expected to automatically approve the updates that are in the Security Updates category. However, Update Services automatically approves only those updates that are in the Critical Updates category. After you apply this update, the automatic approval behavior for the Low update level works as expected. The following table describes how this hotfix changes the automatic approval behavior of all update levels:

Update level	The automatic approval behavior before you apply this hotfix	The automatic approval behavior after you apply this hotfix
High	Automatically approves critical updates, security updates, and service packs.	Automatically approves critical updates, security updates, service packs, and definition updates.
Medium (Recommended)	Automatically approves critical updates and security updates, but not service packs.	Automatically approves critical updates, security updates, and definition updates, but not service packs.
Low	Automatically approves critical updates. NoteIn this configuration, Update Services is expected to automatically approve security updates instead.	Automatically approves security updates and definition updates, but not critical updates or service packs.
Notify only	Deletes the auto-approval rule for server updates. The detection rule remains in effect. Administrators can see what updates are available, and they can list the required updates.	No change.

Note When the update level is set to Low, to Medium, or to High, definition updates will be automatically approved.

Problem 2

Consider the following scenario:

You are using Windows Small Business Server 2003 R2.
You have not upgraded Update Services to Windows Server Update Services (WSUS) 3.0.

In this scenario, some updates may not be synchronized as expected. Update Services does not synchronize product categories that have been recently created on Microsoft Update.

For example, assume that WSUS for Windows Small Business Server 2003 R2 was installed before Windows Vista was released in November 2006. Even though the All Microsoft Products category is selected in the WSUS Admin Console, the Windows Vista updates are not synchronized. This problem remains until you manually clear this category, and then you reselect it.

How to obtain this update

This update is available from the Windows Update Web site:

http://update.microsoft.com

Prerequisites

To apply this hotfix, you must be running Windows Small Business Server 2003 R2.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time	Platform
Autoapprove.exe	5.2.3580.7	79,272	7-Aug-2007	14:55	x86

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates