I'm running WSUS on Windows Server 2012 R2 Standard Edition build 9600. I have some troubles understanding how approvals inheritance works. According to Microsoft Documentation when we approve multiple updates,these updates are not approved for the child groups unless we choose the Apply to Children option.

However when i approve multiple updates for a group, these updates are also approved for child groups even when the showed option for the subgroups is Keep existing approvals.

The approved updates become available for the clients in the subgroups and are displayed as inherited for the subgroups in the reports. Any help would be greatly appreciated. Thank you.


The approval setting for the child groups are not actually changing in this scenario; they remain "Same as Parent". It is just that when the approval is "Same as Parent" the console shows the parent setting with a note that the setting is inherited.

If you have explicitly changed the setting for a child group to anything other than "Same as Parent" then changing the setting for the parent group will not affect the child group.

The "Apply to Children" option changes the setting for all child groups to "Same as Parent".

  • Thank you. So if i understand correctly the approvals are inherited even if the showed option "Keep existing approvals" (in grey) is showed? – Othman Oct 28 '14 at 23:51
  • If "Keep existing approvals" is selected for a child group, then if the existing approval setting for the child group is inherited, the new approval setting will be inherited. If the existing approval setting for the child group is not inherited, it will not be changed. – Harry Johnston Oct 29 '14 at 0:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.