Deleting updates directly from WSUS

Question

Deleting updates directly from WSUS

David Zemdegs 1,596

Greetings,
We have a bloated WSUS full with AMD and other rubbish.
Can we manually delete a bunch of updates direct from WSUS using powershell if that WSUS is a SUP for MEMCM?
Will CM work out stuff no longer exists and automatically delete metadata stored in its system? Or will the metadata hang around?
If so, can the CM metadata be deleted?

Thanks
David Z

Muthukaruppiah Muthukumar (NCS) 0 Reputation points

2023-10-23T08:18:29.5066667+00:00

You can try this PS script to delete the declined update from wsus .

$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer();

$declined = $wsus.GetUpdates([Microsoft.UpdateServices.Administration.ApprovedStates]::Declined, [DateTime]::MinValue, [DateTime]::MaxValue, $null, $null)

$declined| ForEach-Object {$wsus.DeleteUpdate($.Id.UpdateId.ToString()); Write-Host $.Title removed }

10 answers

Your answer

Muthukaruppiah Muthukumar (NCS) 0 Reputation points

2023-10-23T08:18:29.5066667+00:00

You can try this PS script to delete the declined update from wsus .

$wsus = [Microsoft.UpdateServices.Administration.AdminProxy]::GetUpdateServer();

$declined = $wsus.GetUpdates([Microsoft.UpdateServices.Administration.ApprovedStates]::Declined, [DateTime]::MinValue, [DateTime]::MaxValue, $null, $null)

$declined| ForEach-Object {$wsus.DeleteUpdate($.Id.UpdateId.ToString()); Write-Host $.Title removed }

Answer 1

Jason Sandys 31,411 Microsoft Employee Moderator

You cannot delete updates from WSUS. You can however decline update directly in WSUS. This will cause ConfigMgr to mark the update as expired and if the update is not deployed, ConfigMgr will remove the update after 7 days.

Lots of details on all of the cleanup behaviors at https://learn.microsoft.com/en-us/mem/configmgr/sum/deploy-use/software-updates-maintenance

Answer 2

Adam J. Marshall 10,281 MVP

This is actually what WSUS Automated Maintenance (WAM) does with declined updates, and Drivers.

Answer 3

David Zemdegs 1,596

The WAM removes 'obsolete' updates. How is 'obsolete' defined?

Answer 4

Adam J. Marshall 10,281 MVP

Microsoft's APIs, but that's not just what I was referring to. WAM also removes declined updates quarterly from the database - using PowerShell's APIs.

Answer 5

David Zemdegs 1,596

You are talking about a third party product?

Share via

Deleting updates directly from WSUS

10 answers

Your answer