Disable individual SUS?

Valued Contributor II

How does one disable the individual SU's from the SUS?

I see the checkmarks for Enabled, but they are grayed out...Am I missing
something? I don't see an Unlock icon anywhere.. I"ve tried stopping
the service... everything is always grayed out. I'm on as the local

John Wojda

Lead System Engineer, DEI

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

Page: (224)532.3447

Team Lead: Matt Beiriger
<mailto:mbeirig at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe

Mac Tip/Tricks/Self Service & Support <http://bit.ly/gMa7TB>


Valued Contributor II

Have to turn off the auto-enabling of updates... can't make any changes to which updates are offered until you do this, and press Save/Apply.
On Jan 7, 2011, at 7:13 AM, Wojda, John wrote:

Of course, if you turn off auto-enabling, the SUS won't see new updates correctly/I have to delete and rebuild my catalogs all of the time to fix this. Fun...

Valued Contributor II

So... If I disable the autoupdate... Then when I am finally ready to deploy
the Service Packs.. Then I have to rebuild the catalogs?

Having had to do that on several of our distribution point servers in the
past ­ it's not a fun process.

Valued Contributor II

That's my experience on my server... YMMV.
On Jan 7, 2011, at 8:05 AM, Wojda, John wrote:
I end up stopping the service, quitting Server Admin, deleting the contents of /etc/swupd as well as /var/db/swupd/html/content/catalogs. Re-open Server Admin, ensure the service settings are to auto-copy and auto-enable all of the updates, and start the service. This re-downloads all of the catalogs ONLY (not the updates themselves). I'll monitor the log until the sync is complete, disable the auto-update then, one-by-one, disable updates (in my case, the most recent Java updates for 10.5 and 10.6) I don't want.

If I don't do this, I can get my SUS to sync with Apple (i.e. download 10.6.6), however the update is never presented to end users/some updates to updates (iTunes/QuickTime) never show up in the Server Admin GUI. Only way I've seen this work correctly is if auto-update remains enabled, which I can't do...