Disable individual SUS?

[ImAMacGuy]

How does one disable the individual SU's from the SUS?

I see the checkmarks for Enabled, but they are grayed out...Am I missing
something? I don't see an Unlock icon anywhere.. I"ve tried stopping
the service... everything is always grayed out. I'm on as the local
admin..

John Wojda

Lead System Engineer, DEI

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

Page: (224)532.3447

Team Lead: Matt Beiriger
<mailto:mbeirig at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.>

Mac Tip/Tricks/Self Service & Support <http://bit.ly/gMa7TB>

[RobertHammen]

Have to turn off the auto-enabling of updates... can't make any changes to which updates are offered until you do this, and press Save/Apply.
On Jan 7, 2011, at 7:13 AM, Wojda, John wrote:

Of course, if you turn off auto-enabling, the SUS won't see new updates correctly/I have to delete and rebuild my catalogs all of the time to fix this. Fun...

[ImAMacGuy]

So... If I disable the autoupdate... Then when I am finally ready to deploy
the Service Packs.. Then I have to rebuild the catalogs?

Having had to do that on several of our distribution point servers in the
past ­ it's not a fun process.

[RobertHammen]

That's my experience on my server... YMMV.
On Jan 7, 2011, at 8:05 AM, Wojda, John wrote:
I end up stopping the service, quitting Server Admin, deleting the contents of /etc/swupd as well as /var/db/swupd/html/content/catalogs. Re-open Server Admin, ensure the service settings are to auto-copy and auto-enable all of the updates, and start the service. This re-downloads all of the catalogs ONLY (not the updates themselves). I'll monitor the log until the sync is complete, disable the auto-update then, one-by-one, disable updates (in my case, the most recent Java updates for 10.5 and 10.6) I don't want.

If I don't do this, I can get my SUS to sync with Apple (i.e. download 10.6.6), however the update is never presented to end users/some updates to updates (iTunes/QuickTime) never show up in the Server Admin GUI. Only way I've seen this work correctly is if auto-update remains enabled, which I can't do...