Well, one AV solution should never be considered sufficient, and I think a bit of investigation would find that characterizing that update as a 'bandwidth eater' is a bit off the mark. The tool is 12MB. We already have the antivirus solution implemented and I don't need this bandwidth eater. WSUS Target Group(s) that contain only machines not on low-bandwidth connections, and approve the MSRT only for that group. Ergo, if they don't already exist, create Perspective) - personally I think the presence of the MSRT is a great reason for auto-approving 'Update Rollups' - there are, however, more significant reasons forĪnother approach, since your motiviation seems to be driven by bandwidth considerations (perphaps because of sites with constrained bandwidth issue), would be to restrict the approvals to only LAN-based target groups. You've just identified another (at least from your There is sufficient other conversations in this forum regarding the pros and cons of auto-approving the 'Update Rollups' classification. The MSRT is released into the Update Classification 'Update Rollups'.

The only way the MSRT is being downloaded and installed (automatically?) every month is because you have it configured with an automatic-approval rule (or somebody is actually approving it manually). Can anyone tell me how to disable Microsoft malicious software removal tool KB890830 from being downloaded and instaled every mounth via WSUS.