Wsus Manegement Tool

https://dl.easy2patch.com/dl/arksoft/WSUSMgmt/WSUSMgmtTool.exe

WSUS Management Tool — Free WSUS and SCCM Software Update Admin App

WSUS Management Tool is a free Windows utility that streamlines patch management for Windows Server Update Services (WSUS) and Microsoft Configuration Manager (MECM / SCCM). It delivers bulk decline/undecline/delete of updates, phased server cleanup, orphan category removal, WSUS signing certificate lifecycle management, third-party update analysis, offline HTML reporting with embedded Chart.js graphs, scheduled automation, auto-decline rules, Slack/Teams/Email/ServiceNow notifications, and full audit logging — all from a single console. Built on .NET Framework 4.7.2, portable, no installer required. Ideal for WSUS admins, SCCM engineers, and Windows patch management teams on Windows Server 2016/2019/2022/2025.

Feature	Description
Bulk Decline / Undecline / Delete	Parallel bulk action (8 threads) on filtered updates; includes undecline — which the WSUS SDK does not expose natively
Rich Text Filtering	#digits, #nodigits, #len>=5, #num>=5000000, /regex/, wildcard, and NOT toggle
Cache + Delta Refresh	On connect the list loads instantly from disk cache; only updates arrived since last sync are pulled from WSUS
Superseded Chain Viewer	View an update's superseded ancestors and descendants in a single screen
Category Manager	Detect orphan / duplicate categories (like a rogue duplicate ARKSOFT); delete updates in a category + trigger cleanup
WSUS Signing Certificate Management	Wipe a broken/private-key-less certificate from all 3 stores + SDK, install self-signed or a PFX, distribute to Root and TrustedPublisher
Phased Server Cleanup	Splits the WSUS Server Cleanup Wizard into 4 phases so it survives WCF timeouts; reports disk space freed
WSUS and SCCM Sync Trigger	One-click WSUS sync and SCCM software update sync; 4 fallback paths across WMI and PowerShell
HTML Reports (Offline)	Full WSUS report + SCCM-3rd-party report; Chart.js is embedded, so the report opens without internet
Interactive HTML Tables	Sticky headers, per-table search box, click-to-sort columns (numeric + text aware)
SCCM WMI + SQL Integration	Queries v_UpdateInfo, v_AuthListInfo, v_CIAssignment, v_DeploymentSummary in the CM_<SITECODE> database
Compliance Rollup	Required / Installed / Not Applicable / Unknown metrics from v_UpdateSummaryPerCollection at the All Systems collection
3rd Party Update Analytics	Vendor + Product breakdowns, deployed / superseded / expired distributions, dashboard charts
Auto-Decline Rules	Rule engine on Superseded / Expired / NotApproved / age / product / classification criteria; run now or schedule
Scheduled Tasks	In-app cron-like scheduler — cleanup, reports, sync, and rule engine run automatically at a chosen time
Slack / Teams / Email / ServiceNow Notifications	Push cleanup / decline / sync results to any configured channel
Audit Log	Every bulk action (decline, delete, cert change, cleanup) is written to a timestamped, user-stamped log file
CVE / MSRC Enrichment	Enrich CVEs found in Bulletin/Title fields with CVSS scores via the NVD API
Update Aging Report	Age distribution of approved updates; flags such as "no deployment in 6+ months"
Bandwidth Analysis	WSUS content directory size + classification-based footprint estimate
Compliance Drift	KB-level delta comparison between two cache/report snapshots taken at different times
Deployment Failure Root Cause	SCCM deployments sorted by error count (SQL-backed)
PDF Export	One-click HTML → PDF via Edge / Chrome / wkhtmltopdf headless
SCCM Client Force Scan	Pick machines from the auto-loaded WSUS list; trigger Software Updates Scan + Deployment Evaluation Cycle via WMI
Not-Contacted-Since Widget	List of machines that haven't reported to WSUS in the last N days
Reboot Pending Report	Machines stuck in "installed / pending reboot" state
WSUS Content Folder Analysis	Content directory size + top 20 largest subfolders
Duplicate SUG Detector	Detects Software Update Groups that share the exact same member set
SUSDB Reindex	Auto rebuild/reorganize on all SUSDB indexes with fragmentation > 5%, then sp_updatestats
Cert Store Schema Compare	Thumbprint-level compare of WSUS certificates across LocalMachine\WSUS, Root, and TrustedPublisher stores
WSUS Log Viewer	Filtered viewer for logs under %ProgramFiles%\Update Services\LogFiles\
Filter Presets	Save complex filter combinations (e.g. "Critical + last 30 days + not-approved") under a name
Grid Column Manager	Right-click to show/hide columns; layout persists to settings.json next to the exe
Dashboard	On connect, KPI cards for Total / Approved / Declined / Superseded / Computer states
Multi-Tenant Connection Switch	Session switcher across multiple WSUS/SCCM environments; each environment gets its own cache/settings
Portable, No Installer	Single exe (~600 KB) + Newtonsoft.Json.dll; cache/settings/logs live next to the exe; runs on Windows Server and Windows 10/11