SUS SP1 bug

"The cumulative patches for IE are released regally and what the word cumulative says the latest supersedes all the previous ones. So when you approve an IE cumulative patch it is installed on your sus enabled clients.
When a new cumulative patch comes out it updates the previous patch and should remove the previous cumulative patches from the repository or at least the moment you approve the new one. SUS has a mechanism for updated patches, unfortunately SUS keeps previous cumulative patches approved even if you approve the new one.

So when fresh installed client queries the SUS server for updates it gets all the approved IE cumulative patches, which is waist of bandwidth and deploy time.

Microsoft confirmed that this is an issue with SUS 1.0 and will be fixed in SUS 2.0 which is scheduled for release Q1 2004.

To work around this issue the SUS admin should disapprove previous IE cumulative patches when approving a later IE cumulative patch."

B i n k - SUS bug