WSUS2 auto-approved it

I just got back in the office, after a day out and found a machine I was half way through configuring prompting to patch. So I checked it out, and found this... then as I'd never approved any form of Windows Search through our WSUS I checked the settings there.

It'd been automatically downloaded, and approved for installation on all my machine groups without any intervention by us. If we'd had it set to install patches every night, then I'd now be having to clean it up.

That's what people should be annoyed about, the fact that MS bypassed the reviewing stage that any serious sysadmin would go through with any changes to their systems. That they took it on themselves that this would be an improvement to hundreds of servers who never have anyone on the console and so never even use it.

If it had gotten loose, I can imagine it would be currently using a hell of a lot of cycles indexing the TB of data it would now of found.