none
Import list of updates needed from offline WSUS into online WSUS

    Question

  • Greetings!

    I have both an offline and online WSUS server (3.0 sp2)

    They are both synced correctly (i.e. Products and Classifications / Update Files and Languages).

    Both servers are running on Windows 2008 Server Enterprise Edition x86 (not R2).

    I synced the online WSUS with Microsoft and have the initial meta data and downloads folder (WSUS\WSUScontent)

    I copied the download folder from the online WSUS to the offline WSUS and imported the metadata.

    For both online/offline the Update Files and Languages setting is set as follows:

    Store update files locally on this server

    checked Download update files to this server only when update are approved

    checked Download express installation files

    Only English is checked on the language files.

    The clients that need updates are a mix of 2003 Server, XP Pro, Win7 Pro 64bit, Server 2008 32/64 bit (not R2).

    They are reporting to the offline WSUS properly and have indicated the needed updates.

    Here is the question:

    There are a few hundred updates that are needed. Is there a way to tell the online WSUS which updates I need? I'm trying not to have to hand pick each one (that would be a pain).

    Thanks for all your help.

    Joe Hanchey

    Wednesday, February 12, 2014 10:00 PM

Answers

  • There are a few hundred updates that are needed. Is there a way to tell the online WSUS which updates I need? I'm trying not to have to hand pick each one (that would be a pain).

    No.

    And "hand-picking" for approval, as you put it, is exactly what needs to be done at the disconnected server, just as you would have to do it if the server were actually connected to the Internet.

    Of those "few hundred" needed updates, you need to determine which of those updates will actually be deployed, and to which systems. I would imagine that some of those "needed" updates are actually superseded and should not be approved at all. Some of those updates, you may not want to deploy at all, even though they're reported as "needed" -- for example, do you plan to install Silverlight onto your Domain Controllers?


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by Joe Hanchey Friday, February 14, 2014 4:54 PM
    Thursday, February 13, 2014 7:56 PM
    Moderator

All replies

  • There are a few hundred updates that are needed. Is there a way to tell the online WSUS which updates I need? I'm trying not to have to hand pick each one (that would be a pain).

    No.

    And "hand-picking" for approval, as you put it, is exactly what needs to be done at the disconnected server, just as you would have to do it if the server were actually connected to the Internet.

    Of those "few hundred" needed updates, you need to determine which of those updates will actually be deployed, and to which systems. I would imagine that some of those "needed" updates are actually superseded and should not be approved at all. Some of those updates, you may not want to deploy at all, even though they're reported as "needed" -- for example, do you plan to install Silverlight onto your Domain Controllers?


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    • Marked as answer by Joe Hanchey Friday, February 14, 2014 4:54 PM
    Thursday, February 13, 2014 7:56 PM
    Moderator
  • Ok, well I was hoping for an easier way to get updates (similar to directly using Windows Update), but this answers my question.

    Thanks for your help!

    Joe Hanchey

    Friday, February 14, 2014 4:54 PM