locked
Export updates from WSUS and import into a disconnected network RRS feed

  • Question

  • HI All.

    I am sitting with a tricky one.

    I need to export/download the updates on our current local wsus server which is a downstream server from another site.

    I have a server on a isolated network that i need to install updates on.

    Now the updates that was approved by corporate is the only updates i can install and is currently sitting on the wsus server.

    How do i export these updates from the wsus server for standalone installation on o app server?

    As i read up on this i understand i can only export the metadata (contain all the updates) to another wsus server.

    But that is not going to work. I need the installation files.

    Any help on this. 


    Wednesday, September 3, 2014 1:23 PM

Answers

  • Hi,

    We can copy the update files manually.

    To copy local files from the export server to the import server, please follow the steps below,

    1. On the export server, navigate to the folder where software updates and the license terms for software updates are stored. By default, WSUS stores the files at <WSUSInstallationDrive>\WSUS\WSUSContent\, where WSUSInstallationDrive is the drive on which WSUS is installed.
    2. Copy all files and folders from this drive to the WSUSContent folder on the import server.

    For detailed information about how to synchronize updates using export and import, please refer to the link below,

    How to Synchronize Updates Using Export and Import

    http://technet.microsoft.com/en-us/library/bb680473.aspx

    Best Regards.



    Steven Lee

    TechNet Community Support

    Thursday, September 4, 2014 9:01 AM
  • What i need is to export the updates out of wsus (as windows installer file) in order for me to copy it on a external storage for manual installation on that stand alone server.

    No can do.

    You WILL need to install a WSUS server on your isolated network, and then use the procedures documented in Configuring a Disconnected Network to Receive Updates to transfer the updates/content from the connected server to the disconnected server.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.


    • Marked as answer by Ben Herila [MSFT] Friday, September 5, 2014 11:42 PM
    • Edited by Lawrence Garvin Saturday, September 6, 2014 4:11 PM Added the hyperlink I meant to include the first time.
    Friday, September 5, 2014 3:27 AM
  • Lawrence's answer is right. You can definitely use the wsusutil.exe import and export commands to export the metadata from the server that IS internet-connected and import it on the server that is NOT internet-connected. The WSUS Content directory (located wherever you configured it to be) can simply be copied over to the new server.

    You should follow the instructions in the aforementioned Technet article for specific steps. This is the only supported way of moving content between disconnected networks.

    Thanks,
    Ben Herila
    Program Manager, Windows Server

    Friday, September 5, 2014 11:42 PM

All replies

  • Hi,

    We can copy the update files manually.

    To copy local files from the export server to the import server, please follow the steps below,

    1. On the export server, navigate to the folder where software updates and the license terms for software updates are stored. By default, WSUS stores the files at <WSUSInstallationDrive>\WSUS\WSUSContent\, where WSUSInstallationDrive is the drive on which WSUS is installed.
    2. Copy all files and folders from this drive to the WSUSContent folder on the import server.

    For detailed information about how to synchronize updates using export and import, please refer to the link below,

    How to Synchronize Updates Using Export and Import

    http://technet.microsoft.com/en-us/library/bb680473.aspx

    Best Regards.



    Steven Lee

    TechNet Community Support

    Thursday, September 4, 2014 9:01 AM
  • HI Steven.

    Thank you for your input.

    Unfortunately this will not help me.

    This is to copy the update DB to another wsus server.

    The server i need the updates for is on a stand alone network running security applications and print server for that network. There is no wsus server on that network. 

    What i need is to export the updates out of wsus (as windows installer file) in order for me to copy it on a external storage for manual installation on that stand alone server.

    The server is not part of a domain, nor does it have internet access. this is a high security site.

    is it at all possible to do? 


    Thursday, September 4, 2014 9:57 AM
  • What i need is to export the updates out of wsus (as windows installer file) in order for me to copy it on a external storage for manual installation on that stand alone server.

    No can do.

    You WILL need to install a WSUS server on your isolated network, and then use the procedures documented in Configuring a Disconnected Network to Receive Updates to transfer the updates/content from the connected server to the disconnected server.


    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.


    • Marked as answer by Ben Herila [MSFT] Friday, September 5, 2014 11:42 PM
    • Edited by Lawrence Garvin Saturday, September 6, 2014 4:11 PM Added the hyperlink I meant to include the first time.
    Friday, September 5, 2014 3:27 AM
  • How to Synchronize Updates Using Export and Import

    http://technet.microsoft.com/en-us/library/bb680473.aspx

    This article is from the Configuration Manager 2007 documentation and does not apply to this scenario on so many levels.

    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

    Friday, September 5, 2014 3:28 AM
  • Hi,

    Agree with Lawrence, we can't manually install the updates file exported from WSUS server.

    If we really want to install these update manually, we can download the updates from Microsoft Update Catalog.

    Here is the address,

    https://catalog.update.microsoft.com/v7/site/Home.aspx

    Best Regards.



    Steven Lee

    TechNet Community Support

    Friday, September 5, 2014 7:16 AM
  • Lawrence's answer is right. You can definitely use the wsusutil.exe import and export commands to export the metadata from the server that IS internet-connected and import it on the server that is NOT internet-connected. The WSUS Content directory (located wherever you configured it to be) can simply be copied over to the new server.

    You should follow the instructions in the aforementioned Technet article for specific steps. This is the only supported way of moving content between disconnected networks.

    Thanks,
    Ben Herila
    Program Manager, Windows Server

    Friday, September 5, 2014 11:42 PM