Link to home
Start Free TrialLog in
Avatar of aschosta
aschostaFlag for United States of America

asked on

Pull updates from WSUS manually

I have around 100 laptops with XXP to configure that will not be used in a domain setting. I need to apply all MS hotfixes through Windows Update but I would like to save on time and bandwidth. Can I pull the hotfixes manually off of the WSUS server when I am setting up the laptops? Can WSUS work like a cache in this regard as opposed to having it push out the updates through GP?
Avatar of younghv
younghv
Flag of United States of America image

If you set up the registry in each box to look at the IP of your WSUS server, that is where they will look for their 'Windows Update'.
I have the key here somewhere and will post it in a couple of minutes.
Vic
To verify that the client is pointed to it, open the registry and go to key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Make sure that in that key you see WUServer: http://SERVERNAME:PORT
Avatar of aschosta

ASKER

Can I enter the IP address and port right from the IE address line or does it have to be a registry hack?
Wow - great question!
I just tried it on ours but got a permissions error - that may just be the way we are configured.
Try yours and see if it works.
One of the smart guys around here is bound to check in soon and may have the answer/method of how to make that work.
Nice idea.
Vic
I need to complete setup of WSUS on this domain, first. ISA 2000 server had the cache for these updates and when I upgraded to ISA 2004, they did not include that any longer. I look forward to your answer and I will work here, too.
Hi aschosta,

Modify this settings, copy to a .reg file and import, the laptops then pull the updates off the wsus server.

cheers

--------
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://yourserver.local"
"WUStatusServer"="http://yourserver.local"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:0000000d
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"AutoInstallMinorUpdates"=dword:00000001
"UseWUServer"=dword:00000001
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
Why not just copy the downloaded patches from the hidden (temoprary) windows update folder which is created while a windows update is being executed, and put those files on CD and run them that way?

its usually alot faster.

Regards

Pgx()
What is the name of the temp folder so I can search for it?
Avatar of bkoehler-mpr
bkoehler-mpr

Take a look at Rob Dunn's [WSUS MVP] vbscript to do this:
http://www.vbshf.com/vbshf/forum/forums/thread-view.asp?tid=199&start=1
ASKER CERTIFIED SOLUTION
Avatar of daze71
daze71

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This looks like it will work great. Do you still have to approve or accept updates on WSUS or will declined ones still be pulled?
You control the WSUS server, so what you want - the network gets.
When I saved the script posted as a .vbs file it looks like it is running well  but I get a line 3 character 1 error while it is running any idea what might be going wrong?