We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

Disconnected WSUS setup/installation

Medium Priority
859 Views
Last Modified: 2012-05-06
I am setting up a WSUS server for a disconnected network. I have both my export and import servers configured and running. My problem is I cannot figure out some way to get the external export server and the internal clients on the same page update-wise.

Because my export server has no clients attached to it, it is stating that I have 1800 updates, dating back to 2002, to download. Is there some way to tell the server to ignore updates before a certain point. All of my clients have Service Pack 3 (XP) installed. Is there a way to use that as a base line and tell the server to ignore all updates prior to SP3? Or do I simply need to download and export ALL the updates and then let my import server sort everything out?

Because of size limits on hard-drives and the logistics of transporting the updates physically on CDs, I would like to avoid having to download and export 1800 updates.
Comment
Watch Question

DonNetwork Administrator
CERTIFIED EXPERT

Commented:
For this type of situation i would use autopatcher


http://www.autopatcher.com/whatsautopatcher/
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
Here's another real good option


http://www.vulnerabilityassessment.co.uk/ctupdate.htm



both of these options can hold all updates on a DVD or less

Author

Commented:
I work in a classified environment in which software is closely monitored. I would never get approval to bring those programs in. And one reason I want to use WSUS is because I have currently have 30 desktops and multiple servers to update. WSUS allows me to push updates out from the server to the machines on the domain from one central location. It would be hell to touch every machine every time Microsoft released a security patch.
Network Administrator
CERTIFIED EXPERT
Commented:
Initial setup of wsus will act this way. After you configure your approvals and your product classifications you can run the server cleanup wizard.



wsuscleanup.PNG

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
DonNetwork Administrator
CERTIFIED EXPERT

Commented:
you can also choose NOT to download express installation files, as they are larger


http://technet.microsoft.com/en-us/library/cc708456.aspx
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.