Disconnected WSUS setup/installation

Posted on 2009-02-10
Last Modified: 2012-05-06
I am setting up a WSUS server for a disconnected network. I have both my export and import servers configured and running. My problem is I cannot figure out some way to get the external export server and the internal clients on the same page update-wise.

Because my export server has no clients attached to it, it is stating that I have 1800 updates, dating back to 2002, to download. Is there some way to tell the server to ignore updates before a certain point. All of my clients have Service Pack 3 (XP) installed. Is there a way to use that as a base line and tell the server to ignore all updates prior to SP3? Or do I simply need to download and export ALL the updates and then let my import server sort everything out?

Because of size limits on hard-drives and the logistics of transporting the updates physically on CDs, I would like to avoid having to download and export 1800 updates.
Question by:powellchristopher
    LVL 47

    Expert Comment

    For this type of situation i would use autopatcher
    LVL 47

    Expert Comment

    Here's another real good option

    both of these options can hold all updates on a DVD or less

    Author Comment

    I work in a classified environment in which software is closely monitored. I would never get approval to bring those programs in. And one reason I want to use WSUS is because I have currently have 30 desktops and multiple servers to update. WSUS allows me to push updates out from the server to the machines on the domain from one central location. It would be hell to touch every machine every time Microsoft released a security patch.
    LVL 47

    Accepted Solution

    Initial setup of wsus will act this way. After you configure your approvals and your product classifications you can run the server cleanup wizard.

    LVL 47

    Expert Comment

    you can also choose NOT to download express installation files, as they are larger

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
    Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now