?
Solved

Disconnected WSUS setup/installation

Posted on 2009-02-10
5
Medium Priority
?
836 Views
Last Modified: 2012-05-06
I am setting up a WSUS server for a disconnected network. I have both my export and import servers configured and running. My problem is I cannot figure out some way to get the external export server and the internal clients on the same page update-wise.

Because my export server has no clients attached to it, it is stating that I have 1800 updates, dating back to 2002, to download. Is there some way to tell the server to ignore updates before a certain point. All of my clients have Service Pack 3 (XP) installed. Is there a way to use that as a base line and tell the server to ignore all updates prior to SP3? Or do I simply need to download and export ALL the updates and then let my import server sort everything out?

Because of size limits on hard-drives and the logistics of transporting the updates physically on CDs, I would like to avoid having to download and export 1800 updates.
0
Comment
Question by:powellchristopher
  • 4
5 Comments
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23619308
For this type of situation i would use autopatcher


http://www.autopatcher.com/whatsautopatcher/
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23619317
Here's another real good option


http://www.vulnerabilityassessment.co.uk/ctupdate.htm



both of these options can hold all updates on a DVD or less
0
 

Author Comment

by:powellchristopher
ID: 23619339
I work in a classified environment in which software is closely monitored. I would never get approval to bring those programs in. And one reason I want to use WSUS is because I have currently have 30 desktops and multiple servers to update. WSUS allows me to push updates out from the server to the machines on the domain from one central location. It would be hell to touch every machine every time Microsoft released a security patch.
0
 
LVL 47

Accepted Solution

by:
Donald Stewart earned 1500 total points
ID: 23619366
Initial setup of wsus will act this way. After you configure your approvals and your product classifications you can run the server cleanup wizard.



wsuscleanup.PNG
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 23619402
you can also choose NOT to download express installation files, as they are larger


http://technet.microsoft.com/en-us/library/cc708456.aspx
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
We’ve all felt that sense of false security before—locking down external access to a database or component and feeling like we’ve done all we need to do to secure company data. But that feeling is fleeting. Attacks these days can happen in many w…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question