WSUS and SCCM

Hi, I have just gone through the companies method for windows updates, and its seems amazingly labour intensive. I have yet to find out the reasons for not "just" using" wsus so can we assume this is sthe mothod of choice just looking for corners to cut.

secure environment

WSUS server out of domain just sat on adsl line.

when a list of updates gets approved by the patch release people.
we go to this machine and approve for install the releavnt updates
taking note of the url of each eg CF\238923R38JFDSJ and the KB

then they are approved in WSUS    then the folder is compared to the old one and the new files piped out to a NEw folder, thus giving me all the files i need to do this months updates.

i then usb this on to the real enviroemnt do the testing, and then it all goes in to SCCM for deployment.

when you add in the paperwork and the long list of variables xp32 xp64 2003 32 etc etc its a really big piece of work and just seems wastful of my time.  

we allso create uninstall files for each for SCCM.

so basic questions is,  do you use SCCM to deploy WSUS and if so what method do you use to get only th eupdate syou want in to sccm, (no internet connection!!)


hope that makes sense.
winodws 2003 sccm2007  
mhamerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DonNetwork AdministratorCommented:
Holy Crap! Who thought of that method ?

But seriously :) have you gone over the following


http://technet.microsoft.com/en-us/library/cc720512%28WS.10%29.aspx


http://technet.microsoft.com/en-us/library/dd939873%28WS.10%29.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ArneLoviusCommented:
do you have a requirement for an "air gap" ?

0
mhamerAuthor Commented:
Air gap is just for testing, live do have internet connection

when i say test there more integration rigs, so its our method that gest used.

Last compoany i used WSUS and it was fine,  this just sems such a ball ache to do  (because im doing it this month.

in a way the method works is secure, deals with testing double checks they uninstall etc.

but, you know when you choose a particular KB in wsus, it downloads every iteration not just say 2003 64  is that doable?

ill read links when rugrats are in bed cheers
0
Introducing the "443 Security Simplified" Podcast

This new podcast puts you inside the minds of leading white-hat hackers and security researchers. Hosts Marc Laliberte and Corey Nachreiner turn complex security concepts into easily understood and actionable insights on the latest cyber security headlines and trends.

mhamerAuthor Commented:
hi fisrt link is pretty much what we do, we have extra steps to thin out the downloads but principle is same
0
mhamerAuthor Commented:
oh, and was just told   "we" only want one delivery mechanism in live so thats where SCCm comes in rather than using WSUS seperatly.
0
DonNetwork AdministratorCommented:
".....when you choose a particular KB in wsus, it downloads every iteration not just say 2003 64  is that doable?"


WSUS only downloads approved updates, each Kb will have a different version for each OS<<<so you would have to approve each iteration.

Are you using any approval rules on the disconnected WSUS?
0
ArneLoviusCommented:
if the air gap isn't a requirement, then get rid of it :-)

at least you can then copy over the network
you can configure which operating systems you want to pull updates for in WSUS, as well as languages etc...


0
mhamerAuthor Commented:
Sorry bad phrasing
Air gap is just for testing department, but the packages get made here for deployment inline
So air gap is needed. Not wanted by anyone  just needed.  Custom requirement.

Iwilltake a closer look, But last tine u dud it.
Choose  say ms11 70  and kb1234567  right click approve

Right click file info has about 30 files. Some self contained several languages etc

It is my first time t using ways rather than making use of it. So if your saying I can filter out the other files before download then great
0
ArneLoviusCommented:
launch wsus

go to options, then

Products and Classifications & Update Files and Languages
0
mhamerAuthor Commented:
hi products and classifications and languages all set as they should be,  each of the folders has a lot of files in  (EF, AB, 12 etc) due to that same file being used over diffrent updates.

I think a clear down is in order then only new files will be visible.
0
DonNetwork AdministratorCommented:
I think you are really waisting your time trying to filter out specific OS versions of updates. Client PC's will only request updates that they need. They wont install/request updates that dont apply.


You say "hi products and classifications and languages all set as they should be,"


how many languages do you have selected?? If more than 1, are they needed?
0
mhamerAuthor Commented:
just english

we are not using WSUS for deployment, collections are used in SCCM
0
mhamerAuthor Commented:
No real answer given to "our" set up but good commenst and links.
will try change the way we do instead.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Vulnerabilities

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.