[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 317
  • Last Modified:

WSUS and SCCM

Hi, I have just gone through the companies method for windows updates, and its seems amazingly labour intensive. I have yet to find out the reasons for not "just" using" wsus so can we assume this is sthe mothod of choice just looking for corners to cut.

secure environment

WSUS server out of domain just sat on adsl line.

when a list of updates gets approved by the patch release people.
we go to this machine and approve for install the releavnt updates
taking note of the url of each eg CF\238923R38JFDSJ and the KB

then they are approved in WSUS    then the folder is compared to the old one and the new files piped out to a NEw folder, thus giving me all the files i need to do this months updates.

i then usb this on to the real enviroemnt do the testing, and then it all goes in to SCCM for deployment.

when you add in the paperwork and the long list of variables xp32 xp64 2003 32 etc etc its a really big piece of work and just seems wastful of my time.  

we allso create uninstall files for each for SCCM.

so basic questions is,  do you use SCCM to deploy WSUS and if so what method do you use to get only th eupdate syou want in to sccm, (no internet connection!!)


hope that makes sense.
winodws 2003 sccm2007  
0
mhamer
Asked:
mhamer
  • 7
  • 3
  • 3
2 Solutions
 
Donald StewartNetwork AdministratorCommented:
Holy Crap! Who thought of that method ?

But seriously :) have you gone over the following


http://technet.microsoft.com/en-us/library/cc720512%28WS.10%29.aspx


http://technet.microsoft.com/en-us/library/dd939873%28WS.10%29.aspx
0
 
ArneLoviusCommented:
do you have a requirement for an "air gap" ?

0
 
mhamerAuthor Commented:
Air gap is just for testing, live do have internet connection

when i say test there more integration rigs, so its our method that gest used.

Last compoany i used WSUS and it was fine,  this just sems such a ball ache to do  (because im doing it this month.

in a way the method works is secure, deals with testing double checks they uninstall etc.

but, you know when you choose a particular KB in wsus, it downloads every iteration not just say 2003 64  is that doable?

ill read links when rugrats are in bed cheers
0
Microsoft Certification Exam 74-409

VeeamĀ® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
mhamerAuthor Commented:
hi fisrt link is pretty much what we do, we have extra steps to thin out the downloads but principle is same
0
 
mhamerAuthor Commented:
oh, and was just told   "we" only want one delivery mechanism in live so thats where SCCm comes in rather than using WSUS seperatly.
0
 
Donald StewartNetwork AdministratorCommented:
".....when you choose a particular KB in wsus, it downloads every iteration not just say 2003 64  is that doable?"


WSUS only downloads approved updates, each Kb will have a different version for each OS<<<so you would have to approve each iteration.

Are you using any approval rules on the disconnected WSUS?
0
 
ArneLoviusCommented:
if the air gap isn't a requirement, then get rid of it :-)

at least you can then copy over the network
you can configure which operating systems you want to pull updates for in WSUS, as well as languages etc...


0
 
mhamerAuthor Commented:
Sorry bad phrasing
Air gap is just for testing department, but the packages get made here for deployment inline
So air gap is needed. Not wanted by anyone  just needed.  Custom requirement.

Iwilltake a closer look, But last tine u dud it.
Choose  say ms11 70  and kb1234567  right click approve

Right click file info has about 30 files. Some self contained several languages etc

It is my first time t using ways rather than making use of it. So if your saying I can filter out the other files before download then great
0
 
ArneLoviusCommented:
launch wsus

go to options, then

Products and Classifications & Update Files and Languages
0
 
mhamerAuthor Commented:
hi products and classifications and languages all set as they should be,  each of the folders has a lot of files in  (EF, AB, 12 etc) due to that same file being used over diffrent updates.

I think a clear down is in order then only new files will be visible.
0
 
Donald StewartNetwork AdministratorCommented:
I think you are really waisting your time trying to filter out specific OS versions of updates. Client PC's will only request updates that they need. They wont install/request updates that dont apply.


You say "hi products and classifications and languages all set as they should be,"


how many languages do you have selected?? If more than 1, are they needed?
0
 
mhamerAuthor Commented:
just english

we are not using WSUS for deployment, collections are used in SCCM
0
 
mhamerAuthor Commented:
No real answer given to "our" set up but good commenst and links.
will try change the way we do instead.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 7
  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now