Solved

Windows Update Repository

Posted on 2016-10-27
5
73 Views
Last Modified: 2016-10-27
So i have a powershell script that currently runs as a task on servers and it uses WUinstall to get updates from microsoft. However, we have a PCI zone that has servers with no internet access, Is there a way to download updates manually to create a repository i can store on the network somewhere?
0
Comment
Question by:leadtheway
  • 3
  • 2
5 Comments
 
LVL 9

Accepted Solution

by:
Scott Silva earned 500 total points
ID: 41862698
I have used a free product called WSUS offline update for equipment in locked zones, but not sure if using it will violate your PCI compliance....  
http://www.wsusoffline.net/

You will have to research if it is OK to use.
0
 
LVL 1

Author Comment

by:leadtheway
ID: 41862705
looks interesting, does it basically download to itself then manually push the updates out the specific servers?
0
 
LVL 9

Expert Comment

by:Scott Silva
ID: 41862758
You can make it pull updates for various current versions, and it can make a USB drive or dvd image you can then get into the PCi compliant subnet and run the updater... It is a manual process on the install side, but I have used it in our SCADA network for updates.
0
 
LVL 1

Author Comment

by:leadtheway
ID: 41862761
perfect. that might just do the trick
0
 
LVL 9

Expert Comment

by:Scott Silva
ID: 41862788
The other option would be to have a wsus slave server that was CAREFULLY firewalled off so it can ONLY talk to main WSUS server.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

My GPO's made for 2008 R2 servers were not allowing me to RDP into a new 2012 server by default.  That’s why I tried to allow RDP via Powershell, because I could log into a remote shell without further configuration. Below I will describe how I wen…
I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now