Update from Internal WSUS Server

[WSUSUpdateAdmin]

Moin!

[...]Für unsere Softwareverteilung möchte ich ausschließlich die über WSUS freigegebenen Patches in die Betriebssystemtemplates integrieren. Gibt es eine Möglichkeit, das automatische Nachladen von der Microsoftseite zu deaktivieren?

Einen Schalter gibt es dafür derzeit nicht, weil für das Offline-Update der Microsoft-Katalog wsusscn2.cab maßgeblich ist (vgl. viewtopic.php?f=7&t=172).
Sie müssten dazu in DownloadUpdates.cmd den Block

Code: Select all

      if "%%m"=="" (
        %WGET_PATH% -nv -N -P ..\client\%1\%2 -a %DOWNLOAD_LOGFILE% %%l
        if errorlevel 1 (
          echo Warning: Download of %%j failed.
          echo %DATE% %TIME% - Warning: Download of %%j failed >>%DOWNLOAD_LOGFILE%
        )
      ) else (
        if exist ..\client\%1\%2\%%k ren ..\client\%1\%2\%%k _%%k
        %WGET_PATH% -nv --no-proxy -O ..\client\%1\%2\%%k -a %DOWNLOAD_LOGFILE% %%l
        if errorlevel 1 (
          if exist ..\client\%1\%2\%%k del ..\client\%1\%2\%%k
          if exist ..\client\%1\%2\_%%k ren ..\client\%1\%2\_%%k %%k
          %WGET_PATH% -nv -N -P ..\client\%1\%2 -a %DOWNLOAD_LOGFILE% %%m
          if errorlevel 1 (
            echo Warning: Download of %%m failed.
            echo %DATE% %TIME% - Warning: Download of %%m failed >>%DOWNLOAD_LOGFILE%
          )
        ) else (
          if exist ..\client\%1\%2\_%%k del ..\client\%1\%2\_%%k
        )
      )


(Zeile 546-566) manipulieren, etwa so:

Code: Select all

      if "%%m" NEQ "" (
        if exist ..\client\%1\%2\%%k ren ..\client\%1\%2\%%k _%%k
        %WGET_PATH% -nv --no-proxy -O ..\client\%1\%2\%%k -a %DOWNLOAD_LOGFILE% %%l
        if errorlevel 1 (
          if exist ..\client\%1\%2\%%k del ..\client\%1\%2\%%k
          if exist ..\client\%1\%2\_%%k ren ..\client\%1\%2\_%%k %%k
          echo Warning: Download of %%m failed.
          echo %DATE% %TIME% - Warning: Download of %%m failed >>%DOWNLOAD_LOGFILE%
        ) else (
          if exist ..\client\%1\%2\_%%k del ..\client\%1\%2\_%%k
        )
      )


Sie erhalten dann aber weiterhin nur diejenigen der auf Ihrem WSUS freigegebenen Patches, die auch in wsusscn2.cab aufgeführt werden, d.h. nicht die möglicherweise auf Ihrem WSUS zusätzlich freigegebenen optionalen Patches, die nicht in wsusscn2.cab enthalten sind.

Gruß
Torsten Wittrock

[WSUSUpdateAdmin]

Hi!

Despite settings my WSUS setting to the correct address (http://10.10.12.15:8530) the downloads are pulled from Microsoft. How can I stop this?

Pls. re-check your log. OS updates which are present on your WSUS should be downloaded from there, those your WSUS doesn't provide and all Office ones will be downloaded from Microsoft.

RTW

[deldadeh]

Hi, Dear Sir
I have a WSUS server in my network, I try to update wsusoffline from that, however I set WSUS server to http://wsus:80 but It refer to Microsoft web site.
Is it possible that i update from internal WSUS server?

Thanks.

[WSUSUpdateAdmin]

Hi and welcome, deldadeh,

pls. see
- viewtopic.php?f=3&t=572,
- viewtopic.php?f=3&t=471,
- viewtopic.php?f=2&t=368#p1452
and others.

Regards
Torsten Wittrock

[deldadeh]

Thanks.

[balonik]

Hi,

sorry for hijacking the thread and thanks for this great tool

I would like to ask few questions about how it works with internal WSUS Server.

I am using wsusou with an internal wsus server.
However because of some internal company policies the WSUS server does not download or provide all updates (the list is long so using excludes will be complicated). For same reasons the updates are also not installed on workstations.
My goal is to achieve that wsusou will not try to download updates from MS sites, but will only download what is "offered" on the WSUS server and skip any other updates it can't download from wsus server.
Is this possible with the current release ? If not maybe add it as a new feature if possible ?

Thanks

[WSUSUpdateAdmin]

Moin!

Beim Erstellen einer Patchsammlung werden bei Angabe eines WSUS Servers alle Patches vom lokalen Server geladen.
Laut Log werden alle dort nicht verfügbaren Patches von der MS Downloadseite geladen und zur Patchsammlung hinzugefügt.

Für unsere Softwareverteilung möchte ich ausschließlich die über WSUS freigegebenen Patches in die Betriebssystemtemplates integrieren.

Gibt es eine Möglichkeit, das automatische Nachladen von der Microsoftseite zu deaktivieren?

Jetzt ja (http://trac.wsusoffline.net/browser/trunk (r279)).

Dazu bitte in der Datei UpdateGenerator.ini folgenden Eintrag setzen:

Code: Select all

[Miscellaneous]
wsusonly=Enabled


Das macht natürlich nur Sinn, wenn auch ein WSUS konfiguriert ist.

Gruß
Torsten Wittrock

[WSUSUpdateAdmin]

Hi!

[...]My goal is to achieve that wsusou will not try to download updates from MS sites, but will only download what is "offered" on the WSUS server and skip any other updates it can't download from wsus server.
Is this possible with the current release ? If not maybe add it as a new feature if possible ?

Yes.

Please use http://trac.wsusoffline.net/browser/trunk (r279) and add the following to UpdateGenerator.ini:

Code: Select all

[Miscellaneous]
wsusonly=Enabled


Of course, this switch will only work if a WSUS is configured.

Regards
Torsten Wittrock

[aker]

I have followed this process and I am still unable to download direct from an Internal WSUS server. The network that I am on has a WSUS server on our DMZ and only this server has access to the internet, our LAN does not. I would like to download the Windows Updates using WSUSOU to apply them to our air-gapped development network. As such, I am tring to download the Updates from our DMZ WSUS server to my local machine (this local machine currently gets its updates from the DMZ server so I know the DMZ WSUS server is functioning correctly.

The process I followed is as follows
Downloaded all files from http://trac.wsusoffline.net/browser/trunk
Executed AutoCompileITScripts.cmd
Ran the created UpdateGenerator.exe
Clicked on WSUS
Entered http://<DMZ WSUS Server>
Clicked OK
Clicked Exit
Edited UpdateGenerator.ini
Appeneded to the end (in the [Miscellaneous] section)
wsusonly=Enabled
Saved
Ran UpdateGenerator.exe
Clicked Windows XP English
Clicked Start
(I checked the WSUS and it still has the DMZ WSUS Server details)

The Error I get is as follows
Resolving download.microsoft.com... failed: Unknown host.
wget: unable to resolve host address 'download.microsoft.com'

Is there something that I am missing in this process?

[WSUSUpdateAdmin]

Hi!

The computer which runs the download part of WSUS Offline Update must have access to the Internet, because Microsoft's update catalog file wsusscn2.cab is downloaded directly from their site, and several utilities in addition.
Of course you can run the download/generator part on your MS WSUS server, also scheduled (see viewtopic.php?f=7&t=120).

Regards
Torsten Wittrock