Offline Updater - Approved list from WSUS

[mcutting]

Hi - apologies if this has already been answered somewhere in this forum.

I have 18 servers in a test network that have been patched with a list of approved updates from a WSUS server. To make life much easier, I'd like to use the WOU tool to patch the live servers (the live WSUS is not ready yet), but only download and install the patches that were approved by the WSUS server.

I think I can perform this using the WSUS button, and defining the WSUS server. However, I'm seeing the below in the logs

Code: Select all

2014-10-02 13:05:28 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp45-kb2972216-x64_7d8cd1e4729a566ac04e93d97decda963905cf0c.exe [11434640/11434640] -> "../client/dotnet/x64-glb/ndp45-kb2972216-x64_7d8cd1e4729a566ac04e93d97decda963905cf0c.exe" [1]
http://wsustest/Content/B2/55935131495A53550A7C73313F72D390D1649EB2.exe:
2014-10-02 13:05:28 ERROR 404: Not Found.
2014-10-02 13:05:30 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/04/ndp40-kb2931365-x64_55935131495a53550a7c73313f72d390d1649eb2.exe [2071248/2071248] -> "../client/dotnet/x64-glb/ndp40-kb2931365-x64_55935131495a53550a7c73313f72d390d1649eb2.exe" [1]
http://wsustest/Content/AA/948B9C9F12F72D5E6F2460738202F5BEA9387DAA.exe:
2014-10-02 13:05:30 ERROR 404: Not Found.
2014-10-02 13:05:37 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/12/ndp45-kb2901118-x64_948b9c9f12f72d5e6f2460738202f5bea9387daa.exe [8397008/8397008] -> "../client/dotnet/x64-glb/ndp45-kb2901118-x64_948b9c9f12f72d5e6f2460738202f5bea9387daa.exe" [1]
http://wsustest/Content/26/2B803448722B4D0FE43F7431CC50265C0CB1C826.exe:
2014-10-02 13:05:37 ERROR 404: Not Found.
2014-10-02 13:05:41 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/08/ndp20sp2-kb2844285-v2-x64_2b803448722b4d0fe43f7431cc50265c0cb1c826.exe [4959896/4959896] -> "../client/dotnet/x64-glb/ndp20sp2-kb2844285-v2-x64_2b803448722b4d0fe43f7431cc50265c0cb1c826.exe" [1]
http://wsustest/Content/E2/F5F126738673AE9764D03FE42FEEEA68F1EDECE2.exe:
2014-10-02 13:05:41 ERROR 404: Not Found.
2014-10-02 13:05:43 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2012/12/ndp40-kb2736428-x64_f5f126738673ae9764d03fe42feeea68f1edece2.exe [2324448/2324448] -> "../client/dotnet/x64-glb/ndp40-kb2736428-x64_f5f126738673ae9764d03fe42feeea68f1edece2.exe" [1]
http://wsustest/Content/F4/C6D335C0D74FD6931C3BA47160F5D48B2E818BF4.exe:
2014-10-02 13:05:43 ERROR 404: Not Found.
2014-10-02 13:06:08 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp20sp2-kb2972214-x64_c6d335c0d74fd6931c3ba47160f5d48b2e818bf4.exe [29553336/29553336] -> "../client/dotnet/x64-glb/ndp20sp2-kb2972214-x64_c6d335c0d74fd6931c3ba47160f5d48b2e818bf4.exe" [1]
http://wsustest/Content/F3/BEDEDC7AEE671F13850CBA58B9C67C9CCABA43F3.exe:
2014-10-02 13:06:08 ERROR 404: Not Found.
2014-10-02 13:06:30 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/12/ndp45-kb2898864-x64_bededc7aee671f13850cba58b9c67c9ccaba43f3.exe [25166544/25166544] -> "../client/dotnet/x64-glb/ndp45-kb2898864-x64_bededc7aee671f13850cba58b9c67c9ccaba43f3.exe" [1]
http://wsustest/Content/94/D896D551E623EBC82370BE7C82687C2D60DF4F94.exe:
2014-10-02 13:06:30 ERROR 404: Not Found.
2014-10-02 13:06:40 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/01/ndp20sp2-kb2789643-x64_d896d551e623ebc82370be7c82687c2d60df4f94.exe [11963400/11963400] -> "../client/dotnet/x64-glb/ndp20sp2-kb2789643-x64_d896d551e623ebc82370be7c82687c2d60df4f94.exe" [1]
http://wsustest/Content/A3/5346AAB176E68995CB19159FC02DCA41996BA5A3.exe:
2014-10-02 13:06:40 ERROR 404: Not Found.
2014-10-02 13:07:16 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2012/03/ndp20sp2-kb2604092-x64_5346aab176e68995cb19159fc02dca41996ba5a3.exe [43156080/43156080] -> "../client/dotnet/x64-glb/ndp20sp2-kb2604092-x64_5346aab176e68995cb19159fc02dca41996ba5a3.exe" [1]
http://wsustest/Content/66/33610D262AC3D3779C445B4520E7D986A70B7C66.exe:
2014-10-02 13:07:16 ERROR 404: Not Found.
2014-10-02 13:07:24 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/09/ndp40-kb2858302-v2-x64_33610d262ac3d3779c445b4520e7d986a70b7c66.exe [10096264/10096264] -> "../client/dotnet/x64-glb/ndp40-kb2858302-v2-x64_33610d262ac3d3779c445b4520e7d986a70b7c66.exe" [1]
http://wsustest/Content/59/E6CAB4D934D4C425745A5862D50A17E55A7A9659.exe:
2014-10-02 13:07:24 ERROR 404: Not Found.
2014-10-02 13:07:46 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp40-kb2972215-x64_e6cab4d934d4c425745a5862d50a17e55a7a9659.exe [26886320/26886320] -> "../client/dotnet/x64-glb/ndp40-kb2972215-x64_e6cab4d934d4c425745a5862d50a17e55a7a9659.exe" [1]
http://wsustest/Content/43/D1D9B33957BBA14E31988DFDAF4F5D3B13F37943.exe:
2014-10-02 13:07:46 ERROR 404: Not Found.
2014-10-02 13:07:47 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2012/12/ndp35sp1-kb2736416-x64_d1d9b33957bba14e31988dfdaf4f5d3b13f37943.exe [1532952/1532952] -> "../client/dotnet/x64-glb/ndp35sp1-kb2736416-x64_d1d9b33957bba14e31988dfdaf4f5d3b13f37943.exe" [1]
http://wsustest/Content/41/E69006433C1006C53DA651914DC8162BBDD80D41.exe:
2014-10-02 13:07:47 ERROR 404: Not Found.
2014-10-02 13:07:49 URL:http://download.windowsupdate.com/msdownload/update/software/crup/2009/01/ndp35sp1-kb958484-x64_e69006433c1006c53da651914dc8162bbdd80d41.exe [1472352/1472352] -> "../client/dotnet/x64-glb/ndp35sp1-kb958484-x64_e69006433c1006c53da651914dc8162bbdd80d41.exe" [1]
http://wsustest/Content/26/579AFBD9190E1DD2FE50B8C5576AD4B932121C26.exe:
2014-10-02 13:07:49 ERROR 404: Not Found.
2014-10-02 13:08:00 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp20sp2-kb2894843-x64_579afbd9190e1dd2fe50b8c5576ad4b932121c26.exe [14306016/14306016] -> "../client/dotnet/x64-glb/ndp20sp2-kb2894843-x64_579afbd9190e1dd2fe50b8c5576ad4b932121c26.exe" [1]
http://wsustest/Content/D6/6076FCBB9F7DF095F2C764534CDEEE3AE14F4DD6.exe:
2014-10-02 13:08:00 ERROR 404: Not Found.
2014-10-02 13:08:16 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/09/ndp40-kb2861188-x64_6076fcbb9f7df095f2c764534cdeee3ae14f4dd6.exe [16994424/16994424] -> "../client/dotnet/x64-glb/ndp40-kb2861188-x64_6076fcbb9f7df095f2c764534cdeee3ae14f4dd6.exe" [1]
http://wsustest/Content/B0/463747772C905E1C6BB95DE7214B1DCD5745A2B0.exe:
2014-10-02 13:08:16 ERROR 404: Not Found.
2014-10-02 13:08:28 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/07/ndp45-kb2840642-v2-x64_463747772c905e1c6bb95de7214b1dcd5745a2b0.exe [13189768/13189768] -> "../client/dotnet/x64-glb/ndp45-kb2840642-v2-x64_463747772c905e1c6bb95de7214b1dcd5745a2b0.exe" [1]
http://wsustest/Content/28/8BCEAA39F0DA28E17CE593830F2B7ABD94740228.exe:
2014-10-02 13:08:28 ERROR 404: Not Found.
2014-10-02 13:08:29 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/06/ndp35sp1-kb2840629-x64_8bceaa39f0da28e17ce593830f2b7abd94740228.exe [1681544/1681544] -> "../client/dotnet/x64-glb/ndp35sp1-kb2840629-x64_8bceaa39f0da28e17ce593830f2b7abd94740228.exe" [1]
http://wsustest/Content/69/D07DBC837BA227B3493B0A2170ECFB3A03EE4369.exe:
2014-10-02 13:08:29 ERROR 404: Not Found.
2014-10-02 13:08:45 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/07/ndp40-kb2840628-v2-x64_d07dbc837ba227b3493b0a2170ecfb3a03ee4369.exe [18157704/18157704] -> "../client/dotnet/x64-glb/ndp40-kb2840628-v2-x64_d07dbc837ba227b3493b0a2170ecfb3a03ee4369.exe" [1]
http://wsustest/Content/DE/C28BC92E42F9969656B57DA03D7665AC78BFF2DE.exe:
2014-10-02 13:08:45 ERROR 404: Not Found.
2014-10-02 13:08:54 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp40-kb2894842-v2-x64_c28bc92e42f9969656b57da03d7665ac78bff2de.exe [10327776/10327776] -> "../client/dotnet/x64-glb/ndp40-kb2894842-v2-x64_c28bc92e42f9969656b57da03d7665ac78bff2de.exe" [1]
http://wsustest/Content/CF/99E49CB7E11D19A517425409D430A3DAD34BD3CF.exe:
2014-10-02 13:08:54 ERROR 404: Not Found.
2014-10-02 13:09:01 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/12/ndp45-kb2901126-x64_99e49cb7e11d19a517425409d430a3dad34bd3cf.exe [8641680/8641680] -> "../client/dotnet/x64-glb/ndp45-kb2901126-x64_99e49cb7e11d19a517425409d430a3dad34bd3cf.exe" [1]
http://wsustest/Content/BE/1392380EF7BAABD531F35EE5799C255A03B0DCBE.exe:
2014-10-02 13:09:01 ERROR 404: Not Found.
2014-10-02 13:09:17 URL:http://download.windowsupdate.com/msdownload/update/software/crup/2009/01/ndp20sp2-kb958481-x64_1392380ef7baabd531f35ee5799c255a03b0dcbe.exe [19282272/19282272] -> "../client/dotnet/x64-glb/ndp20sp2-kb958481-x64_1392380ef7baabd531f35ee5799c255a03b0dcbe.exe" [1]
http://wsustest/Content/96/0241A767909A7F52C96E211F1242AB853DA09096.exe:
2014-10-02 13:09:17 ERROR 404: Not Found.
2014-10-02 13:10:13 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2014/08/ndp30sp2-kb2973115-x64_0241a767909a7f52c96e211f1242ab853da09096.exe [39070904/39070904] -> "../client/dotnet/x64-glb/ndp30sp2-kb2973115-x64_0241a767909a7f52c96e211f1242ab853da09096.exe" [1]
http://wsustest/Content/D0/FB628E658E956629414361DF1664CFF39C5E2DD0.exe:
2014-10-02 13:10:13 ERROR 404: Not Found.
2014-10-02 13:10:24 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/12/ndp20sp2-kb2901111-x64_fb628e658e956629414361df1664cff39c5e2dd0.exe [13188312/13188312] -> "../client/dotnet/x64-glb/ndp20sp2-kb2901111-x64_fb628e658e956629414361df1664cff39c5e2dd0.exe" [1]
http://wsustest/Content/C1/77CFAD96C417BCCE3F919E6A0E29D656F9D8ADC1.exe:
2014-10-02 13:10:24 ERROR 404: Not Found.
2014-10-02 13:10:26 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2013/08/ndp35sp1-kb2861697-x64_77cfad96c417bcce3f919e6a0e29d656f9d8adc1.exe [2234504/2234504] -> "../client/dotnet/x64-glb/ndp35sp1-kb2861697-x64_77cfad96c417bcce3f919e6a0e29d656f9d8adc1.exe" [1]
http://wsustest/Content/CD/766BA6BB94F450633FAE2BAAFE58D2CBD2AC8BCD.exe:
2014-10-02 13:10:26 ERROR 404: Not Found.
2014-10-02 13:10:27 URL:http://download.windowsupdate.com/msdownload/update/software/secu/2011/07/ndp40-kb2487367-x64_766ba6bb94f450633fae2baafe58d2cbd2ac8bcd.exe [2140520/2140520] -> "../client/dotnet/x64-glb/ndp40-kb2487367-x64_766ba6bb94f450633fae2baafe58d2cbd2ac8bcd.exe" [1]
http://wsustest/Content/34/D31C1D741290E739E80935DDED951D5114A57834.exe:
2014-10-02 13:10:27 ERROR 404: Not Found.


1. Are these patches being pulled from Windows Update online ?
2. Will the list of patches made available for the offline installation still be the list approved from WSUS ?

Thanks.

[boco]

viewtopic.php?p=11364#p11364

Even after setting that switch from the above link some supportive files have to be downloaded, still.

[aker]

wsusou will download all updates, which are not provided by the WSUS server, from Microsoft.
If you want to disable this behabiour (except for a few updates, such as Service Packs, Internet Explorer...) write

Code: Select all

wsusonly=Enabled

at the end of updateGenerator.ini.

[edit]Oh, boco was faster than me...[/edit]

[mcutting]

Thanks very much.

[mcutting]

Just coming back here to another question. If the WSUS box doesn't store the updates itself, but allows the connecting client to use it's own internet connection (rather than saturate the WAN), does the offline updater only download the patches that the WSUS box has approved ?

Thanks

[aker]

He update URLs are determined from wsusscn2.cab independent from, what is approved on your WSUS server.

[mcutting]

Thanks. However, what I'm looking for clarification on is this.

If the client doesn't pull updates from wsus directly but pulls them from windows updates (only the approved patches) then does the offline updater ignore wsus and pull all updates instead of only the approved ones ? For bandwidth reasons, we do not hold the patches directly. We have approved patches from wsus and the clients download the approved updates from windows updates.

I'm trying to determine if I can proceed on this basis as I don't want untested patches installed.

Thanks.