Integrate WSUS Offline Packages with WSUS Server

[ahmedm]

I have a domain controller with over 50 PCs with limited internet access to these PCs. I managed to download packages for Windows 7, 8 and 8.1 for these clients and Server 2008 R2, 2012 R2 for servers.

The automatic patching of each client will be really painful for each machine. What I'm trying to do is to find a way to automate patching all machines over the network. Would you provide me with best practice to do this while I'm thinking of WSUS Server but I don't have to redownload all packages from Microsoft servers to patch domain machines. Is it possible to integrate offline WSUS offline packages into WSUS Server?

[aker]

As far as I know it's not possible to import wsusou updates into WSUS, but it's possible to run wsusou from a network drive and create a sheduled task for wsusou. To implement it this way, you would have to create a sheduled task (which is running as admin), which mounts the network drive and calls .\client\cmd\DoUpdate.cmd.
For parameters: viewtopic.php?f=7&t=2691

[ahmedm]

Great, but can I do this over group policy in which the task scheduler perform the task for all users? I faced a trouble when trying to install the WSUS with elevated unattended setup for standalone machines, it restarted computer then stuck on Temp user the program created without prompting for Ctrl+Alt+Delete anymore (these machines are part of the domain). I had to login as a privileged domain user and deleted the Temp user however I still get incorrect login where the temp user is deleted without Ctrl+Alt+Delete prompt. Also, the network resource I'm accessing to install patches from is automatically disconnected (shared folders are not configured for the temp user assigned by the program), so the installation process terminate without any action after next restart.

I have another concern, some machines are running 7, some 8 and some 8.1 with Office 2007,2010,2013 installed randomly in these machines. Can I automate the process in which the task scheduler select the proper package according to installed version of Windows/Office?

[aker]

Just create one package for all. wsusou will just install the updates for the installed products.

You may use a script like this to mount the drive and call wsusou:

Code: Select all

net use Z: \\SERVER\wsusou /persist:no
Z:\cmd\DoUpdate.cmd <your parameters>


Don't use "/autoreboot" or "/shutdown", then wsusou won't create it's TempAdmin and won't shutdown or reboot the computer.