Download updates form WSUS - Client Side Targeting

[Kentril]

Hello, I'd like to ask, how exactly wsus offline downloads updates from our wsus server. Because we are using client side targeting. Exists any parameters for CST? Does WSUS offline download ONLY updates which are approved? Or Approved for All computers? Thank you for any replay.

Jiri

[aker]

wsusou will download all relevant updates existing on your WSUS server.
If you want it to download only approved ones: assure, that only approved ones are on your WSUS.
You need to add "wsusonly=Enabled" to the "[Miscellaneous]"-section of your UpdateGenerator.ini.

If you need to exclude some of the static updates, enter the KB-number into: .\exclude\custom\ExcludeListForce-all.txt
Remeber, that some updates are required to install others.

[Kentril]

Hello, thank you for post. So it's not possible downloading only approved updates? and what about declined updates?

It's good thing, because we have production and testing environment. I have script, which approve 1 week old critical and security updates. Its stupid having two servers (for testing and prodution envi), and sync between them. It always keep trouble and eeror syncing between them.
So probably doesnt any params which defined downloading 1 week old (and older) updates?

Thank you

Jiri

[aker]

It is possible, if the WSUS just provides approved ones.

There is currently no parameter (or at least I don't know any) allowing to specify the age/approval state/what else. There might be an undocumented API, which allows that, but I don't know it.

My suggestion: ensure that the WSUS just downloaded the approved updates, than using the wsusonly-switch will do, what you want.