Download only whitelisted KB's

[maul0r]

Good Morning!
I have a scenario where a company tests every single update and either approves it or it doesn't. This is due to a lot of custom software and legacy software.
I have a list of whitelisted KB's and I would like to ensure that only those are downloaded.
I would like to use WSUS offline updater for that because of its simple to use download and update process.
In particular I am trying to do this the win2012R2 x64 Platform for now.

If I understood correctly, the first step is to enter the whitelisted KB's in the following file:

Code: Select all

.\wsusoffline\client\static\StaticUpdateIds-w63-x64.txt

Do I have to do anything else in order to disable the dynamic update search process and ensure that really those updates are downloaded?
If updates are blacklisted, but also whitelisted, which settings takes precedence?
Can I verify that?
Can I do the same thing for .net framework 3.5 and 4?
Any other tips or hints that you may have?
Thanks for your help!

[maul0r]

No Ideas? No Pointers?

[Denniss]

Is your company using a WSUS server?
viewtopic.php?f=2&t=694

[maul0r]

Hi!
Yes they do have one, but updates come from SSCM. However, that has proven to be unreliable. In order to jumpstart new VMs, I want to try wsus offline.

[WSUSUpdateAdmin]

Hi.

Both "DownloadUpdates.cmd" and "DoUpdate.cmd" support the "/skipdynamic" switch, so you have full control about what's downloaded and installed using the whitelists you specify in ...\static\custom for download and ...\client\static\custom for installation.

If you use the GUIs, you may set the "skipdynamic" option in the [Miscellaneous] section of UpdateGenerator.ini and in the [Installation] section of UpdateInstaller.ini.

Regards
Torsten Wittrock