Importing Updates to an Offline WSUS Server

Sign up to access this lesson

Click here to sign up and get access to this lesson!

Saving Progress...

In this lecture, I want to talk to you about importing updates to a WSUS server that does not have Internet connectivity.

Generally, the way this works is that you have a network that contains sensitive data, and is so sensitive that it's actually better to keep that computer network disconnected from the Internet.

You may have 100 servers and thousands of clients that need to be patched, and the best way to do this is with a WSUS server, so you set up a WSUS server, and then on that WSUS server, it can't reach Microsoft.com.

The way you get around this is that you set up a WSUS server that has Internet connectivity in a separate network, completely separate from this disconnected network, and on that WSUS server that has Internet connectivity you download all of your updates, you synchronize to Microsoft.com and then you export those updates and transfer them over to the disconnected network, typically with an external hard drive and then you import these updates to the disconnected WSUS server.

So essentially you are just manually importing these updates to this disconnected WSUS server. Generally, you will do this once a month on every Patch Tuesday or after, and that way you are able to keep your WSUS clients, in your disconnected network, up to date.

Let’s see how we can do this.

On the IPWSUS01 server, I am going to export the updates from the server. Now, that’s a two-step process. First, we are going to copy these files from the E:\WSUSUpdates folder, which is actually holding all the actual files. We will copy that folder to an external media so we can get it over to the disconnected WSUS server.

Next, open a Command Prompt window and choose to Run as administrator.

Type cd “C:\Program Files\Update Services\Tools” and type dir.

We will be using the WsusUtil.exe program.

Type WsusUtil.exe export command and press Enter. We will see information about the parameter for the command.

We need to specify a package and a log file. This package, make it in a .xml.gz extension.

Type the following command WsusUtil.exe export 22MAR2018_wsus_export.xml.gz 22MAR2018_wsus_export.log and press Enter.

We name it based on the date and the file content with the .xml.gz extension to avoid errors when exporting to CAB files due to the size of the file we generate. The same naming convention for the log file

Open File Explorer and navigate to C:\ > Program Files > Update Services > Tools. We can see the WsusUtil.exe export 22MAR2018_wsus_export.xml.gz file is being created with a log file.

We are not actually exporting the updates right now, we are just exporting the metadata for these updates. This will help our import server to know what updates we have available. This process might take a while to complete.

Meanwhile, I am going to compress the WSUSUpdates folder by right-clicking the folder and choosing Send to and Compressed (zipped) folder.

This compressed file will be transferred to an external hard drive with the WsusUtil.exe export 22MAR2018_wsus_export.xml.gz file.

After a while, in our command prompt window, we will see a message that All updates are successfully exported.

Checking on our compressed file, it will also be done.

And our .xml.gz file will also be completed.

We can compress these two files together as well. Basically, the purpose is to get these files easily to the target server.

Now, to import, we are located on IPWSUS03 server, which is a server on the disconnected network.

Sign up to access the rest of this lesson

You must either log in or sign up to access this lesson.

Saving Progress...

0 0 votes
Lesson Rating
Subscribe
Notify of
5 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
profile avatar
venkatas(@venkatas)
Points: 45
21 days ago

Dear Server Academy,

I want to WSUS offline configuration course please let me know how can i reach to you.

This my details
Siva
Email id : <– Edited email for privacy –>

Last edited 21 days ago by Ricardo P
profile avatar
Ricardo P(@ricardop)
Admin
Power Student
Points: 17376
Reply to  venkatas
21 days ago

Hi profile avatar venkata sivakumar pilli

The WSUS offline configuration is just one part of the course. We don’t think we need one entire course for the topic. What are you looking for in a course like that?

Thank you,

Ricardo

profile avatar
venkatas(@venkatas)
Points: 45
Reply to  Ricardo P
15 days ago

Hi Ricardo P,

Good Evening,

My office network is isolated so we need to install offline WSUS for Windows patching activity so i want to offline WSUS configuration course only.

i want to documents,Videos or course for offline WSUS configuration only.

Please let me know how much can i pay for that.

Thank you,
Siva.
My email id : (editing email address for privacy)

Last edited 15 days ago by Ricardo P
profile avatar
Ricardo P(@ricardop)
Admin
Power Student
Points: 17376
Reply to  venkatas
15 days ago

I know what you mean. Unfortunately, we don’t have offline video courses.

profile avatar
venkatas(@venkatas)
Points: 45
Reply to  Ricardo P
10 days ago

Dear Ricardo P,

Oh please let me know what i can do for the course.

if it is online or offline there is no issue.

Thank you,

Installing and Configuring Windows Server Update Services (WSUS)

0%

0/1 Lessons

Introduction

• 4min

0 / 1 lessons complete

Optional Lab Setup

• 44min

0 / 5 lessons complete

Installation and Configuring WSUS (Windows Server Update Services)

• 1hr 36min

0 / 5 lessons complete

How to use WSUS

• 46min

0 / 4 lessons complete

WSUS Troubleshooting

• 11min

0 / 4 lessons complete

Advanced WSUS Administration

• 57min

0 / 4 lessons complete

Course Conclusion

• 1min

0 / 1 lessons complete