Setup Offline WSUS Server 2012 R2

dear all,

encounter problem during deployment hope here can give me pointers.

first let me explain whole setup. there 3 wsus servers. 2 db servers 1 downstream server.

all these server don't have internet access @ all. server been harden due security reason. port 8530 allow updates.

1. both wsus_db1 , wsus_db2 is a cluster server. both installation option choose was using wis database , services.

2. downstream sever (wsus_downstream)

question (setup layout)

- should wsus_db1 consider upstream server to wsus_db2 has downstream server? using synchronize windows server update services server?

- how import offline update database the new wsus server database?

- must use sql database?

-where can download offline update database?

problem encounter (during setup)

- when wsus_downstream synchronize windows server update services server, have selected following "this replica of upstream server" when click next don't seem able connect. there error massage.

- missing product classification windows xp , server 2000 only. how can update latest product classification list.

hope can give me advise , pointer in installation.

thank & regards

melvin c

hi there

it has been while since you've posted nevertheless, let me summarise experience problem far.

we have regular lan internet access, , network isolated, not connected other networks or internet. here short version how deploy updates in our disconnected network:

prepare regular network (setup export server)

1. setup standalone wsus server in regular network using default values
2. specify products, languages , classifications want download
3. under 'update files , laugages', uncheck option "download update files server when updates approved"
4. let server synchronise , download updates (takes 1 night , requires 320 gb of storage)

then prepare disconnected network (setup import server)

1. setup standalone wsus server cancel initial setup wizard. make sure has same amout of diskspace 1 in regular network
2. configure 'update files , languages', same settings regular wsus server.
3. under 'update source , proxy server', leave option @ "synchronize microsoft update"
4. set synchronisation schedule 'synchronize manually'

now more interessting part:
how products , update database disconnected server

when install wsus server role, tool 'wsusutil.exe' installed within path:
c:\program files\update services\tools\wsusutil.exe

note: facing issues cab files got big after adding lot of products, had install kb2828185 on our win2008r2 wsus 3.0 servers, allowed change cab xml.gz files

this tool allows export metadata export server in regular network:

"c:\program files\update services\tools\wsusutil.exe" export "%destination%\export.xml.gz" "%destination%\export.log"

now import metadata on import server

"c:\program files\update services\tools\wsusutil.exe" import "%source%\export.xml.gz" "%source%\export.log

after first synchronisation, can configure products , classifications. make sure both wsus servers configured same way, might 'unable download' messages if configure different settings

you ready synchronize whole wsus content (update files) , according update-metadata. , synchronize, talking exporting usb disk, , import whole thing on disconnected server.

first synchronisation takes ages 300 gb update files have copied twice, differentials take around 45 minutes export , longer imports. copyjobs easy robocopy /mir command. installed wsus on d:\ drive, leaves me little script:

set datasource=d:\wsus\wsuscontent set destination=\\exportcomputer\usbdisk$\wsustransfer  robocopy "%datasource%" "%destination%\wsusdata" /mir /r:1 /w:1 "c:\program files\update services\tools\wsusutil.exe" export "%destination%\metadata\export.xml.gz" "%destination%\metadata\export.log"

and same thing on other side, import files , metadata disk import wsus server.

be aware - might take 24 hours, until wsus mysteriously progressed metadata , checked if files available. until then, many updates might show download status of 'the file being downloaded'.

i hope people might profit summary. feel free improve post.

good luck!

---

stefan gabriel

Windows Server  >  WSUS