Pulling in updates from WSUS, on a non-domain PC.

[Sirbendy]

Is there any way to do this? Doing our MDT image refresh in a VM - windowsupdate on a direct out link tells me there's 104 updates available. WSUS reckons less. We do deselect some.

 

Is there any way to get the VM to update from WSUS, so it only gets our "designated" updates, without joining it to the domain, then disjoining it after?

 

Please tell me it's not a manual comparison of 100+ updates...

[sted]

yes local gpedit and set the same policies as you have on a domain pc (or regfile does same thing)

[ricki]

Hi dont forget pc,s only have limited numbers of confections. To get unlimited you will need a server. As you have been told you can change the local group policy or set a logon.bat to run from a network location that will set registry setting for all machines and do things like map drives.

 

Richard

[computer_expert]

Yep, You'll need to do a manual comparison

 

 

Only joking

 

Set the following option in the customsettings.ini file or database (if you use the database):

WSUSServer=http://WSUSServer 

 

 

If you use target groups then you will also need to set the target group either by setting the registry key or by using the local group policy.

 

Also, don't forget to remove the wsus settings before you capture the image (this includes the wsus server settings and the client ID etc (see here for some of the keys and the other 2 mentioned here))

[free780]

Just put wsusserver=http://wsusserver.domain.com in customsettings.ini

 

Use the windows update step in the task sequence. It needs enabling as by default its disabled.

[Sirbendy]

Hmm. Doing it during deployment is tempting, but the aim of the NM is to reduce time taken to get a unit back online..

 

Just set the update server in the registry and done wuauclt /resetauthorization /detectnow, and it's found 57 updates so far. Fingers crossed that'll do it.