Re: Using Windows Update without an internet connection

Forwarded to microsoft.public.windows.server.update_services newsgroup, if
only to share the joy.
--
~PA Bear

luke wrote:
> Hi, I would like to know how it is possible update the database for
> Windows
> Server Update Server without connecting the server to the internet.
>
> We do have a computer with internet access but it is not connected to the
> rest of the network.
>
> Any ideas?

On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear" <> wrote:

>Forwarded to microsoft.public.windows.server.update_services newsgroup, if
>only to share the joy.
luke wrote:
> Hi, I would like to know how it is possible update the database for
> Windows
> Server Update Server without connecting the server to the internet.
>
> We do have a computer with internet access but it is not connected to the
> rest of the network.
>
> Any ideas?

Read the WSUS deployment guide. There is a step by step guide to WSUS on a
disconnected network. Basically you sync a WSUS from MS and then copy the data
to the disconnected server.
http://www.microsoft.com/windowsserv...oads/WSUS.mspx
--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.

[I told you there'd be joy to share...]

luke wrote:
> Thanks dave but this is only helpfull if I have another server which I can
> connect to the network.
>
> The setup is Windows 2003 Business Server, 12 windows XP professional SP2
> pcs on a network not connected, and not wanting to be connected to the
> internet.
>
> One Windows XP Professional with an internet connection soley used for
> browsing the internet and e-mail.
>
> Surely there must be a file(s) of some kind where I can download the
> latest
> updates from the internet machine, put onto my 1GB keyfob and copy/extract
> onto the server every 2 months or so.
>
>
>
> "Dave Mills" wrote:
>
>> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear" <>
>> wrote:
>>
>>> Forwarded to microsoft.public.windows.server.update_services newsgroup,
>>> if
>>> only to share the joy.
>> luke wrote:
>>> Hi, I would like to know how it is possible update the database for
>>> Windows
>>> Server Update Server without connecting the server to the internet.
>>>
>>> We do have a computer with internet access but it is not connected to
>>> the
>>> rest of the network.
>>>
>>> Any ideas?
>>
>> Read the WSUS deployment guide. There is a step by step guide to WSUS on
>> a
>> disconnected network. Basically you sync a WSUS from MS and then copy the
>> data to the disconnected server.
>> http://www.microsoft.com/windowsserv...oads/WSUS.mspx
>> --
>> Dave Mills
>> There are 10 type of people, those that understand binary and those that
>> don't.
>>
>
> Thanks Dave, but t I don't have a server on the network to sync with
> microsoft.
>
> the setup is Small Business Server 2003

Simply put, NO.

At some point you have to connect a WSUS server to the internet.

You have 3 choices. Connect the WSUS server to the intenet every couple
of months or get a Technet subscription and get the patches on CD, and
apply them manually.

1) Put another NIC in your SBS server and connect it to the internet
overnight to sync WSUS once in a while.

2) Build a new server for WSUS, it really needs only a decent workstation
class computer running W2K3. Disconnect WSUS from your network, connect
to the 'net and sync. Disconnect from the 'net and back on your LAN and
let WSUS do it's thing.

3) Install W2K3 on the workstation you use to access the internet and
install WSUS. Let it sync as often as it wants. Once in a while, burn the
data to CD and move it to the WSUS server that updates your network as
per:
http://www.microsoft.com/windowsserv.../downloads/WSU
S.mspx

=?Utf-8?B?bHVrZQ==?= <> wrote in
news:92611454-7400-4F1A-9BE5-:

> your not wrong PA, four more hours of reading and still no closer.
>
> There is the WSUSScan.cab file which appears to be for WSUS, but I
> cannot find any way of using it.
>
> I have tried to extract the file into various directories but there
> has been no detail added to the WSUS console.
>
> Has anybody had any experience with this file? Am I right in thinking
> it is supposed to enable you to do an offline scan and see whta
> security patches are missing?
>
> "PA Bear" wrote:
>
>> [I told you there'd be joy to share...]
>>
>> luke wrote:
>> > Thanks dave but this is only helpfull if I have another server
>> > which I can connect to the network.
>> >
>> > The setup is Windows 2003 Business Server, 12 windows XP
>> > professional SP2 pcs on a network not connected, and not wanting to
>> > be connected to the internet.
>> >
>> > One Windows XP Professional with an internet connection soley used
>> > for browsing the internet and e-mail.
>> >
>> > Surely there must be a file(s) of some kind where I can download
>> > the latest
>> > updates from the internet machine, put onto my 1GB keyfob and
>> > copy/extract onto the server every 2 months or so.
>> >
>> >
>> >
>> > "Dave Mills" wrote:
>> >
>> >> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear"
>> >> <> wrote:
>> >>
>> >>> Forwarded to microsoft.public.windows.server.update_services
>> >>> newsgroup, if
>> >>> only to share the joy.
>> >> luke wrote:
>> >>> Hi, I would like to know how it is possible update the database
>> >>> for Windows
>> >>> Server Update Server without connecting the server to the
>> >>> internet.
>> >>>
>> >>> We do have a computer with internet access but it is not
>> >>> connected to the
>> >>> rest of the network.
>> >>>
>> >>> Any ideas?
>> >>
>> >> Read the WSUS deployment guide. There is a step by step guide to
>> >> WSUS on a
>> >> disconnected network. Basically you sync a WSUS from MS and then
>> >> copy the data to the disconnected server.
>> >> http://www.microsoft.com/windowsserv...rvices/downloa
>> >> ds/WSUS.mspx --
>> >> Dave Mills
>> >> There are 10 type of people, those that understand binary and
>> >> those that don't.
>> >>
>> >
>> > Thanks Dave, but t I don't have a server on the network to sync
>> > with microsoft.
>> >
>> > the setup is Small Business Server 2003
>>
>>
>

> Think the cheapest option will be to install W2k on the internet machine,
> saves all the bother of a firewall and the cost of installing antivirus
> software on the server or all worksations.

Wow. You know you can purchase AV for commercial use at around $9 a
station if you look around.

If you search NewEgg for Antivirus OEM;

http://www.newegg.com/Product/Produc...&Go.x=0&Go.y=0

$6 for one vendor's.

Do us all a favor - install Antivirus. I see infected PC's hit my
firewall non-stop due to people not thinking they need antivirus.

Maybe you are right. I've done work on networks that didn't have AV
and were connected to the Internet, and some have no viruses or
malware. But it's cheap insurance.

Install AV, and bridge your network connected server with both networks
- no routing between them.



Another idea -- install VMWare Server (free) on two machines. This
will install onto XP PRO for example, though it is not supported.
Step #1) Install VMWare on your Internet PC. Install WSUS and get it
up to date. Step #2) Install VMWare on your LAN PC. Copy the VMWare
files from step#1 to the PC on the LAN. Fire it up inside VMWare on
the LAN. Once a month, do the same copy. That would require more
than 1GB of flash drive. Might be better off with a USB hard drive.

=?Utf-8?B?bHVrZQ==?= <> wrote in
news:EAEE4739-CA56-40D7-B199-:

> Thanks Asher_N,
>
> I'll tell the boss the good news, and that he has got to part with
> some more money.
>
> Think the cheapest option will be to install W2k on the internet
> machine, saves all the bother of a firewall and the cost of installing
> antivirus software on the server or all worksations.
>
> thanks again
>

Do yourself a favor. Install AV. And install at least a SOHO 'router' on
your internet comnection.


> "Asher_N" wrote:
>
>> Simply put, NO.
>>
>> At some point you have to connect a WSUS server to the internet.
>>
>> You have 3 choices. Connect the WSUS server to the intenet every
>> couple of months or get a Technet subscription and get the patches on
>> CD, and apply them manually.
>>
>> 1) Put another NIC in your SBS server and connect it to the internet
>> overnight to sync WSUS once in a while.
>>
>> 2) Build a new server for WSUS, it really needs only a decent
>> workstation class computer running W2K3. Disconnect WSUS from your
>> network, connect to the 'net and sync. Disconnect from the 'net and
>> back on your LAN and let WSUS do it's thing.
>>
>> 3) Install W2K3 on the workstation you use to access the internet and
>> install WSUS. Let it sync as often as it wants. Once in a while, burn
>> the data to CD and move it to the WSUS server that updates your
>> network as per:
>> http://www.microsoft.com/windowsserv...ces/downloads/
>> WSU S.mspx
>>
>> =?Utf-8?B?bHVrZQ==?= <> wrote in
>> news:92611454-7400-4F1A-9BE5-:
>>
>> > your not wrong PA, four more hours of reading and still no closer.
>> >
>> > There is the WSUSScan.cab file which appears to be for WSUS, but I
>> > cannot find any way of using it.
>> >
>> > I have tried to extract the file into various directories but there
>> > has been no detail added to the WSUS console.
>> >
>> > Has anybody had any experience with this file? Am I right in
>> > thinking it is supposed to enable you to do an offline scan and see
>> > whta security patches are missing?
>> >
>> > "PA Bear" wrote:
>> >
>> >> [I told you there'd be joy to share...]
>> >>
>> >> luke wrote:
>> >> > Thanks dave but this is only helpfull if I have another server
>> >> > which I can connect to the network.
>> >> >
>> >> > The setup is Windows 2003 Business Server, 12 windows XP
>> >> > professional SP2 pcs on a network not connected, and not wanting
>> >> > to be connected to the internet.
>> >> >
>> >> > One Windows XP Professional with an internet connection soley
>> >> > used for browsing the internet and e-mail.
>> >> >
>> >> > Surely there must be a file(s) of some kind where I can download
>> >> > the latest
>> >> > updates from the internet machine, put onto my 1GB keyfob and
>> >> > copy/extract onto the server every 2 months or so.
>> >> >
>> >> >
>> >> >
>> >> > "Dave Mills" wrote:
>> >> >
>> >> >> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear"
>> >> >> <> wrote:
>> >> >>
>> >> >>> Forwarded to microsoft.public.windows.server.update_services
>> >> >>> newsgroup, if
>> >> >>> only to share the joy.
>> >> >> luke wrote:
>> >> >>> Hi, I would like to know how it is possible update the
>> >> >>> database for Windows
>> >> >>> Server Update Server without connecting the server to the
>> >> >>> internet.
>> >> >>>
>> >> >>> We do have a computer with internet access but it is not
>> >> >>> connected to the
>> >> >>> rest of the network.
>> >> >>>
>> >> >>> Any ideas?
>> >> >>
>> >> >> Read the WSUS deployment guide. There is a step by step guide
>> >> >> to WSUS on a
>> >> >> disconnected network. Basically you sync a WSUS from MS and
>> >> >> then copy the data to the disconnected server.
>> >> >> http://www.microsoft.com/windowsserv...eservices/down
>> >> >> loa ds/WSUS.mspx --
>> >> >> Dave Mills
>> >> >> There are 10 type of people, those that understand binary and
>> >> >> those that don't.
>> >> >>
>> >> >
>> >> > Thanks Dave, but t I don't have a server on the network to sync
>> >> > with microsoft.
>> >> >
>> >> > the setup is Small Business Server 2003
>> >>
>> >>
>> >
>>
>>

<sigh>

luke wrote:
> Thanks Asher_N,
>
> I'll tell the boss the good news, and that he has got to part with some
> more money.
>
> Think the cheapest option will be to install W2k on the internet machine,
> saves all the bother of a firewall and the cost of installing antivirus
> software on the server or all worksations.
>
> thanks again
>
> "Asher_N" wrote:
>
>> Simply put, NO.
>>
>> At some point you have to connect a WSUS server to the internet.
>>
>> You have 3 choices. Connect the WSUS server to the intenet every couple
>> of months or get a Technet subscription and get the patches on CD, and
>> apply them manually.
>>
>> 1) Put another NIC in your SBS server and connect it to the internet
>> overnight to sync WSUS once in a while.
>>
>> 2) Build a new server for WSUS, it really needs only a decent workstation
>> class computer running W2K3. Disconnect WSUS from your network, connect
>> to the 'net and sync. Disconnect from the 'net and back on your LAN and
>> let WSUS do it's thing.
>>
>> 3) Install W2K3 on the workstation you use to access the internet and
>> install WSUS. Let it sync as often as it wants. Once in a while, burn the
>> data to CD and move it to the WSUS server that updates your network as
>> per:
>> http://www.microsoft.com/windowsserv.../downloads/WSU
>> S.mspx
>>
>> =?Utf-8?B?bHVrZQ==?= <> wrote in
>> news:92611454-7400-4F1A-9BE5-:
>>
>>> your not wrong PA, four more hours of reading and still no closer.
>>>
>>> There is the WSUSScan.cab file which appears to be for WSUS, but I
>>> cannot find any way of using it.
>>>
>>> I have tried to extract the file into various directories but there
>>> has been no detail added to the WSUS console.
>>>
>>> Has anybody had any experience with this file? Am I right in thinking
>>> it is supposed to enable you to do an offline scan and see whta
>>> security patches are missing?
>>>
>>> "PA Bear" wrote:
>>>
>>>> [I told you there'd be joy to share...]
>>>>
>>>> luke wrote:
>>>>> Thanks dave but this is only helpfull if I have another server
>>>>> which I can connect to the network.
>>>>>
>>>>> The setup is Windows 2003 Business Server, 12 windows XP
>>>>> professional SP2 pcs on a network not connected, and not wanting to
>>>>> be connected to the internet.
>>>>>
>>>>> One Windows XP Professional with an internet connection soley used
>>>>> for browsing the internet and e-mail.
>>>>>
>>>>> Surely there must be a file(s) of some kind where I can download
>>>>> the latest
>>>>> updates from the internet machine, put onto my 1GB keyfob and
>>>>> copy/extract onto the server every 2 months or so.
>>>>>
>>>>>
>>>>>
>>>>> "Dave Mills" wrote:
>>>>>
>>>>>> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear"
>>>>>> <> wrote:
>>>>>>
>>>>>>> Forwarded to microsoft.public.windows.server.update_services
>>>>>>> newsgroup, if
>>>>>>> only to share the joy.
>>>>>> luke wrote:
>>>>>>> Hi, I would like to know how it is possible update the database
>>>>>>> for Windows
>>>>>>> Server Update Server without connecting the server to the
>>>>>>> internet.
>>>>>>>
>>>>>>> We do have a computer with internet access but it is not
>>>>>>> connected to the
>>>>>>> rest of the network.
>>>>>>>
>>>>>>> Any ideas?
>>>>>>
>>>>>> Read the WSUS deployment guide. There is a step by step guide to
>>>>>> WSUS on a
>>>>>> disconnected network. Basically you sync a WSUS from MS and then
>>>>>> copy the data to the disconnected server.
>>>>>> http://www.microsoft.com/windowsserv...rvices/downloa
>>>>>> ds/WSUS.mspx --
>>>>>> Dave Mills
>>>>>> There are 10 type of people, those that understand binary and
>>>>>> those that don't.
>>>>>>
>>>>>
>>>>> Thanks Dave, but t I don't have a server on the network to sync
>>>>> with microsoft.
>>>>>
>>>>> the setup is Small Business Server 2003

Hi;


In news:0981034C-20AE-490E-80A4-,
luke <> wrote:
>
> Surely there must be a file(s) of some kind where I can download the
> latest updates from the internet machine, put onto my 1GB keyfob and
> copy/extract onto the server every 2 months or so.

Yep. It is called the MS Catalog site. See
http://v4.windowsupdate.microsoft.com/catalog

--

....Sky

Tom "Sky" King
===========

You only need to update once a month. You could set up WSUS on the SBS server
and only plug in the Internet connection when doing a WSUS sync. The ISA
firewall can be set to not allow others Internet connection at all. Also to only
allow connection to the WSUS destinations. WSUS monthly sync only takes a short
time unless there are service packs etc. But since the content will not be
downloaded until approved you can see that coming.


On Mon, 15 Jan 2007 16:27:00 -0800, luke <> wrote:

>Thanks dave but this is only helpfull if I have another server which I can
>connect to the network.
>
>The setup is Windows 2003 Business Server, 12 windows XP professional SP2
>pcs on a network not connected, and not wanting to be connected to the
>internet.
>
>One Windows XP Professional with an internet connection soley used for
>browsing the internet and e-mail.
>
>Surely there must be a file(s) of some kind where I can download the latest
>updates from the internet machine, put onto my 1GB keyfob and copy/extract
>onto the server every 2 months or so.
>
>
>
>"Dave Mills" wrote:
>
>> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear" <> wrote:
>>
>> >Forwarded to microsoft.public.windows.server.update_services newsgroup, if
>> >only to share the joy.
>> luke wrote:
>> > Hi, I would like to know how it is possible update the database for
>> > Windows
>> > Server Update Server without connecting the server to the internet.
>> >
>> > We do have a computer with internet access but it is not connected to the
>> > rest of the network.
>> >
>> > Any ideas?
>>
>> Read the WSUS deployment guide. There is a step by step guide to WSUS on a
>> disconnected network. Basically you sync a WSUS from MS and then copy the data
>> to the disconnected server.
>> http://www.microsoft.com/windowsserv...oads/WSUS.mspx
>> --
>> Dave Mills
>> There are 10 type of people, those that understand binary and those that don't.
>>
>
>Thanks Dave, but t I don't have a server on the network to sync with
>microsoft.
>
>the setup is Small Business Server 2003
--
Dave Mills
There are 10 type of people, those that understand binary and those that don't.

Dave Mills <> wrote in
news::

> You only need to update once a month. You could set up WSUS on the SBS
> server and only plug in the Internet connection when doing a WSUS
> sync. The ISA firewall can be set to not allow others Internet
> connection at all. Also to only allow connection to the WSUS
> destinations. WSUS monthly sync only takes a short time unless there
> are service packs etc. But since the content will not be downloaded
> until approved you can see that coming.
>


Dave, You assume that he has SBS Premium. The OP has also stated that
ther is NO AV software on his network, and NO firewall to his internet
connection.

OTOH, is WSUS even required. Since most updates are security related and
the network is never connected to the outside world, why bother. He could
download the occasional SP when available and do a manual install. It's
just 12 machines after all.

>
> On Mon, 15 Jan 2007 16:27:00 -0800, luke
> <> wrote:
>
>>Thanks dave but this is only helpfull if I have another server which I
>>can connect to the network.
>>
>>The setup is Windows 2003 Business Server, 12 windows XP professional
>>SP2 pcs on a network not connected, and not wanting to be connected to
>>the internet.
>>
>>One Windows XP Professional with an internet connection soley used for
>>browsing the internet and e-mail.
>>
>>Surely there must be a file(s) of some kind where I can download the
>>latest updates from the internet machine, put onto my 1GB keyfob and
>>copy/extract onto the server every 2 months or so.
>>
>>
>>
>>"Dave Mills" wrote:
>>
>>> On Mon, 15 Jan 2007 11:44:42 -0500, "PA Bear" <>
>>> wrote:
>>>
>>> >Forwarded to microsoft.public.windows.server.update_services
>>> >newsgroup, if only to share the joy.
>>> luke wrote:
>>> > Hi, I would like to know how it is possible update the database
>>> > for Windows
>>> > Server Update Server without connecting the server to the
>>> > internet.
>>> >
>>> > We do have a computer with internet access but it is not connected
>>> > to the rest of the network.
>>> >
>>> > Any ideas?
>>>
>>> Read the WSUS deployment guide. There is a step by step guide to
>>> WSUS on a disconnected network. Basically you sync a WSUS from MS
>>> and then copy the data to the disconnected server.
>>> http://www.microsoft.com/windowsserv...ices/downloads
>>> /WSUS.mspx --
>>> Dave Mills
>>> There are 10 type of people, those that understand binary and those
>>> that don't.
>>>
>>
>>Thanks Dave, but t I don't have a server on the network to sync with
>>microsoft.
>>
>>the setup is Small Business Server 2003