Re: Stand-Alone Network

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 04/30/04 

Date: Fri, 30 Apr 2004 23:34:54 +0200

Rob wrote:

> Just wanted to get some input from you folks who have
> already been down this road. What are the steps I need to
> walk through to get my stand-alone network patched. I
> cannot connect it to the Internet but I can use cd-r to
> transfer.
>
> What is the best way to make this work? I was thinking
> that maybe deploying SUS and MBSA on a server would work
> as long as there is a way to download the updates easily
> and put them on a cd.
Hi

You could set up one SUS server in your non-Internet connected
network and then set up another SUS server that is connected
to the Internet.

When the Internet-connected SUS server have downloaded all
the updates from the Internet, you can copy the SUS content
of this server (using some form of removable media e.g. CD-ROM
or DVD) to the offline SUS server.

That would be the "Manually-Configured Content Distribution Point" part of the
chapter "Synchronizing Content With Another Server Running Software Update
Services or Manually-Configured Content Distribution Point" in
SUS_Deployguide_sp1.doc if I am not mistaken.

Note that it is a error in the documentation:
http://groups.google.com/groups?threadm=074901c2e895%2400f8c630%24a101280a%40phx.gbl

Here is another way it looks like:
http://groups.google.com/groups?selm=eZt8krMHDHA.1828%40TK2MSFTNGP10.phx.gbl

Download link for "Software Update Services Deployment White Paper"
(SUS_Deployguide_sp1.doc) can be found under "More Information" at
http://www.microsoft.com/windowsserversystem/sus/default.mspx

Fyi, there is a separate newsgroup for SUS:

microsoft.public.softwareupdatesvcs

news://msnews.microsoft.com/microsoft.public.softwareupdatesvcs

URL to the group softwareupdatesvcs for those who uses the Web
interface to access the newsgroups:
http://www.microsoft.com/windowsserver2003/community/newsgroups/dgbrowser/en-us/default.mspx?dg=microsoft.public.softwareupdatesvcs

A Web site about SUS with a FAQ and a SUS forum:
http://www.susserver.com/

More SUS Web sites:
http://www.cites.uiuc.edu/sus/faq.html
http://www.faqshop.com/sus/default.htm 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Relevant Pages

  • Re: WUS in an "air-gap" environment
    ... how do I get the downloads from the internet onto the WUS server? ... When the Internet-connected SUS server have downloaded all ...
    (microsoft.public.windowsupdate)
  • RE: Another SUS / Autoupdate question
    ... installation key. ... As it is still only the SUS server that talks to MS ... To provide you with the best possible service, Windows Update also ...
    (Focus-Microsoft)
  • Re: Stand-Alone Network
    ... >> that maybe deploying SUS and MBSA on a server would ... >You could set up one SUS server in your non-Internet ... >Download link for "Software Update Services Deployment ... >torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.security)
  • Re: {Spam?} Re: AW: SUS Help
    ... and will get the updates from the SUS server. ... > Captus Networks ... > FIND OUT NOW - FREE Vulnerability Assessment Toolkit ...
    (Security-Basics)
  • Re: SUS and laptops working Offline
    ... updates unless they are attached to the LAN. ... >computer needs to be able to connect to the SUS server ... >torgeir, Microsoft MVP Scripting and WMI, Porsgrunn ...
    (microsoft.public.windowsupdate)