WSUS Processes

Question

WSUS Processes

Robert Higuera 1

A question for the WSUS experts out there. When WSUS updates are approved, does WSUS scan the local system (WsusContent) first before going out to download the updates? Or is it the other way around?

We have an ongoing discussion on how the process works. We have multiple WSUS instances on closed networks (no internet) which we import the updates to and copy the data to the local store. Some think that WSUS will first attempt to go out and download the updates, then failing that, read the local store to see if the data exists and then report it as "downloading". And some think it's the other way around.

I can't seem to find any definitive answer to this in any of the documentation.

Thank you in advance.

Answer 1

Rita Hu -MSFT 9,426

@Robert Higuera
Thanks for your posting on Q&A.

When WSUS updates are approved, does WSUS scan the local system (WsusContent) first before going out to download the updates? Or is it the other way around?
First of all, Update Files and Languages configuration will be written to the database according to your settings. Here is the reference picture:

Please follow this link to export and import updates in a disconnected environment.

Hope the above will be helpful. Please keep us in touch if there are any updates of the thread.

Thanks for your time and have a nice day.

Regards,
Rita

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Robert Higuera 1 Reputation point

2021-07-08T12:10:45.357+00:00

Thanks for the info but I already know this. That's not what I'm asking. On a closed network system, We run the import command on the export file, then copy the actual update data into the local WsusContent folder. Once we approve updates, the WSUS console will immediately show updates as "downloading" (even though nothing is actually downloading). If the data isn't there then it will try and reach out to an external source (Windows Update, upstream server, etc.), which of course it won't be able to do.

So, again, my question is, upon approving updates, does the system first scan the local source, then reach out to an external source (which is what I believe happens)? Or does it first try and reach out to an external source first, then failing that, look to the local source (WsusContent)?
Rita Hu -MSFT 9,426 Reputation points

2021-07-09T02:28:20.45+00:00

So, again, my question is, upon approving updates, does the system first scan the local source, then reach out to an external source (which is what I believe happens)? Or does it first try and reach out to an external source first, then failing that, look to the local source (WsusContent)?
There is no such document for reference, so it is hard to say. But in my opinion, the WSUS server will scan the local source first, then reach out to an external source.

In addition, I noticed that you try to run the export and import command to copy the metadata first, and then copy the actual update files from the connected WSUS server to the internal WSUS server. The order is wrong. According to this link, it is recommended to copy the updates from File System first and then export and import the metadata.

This type of problem can be fixed by copying the update onto the file system of the import server and then again attempting to deploy the update.
Rita Hu -MSFT 9,426 Reputation points

2021-07-16T08:59:25.737+00:00

@Robert Higuera
It seems that there are no updates for several day. May I know the status of the case? Whether the solution I provide above is helpful or not?

Please keep us in touch if there are any updates of the case. Don't hesitate to keep us in touch if you have any queaations.

Thanks for your time and have a nice weekend :)

WSUS Processes

1 answer

Activity