Share via

Synchronize from an upstream data source location (URL)

  • Article

Most of the time the top-level site in a hierarchy is configured to synchronize software updates metadata with Microsoft Update. Some company’s corporate security policies don’t allow access to the Internet from the top-level site. Now with System Center Configuration Manager 2012 SP1 it is possible to configure the synchronization source for the top-level site to use an existing WSUS server that is not in your Configuration Manager hierarchy. In the Software Update Point Component properties you now have the option to synchronize from an upstream data source location (URL)

https://technet.microsoft.com/en-us/library/gg712696.aspx#BKMK_WSUSSyncSource

 

The synchronization takes care of the patch catalog but what about the updates I need to create my patch bundles? If you configure the Upstream WSUS server as a patch repository you will have an alternative download location but still keep the Top level ConfigMgr 2012 SP1 Server not directly connected to the Internet. It is important to make sure that the upstream WSUS Server is configured with matching patch levels and synchronization option with the Software Update point to avoid headaches.

 

Populate the WSUSCONTENT folder with Express Installation files.

On the Upstream WSUS standalone server selecting the option to download the express installation files will allow some time for the update binary downloads to take place. It will populate the WSUSCONTENT folder with all the express installation files based on the products and classifications that you have selected. This option doesn’t require you to approve updates. For my test I only selected the categories that I required and the server downloaded 200 GB of express installation files. You'll notice when you set up a software update group and select updates to add to your bundle you are only prompted with the options to download from the Internet or a network location.

  • Create a New Software Update group on the top level ConfigMgr server.
  • Select browse and enter in the UNC path to the WSUSCONTENT folder on the upstream Standalone WSUS Server. It will grab all the updates you selected and move them to your deployment package source.

This option provides another layer of security and should allow an administrator to work on other tasks other than downloading security updates.

Comments

  • Anonymous
    February 27, 2014
    What can you do if the upstream server is not accessible via UNC?My upstream server is only accessible via SSL (443).
  • Anonymous
    September 19, 2014
    ,Belstaff Olivers Mount vintage Blouson l Belstaff Olivers Mount vintage Blouson lady adyhttp://www.belstaffsonline.com/be Belstaff knockhill Leather lstaff-men-bull-grain-leather-olivers-mount-blouson-black
     — If you thought there was enough personal
  • Anonymous
    September 19, 2014
    Creating beautiful photos and videos has never been more fun.Life is Belstaff New Brad jacket brown ful Belstaff New Panther leather jacket l of surprising, joyful moments - moments worth remembering. The D3300 makes it fun and easy to preserve those
  • Anonymous
    February 14, 2015
    The comment has been removed
  • Anonymous
    April 06, 2015
    We are the factory which in china whose making the siliocne wristban custom plastic bracelets d in difference color,size,custom plastic bracelets,logo.Welcome to visit our sitehttp://www.silicon-wristband.com ,and if you have any questions,please send