Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Basic scenario is a PC repair shop where there's a lot of time being essentially wasted downloading/installing Windows updates on individual machines. I had intended to set up an in-house WSUS server to deal with this, but as I got into the install documentation, I found that the WSUS license specifically disallows serving updates to computers that don't belong to your organization.

Since I try rather hard to keep everything legal (even if the license restriction is a bit asinine), I'm trying to find alternatives to WSUS that would allow deploying locally cached Windows updates, preferably over the network, in as automated a manner as possible.

share

locked by sysadmin1138 Jul 20 '12 at 11:22

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

comments disabled on deleted / locked posts

9 Answers

up vote 6 down vote accepted

The German mag c't once wrote a script called WSUSOffline to apply WSUS updates without internet connection. I never used those but you can find it here http://www.wsusoffline.net/

share
add comment

At my department we use unattended / unattended-gui for initial Windows installations. Its final act is to setup wpkg, which we use to handle updates, new software, etc.

share
add comment

Have a look at wpkg. It takes a bit of work to setup all the xml files but once it's setup you can run it on any windows system without installing a client on it or joining it to a domain which may make it ideal for your situation.

share
add comment

Shavlik's NetChk Protect could be a good option for you. The company has a close relationship with Microsoft and its underlying technology powers Microsofts own Baseline Security Analyzer product. NetChk Protect also supports patching for other vendors products so you may find that useful for stuff like Flash etc.

share
add comment

This does not answer your question directly, so I apologize in advance.

Perhaps you could setup a caching proxy like Squid to cache all requests to Microsoft URLs for an indefinite period. It wouldn't work as nicely as WSUS, but it might be a solution. Here's a FAQ about it ... might be more of a pain than it's worth.

share
add comment

Excellent Patch Management Solution

Have you looked into GFI LANguard? It's freeware for 5 IPs right off the bat, but you can add more by purchasing it. I've used it for a year now and I love it as an alternate to WSUS, because it also scans for vulnerabilities and many other configurations. Check it out.

share
add comment

Open source FusionInventory.org based on ocsinventory-ng works with Linux and Mac and Windows and Solaris and HPUX. Cross platform and mature.

share
add comment

Try this: http://www.windowsupdatesdownloader.com/ As well, install a simple SQUID (proxy) on the network, download update once, then just adjust the settings in the browser to the proxy and all the content of the updates should be available on the same LAN.

share
add comment

you could have a look on wuinstall, it is a command line tool for managing windows updates. it has also has a caching option. i am using it for updating about 10 machines in my local network to save traffic. quite cheap alternative to a wsus server.

share
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.