Oh, absolutely. You also don't need a domain and group policy--you just use
a .reg file to add the WSUS server info, then delete the key when you're
fully patched. We use it internally to bring new machines up to date
-before- joining the corporate domain.

Here's a sample wsus-enable.reg file:


Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate]
"WUServer"="http://[wsus-server]:[port]";
"WUStatusServer"="http://[wsus-server]:[port]";

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
"NoAutoRebootWithLoggedOnUsers"=dword:00000001
"NoAutoUpdate"=dword:00000000
"AUOptions"=dword:00000004
"ScheduledInstallDay"=dword:00000000
"ScheduledInstallTime"=dword:00000009
"RebootRelaunchTimeoutEnabled"=dword:00000001
"RebootRelaunchTimeout"=dword:0000003c
"RescheduleWaitTimeEnabled"=dword:00000001
"RescheduleWaitTime"=dword:0000001e
"UseWUServer"=dword:00000001

You'll want to save out the
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate key before doing this
to re-set back to standard updates. Save it out as something like
wsus-disable.reg and just run it on machines (along with a REG DELETE
beforehand?) after you're patched. There's nothing system-unique in this
key; one export should work for all Windows machines.

Greg

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:hardware-
> [EMAIL PROTECTED] On Behalf Of Thane Sherrington
> Sent: Wednesday, February 20, 2008 12:17 PM
> To: [email protected]
> Subject: Re: [H] Offline Windows Updater
> 
> At 01:58 PM 20/02/2008, Mesdaq, Ali wrote:
> >I would be very hesitant to trust some free tool. But if you could
> >install with a xp sp2 install then connect to your own internal WSUS
> >server for updates post install patching could go from 2hrs to 20min.
> 
> Can I use an WSUS server in a repair shop?  Everything I've read says
> it won't work, or if it does, may/will screw up doing Windows update
> from home.
> 
> T



Reply via email to