最後更新: 2019-10-10

介紹

WSUS = Windows Server Update Services

wsusoffline 是一個第三方軟件, 可以用來建立一個 offline 的更新包. 我們可以在不能上網的 PC 套用它

作用:

Safely bring freshly installed Windows systems to a patch level which allows them to be safely connected to the Internet

Download: http://download.wsusoffline.net/

Microsoft Update Catalog

It uses Microsoft's update catalog file wsusscn2.cab to dynamically determine the required patches.

It uses "Windows Update Agent" (WUA) to determine the patches to install on client/target side

Users had to rely on the Microsoft Update Catalog up until now to download the security patches.

 

---

過程

 

#1 Download patch (create update media)

# 在 win10 也可以建立 win7 的 offline update package

UpdateGenerator.exe

# 2 設定 Download 什麼

# 加減語言

# Default 會 download English 及 German (作者係德國人)

RemoveGermanLanguageSupport.cmd

# Add 中文

# cmd\AddCustomLanguageSupport.cmd <lang>

AddCustomLanguageSupport.cmd cht

設定: "security only updates" instead of "quality rollups"

Option for Windows 7 and 8.1, and Windows Server 2008 R2, 2012, and 2012 R2.

Microsoft switched to a new update format that changes how updates are provided for

  Windows 7, Windows 8.1, Server 2008 R2, and 2012 R2.

Two update packages are released every month for the operating systems instead.

 + The first package includes security updates only, and is not cumulative.

    It is not offered through Windows Update either.

 + The second package is cumulative, and includes security and non-security updates.

So if you do not want new features but you are more concerned about security updates you can ckeck this option.

Here is what happens in the background when you enable that option:

• Updates released prior to October 2016 are downloaded just like before.
• Security-only Updates are downloaded starting October 2016.
  Quality rollups are not downloaded starting the same month.

P.S.

Monthly Rollup

Each month’s rollup will supersede the previous month’s rollup,

so there will always be only one update required for your Windows PCs to get current.

This Monthly Rollup will be classified as an Important update on Windows Update and

will automatically download and install if your Windows Update settings are configured to automatically download and install Important updates.

Security-only update

This update collects all of the security patches for that month into a single update.

(This is a non-cumulative update).

#3 Installation part (target computer)

# copy wsusoffline\client folder to target computer

Run UpdateInstaller.exe

 * 安裝過程會提示 reboot 幾次

Setting: Automatic reboot and recall

會 Disable UAC 及建立臨時 User "WOUTempAdmin"

# 還原

  client\cmd\DeleteUpdateAdmin.vbs

# Install update 時會有 cmd popup

# 會提示 reboot

 

---

"Automatic reboot and recall" option

 

To "clean up" "automatic reboot and recall" setting

1. Cancel running update scripts using <Ctrl>+C;

2. Execute the “CleanupRecall.cmd” script in the “cmd” directory, then reboot.

"automatic reboot and recall" not working

失敗的原因: stored the Offline Updater files in a restricted area of your filesystem

(Desktop, My Documents)

建議: 放在 C:\wsusoffline             # RD s08r2 測試成功

 

---

0x80072f8f Error

 

 * 同步系統時間

 * 啟動 Windows Update

 

---