The WSUS Deployment Guide has good general guidance on how to export/import content and metadata to a disconnected network. Here are some quick scripts that I whipped up to ease the process, as it's something that you'll probably want to do regularly.
WsusContent.bks is required. As is right now it will backup C:\WSUS\WsusContent to C:\WsusExport\WsusContent[date]_[time].bkf. It will create a summary log at %userprofile%\Local Settings\Application Data\Microsoft\Windows NT\NTBackup\data. If the initial backup creates a BKF that is too large to fit on a DVD, then you'll need to use another method to transfer the data (xcopy, robocopy, oscdimg, etc.). However I'd recommend still running the backup the first time as it will clear the archive bit on the files so that the subsequent time this script is run, only the new content will be captured, thus the BKF will be significantly smaller.
ntbackup backup @%bksfile% /j WsusContent /f %bkffile% /v:yes /l:s /m incremental
Just an automated way to run the export with a unique CAB and LOG file each time. Both files, along with the above BKF need to be transfered.
"C:\Program Files\Update Services\Tools\wsusutil.exe" export %cabfile% %logfile%
Import the content before running this script. NTBackup cannot be automated to restore data so it must be done manually. Make sure to select the Alternate Location option and point to the correct WsusContent folder (to ensure the subfolder structure is maintained). This script requires you to give it the [date]_[time] code for the metadata you want to import.
if exist %cabfile% (
if exist %logfile% (
"C:\Program Files\Update Services\Tools\wsusutil.exe" import "%cabfile%" "%logfile%"
) ELSE echo. && echo ERROR: %logfile% does not exist
) ELSE echo. && echo ERROR: %cabfile% does not exist
A few other notes:
Nice information, but unfortunately Windows Server 2008 does not have ntbackup installed, just wbadmin, which from most of my trolling through Technet and these blogs seems to imply that due to the new nature vhd backup, there is no way to carry out an incremental backup of the WSUSData folder. This would mean that the regular update of the Disconnected network, would require updating of the whole disk from the original 'Connected' machine and then selective recovery from the Backup each time.
Not very practical, does anyone know if there another way around this that could reduce the regular amount of data required to be transferred each time to the Disconnected Network?
Thanks in advance...
William, take a look at the script SpanWsusContent.ps1 at blogs.technet.com/.../configmgr-software-updates-on-an-isolated-network.aspx
Have you updated this script to take into consideration the 2GB limit on the .cab file?