Batchpatch and multiple updates

[wbwhaley]

I’m currently evaluating BP for updating offline environments. I’ll be updating Windows 10 Pro and Windows Server 2016 machines. I set BP to cached / offline mode and was able to download the repository items for Windows 10/Server 2016 with no issues. I’m currently testing on a Host Only VM (Server 2016 installed clean and no updates) and was able to successfully get a couple of updates to run on the first pass. I assumed that I would end up rebooting and then running the task again to get the next set of updates, but when I ran it again, BP said that there were no applicable updates. I tied the VM to the network to see if Windows Update said there were more patches. Sure enough, it started downloading individual patches from Microsoft.

In the Windows update tab for Settings, I have Search for only Important updates and Include recommended updates selected. Then have selected include Critical Updates, Security Updates, Drfinition Updates, Updates, Update Rollups. Selected cached and offline modes as well. When I downloaded the Offline Repo, I selected Windows 10 / Server 2016 (x64), .Net Framework / Vis C++ run-times, MSRT and then my language. I haven’t quite figured the details out yet surrounding the checkbox for Other Microsoft applications and misc updates yet, other than I get 711 updates with it not checked and then 7039 updates with it checked. Wasn’t sure if that could be my culprit or not.

Currently reading through the support forum on other posts, but wanted to post to see if there was something obvious I was missing.

Thanks!

[doug]

The reason is because you are using offline mode. Offline mode scans for security updates updates against the wsusscn2.cab file from Microsoft, which does not contain every update that is published on Microsoft’s public update servers.

Other possible reasons for a discrepancy are outlined in the second question on the FAQ

[wbwhaley]

Thanks for the quick response Doug. I guess I was expecting more than just two updates on the newly installed system from an ISO dated in 2016. Sounds like I’m going to be back to using a standalone instance of WSUS on a laptop then if I want to completely patch a new install of an OS. I guess that is one of the disadvantages of me having an air gapped network of machines.

Thanks again!

[doug]

Updates are now cumulative, so when patching an older machine you won’t have the large number of updates that you would have had prior to when Microsoft started releasing cumulative update packages.

-Doug

[Author]

Posts