Scripting

Hi, this has been asked in various formats on different sites but hoping trusty IT Ninja can help me.

WSUS is fine for patching PC's that have been live for ages but not so great for patching PC's that have just been built (I patch monthly). I've come to accept using WSUS to instantly patch a computer is not possible (without a great deal of effort, moving computer OU's etc).

So, next best option is to update the WIM image with all the currently approved updates. Easy right? Unfortunately no. To be clear, updating the offline WIM image is easy, obtaining the updates is not.

If you go to the Windows Update catalog, that's a lot of fun downloading updates one by one after searching, also one by one. Re-capturing the WIM image by way of sysprep etc on a monthly basis is also out of the question, for many reasons not least of all the remaining re-arm count :)

So that leaves somehow downloading updates in msu format but only downloading updates which I've already approved in WSUS or extracting updates from WSUS directly, but again msu format is required as you can only inject updates into a WIM using DISM if they are in .msu format.

So, obtaining updates...go! :-)

Thanks.