Is there a script that can retrieve the current Windows 7 security updates?

26
2013-08
  • Tim

    This question already has an answer here:

  • Answers
  • David Marshall

    Microsoft have a DVD ISO available to download each month containing the security updates for all systems.

  • magicandre1981

    Use WSUS Offline to get all required updates:

    http://download.wsusoffline.net/

    Select which language and Windows you need and the tool downloads all updates:

    enter image description here


  • Related Question

    How to enable Windows Update over the internet for domain computers? (Code: 8024402C)
  • Sorin Sbarnea

    Currently on a computer running Windows 7 on a domain the Windows Update does not run by itself because "You receive updates: Managed by your system administrator". The error code is 8024402C

    Detail: Open Windows Update, there you see a red message "Windows could not search for new updates", Code 8024402C. Below there is an interesting message: "Your receive updates: Managed by your system administrator".

    At the bottom there is a link "Check online for updates from Microsoft Update". If I click it it will work but I want the windows update to work by itself not manually.

    This system is not connected to the domain most of the time (laptop).

    In Microsoft knowledge-base they say that this is caused by WSUS (Windows Server Update Services).

    I want to have automatic updates from WU and WSUS in the same time. If this is not possible I would like to know how can I switch from WSUS to WU. I do have administrator account for local computer.


  • Related Answers
  • Diago

    In Windows 7/Vista right below the managed by system administrator message is a link you can click that allows you to search for updates from Windows Updates.

    The settings are specified via the GPO wish is most likely implemented by your corporate IT department. The only way to overridden this is to change the GPO directly, however this will get overridden the next time you connect to the corporate network.

    The easiest way would be to request to be removed from the Windows Update group. However if you want to override it manually this article will give you the registry keys to edit to change it. You can also do it through the Local Policy Editor by following these instructions.

  • Bryan

    The reason MS doesn't allow both is because that defeats the whole purpose of a WSUS server on a domain. The purpose of the WSUS server is so IT can test the patches and verify them before they are approved to go out to the users. If you defeat the WSUS server, or allow the computer to just download patches straight from Windows Update you are are more likely to get a patch that will break something on your computer. Then you will be crying to the IT department that your computer doesn't work right when you were the one who did it. If you are having this issue, please work with your IT department to fix it properly!