How does the patch services works?

Hi Guys

We are patching with BigFix too and we are using the Patch Wizard to create them.
Now I noted in the action that there is a link to the download page of Microsoft for every patch.

prefetch Windows8.1-KB3087039-x64.msu sha1:4508ee0f43205300494bafc69a1adc472d7370ce size:2590615 http://download.microsoft.com/download/9/2/0/920D729B-A1B5-4B91-8A34-0E90A7610A74/Windows8.1-KB3087039-x64.msu sha256:377cd16a8376411874b4f2e1b24a38e7771c53b2c0a71514d61e25f50c48bde6

// Is Windows Update service running?
continue if {exists running service "wuauserv" OR NOT exists service "wuauserv" whose (start type of it = "disabled")}

waithidden "{pathname of system folder & "\wusa.exe"}" "{pathname of client folder of current site & "\__Download\Windows8.1-KB3087039-x64.msu"}" /quiet /norestart

action requires restart "4508ee0f43205300494bafc69a1adc472d7370ce"  

Does this mean that every client downloads his patches individual from the microsoft website?
If so, is it possible to change this and use a wsus (or something similar)?

I think this is an important question. Image having 20 000 devices that are downloading their patches from microsoft all at once… This will have a big impact on the internet bandwidth.

as always, thanks for your help!

Greetings

The “prefetch” command is a hint to the BigFix client to use your relays for the download. The only time it is downloaded from the Microsoft website is the first time you use the page and the only device that actually connects to Microsoft’s website is the main BigFix server.

So if i’m understanding it correctly, then this block

prefetch Windows8.1-KB3087039-x64.msu sha1:4508ee0f43205300494bafc69a1adc472d7370ce size:2590615 http://download.microsoft.com/download/9/2/0/920D729B-A1B5-4B91-8A34-0E90A7610A74/Windows8.1-KB3087039-x64.msu sha256:377cd16a8376411874b4f2e1b24a38e7771c53b2c0a71514d61e25f50c48bde6

will fetch the patches from the relay server and the relay server will fetch it from the BigFix Server?

So the devices don’t connect to the Microsoft site, correct?

Thanks!

1 Like

Yes! Microsoft -> BigFix server -> relay -> client

1 Like

@strawgate, Thank you sir!