WSUS Offline Update tutorial

WSUS Offline Update” also known as “wsusoffline” is a Microsoft Windows application that can download Windows updates to a local folder so you can install those updates later on another offline computer.

It is a great way to update computers that you do not want access to the internet.

So how can we use this software, and what are the options? The official documentation on is rather limited. So I have done some experimentation and research myself.


So let’s get started.

Screenshot of WSUS Offline Update tool 11.5
  • Verify downloaded updates

Does basically what is says. Checks the downloads for errors so you won’t get any surprises later.

  • Include C++ Runtime Libraries and NET Frameworks

Some Windows software depends on the “C++ Runtime Libraries” or “NET Frameworks“. It is hard to say which app requires which library. An average Windows computer has a bunch of these libraries after a while. Usually, you will be asked to download these packs when you install software that require any of these libraries. So if you plan on never ever connecting your computer to the internet, and you want to install a software that requires any of these libraries you should include them. Some libraries already come with the Windows. And .NET Framework 4 comes with Windows 10 by default. If space or time is not really a concern another way to go is to just download it. You could always exclude these libraries when you update the client computer.

  • Include Microsoft Security Essentials

This only applies for computers running Windows 7 or older as described here. Basically it is Microsoft’s precursor to Windows Defender, Windows firewall and antivirus centre.

  • Include Service Packs

Windows 10 does not really feature Service Packs anymore, or at least they do not call it that anymore. Windows 10 updates come sporadically or as a collection of updates known as Cumulative Updates. So this is meant for earlier versions of Windows. What about Windows 10 feature updates? Unfortunately, Wsusoffline does not download feature updates.

  • Use ‘security only updates’ instead of ‘quality rollups’

Microsoft publishes two update packages for Windows 7 and Windows 8.1 each month. One includes only security updates released in that month, the other includes those security updates and non-security updates. The second may furthermore include patches from previous months on top of that.


So if you do not want new features, but you are more concerned about security updates you can check this option.

  • Include Windows Defender Definitions

You can choose to include updates for Windows Defender which improves the antivirus database. The updates are usually fairly small so this is probably a good thing to turn on unless you really know why you do not need them.

  • Generate ISO images

You can choose to make ISO’s per Windows product if you for some reason need ISOs to install the updates. I would just use the application on a flash drive.

  • USB Medium

You can choose to make a USB flash drive with all the updates. Personally I just extract wsusoffline to a flash drive anyway so I do not need to check this option.

  • Only prepare ISO/USB

This skipps the download and update of the source content and just uses whatever updates you already have to make ISO(s). Great way to make ISO(s) if you know you have the latest updates anyway.

  • Only create collection script

This will make a batch file you can run instead of using the GUI I believe, but I have never used it.

How to update offline computer

Simply run wsusoffline\client\UpdateInstaller.exe on the client computer and the process will begin.

Once you complete the wsusoffline client installation you will need to reboot your computer. Windows 10 will probably need to work on the updates when you restart.

It is always a good idea to run the updater again after reboot to check if everything is installed.

Leave a Reply

Your email address will not be published. Required fields are marked *