Announcing a smaller WSUS Scan Cab

Published Nov 04 2021 11:49 AM 8,086 Views
Microsoft

The Windows Server Update Service (WSUS) Scan Cab can help determine whether a Windows device needs to install necessary security updates without first connecting to the Windows Update service. Whenever new Windows security updates are released, Microsoft generates a new WSUS Scan Cab that contains the metadata for those updates. Over time, the size of the WSUS Scan Cab has grown to the point that it may cause issues for organizations seeking to distribute it. To address these issues, we've built a new version of the WSUS Scan Cab that is half the size by removing metadata that is no longer needed in offline scan scenarios.

We've validated the smaller WSUS Scan Cab works on all supported versions of Windows in all known offline scan scenarios. However, to ensure a smooth transition for customers, we will release the new version of the WSUS Scan Cab over the next several months.

From November 2021 to February 2022, we will publish two versions of the WSUS Scan Cab:

As mentioned above, we have validated the smaller version of the WSUS Scan Cab, but we encourage all customers to validate scenarios from November 2021 to February 2022 to ensure you don't encounter any issues. If you find any issues with the smaller WSUS Scan Cab, please contact Microsoft Support.

Starting in March 2022, we will only publish the new, smaller version of the WSUS scan cab to the existing default location: http://download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab. We are using the existing location because we are aware of some customer tools that have hard-coded the URL for the WSUS Scan Cab, and because the new version is functionally equivalent for offline scan scenarios.

We hope this smaller version of the WSUS Scan Cab will alleviate challenges for your organization resulting from distribution of larger WSUS Scan Cab to their devices. We will continue to invest in the WSUS Scan Cab and related use scenarios to improve overall performance and will share any improvements in a future post.

 

12 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-2928256%22%20slang%3D%22en-US%22%3EAnnouncing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2928256%22%20slang%3D%22en-US%22%3E%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EThe%20Windows%20Server%20Update%20Service%20(WSUS)%20Scan%20Cab%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fwindows%2Fwin32%2Fwua_sdk%2Fusing-wua-to-scan-for-updates-offline%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ecan%20help%20determine%3C%2FA%3E%20whether%20a%20Windows%20device%20needs%20to%20install%20necessary%20security%20updates%20without%20first%20connecting%20to%20the%20Windows%20Update%20service.%20Whenever%20new%20Windows%20security%20updates%20are%20released%2C%20Microsoft%20generates%20a%20new%20WSUS%20Scan%20Cab%20that%20contains%20the%20metadata%20for%20those%20updates.%20Over%20time%2C%20the%20size%20of%20the%20WSUS%20Scan%20Cab%20has%20grown%20to%20the%20point%20that%20it%20may%20cause%20issues%20for%20organizations%20seeking%20to%20distribute%20it.%20To%20address%20these%20issues%2C%20we've%20built%20a%20new%20version%20of%20the%20WSUS%20Scan%20Cab%20that%20is%20half%20the%20size%20by%20removing%20metadata%20that%20is%20no%20longer%20needed%20in%20offline%20scan%20scenarios.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWe've%20validated%20the%20smaller%20WSUS%20Scan%20Cab%20works%20on%20all%20supported%20versions%20of%20Windows%20in%20all%20known%20offline%20scan%20scenarios.%20However%2C%20to%20ensure%20a%20smooth%20transition%20for%20customers%2C%20we%20will%20release%20the%20new%20version%20of%20the%20WSUS%20Scan%20Cab%20over%20the%20next%20several%20months.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EFrom%20November%202021%20to%20February%202022%2C%20we%20will%20publish%20two%20versions%20of%20the%20WSUS%20Scan%20Cab%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%20style%3D%22margin-bottom%3A%208px%3B%20margin-top%3A%2020px%3B%22%3EThe%20current%2C%20larger%20version%20at%20the%20default%20location%3A%20%26nbsp%3B%3CA%20href%3D%22http%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2.cab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttp%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2.cab%3C%2FA%3E%3C%2FLI%3E%0A%3CLI%3EThe%20new%2C%20smaller%20version%20at%20a%20temporary%2C%20alternate%20location%3A%20%3CA%20href%3D%22http%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2_new.cab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttp%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2_new.cab%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3CEM%3ENote%3A%20This%20is%20the%20URL%20for%20the%20new%2C%20smaller%20version%2C%20which%20will%20be%20published%20next%20week.%20As%20such%2C%20it%20is%20not%20currently%20functional.%3C%2FEM%3E%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EAs%20mentioned%20above%2C%20we%20have%20validated%20the%20smaller%20version%20of%20the%20WSUS%20Scan%20Cab%2C%20but%20we%20encourage%20all%20customers%20to%20validate%20scenarios%20from%20November%202021%20to%20February%202022%20to%20ensure%20you%20don't%20encounter%20any%20issues.%20If%20you%20find%20any%20issues%20with%20the%20smaller%20WSUS%20Scan%20Cab%2C%20please%20%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fcontactus%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Econtact%20Microsoft%20Support%3C%2FA%3E.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EStarting%20in%20March%202022%2C%20we%20will%20only%20publish%20the%20new%2C%20smaller%20version%20of%20the%20WSUS%20scan%20cab%20to%20the%20existing%20default%20location%3A%20%3CA%20href%3D%22http%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2.cab%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttp%3A%2F%2Fdownload.windowsupdate.com%2Fmicrosoftupdate%2Fv6%2Fwsusscan%2Fwsusscn2.cab%3C%2FA%3E.%20We%20are%20using%20the%20existing%20location%20because%20we%20are%20aware%20of%20some%20customer%20tools%20that%20have%20hard-coded%20the%20URL%20for%20the%20WSUS%20Scan%20Cab%2C%20and%20because%20the%20new%20version%20is%20functionally%20equivalent%20for%20offline%20scan%20scenarios.%3C%2FP%3E%0A%3CP%20style%3D%22margin-top%3A%2020px%3B%22%3EWe%20hope%20this%20smaller%20version%20of%20the%20WSUS%20Scan%20Cab%20will%20alleviate%20challenges%20for%20your%20organization%20resulting%20from%20distribution%20of%20larger%20WSUS%20Scan%20Cab%20to%20their%20devices.%20We%20will%20continue%20to%20invest%20in%20the%20WSUS%20Scan%20Cab%20and%20related%20use%20scenarios%20to%20improve%20overall%20performance%20and%20will%20share%20any%20improvements%20in%20a%20future%20post.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2928256%22%20slang%3D%22en-US%22%3E%3CP%3EExplore%20the%20smaller%20version%20of%20the%20WSUS%20Scan%20Cab%2C%20designed%20to%20alleviate%20challenges%20around%20distribution%20across%20an%20organization.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Photo%20of%20a%20CIO%20standing%20at%20a%20desk%20while%20typing%20something.%22%20style%3D%22width%3A%20640px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F324293iE35B69CE12BCF27F%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22cio_01.png%22%20alt%3D%22cio_01.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2928256%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EServicing%20and%20updates%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2928474%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2928474%22%20slang%3D%22en-US%22%3E%3CP%3ENice%3C%2FP%3E%3CP%3Edoes%20the%26nbsp%3Bsmaller%20Cab%20still%20contain%20updates%20metadata%20for%20EOS%20Windows%20versions%20and%20products%3F%20(e.g.%20Win%20XP%20and%20Office%202007)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2930856%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2930856%22%20slang%3D%22en-US%22%3E%3CP%3EGreat%20news!%20The%20url%20for%20small%20.cab%20seems%20to%20be%20broken.%20How%20smaller%20will%20be%20the%20new%20cab%20file%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2931947%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2931947%22%20slang%3D%22en-US%22%3E%3CP%3ESo%20this%20only%20could%20be%20done%20by%20calling%20API%20and%20writing%20scripts%3F%3C%2FP%3E%3CP%3EI%20wish%20there%20have%20been%20a%20easier%20way%20of%20doing%20this.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2932661%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2932661%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F243711%22%20target%3D%22_blank%22%3E%40Valter%20Anjos%3C%2FA%3E%2C%26nbsp%3Bthe%20temporary%20URL%20for%20the%20new%20version%20will%20be%20live%20next%20week%20when%20we%20release%20an%20updated%20WSUS%20Scan%20Cab.%20The%20smaller%20version%20will%20be%20roughly%20half%20the%20size%20of%20the%20existing%20version.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F972439%22%20target%3D%22_blank%22%3E%40Reza_Ameri%3C%2FA%3E%2C%20correct%2C%20we%20are%20not%20updating%20the%20method%20for%20performing%20offline%20scan%20scenarios%3B%20we're%20reducing%20the%20size%20of%20the%20WSUS%20Scan%20Cab%20used%20in%20those%20scenarios.%20The%20simplest%20way%20to%20determine%20if%20a%20Windows%20device%20needs%20security%20updates%20is%20to%20allow%20it%20to%20connect%20to%20the%20Windows%20Update%20service%20and%20%22Check%20for%20updates%22%20in%20the%20Settings%20app%20(or%20let%20Windows%20check%20for%20updates%20automatically%20in%20the%20background).%20The%20offline%20scan%20scenario%20is%20for%20customers%20who%20have%20Windows%20devices%20that%20cannot%20connect%20to%20Windows%20Update%20and%20don't%20manage%20those%20devices%20with%20another%20patch%20management%20solution%2C%20such%20as%20ConfigMgr%20or%20WSUS.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2933405%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2933405%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20improvements.%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20file%20also%20used%20for%20other%20scenarios%20than%20WSUS%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20does%20it%20usually%20get%20onto%20a%20device.%20Never%20so%20far%20I%20had%20to%20distribute%20it%20but%20for%20some%20reason%20have%20heard%20about%20it%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1207343%22%20target%3D%22_blank%22%3E%40thad_martin%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2933850%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2933850%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F289393%22%20target%3D%22_blank%22%3E%40K_Wester-Ebbinghaus%3C%2FA%3E%26nbsp%3BThe%20file%20is%20actually%20used%20for%20non-WSUS%20non-WU%20scenarios%3C%2FP%3E%3CP%3Ethey%20are%20various%20of%20utilities%20that%20facilitate%20this%20file%2C%20e.g.%20WSUSOffline%2C%20WUMT%2C%20WuMgr%2C%26nbsp%3BPSWindowsUpdate%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2934418%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2934418%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1207343%22%20target%3D%22_blank%22%3E%40thad_martin%3C%2FA%3E%26nbsp%3Bfor%20the%20clarification.%3C%2FP%3E%3CP%3ELike%20you%20said%20using%20Configuration%20Manager%20and%20WSUS%20or%20other%20management%20method%20are%20recommended%20and%20they%20are%20easy.%20However%2C%20I%20have%20seen%20some%20minor%20case%20when%20they%20have%20to%20perform%20offline%20update%20like%20a%20temporary%20networking%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2936643%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2936643%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F289393%22%20target%3D%22_blank%22%3E%40K_Wester-Ebbinghaus%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F306569%22%20target%3D%22_blank%22%3E%40abbodi1406%3C%2FA%3E%26nbsp%3Bthere%20is%20some%20additional%20info%20about%20the%20use%20of%20the%20cab%20file%20and%20former%20MBSA%20tool%20in%20this%20article%20I%20wrote%20a%20while%20ago%2C%20when%20we%20retired%20MBSA%20(mostly%20what%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F306569%22%20target%3D%22_blank%22%3E%40abbodi1406%3C%2FA%3E%26nbsp%3Bsaid%20as%20well)%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fmbsa-removal-and-guidance%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EGuide%20to%20removing%20Microsoft%20Baseline%20Security%20Analyzer%20(MBSA)%20-%20Windows%20security%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20typical%20way%20to%20copy%20this%20to%20different%20computers%20is%20using%20a%20scheduled%20task%20or%20management%20tool%20to%20copy%20the%20file%20and%20scan%20script%20locally%20on%20the%20target%20machine%2C%20have%20it%20execute%20there%20and%20report%20back%20in%20some%20fashion%20the%20results%20so%20they%20can%20be%20centralized.%20MBSA%20did%20this%20in%20the%20past%2C%20but%20had%20to%20be%20retired%20due%20to%20its%20age%2C%20now%20you%20would%20have%20to%20script%20an%20alternative.%20The%20WUA%20API%20doesn't%20support%20a%20remote%20scan%20against%20this%20file.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2937071%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2937071%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F122949%22%20target%3D%22_blank%22%3E%40Andrei%20Stoica%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F306569%22%20target%3D%22_blank%22%3E%40abbodi1406%3C%2FA%3E%26nbsp%3B!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2937073%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2937073%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F122949%22%20target%3D%22_blank%22%3E%40Andrei%20Stoica%3C%2FA%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F548197%22%20target%3D%22_blank%22%3E%40Prasidh_Arora%3C%2FA%3E%26nbsp%3Bas%20Andrei%20reminded%20me%20of%20the%20existence%20of%20MBSA%2C%20this%20would%20be%20a%20nice%20module%20for%20WAC%2C%20or%20new%20feature%20set%20of%20Security%20extension.%20%3B)%3C%2Fimg%3E%26nbsp%3BI%20have%20noted%20it%20on%20the%20MS%20To%20Do%20List.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2930313%22%20slang%3D%22en-US%22%3ERe%3A%20Announcing%20a%20smaller%20WSUS%20Scan%20Cab%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2930313%22%20slang%3D%22en-US%22%3E%3CP%3ELooks%20pretty%20good%20%3A)%3C%2Fimg%3E%20well%20done!%20Very%20useful%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Nov 04 2021 11:49 AM
Updated by: