Morning, sorry if this topic was answered before but I was not able to find a post.

We are setting a highly private network with minimal access to internet. The way we are setup is that the MECM servers have almost no access to internet.

Server CCM-01 is the primary site server with a WSUS console installed on it. He can access resolve internal names only (DNS on DC).

Server CCM-02 is the DP-MP-SUP that will deserve all clients. WSUS and SUP installed on it and can resolve internal names only (DNS on DC).

Server CCM-03 is the upstream server for WSUS so it has WSUS and SUP role on it. He can resolve external and internal DNS names and can connect to internet as well.

The metadata is synching as supposed to but when trying to download an update, I have an error  ERROR: DownloadUpdateContent() failed with hr=0x80072ee7.

I was thinking that the primary site server would make the update download from the upstream WSUS server. Am I right?

What would be the right way to do it?

​Morning, sorry if this topic was answered before but I was not able to find a post.We are setting a highly private network with minimal access to internet. The way we are setup is that the MECM servers have almost no access to internet. Server CCM-01 is the primary site server with a WSUS console installed on it. He can access resolve internal names only (DNS on DC).Server CCM-02 is the DP-MP-SUP that will deserve all clients. WSUS and SUP installed on it and can resolve internal names only (DNS on DC).Server CCM-03 is the upstream server for WSUS so it has WSUS and SUP role on it. He can resolve external and internal DNS names and can connect to internet as well. The metadata is synching as supposed to but when trying to download an update, I have an error  ERROR: DownloadUpdateContent() failed with hr=0x80072ee7. I was thinking that the primary site server would make the update download from the upstream WSUS server. Am I right?What would be the right way to do it?  Read More

​