I am having difficulty assessing the functionality of the WSUS Cleanup Wizard in our environment.
Our SCCM infrastructure is on a "closed" network ie. no internet access. We have a connected WSUS server with Auto Approval rules from which we export metadata and update files and subsequently import into the disconnected WSUS server which is our Software Update Point. This allows us to download updates into our closed network SCCM from the WSUSContent folder of the disconnected server. Recently I have been asked to look into the cleanup wizard but found that all of the udpates are being deleted from the WSUSContent folder as they are not "approved" for installation anywhere. We ONLY want them there for the purposes of making them available to download.
My question is this: What is the best approach in this case? Since we don't want content to be deleted should it not be sufficient to cleanup the connected WSUS server(which DOES have approved updates) and pass the metadata down using export / import? The changes would be reflected in the updated metadata?
Thanks