Windows security updates on a standalone

Hex · Party Boy Joined: 04 Feb 2002 Karma :

Hi all, more a request for the microsoft engineers here.

I have a batch of laptops that aren't connected to a network but must be kept up todate with the security updates.

Now I know if these machines where on a private network you could use the GP settings (specify intranet microsoft updates service location) and point them to a server where the updates where held.

However Im wondering if it would be possible for the updates to be put on a local folder and the system be pointed to them and it would update from there?

If so is it just a case of pointing to the local folder and dropping the update files in there, or would an extra service have to be set up?

Cheers for any help anyone can offer here, as this really isnt my area.
____________________
The BCF's very own Party boy! Though he's getting old and feeling it!
Monkey hanger, Born and bred
My little photo portfolio

FreshAL · Sir Crashalot Joined: 04 Jul 2005 Karma :

EDIT: Sorry, wrong link

Start here
Windows Server Update Services: https://technet.microsoft.com/en-us/wsus/default.aspx

The AD group settings or registry changes you need to make are here
https://support.microsoft.com/kb/328010/

Colin Edwards · Brolly Dolly Joined: 06 Jul 2007 Karma :

If the machines are stand alone then any service like WSUS etc is no good.

I would suggest connecting them to the internet once to get them up to date. Then download the patch's released on patch Tuesday to CD and installing them on each machine

Colin

FreshAL · Sir Crashalot Joined: 04 Jul 2005 Karma :

doh, post in haste repent at leisure.

I read that as not connected to the internet

Sorry

Davo · Davo To The Rescue! Joined: 05 Apr 2004 Karma :

Is this any use to you?

https://support.microsoft.com/kb/913086

Microsoft release monthly updates as an ISO image, so you could just download and burn on to DVD.

Colin Edwards · Brolly Dolly Joined: 06 Jul 2007 Karma :

Hex · Party Boy Joined: 04 Feb 2002 Karma :

The problems with the monthly cd's are the fact you have to from what I understand go through and apply each one in turn.

The users wouldn't do this.

Ive came across a very nifty WSUS Offline program, where I can download/update the files etc and it produces a dvd for me where a user runs one program, it goes through the system and applys the required updates.
Also allows me to specify certain ones to miss out etc.

https://download.wsusoffline.net/ for those interested.

But thanks muchly peeps.
____________________
The BCF's very own Party boy! Though he's getting old and feeling it!
Monkey hanger, Born and bred
My little photo portfolio