• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 381
  • Last Modified:

Offline update and patch of 98, Me, 2K and XP?

I have a client with five machines with Windows 98, millennium, 2000 and XP Pro and home.  They are not connected to the Internet.  I need to get these machines updated with all Microsoft patches.

I have reviewed the various patch management solutions already posted on this web site.  Some things have changed since those articles were written.  in particular, The Microsoft web site no longer has an option to buy a CD-ROM of patches for the various systems.

Since this is a small site, there isn't a window server on the network, thus using SUS is questionable.

What options are there to manage the updated these machines without a window server?

I am particularly interested in a complete solution that handles all of the machines and all patches for them.

It would also be nice if it wasn't too expensive!

  • 3
  • 2
  • 2
  • +4
5 Solutions
Hmmm....I'm not sure this is possible with no internet connection. The critical part of patch management is to timely pull the latest updates off of some server some where. How else would you get the updates?

Even if you could buy something out of the box and instsall it that would give you all the current updates. How would you contitnue to keep the machines up to date?

Its just like buying an antivirus product.....its useless unless you have a connection to a server somewhere that allows you to get the latest updates.
Are they just not on the internet or do they not have a network connection? How are they connected?

With 5 machines, the logical thing is to update them manually instead of using a managed solution.
jgt10Author Commented:
In this case I'm not concerned about timely update to protect the systems against attack, since the machines can not access the internet.

I am concerned about the complexity of determining what patches are installed and what need to needs to be patched.  I'm not thrilled about performing that process manually.

They have one machine in the office that connects to the internet.  They use that one for email and Internet research.  The rest are on a network that has no connection to the internet.  This was a very deliberate step by the owner.  One I approve of as it removes 90% of the problems.  

There is the last 10% of problems (roughly) that need to be patched for correct (cough) operation of the systems.

Even if I update them manually, there is a question in my mind of how I determine what is needed on each machine...each one is a different version of Windows.

Comments?  Ideas?

[Webinar] Improve your customer journey

A positive customer journey is important in attracting and retaining business. To improve this experience, you can use Google Maps APIs to increase checkout conversions, boost user engagement, and optimize order fulfillment. Learn how in this webinar presented by Dito.


Well there is Microsoft Baseline Security Analyzer which can be downloaded and run on the 2000 and xp machines which will tell you what updates those machines need. This doesn't work for 98 or ME. It may be worth while to think about putting atleast 2000 on those 2 machines.


Just a thought....
Jared LukerCommented:
I say that you hook up a hub to that internet connection that the one computer is on and get yourself a 2 port KVM.  Take your computers back one at a time every 3 - 6 months.  

Plug in, update, and wash your hands of it for the next 6 months.  With just 5 machines, I don't think that anything else would be worth your time, if they are even possible.

This may help for patching of the WinXP systems.


Keyser Soze's XP Security Pack 2.001 (April 2004)
Pack Size: 46.84mb
Assuming that the computer that is on the internet has a good firewall in place it should be reasonably well protected against viruses/hackers etc.
You could set up Internet connection sharing, which requires purchase of one crossover cable.
You connect one computer to the one with the internet connection and that computer would be able to access the internet through the one internet connection.
You can download whatever updates you need, then move on to the the next computer.
here's a link to how to make a windows update cd.  this would work perfect for the application you'r speaking about.  you may even be able to simply burn them monthly updates and mail them to them.

It's unfortunate that the Feb/04 Security Update CD is no longer available but the bulk of all updates are still available on CD in the form of SP4 for W2K and SP2 for XP.




For the rest, I would browse through the Windows Update Catalog for updates that do not pertain to internet security, which, to be sure, is less than 10% of the remaining updates.

Windows Update Catalog

Updates from the Catalog can be downloaded on any machine and saved to disk. You can burn them to CD and install them at your leisure.

jgt10Author Commented:
Excellent!  That is the kind of help I was looking for!

luv2smile:  I would like to upgrade the 98 and Me systems as well. As long as the machines are performing well enough for the customer, I don't push.

gor_c: I hadn't thought of using the internet connection sharing function.  The drawbacks are it requires moving the computers and a second ethernet or using a USB port to make the connection.  I don't want to move the machines around and I'm not sure I want to be hauling a 50 or 100 foot cat5 throug the office to do the job either.  It is a good idea and I will look at it further.

zerofield:  That is the pointer that I needed!  Thanks!

wjal: I'm using Win XP Pro and the update catalog automatically starts looking for patches and updates for XP, not letting me select updates for the other systems.  The other two URLs work as advertised.  Thanks!

It is necessary to use some recent version of Internet Explorer to successfully browse that site. When you arrive at the page in the link, choose "Find Updates for Microsoft Operating Systems". On the susequent page, highlight the OS that has your interest and click the Search button. All MS operting systems since 98SE are represented.
A bit of advice on browsing these updates:
If for instance, you are looking for XP Home udates, most of them will be found under "Windows XP RTM" (if you have no service packs installed). You will also need the updates listed under "Windows XP Home RTM" as they apply to XP Home in particular. That is to say, the updates that apply to both versions, Home and Pro, are listed under "Windows XP RTM".
One could fairly assume that all XP Home updates would be listed under "XP Home", but this is not the case.

Featured Post

2018 Annual Membership Survey

Here at Experts Exchange, we strive to give members the best experience. Help us improve the site by taking this survey today! (Bonus: Be entered to win a great tech prize for participating!)

  • 3
  • 2
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now