Offline update and patch of 98, Me, 2K and XP?

I have a client with five machines with Windows 98, millennium, 2000 and XP Pro and home.  They are not connected to the Internet.  I need to get these machines updated with all Microsoft patches.

I have reviewed the various patch management solutions already posted on this web site.  Some things have changed since those articles were written.  in particular, The Microsoft web site no longer has an option to buy a CD-ROM of patches for the various systems.

Since this is a small site, there isn't a window server on the network, thus using SUS is questionable.

What options are there to manage the updated these machines without a window server?

I am particularly interested in a complete solution that handles all of the machines and all patches for them.

It would also be nice if it wasn't too expensive!

Who is Participating?
zerofieldConnect With a Mentor Commented:
here's a link to how to make a windows update cd.  this would work perfect for the application you'r speaking about.  you may even be able to simply burn them monthly updates and mail them to them.,1759,1619065,00.asp
Hmmm....I'm not sure this is possible with no internet connection. The critical part of patch management is to timely pull the latest updates off of some server some where. How else would you get the updates?

Even if you could buy something out of the box and instsall it that would give you all the current updates. How would you contitnue to keep the machines up to date?

Its just like buying an antivirus product.....its useless unless you have a connection to a server somewhere that allows you to get the latest updates.
Are they just not on the internet or do they not have a network connection? How are they connected?

With 5 machines, the logical thing is to update them manually instead of using a managed solution.
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

jgt10Author Commented:
In this case I'm not concerned about timely update to protect the systems against attack, since the machines can not access the internet.

I am concerned about the complexity of determining what patches are installed and what need to needs to be patched.  I'm not thrilled about performing that process manually.

They have one machine in the office that connects to the internet.  They use that one for email and Internet research.  The rest are on a network that has no connection to the internet.  This was a very deliberate step by the owner.  One I approve of as it removes 90% of the problems.  

There is the last 10% of problems (roughly) that need to be patched for correct (cough) operation of the systems.

Even if I update them manually, there is a question in my mind of how I determine what is needed on each machine...each one is a different version of Windows.

Comments?  Ideas?


Well there is Microsoft Baseline Security Analyzer which can be downloaded and run on the 2000 and xp machines which will tell you what updates those machines need. This doesn't work for 98 or ME. It may be worth while to think about putting atleast 2000 on those 2 machines.

Just a thought....
Jared LukerConnect With a Mentor Commented:
I say that you hook up a hub to that internet connection that the one computer is on and get yourself a 2 port KVM.  Take your computers back one at a time every 3 - 6 months.  

Plug in, update, and wash your hands of it for the next 6 months.  With just 5 machines, I don't think that anything else would be worth your time, if they are even possible.

WhitePhantomConnect With a Mentor IT ProfessionalCommented:
This may help for patching of the WinXP systems.

Keyser Soze's XP Security Pack 2.001 (April 2004)
Pack Size: 46.84mb
gor_cConnect With a Mentor Commented:
Assuming that the computer that is on the internet has a good firewall in place it should be reasonably well protected against viruses/hackers etc.
You could set up Internet connection sharing, which requires purchase of one crossover cable.
You connect one computer to the one with the internet connection and that computer would be able to access the internet through the one internet connection.
You can download whatever updates you need, then move on to the the next computer.
wjalConnect With a Mentor Commented:
It's unfortunate that the Feb/04 Security Update CD is no longer available but the bulk of all updates are still available on CD in the form of SP4 for W2K and SP2 for XP.




For the rest, I would browse through the Windows Update Catalog for updates that do not pertain to internet security, which, to be sure, is less than 10% of the remaining updates.

Windows Update Catalog

Updates from the Catalog can be downloaded on any machine and saved to disk. You can burn them to CD and install them at your leisure.

jgt10Author Commented:
Excellent!  That is the kind of help I was looking for!

luv2smile:  I would like to upgrade the 98 and Me systems as well. As long as the machines are performing well enough for the customer, I don't push.

gor_c: I hadn't thought of using the internet connection sharing function.  The drawbacks are it requires moving the computers and a second ethernet or using a USB port to make the connection.  I don't want to move the machines around and I'm not sure I want to be hauling a 50 or 100 foot cat5 throug the office to do the job either.  It is a good idea and I will look at it further.

zerofield:  That is the pointer that I needed!  Thanks!

wjal: I'm using Win XP Pro and the update catalog automatically starts looking for patches and updates for XP, not letting me select updates for the other systems.  The other two URLs work as advertised.  Thanks!

It is necessary to use some recent version of Internet Explorer to successfully browse that site. When you arrive at the page in the link, choose "Find Updates for Microsoft Operating Systems". On the susequent page, highlight the OS that has your interest and click the Search button. All MS operting systems since 98SE are represented.
A bit of advice on browsing these updates:
If for instance, you are looking for XP Home udates, most of them will be found under "Windows XP RTM" (if you have no service packs installed). You will also need the updates listed under "Windows XP Home RTM" as they apply to XP Home in particular. That is to say, the updates that apply to both versions, Home and Pro, are listed under "Windows XP RTM".
One could fairly assume that all XP Home updates would be listed under "XP Home", but this is not the case.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.