asked on

Installing windows and security updates for windows server 2012 R2 servers

We have around 30 windows server 2012 R2 data center servers. they have not been patched for a while now ( 1.5 year) as the site is not connected to the internet and not possible to download any content from the internet. we have no permissions to download the updates offline and install the updates on all servers.

What will be the easiest way to create a sort of a package and run the package that could deploy the updates manually on all servers.

like a single exe file. copied to the servers and installed.

masnrock

What update method are you allowed to take? Downloading the file and bringing it via optical drive or USB would be one of the few ways you could do it. Obviously another option would be if you had a dedciated WSUS server there, but then I would end up having to ask whether that set of servers is connected to any part of your network that is allowed to get online. Number of options, just about what's allowed.

For example, here's a link to the June update: https://www.catalog.update.microsoft.com/Search.aspx?q=KB4503276

John

Modern systems are meant to be updated online. It may prove to be complicated to properly update the systems offline.

Can you connect them up to the world, update them properly and then disconnect?

ASKER CERTIFIED SOLUTION

David Johnson, CD

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

John

I agree with David about WSUS Offline and I have used it, but you need an Internet Connection to get the most up to date version and then an Internet Connection to finish up. It is a very good tool, however