How to obtain full service packs for physically isolated intranet servers

Question

I have a lot of servers on my intranet with Windows system installed, different versions of Win2012, Win2016 etc. Now I have to patch these servers;

Is there a Microsoft website or other trusted website that I can get the fully patch packages directly, or a tool that can automatically download patches for selected systems?

Answer 1

Hi,

You can follow these steps to obtain full service packs for physically isolated intranet servers:

1. Microsoft Update Catalog: Visit the Microsoft Update Catalog website (https://www.catalog.update.microsoft.com/Home.aspx) and search for the specific service packs you need. You can download the standalone packages from this website.
2. WSUS Update: you can create an Offline WSUS server that serves updates to your offline network. You have 1 WSUS server that's online where you approve and download the updates. You then export the metadata and copy the updates folder to media, and then import the metadata and copy the updates to the offline system. Your offline system then is connected to your offline computers, and they reach out to the WSUS server and download and install the updates, and report back to it.
3. System Center Configuration Manager (SCCM): If you have SCCM deployed in your environment, you can use it to download and distribute updates to your intranet servers. SCCM provides a centralized management solution for patching and updates.

Remember to test the updates on a non-production server before deploying them to your production servers. This will help ensure compatibility and avoid any potential issues.