Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a method or software that will allow the ability to push windows updates to clients in an non-active directory environment?

WSUS is not an option for the situation as it doesn't have the ability to push the updates to the clients, only for the clients to pull updates.

share|improve this question
up vote 1 down vote accepted wpkg "pulls" hotfixes as well, but you can let windows run wpkg whenever you want.

share|improve this answer
WPKG rocks in a non AD enviroment! – Jon Rhoades Feb 14 '10 at 23:46

Also pull, but this is a script that will search for, download and immediately install updates when run - which I sometimes use for Core servers. Executing this remotely is pretty close to a "push".

share|improve this answer

You could force the scan of new updates using wuauclt /detectnow.

I don't think it is possible to push the updates, since they are retrieved via http protocol by a service running with Administrator privileges; a system to "push" something into that service from an external source would be a good entry point for malware.

share|improve this answer

A logon batch file inside your startup folder pointing to an offline version of wsus setup to run invisible from the current user.

I run a similar setup to some PC's which for security reasons aren't connected directly to the network.

I update it every Wednesday and by Thursday the few computers have all the newest patches.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.