Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We have a scenario where we have 60 computers that need to be loaded with Windows7 at our company as well as have all windows updates installed. Our company has an internet especially for visitors and since these computers are for a client the contract states they are never to be connected to our own companys network. Therefore, they must be installed on the visitor side of our network. The problem is we will have to install our own hubs (can't use switches as they would take the other switches down) to install the updates onto multiple computers at once. If we do this it would take around 3 hours per install. Does anyone know a way to download all the necessary updates from windows and put them on a disk or flash drive? This way we can easily load teh updates? The other option is to update one system and make a copy of it and run sysprep to install this copy on all the other machines. We have yet to receive word if the contract will allow us to do this.

To point one other thing out, the contract stipulates the machines always receive the latest updates but will never be able to access the internet upon shipping and arrival to their destination. So we are unsure how we will get these updates to these machines as well. Any Ideas?

share|improve this question
Given than I've never seen a 100mb hub (although technically they could exist) and any 10mb hub is going to be 15+ years old now, I find myself wondering exactly how you're going to achieve that part of the contract... –  Mark Henderson Sep 16 '12 at 20:59
How, exactly, would any new switches "take the other switches down"? –  Skyhawk Sep 18 '12 at 4:19

3 Answers 3

up vote 4 down vote accepted

Your contract is going to have to include a WSUS server to go with the client computers. The WSUS server will need access to the internet in order to download Windows updates. The client computers can then be configured to download and install updates via the WSUS server.

See here for genberal WSUS information:


And here for configuring non-AD clients:


share|improve this answer
+1, WSUS is the best option, if there isn't any internet you can't use Windows InTune but that may be good for ensuring updates in the future as well as maintenance. Although you might be able to team up NAP with WSUS for update remediation on the visitor network. Weird requirements though. –  Brent Pabst Sep 16 '12 at 20:17

Nothing wrong with Sysprep.
In fact it's the quickest method for imaging 60 identical machines, without waiting hours for updates to install (WSUS server or not).

Don't read too far into the contract. Meet your deliverables, and wash your hands of it.

share|improve this answer
bbezaire: the question states "To point one other thing out, the contract stipulates the machines always receive the latest updates but will never be able to access the internet upon shipping and arrival to their destination". I took that to mean that the OP will be responsible for updating the machines after they've been delivered. –  joeqwerty Sep 18 '12 at 16:45

I second the recommendation of setting up a WSUS. However, if for some reason that is not an option for you (due to network restrictions or something), you could try WSUS Offline Update instead.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.