I currently have 4 server that sit behind a firewall and do not have internet access. In fact they are locked down pretty tight. The 5th server on the network (the domain control) however, has outside/internet access. I need to apply updates to all 5 of these servers. I cannot for one second allow an internet connection to the other servers unfortunately. (Contract reasons). It is my understanding that I can run a command within each server that allows me to check for the most recent updates on that server and then download the required updates from the internet server. If that makes sense.
I have heard something about MBSA allowing this capability or something along that nature. Are there any other suggestions I may want to look into to get the servers updated behind a firewall with the most recent updates? Also what command line prompts would I look into using to make this project work?