A.k.a "WSUS via Sneakernet?"
(Similar question asked in 2013 here, but some key differences and no strong answers to that one.)
Most of my environment consists of AD-joined Windows 7 workstations; I'm managing updates through WSUS and EPO, and that's got enough automation and reporting to satisfy.
I have, however, a select population of machines that are not network connected and never will be. At the expense of a little manual prep work, I can use USBs or CDs and WSUSOffline to deploy the windows updates, and just copy the AV updates -- but that gives me no real closing of the loop in reporting terms.
I can track and report based on completely manual log examination by eyeball and recording on paper, but that seems very Victorian. (Edwardian, even.) Is there any way that I can still use WSUS and EPO (or perhaps SCCM?) or some related process to unify the tracking and reporting?