Is there a tool which can be used to check which security patches are installed on a standalone (non-Internet connected) Windows machine and install any that are missing?


I don't know of any standalone tools that can do this but if you're simply on a disconnected network with server support, you can deploy an offline copy of WSUS or SCCM that can do this. There are also a number of 3rd party applications which fill the same role, such as the Shavlik family (originally Shavlik, then Patch Authority Ultimate, then owned by Dell).

You can download groups of software patches via the Windows Update portal as CAB files and import them with the WUSA tool.

I also found this link. I didn't look too closely but it seems like it might be up your alley: http://www.wsusoffline.net/

  • 1
    We have a good experience with WsusOffline, especially on memory limited PCs where online check may take ages with Windows 7. One thing to note though is patch coverage info that one should review before attempting to use it. Other than that its pretty straightforward and works as expected even with very limited resources. – Peter Zhabin Sep 27 '18 at 22:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.