Does MS Still offer "Offline" CD / DVD Updates?

By Who Am I Really ·
that's really all there is to it.

but I'll explain:

this is not my specialty, I do audio for the web & CDs but,
I'm needing to re-build a small soon to be closed LAN with no web access at all,
due to privacy requirements the systems need to be permanently cut off from the web and operate in a closed & restricted LAN only
I'll be stripping the systems & reinstalling from scratch, or hopefully there's a few base images lying around,

there is a mixture of systems including but not limited to:
XP-Pro -32, XP-Pro -64 x86, Win2k,
and depending on the budget there's the possibility of getting a real server.
which I will have to call in the big guns to help configure properly for a closed system
there will also be a ban on foreign media, USB, flash chips, etc. as no files are allowed to enter or leave the systems or site, except for backup media, which only takes images of the OS & Programs partition / drive, all other data is stored on separate storage devices

please don't jump on me about using old OS
there is no option to use the newer as the software involved cannot be run in Vista / 7 & up
& there's no budget to replace all the systems as there's no way this side of MS **** that over 95% of the systems there will even be capable of running vista/ 7
but function just fine as is.
and no one wants to have to relearn how to do what is already done efficiently on the current setups.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Sort Of

by TheChas In reply to Does MS Still offer "Offl ...

First off, since most of the updates are security updates to prevent hackers from gaining control of a system remotely, you just don't need to take the time to install most of the updates on systems that will never be connected to the Internet.

I would still bring these systems up to at least XP service pack 2, if not SP3.

What you can do, is go to the Microsoft download page.

From there, use the search function and download the service pack off-line installer images. These are ISO image files, so you need to use the burn from image function of your CD burning software to create the disk.

You can also download the patch Tuesday monthly ISO image if you want to install that months security updates.

One side note on the service packs. You do not need to install each service pack individually. If you have service pack 1 installed, you can skip service pack 2 and install service pack 3. If you have the original release of XP, you can skip SP1 and install SP2 alone.

Oh, one BIG caution! Some Pentium IV systems will lock up when you install Service pack 2. Here is a link.

Your options are to install the patch for SP2, or skip SP2 and install SP3. Either method works.

My final thought concerns product activation. Unless you have a corporate edition install CD, you are going to need to activate these systems as you rebuild them. If you don't connect them to the Internet for automated activation, you will have to make a phone call and get an activation code for each system.

There have been postings of methods to preserve and restore an existing activation. I have not tried them so I can't state if they work well or not.


Collapse -

Why bother?

by .Martin. In reply to Does MS Still offer "Offl ...

update to the latest Service Pack (SP3 for XP, and SP4 for W2K), and call it quits

nearly all updates are security-based, so in the computers are completely blocked off from the outside world, they don't need any more.

<edited cause I can't count!>

Collapse -

A Couple Of Points

by TheChas In reply to Why bother?

First, the latest service pack for Windows XP is service pack 3 not service pack 2.

Second, for Windows 2000 systems it is a very good idea to install the non-service pack Update Roll-up 1 for Service Pack 4.

We just did some clean installs of Windows 2000 and discovered that we needed most of the system updates that are bundled into the update roll-up. Some devices we required did not function properly until we installed the update package.

I have not verified, but I suspect that the monthly ISO images only include the security patches and not the function and performance updates.

One other thing that he should do prior to starting this rebuild is to make sure he has all the correct drivers for the different computers.


Collapse -

thanks for the info . . .

by Who Am I Really In reply to Does MS Still offer "Offl ...

there are some systems that just can't run XP
ever tried it on a P1 or p2?
I do some system maintenance for a guy who's mentally challenged, he's got XP installed on a celeron-II 667MHz system (someone gave it to him for free) and it takes 10 min. to boot, accessing email takes forever, slower than a thin client terminal on a wireless hookup

I've also found XP workgroup networking to be a real PITA while 2k on a 10/100 is faster than XP on a gigabit NIC
ie. just opening my network places is instant in 2k and takes ages in XP

anyhow, I don't mind making the call to get the XP install finalized, I usually spend a lot longer configuring and testing first before ever making the call as it's easier to just zero-fill and start again if something bombs during setup & configuration.

as far as I know most of the driver CDs etc. are kicking around somewhere, the only issue that I see is possibly having trouble with getting specific chipset drivers for a couple of the older systems.

I know some of the MS updates are about stopping hackers etc. but I'd rather just do the whole lot and be done with it

one of the main reasons I was asking about this other than the closed LAN setup I'll be working on shortly
is because the win2k EOL due date is in July 2010 and I don't want to be sitting in a situation where I need to do a rebuild and trying to get a system updated only to have win update bounce me out to the Download Center with their hidden but not so subtle "find them yourself" attitude.
if I have an updates CD set then all I'd ever have to do is pop in the CD after a rebuild
and in the future the same for XP when the 2013 EOL date arrives.

Collapse -

For Windows 2000

by TheChas In reply to thanks for the info . . .

For Windows 2000, I recommend that you download and burn the service packs and Update roll-up 1 for Service Pack 4.

If you run Windows update on a single system, you should be able to capture a fairly complete list of the updates you will need for the other systems. Then, manually download the additional updates and burn them onto a CD.

The primary issue with the EOL of Windows 2000 will be no new patches. I would expect Windows update to work for 6 months or so after EOL.

Don't forget to download the patches for Office and any add-on programs like Windows Installer, Net Framework, IE, and the other redistributable applications that are used.


Collapse -

I use...

by mamies In reply to Does MS Still offer "Offl ...

I use this program

You basically put it onto a machine that is allowed access to the internet and run it and download all of the updates for the operating system and Word. It will then put them into an ISO image with an autoplay which will install them all.

Saves me from having to download them all from the internet indervidually and installing them.

Collapse -

Offline is the key here . . .

by Who Am I Really In reply to I use...

Thanks for the info:

but the whole point of asking if MS still offered "Offline Update CD/DVD" is to keep the entire LAN from ever being connected to the web or have contact with files that have come from the web
and to get MS "certified" Virus / Spyware / Malware free updates directly from the MS production systems
I do have a win2k SP4 and a XP SP3 CD, but there's a whole ton of updates, over 100 after SP4 was released including the SP4 RollUp
and the closed LAN is going to be super closed;
ie. no AutoRun / AutoPlay,
access to the CD / DVD Drives will be from the Administrator account only,
access to the USB will also be disabled,
all system disk backups will be handled by an Administrator,
once the final nail in win2k support is driven in July the system need only be backed up before any major change, because the system image will not need to be updated until after a major change like a hardware change etc.

Related Discussions

Related Forums