Create it / patch it before virus attack

Since the Welchia virus is out there roaming evertime we create a new system we get the virus before we can finish the patches even if we load the patches from a local server and don’t use M/S Update site.

Is there a way to upgrade the patches with out taking the server/workstation/desktop/laptop off LAN for the whole process? Otherthen using Bootable USB Keys or External USB HD’s.
Thanks.Wm.