Updating an offline Server

[dbutch1976]

Hi guys,

 

When building servers on our LAN part of our policy is to place them in a segregated network until they are patched, Anti-virus is installed, and a security audit has been done.

 

While on the segrated network the machine has not internet connectivity. Part of the build process places the server into a critical patching cycle using our 3rd party software, which in theory means the patches will downloaded and installed through the course of the night.

 

This does not always happen, and if the patching window is missing this can add an extra day onto the server build process because we need to correct the problem and then wait for the next patch window.

 

Is there a way to manually detect which patches are required, download all necessary patches, burn the to an .iso and then run them? I've seen ads for products but they dont' seem to cover 2008 server, and in addtion I really feel there should be some kind of free MS solution out there somewhere.

 

Any ideas?