Applying Windows Updates Offline

Since there isn't a programing or scripting forum, I think this fits best here. If not please move to a better place.

What I would like to do is create a batch file or vb script to update XP offline. Once a month I download the security updates from Windows Update and put them in a folder on our network. When we do new installs we copy that folder to a removable device and apply them to the fressh XP install without being on the network. Currently I have a batch file that is called updatexp.bat. In this batch file, each line installs one update (see example below). The down side to doing updates this way is I have to edit this batch file every month and make sure that the filenames are correct.

My question is, is there a way that I can create a batch file or vb script file that will run all of the exe's in that folder without having to modify the file monthly?

Does this make since?

----- start updatexp.bat -----
@echo off
echo Installing XP Update MS04-038...
WindowsXP-KB834707-x86-enu.exe /quiet /norestart

echo Installing XP Update MS04-041...
WindowsXP-KB885836-x86-ENU.exe /quiet /norestart

...

echo Installing IE Security Update - MS05-020...
WindowsXP-KB890923-x86-ENU.exe /quiet /norestart

echo Installing Windows Installer 3.1 KB893803...
WindowsInstaller-KB893803-x86.exe /quiet /norestart

pause
shutdown -r -t 00

----- end updatexp.bat -----

Thanks
Eric

 

not sure i'd opt this method as there are other ways to do this but ...

try a FOR/DO loop

for %i in *.exe do %i /quiet /norestart

or something like that ... open CMD and type FOR /? for help

 

Thanks Skeet. I was wondering if something like that might work. I will give it a try.

 

if it works ... u'r welcome ... if not, someone here will take another crack at it i'm sure.

 

Thanks for the reply's guys. I think that the for loop process will work if I can get it to run one file at at time. Currently when I use the following command all of the exe's run at once.

c:\updates>for %i in (*) do %i /quiet /noreboot

Arie, SUS or WSUS would works fine for our computers already on the network. However, what I'm looking for is a way to apply the patches before the computer is attached the network, or on a computer that would be used at home where SUS wouldn't probably be an option.

What we have found out in the past is that we have to be careful when setting up new pc's. If we install the os with the computer on the network, then by the time the os is loaded and we can get to AV software, the pc already has a good chance of being infected. So about a year and half ago we started following this process for new installs.

1. Install OS with no network connectivity
2. Install AV software
3. Download any necessary drivers, av updates, hotfixes on a pc that is already on the network and is clean.
4. Copy those files to a cd, usb drive, etc.
5. Connect the drive or insert cd in new computer, apply av updates, hotfixes, drivers
6. Restart and connect pc to network
7. Apply any additional updates from web if necessary

By following this process the pc is assured to be as up-to-date as possible before having any connection to the network. I'm just looking for a better way of applying windows hotfixes so that I don't have to modify a batch file every time new updates are released.

Anyway, thanks again for the thoughts and suggestions. If anybody has any other suggestions to accomplish this, I wouldn't mind hearing them.

Eric