c't Offline Update Project

The problem with new installs of Windows is that you know that you can't hook the computer to the Internet until it has all of the security patches. You also can't get the security patches until you hook up to the Internet. In the past, I've hooked machines up and raced to Microsoft Updates, praying that the updates take before the crackers find the computer.

The Solution

c't Offline Update Project (German page, English translation) is a collection of scripts that locates Critical and Security updates from Microsoft Update and downloads them to your PC. It then creates an ISO with the scripts and patches which you can burn to create your offline patch CD.

You can now install Windows on a computer and leave the network cable unplugged. Once Windows is installed, you can insert the c't Offline Update Project CD into the computer. The script autoruns, you click START, and then you can walk away. The scripts take care of finding what patches are needed, installing the needed patches, and rebooting the computer (as many times as necessary). When it's all done, a report appears on the screen to tell you what patches were installed and any problems that may have occurred.

In my experience, this not only gives you a more secure computer to go out and get the rest of your patches but it also patches more quickly. Without having to go online, check for patches, download, install, reboot, and repeat a few times, it shaves at least 30 minutes off of my prep time (note: I haven't actually timed that, YRMV).