Windows Update in a Closed Windows Server 2016 Environment

Question

We are considering the operation of Windows Server 2016 Standard (64bit) that does not connect to an external network.
This server does not connect to the Internet.
In that state, I would like to update the following two updates and definition files.

Windows Update
Windows Defender

For example, on a PC that can connect to the Internet, I would like to download the updated data, store it on a DVD or USB memory, and connect it to a server to support it.
What are the means and technologies for such operations?

Answer 1

Hi,

In regard to your issue of'windows server update without Internet', I want to confirm that what's the current OS version of your server?

1. If the current version of your server is 2016, you can download the latest KB file in the following link from a computer has access to the Internet and share it to the server need to be updated.
   https://www.catalog.update.microsoft.com/Home.aspx
2. If the current version of your server is lower than 2016,
   (1)You are in a domain environment and the DC in the domain has SCCM service, you can download the iso file from this service.
   (2)You are in a workgroup environment, please download the iso file in another computer and share it to you.

Hope my answer will help you, thanks!

Answer 2

Hi,

Have you considered using Microsoft Endpoint Configuration Manager (MECM) or Windows Server Update Services (WSUS)?

Synchronize software updates from a disconnected software update point
https://learn.microsoft.com/en-us/mem/configmgr/sum/get-started/synchronize-software-updates-disconnected

Configure a Disconnected Network to Receive Updates
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd939873(v=ws.10)?redirectedfrom=MSDN

Best regards,
Leon