Comments on: Dealing with air gapped Windows 10. https://virtuallyfun.com/2020/04/11/dealing-with-air-gapped-windows-10/ Fun with Virtualization Wed, 15 Apr 2020 22:06:12 +0000 hourly 1 https://wordpress.org/?v=7.0.4 By: tirp https://virtuallyfun.com/2020/04/11/dealing-with-air-gapped-windows-10/comment-page-1/#comment-254778 Wed, 15 Apr 2020 22:06:12 +0000 https://virtuallyfun.com/wordpress/?p=10223#comment-254778 In reply to neozeed.

The other options I used were: /compat ignorewarning (ignore non-critical warnings when upgrading with /quiet), /dynamicupdate disable (don’t try to get the latest cumulative update / driver updates from the internet to which you don’t have access to begin with – this is not strictly necessary as it’ll just time out without a connection, but why let it even try), /migratedrivers all (I see no reason to do otherwise – if a driver is not compatible or not needed, it’ll just get ignored later), /showoobe none (don’t show any user-configurable OOBE screens) and /uninstall disable (don’t let the user downgrade).

Depending on your scenario, the last two might not be applicable. In my case, I did not want the users to have any say in the matter or be able to roll back upgrades.

]]> By: neozeed https://virtuallyfun.com/2020/04/11/dealing-with-air-gapped-windows-10/comment-page-1/#comment-254717 Wed, 15 Apr 2020 15:52:22 +0000 https://virtuallyfun.com/wordpress/?p=10223#comment-254717 In reply to tirp.

I have a feeling I’m going to need that as they have the updates pointed to a server that doesn’t exist (yet?!)…

Honestly it feels these air gapped systems are if anything far more vulnerable as they are never updated.

]]> By: tirp https://virtuallyfun.com/2020/04/11/dealing-with-air-gapped-windows-10/comment-page-1/#comment-254650 Wed, 15 Apr 2020 09:20:04 +0000 https://virtuallyfun.com/wordpress/?p=10223#comment-254650 I used to administer some computers that were also not connected to the internet, but I could bring files onto them. For me the biggest question was how to install updates to the computers without WSUS or anything else that requires connectivity. Fortunately with Windows 10 it’s actually quite straightforward with the cumulative updates. You can get the .msu package (google: Windows 10 release information, click the KB article link corresponding to the minor build you want to update to) and just install it with wusa.exe, even silently. I was even able to update major builds without problems by bringing the ISO file to the computer, mounting it with Powershell and then running setup.exe /auto upgrade /quiet (+ a few other options I cannot recall right now – google Windows Setup Command-Line Options).

]]>