Yes. A Windows computer can install an applicable update while it is offline if you download the correct package on another connected computer, move it to the target, and install it with a supported tool. Microsoft documents this workflow for updates to a running Windows installation and for servicing an offline Windows image.
The important limitation is that “offline update” does not mean that Windows creates or fetches the update by itself. You must supply a package that matches the target Windows release, architecture, prerequisites and servicing tool. A separate Microsoft security-scan file can help identify missing updates, but it does not contain the update files.
As an Amazon Associate I earn from qualifying purchases.
What installing Windows updates offline actually involves
Internet access is required somewhere in the process, but it does not have to be available on the computer that will receive the update. A connected computer obtains the package from the Microsoft Update Catalog. You then transfer that package—often on removable storage—to the disconnected computer or to a Windows installation image.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →There are four different jobs that are often confused:
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
| Job | Target | Typical package or service | Important limitation |
|---|---|---|---|
| Update a live installation | A Windows PC that is currently running | Catalog .msu or .cab package; Windows Update Standalone Installer or DISM |
The package must apply to that exact Windows release and architecture. |
| Service an offline image | A mounted Windows image prepared for deployment | DISM with .cab or .msu packages |
Prerequisites, dependency order and DISM version support matter. |
| Scan for missing security updates | An offline or isolated computer | Windows Update Agent and Wsusscn2.cab |
The cabinet contains scan information, not the update payloads. |
| Prepare feature-update media | Installation media used where Setup cannot reach Microsoft | Catalog packages applied to the media in advance | Dynamic Update normally contacts a Microsoft endpoint, so its packages must be staged beforehand for a disconnected deployment. |
Choose the workflow based on the target state. Installing an update on a running PC is not the same operation as injecting a package into a mounted image, and an offline scan does not install anything.
Check these details before downloading anything
Manual installation succeeds or fails on package matching. Gather the following information from the target computer before you use the connected computer:
- Windows release and edition: Record the release shown by
winverand the edition in Settings. A package for one release is not automatically suitable for another. - Architecture: Check whether the installation is 64-bit, 32-bit or ARM-based. The Microsoft Update Catalog commonly lists separate packages for different architectures.
- KB number or exact update title: If Windows Update, an administrator or a security bulletin identifies a KB, search for that number first. Otherwise search the Catalog by product and update title.
- Prerequisites and installation notes: Read the individual Catalog entry and the KB documentation. Some packages require an earlier servicing update or another prerequisite, and the required order can matter.
- Restart status: A pending restart can prevent a package from applying cleanly. Restart the target first when the operating system indicates that one is required.
- Administrative access and storage: Installing packages and servicing images generally requires an administrator account and enough free space for the package, temporary files and the servicing operation.
Microsoft’s Catalog contents and package applicability change over time. The Microsoft documentation current as of October 13, 2026 also warns that servicing behavior depends on the Windows release and tool version, so check the target KB’s current notes immediately before installation.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsMethod 1: update a running Windows PC with a downloaded package
1. Identify the target precisely
On the offline PC, run winver to record the Windows version and build. In Settings, open the system information page and note the edition and system type. Write these details down or photograph the screen so the connected computer is used to search for the correct product and architecture.
2. Find the package in the Microsoft Update Catalog
On a computer that has internet access, open the Microsoft Update Catalog and search by KB number, update title or Windows product. Read the result rather than downloading the first similarly named file. Catalog entries can differ by release, architecture and servicing branch.
Open the update’s details and read its applicability and installation information. Look specifically for prerequisite packages, required servicing-stack updates, supported operating-system versions and any instruction about installation order. If the entry does not match the target’s release and architecture, keep searching; do not rely on the file name alone.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
3. Download and transfer the file
Download the applicable package to the connected computer. Catalog downloads commonly use the .msu format; some updates are supplied as .cab files. Copy the downloaded file to removable storage such as a USB flash drive, then move it to the offline PC. Microsoft also describes USB or DVD files as possible offline repair sources; the removable drive is simply a transfer method, not a requirement for every installation workflow.
Keep the KB number and the package together while transferring them. If several files are required, preserve the prerequisite order and copy all of them before starting the installation. Do not rename packages in a way that makes their KB or architecture unclear.
4. Install an .msu package with the standalone installer
For a running PC, an .msu package can normally be opened on the target so Windows Update Standalone Installer can process it. Follow the installer’s prompts and allow it to check applicability. If it reports that the update is not applicable, stop and verify the release, architecture, prerequisite state and whether the update is already installed; forcing a mismatched package is not a repair strategy.
The installer may request a restart. Save work, restart when prompted and do not remove the transfer drive until the copy operation has finished. After Windows returns, check the update history or the installed-update list and confirm that the relevant KB is present.
5. Use DISM when the package or instructions call for it
DISM can add applicable .cab or .msu packages to a running installation. Microsoft’s documented example is:
Free tools Windows power users keep installed
One-click scans. No signup required.
Dism /Online /Add-Package /PackagePath:<update.msu>Replace the placeholder with the actual path, such as a path on the removable drive. Use the exact command and options specified for the particular KB when its instructions differ. A successful command still does not prove that every prerequisite was present; review the output, restart if requested and verify the installed package afterward.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
DISM’s current reference states that .msu packages can be added to online or offline Windows 11 version 21H2 or later images. For earlier Windows images, the documented support for adding .msu packages is limited to offline target images. Consequently, on an older running installation, use the supported standalone-installer route or the package-specific instructions rather than assuming that the online DISM example applies.
Method 2: service an offline Windows image with DISM
This method is for deployment engineers, recovery technicians and anyone preparing a Windows image before it reaches a computer. The image is not the currently booted Windows installation; it is mounted in a servicing workspace.
1. Mount the image and stage the packages
Mount the target image with the deployment workflow you already use, then place the required Catalog packages in an accessible folder. Keep the image’s Windows release and architecture aligned with every package. If a KB lists prerequisite updates, stage those as well and follow the stated order.
Recommended Free Tools
2. Add each package with DISM
Microsoft illustrates the offline-image form of the command as:
Dism /Image:<mounted-image> /Add-Package /PackagePath:<update.msu>The same operation can target a .cab package by supplying its path. Run the command for each package required by the image, observing the sequence specified by the update documentation. Use a DISM version that supports the target image and package type.
3. Treat dependency checking as your responsibility
DISM’s /Add-Package operation does not perform a full dependency check. A command can therefore fail because a prerequisite is missing, or appear to complete while the image still lacks a required component for a later update. Read the package notes, apply prerequisites first and inspect DISM’s servicing output for errors.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
4. Commit, unmount and verify
After all packages have been added, complete the normal commit and unmount steps for your image workflow. Use DISM’s package-listing capability to verify that the intended updates are present in the image before deploying it. Test the resulting image in the environment where it will be used; an image that services successfully is not automatically compatible with every hardware configuration or later feature update.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What Wsusscn2.cab can—and cannot—do offline
Microsoft’s Windows Update Agent documentation makes a critical distinction: Wsusscn2.cab contains information about security updates, not the security updates themselves. It can support an offline scan that identifies security updates relevant to the computer, but copying the cabinet to the PC does not install a patch.
A useful workflow is:
- Move the periodically revised
Wsusscn2.cabfile to the isolated computer. - Run a Windows Update Agent-compatible offline scan according to Microsoft’s procedure.
- Record the missing update identifiers reported by the scan.
- On a connected computer, obtain the actual packages for those identifiers from the Microsoft Update Catalog.
- Transfer and install the packages using the live-PC or offline-image method appropriate to the target.
The scan and installation are separate jobs. A scan result does not remove the need to check package applicability, prerequisites, architecture and servicing-tool compatibility.
Prepare feature-update media when Setup cannot connect
Windows Setup’s Dynamic Update normally contacts a Microsoft endpoint to obtain setup improvements, drivers and other update content. If the destination environment cannot connect, Microsoft documents an alternative: acquire the required packages from the Catalog and apply them to the installation media in advance.
That preparation belongs on a connected staging computer. Determine which Windows release the media represents, download packages that match it, apply them to the media using the documented servicing process, and validate the media before taking it into the disconnected environment. Do not assume that a package for the currently installed operating system is also suitable for the release contained on installation media.
Use WSUS for managed networks, not as a shortcut for a one-off PC
In a corporate environment, Windows Server Update Services can distribute approved updates across an internal network so client computers do not each need direct internet access. The WSUS server still needs an appropriate synchronization or package-acquisition process, and administrators normally approve updates before deployment.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
The Microsoft Update Catalog also offers direct package downloads, but Microsoft’s documentation notes that its .msu files cannot be imported into WSUS using the described direct-import path. Do not treat a downloaded .msu as a file that can simply be dropped into WSUS. For a single isolated PC, Catalog plus standalone installation is usually the simpler route; for many managed computers, follow the organization’s WSUS procedures.
Choose the right offline workflow
| Your situation | Best starting point | What you need to verify |
|---|---|---|
| One disconnected PC is already running Windows | Download the matching Catalog package and use the standalone installer; use DISM when the KB specifically calls for it. | Release, architecture, KB applicability, prerequisites and restart state. |
| You are building or repairing a deployment image | Mount the image and add packages with DISM. | Image version, DISM support for the package type, dependency order and servicing output. |
| You only need to discover missing security patches | Run an offline Windows Update Agent scan with Wsusscn2.cab. |
Remember that the cabinet supplies scan data; obtain payloads separately. |
| You are preparing feature-update media for an isolated site | Acquire the relevant Dynamic Update content from the Catalog and apply it to the media in advance. | Media release, package applicability and successful validation before deployment. |
| You manage many PCs on an internal network | Use the organization’s WSUS distribution process. | Approval, synchronization and the documented method for importing or distributing each update type. |
Common failures and how to recover
“This update is not applicable to your computer”
Check the Windows release, edition and architecture against the Catalog entry. The KB may already be installed, may require a prerequisite, or may target a different servicing branch. Re-run the identification step and download the exact package rather than trying another similarly named file.
The installer requests a prerequisite
Return to the KB’s installation notes and obtain the prerequisite package. Transfer and install it first, restart if required, then apply the original update. For an image, maintain the documented package order and service the image again.
DISM rejects an .msu package
Confirm whether the target is online or offline and which Windows release the image contains. Microsoft’s current reference has different .msu support for Windows 11 version 21H2 and later versus earlier Windows images. On a running older installation, use the supported standalone-installer method or the KB’s specific instructions.
The command completes but the update is not present
Review the DISM output, restart the target if requested and inspect the installed-package or update-history information. Because /Add-Package does not perform a full dependency check, look for a missing prerequisite or an incompatible package rather than repeating the same command.
The scan reports missing updates but there is nothing to install
This is expected when you have only copied Wsusscn2.cab. Use the scan’s results to identify the required KBs, download their actual packages from the Catalog on a connected computer and transfer those packages to the target.
Feature-update media fails in the isolated environment
Verify that the media was serviced with packages for its own Windows release and that all required Dynamic Update content was staged before disconnection. Rebuild or re-service the media if a package was intended for the installed operating system rather than the release on the media.
Quick Recap
Offline-update checklist
- Record the target Windows release, edition, build and architecture.
- Identify the KB or exact update title that is needed.
- Read the Catalog entry and KB notes for applicability, prerequisites and order.
- Download the matching
.msuor.cabpackage on a connected computer. - Transfer the package with removable storage or another approved offline method.
- For a live PC, use the standalone installer or the documented online DISM command.
- For an image, mount it and use the documented offline DISM command.
- Restart when requested and verify the installed update or image package list.
- Keep
Wsusscn2.cabseparate in your notes: it helps scan for security updates but is not an installable update payload.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
