While looking this issue up, I did find these 2 patch/hotfix getters I guess you would call them. http://wud.jcarle.com/ this one was nice because you download a list of the the updates and pick while ones to download and where to store them. This seems to work well with nlite. You can also grab exchange patches, etc. http://www.heise-security.co.uk/articles/80682/0 This one is for making an ISO of patches. it makes an ISO and installs and reboots according to what patches are in the burned ISO. this seems to get the patches when directly from microsoft instead of a list like the 1st one.