First of all, it should be noted that I'm not intending to use this system for anything critical or secure. I'm just interested in having some sort of old system to play around and experiment with, either in a VM or on an old laptop, and in learning how secure/modern it's possible to make it.
I've been following the instructions of these posts in order to upgrade a Windows 2000 SP4 install to be as current as it's possible to be, complete with extended kernel and extended core. I have reached the point where Windows Update is accessible and I can download and install updates, including DirectX 9 and Windows Media Player. I've saved all of the executables I've used into a zip file, so that I can install them in order on a fresh VM.
I have two questions at this point:
1. If I download all remaining Windows updates from the online service, will this essentially bring the system up to being 100% current with all available security updates, or are there other things I should do?
2. If I do get a 100% current system, is there a way to "cache" this progress, either by saving the updates themselves or by slipstreaming them into the install ISO, so that I can be sure that if I were to reinstall the system from scratch later down the line, it would reach the same state? I was very surprised that Windows Update was even reachable from Windows 2000, and worry that it may disappear.
Really I'm looking for the most straightforward way to go from a completely blank VM or computer to a clean, trim, up-to-date install of Windows 2000 that is ready to have user software installed on it. I am aware of HFSLIP, but I'm not sure how to use it or whether it supports the extended kernel stuff; if it does, I will look into doing stuff with it.