simple solution

There's a simple solution to this, which I've already written, and it all relies on some nice tools provided by MS :)

Ingredients:

1. Download MBSA (Microsoft Baseline Security Analyzer) from MS.

2. Download the latest wsusscan.cab from MS.

Run the MBSA tool against their CAB, specifying XML output. Parse that XML output for a list of patches needed including their HTTP locations at MS, and get your little app to download them to a cache. Install if necessary. (Or, copy cache to a dvd/cd, and run same app at friends, just doing the scan/install part).

I have this working, but it needs a bit of polish.

As it wouldn't distribute any MS code, surely it can't be illegal ?