There are many security patches that need to be applied to Microsoft operating systems. It is essential that all Microsoft users either subscribe to receive security notifications or check on a very regular basis for updates. Visit the Microsoft update website for further information. You could, of course, also use a "SUS" server locally on your LAN and therefore perform only one major download and then distribute from this point. Again see the Microsoft website.
"Free will is an illusion. People always choose the perceived path of greatest pleasure"