so I take it your on a domain in the office or something. what I suggested to our IT dept is to download all virus and windows updates to local depository and then push the updates to the user in there log in scripts so before they log in they are all up-to-date.