In my case, the systems are not on the internet (and probably never will be)
and therefore getting updates are obtained via other methods - downloading
the patches one by one
Umm... download the patches to NT if that's what you have to do, then set
up an FTP server on the internal network only? Alternately, perhaps set up
a proxy on NT that only allows those 14 servers to get through?