I currently have 4 server that sit behind a firewall and do not have internet access. In fact they are locked down pretty tight. The 5th server on the network (the domain control) however, has outside/internet access. I need to apply updates to all 5 of these servers. I cannot for one second allow an internet connection to the other servers unfortunately. (Contract reasons). It is my understanding that I can run a command within each server that allows me to check for the most recent updates on that server and then download the required updates from the internet server. If that makes sense.
I have heard something about MBSA allowing this capability or something along that nature. Are there any other suggestions I may want to look into to get the servers updated behind a firewall with the most recent updates? Also what command line prompts would I look into using to make this project work?
You should look into WSUS (Windows Server Update Service), free tool, that does exactly what you want.
It runs on one server with Internet access, and takes care of updating other servers behind the firewall.
Note that you should not run this on the domain controller, so if licensing allows it deploy a new machine for this purpose.