How to Patch Outdated Offline Windows 10 Workstations with Office 2016
Question details
The user needs to know how to properly update isolated, offline Windows 10 workstations running Office 2016 that have not been patched since 2019, specifically wondering if the updates are cumulative.

- Product
- Microsoft Office 2016
- Device & OS
- Windows 10 (version 1803)
- Scenario
- An IT administrator has inherited offline Windows 10 workstations and needs to bring their Office 2016 software up to date securely and efficiently without internet access.
- Observed behavior
- The workstations have been offline and unpatched since 2019, requiring manual intervention to determine the correct update sequence and installation method for legacy Office versions.
Verify whether your Office 2016 installations are Volume Licensed (MSI) or Click-to-Run (C2R), as this dictates the exact update process you must follow. You will also need an internet-connected computer and a USB drive to transfer the update files.
Download and Install the Latest Cumulative Update for Office 2016 (MSI)
For volume-licensed (MSI) versions of Office 2016, updates are largely cumulative, meaning you generally only need to download the latest update package directly rather than installing years of individual updates.
Microsoft releases Public Updates (PU) for the MSI version of Office 2016. These updates are cumulative for the most part, so applying the most recent update covers previous security and performance patches.
To perform this offline, you must manually download the update executable from the Microsoft Update Catalog on an internet-connected device.
Open Word or Excel 2016 on the offline workstation. Click 'File' > 'Account' > 'About Word' to determine if the installation is 32-bit or 64-bit.
On a computer with internet access, navigate to the Microsoft Update Catalog site. Search for 'Office 2016 cumulative update' and download the latest patch corresponding to your architecture (x86 or x64).
Copy the downloaded .exe or .cab file to a secure USB flash drive. Insert the USB drive into the offline workstation, double-click the update file, and follow the installation prompts to patch the system.
Use the Office Deployment Tool for Click-to-Run (C2R) Installations
If your Office 2016 setup uses the Click-to-Run installation method, you must use the Office Deployment Tool (ODT) to download the latest binaries and transfer them to the offline machines.
Simplify Your Software Deployment with WPS Office
Managing legacy Office 2016 updates on outdated, offline workstations can be a tedious and complex administrative burden. Consider switching to WPS Office, a highly compatible, lightweight alternative that is incredibly easy to deploy and maintain, even in strictly offline environments.
- 1. Download the offline installer: Visit the official WPS website on an internet-connected device to download the standalone offline installation package.
- 2. Transfer to your workstations: Copy the lightweight installer to a secure USB drive and connect it to your offline Windows 10 computers.
- 3. Install and deploy: Run the installer. The process completes in minutes without requiring complex deployment tools or staggered updates.

Frequently Asked Questions
Are Microsoft Office 2016 MSI updates fully cumulative?
Yes, Microsoft typically releases cumulative updates for Office 2016 MSI editions. This means installing the latest Public Update generally provides all previously released security and non-security fixes, eliminating the need to install updates from 2019 onward individually.
How do I check if my Office 2016 is MSI or Click-to-Run?
Open any Office application like Word and navigate to File > Account. If you see an 'Update Options' button under the product information, you are using the Click-to-Run version. If there is no 'Update Options' button, you are running an MSI (Volume License) installation.
Can I use Windows Server Update Services (WSUS) for offline workstations?
If the workstations are completely disconnected from any network, WSUS cannot be used. However, if they are isolated from the internet but connected to a local intranet, you can set up an offline WSUS server to push updates locally.




