You can, by pointing your windows to a WSUS for updates. That WSUS doesn't have to really exist.