WSUS on private Network

Has anyone setup WSUS on a private network that does not have internet
access?

I'm thinking about having WSUS on a network w/ internet access where I can
synch its contents, and then manually copying the content to another WSUS on
a private network. Nothing can come out of the private network. (Everything
has to be burnt to a disc and brought into the private network, so no hard
drive swapping allowd.)

If so, how did you keep track of new/changed/deleted files? I don't want to
reinvent the wheel.

I was thinking of using WinBatch to inventory the first server's contents
(files/modification date) and saving the list in a file. When I need to
update the private WSUS, I would run the program to compare the synchronized
WSUS to the files already copied to the private WSUS. The program would copy
the new files and the updated file list (with flags indicating
new/changed/deleted files) to a directory for the DVD burn. This way nothing
needs to come out of the environment.

Once on the private network, another program will copy or delete the
corresponding files.



Any other ideas/tips?

Appreciate your time.

Paul