Yup .. in a workgroup, that's what you do.

If its in a domain then you want WSUS & that 'enterprise type stuff'.. or just download the patches invidiually if all else fails & apply the things mannually.

You are as bad as me though ! - so maybe you are getting at something else .. Are you concerned about not having a working machine still ?