Yeah, computerbase, a famous german website, has such updates hotfixes packs (with only security updates), and I don't think they've asked for permission. You can see the links below, and it seems that not all code hosting from Microsoft is illegal, hotfixes are ok. xable's servers with Microsoft updates is another example. Hosting however a whole OS (updated or otherwise) is just a very different idea. WinFuture Update Pack XP WinFuture Update Pack Vista WinFuture Update Pack 7 All in One Runtimes