I don't quite understand your question. Why are you talking about batch files? (I mean, what makes batch files so special - you mean like command-line interface)?
BTW in your scenario, the server does have access to the Internet but the workstations don't - and you want to protect both the server and the workstations?
Thanks
Vlk