GRitchie Posted October 15, 2014 Posted October 15, 2014 Hello, My golden image has SP1 installed, however every time I image there are 200 updates on the first check. I was wondering is there a way to just inject all these updates during the imaging process? I had a look at the MBSA however that didn't really work! Thanks!
tmcd35 Posted October 16, 2014 Posted October 16, 2014 How are you creating your images, what system are you using? The usual method is to build one machine, install all software and updates needed in the final build, sysprep and image. Of course, with Patch Tuesday, you're fighting a losing battle keeping any image 100% up to date without using a WSUS server or SCCM.
Davit2005 Posted October 16, 2014 Posted October 16, 2014 We do the Windows updates at Image build, if that helps. There is a stage after the OS is installed and then again after Applications are installed. It uses a WSUS server and there is a machine group in WSUS which is used during builds. An outside company set this all up for us but I can have a peek around if it helps.
localzuk Posted October 16, 2014 Posted October 16, 2014 I believe MDT has Offline Servicing doesn't it? So you can streamline updates directly into the image? SCCM does too. I think these pages might be useful: Managing Windows Updates - The Deployment Guys - Site Home - TechNet Blogs http://www.sysadminlab.net/mobile/creating-a-fully-patch-install-wim-for-windows-78-without-mdt-but-using-wsus-offline-updater
GRitchie Posted October 16, 2014 Author Posted October 16, 2014 We don't have SCCM and I don't see this being an option to set up, I'll have a look around on those links from localzuk and if you could explain a bit more Davit2005 it would be great! Cheers!
GRitchie Posted October 17, 2014 Author Posted October 17, 2014 We don't have SCCM and I don't see this being an option to set up, I'll have a look around on those links from localzuk and if you could explain a bit more Davit2005 it would be great! Cheers!
SHimmer45 Posted October 17, 2014 Posted October 17, 2014 i have used dism in the past to update an image with IE10 as there was a bug with installing it and then capturing the image (option in the answer file causes an issue with IE10). i imagine that @Davit2005 has a couple of options in his task sequences to start windows update.
Davit2005 Posted October 20, 2014 Posted October 20, 2014 i imagine that @Davit2005 has a couple of options in his task sequences to start windows update. 1) 2 reg keys are set 1 enables Client Side Targeting, the other targets the clients to a specified group in WSUS 2) We have a task sequence before applications are installed and then one after I can't find where the WSUS server is specified but maybe the Registry key can be written for that as well, we have the registry keys reset after updates are all done Hope this helps
computer_expert Posted October 20, 2014 Posted October 20, 2014 (edited) The WSUS server can be set in customsettings.ini by using WSUSServer=http://server:8530 (if WSUS is running on port 8530 otherwise forget the port). I make sure that the machine joins the domain before installing updates as it will then pick up the settings from group policy which eliminates the need for registry keys in the task sequence. I have used DISM in the past to integrate updates directly into the install.wim from the Win7 DVD and then used WSUS to push any updates released afterwards. Edited October 20, 2014 by computer_expert
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now