[sccm 2012] Blocking Windows Update drivers during Windows 10 install

[DavR]

Has anyone found a reliable method of stopping Windows 10 reaching out to Windows Update for device drivers during deployment?

 

I've got that feature turned off in group policy for general day-to-day (I assume its working), but when I'm installing in a SCCM task sequence (ie, pre GP) Windows 10 keeps downloading updated drivers via Windows Update. As far as I can tell this happens just after my TS applies drivers locally, like after onsite driver install it performs an online check for updated versions.

 

I'm using HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversInQualityUpdate set to 1 in the registry of my build to theoretically stop this, but it doesn't seem to be respecting that setting. Under the same key I've also turned off automatic updates under the AU key.

 

How have you guys achieved this, or have you just accepted this behaviour?

[Arthur]

Has anyone found a reliable method of stopping Windows 10 reaching out to Windows Update for device drivers during deployment?

I use this method...

 

https://jsiewert.wordpress.com/2017/05/26/automatic-driver-updates-during-mdt-deployment-of-windows-10-1607/

 

Off

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 0 /f

 

On

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 1 /f

 

Btw, if you also want to stop Windows Store app updates during deployment see this article...

 

https://deploymentresearch.com/Research/Post/615/Fixing-why-Sysprep-fails-in-Windows-10-due-to-Windows-Store-updates

 

Off

REG ADD "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /v AutoDownload /d 2 /t REG_DWORD /f

 

On

REG ADD "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /v AutoDownload /d 4 /t REG_DWORD /f

[DavR]

I use this method...

 

https://jsiewert.wordpress.com/2017/05/26/automatic-driver-updates-during-mdt-deployment-of-windows-10-1607/

 

Off

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 0 /f

 

This looks like my answer @Arthur, thanks very much! I will play with that when I get a chance

 

Re Windows Store Apps, is that a thing that downloads during deployment? I thought those installed themselves "on demand" when clicked on? Either way, they're gonna have to install at some point so I guess I'll leave them to it. After all, that does seem to be Microsoft's strategy with apps, ie, no control whatsoever!

[Arthur]

Re Windows Store Apps, is that a thing that downloads during deployment?

Yes, although it's more of an issue during the build and capture of a reference image because it can cause sysprep to fail.

 

I thought those installed themselves "on demand" when clicked on?

I think that's only for the apps that have placeholder tiles. There are lots of other built-in apps that update themselves automatically in the background (see the second article I linked too above).

[DavR]

Now you mention it, I did have a bit of a ballache sysprep-ing my reference image because of apps. Something to bear in mind next time, although I'll leave it be for now on my Windows 10 task sequence.

 

Another wonderful example of a Windows 10 feature, that even on the Enterprise version, that gets in the way of Enterprise deployment / usage...