Unsolved Keeping WIN10 Images Updated (Windows Updates)

[Joe Gill]

Hi all,

I’m curious what others are doing for keeping their images up to date. I have noticed an issue with Windows 10 and not allowing to update in Sysprep / Audit mode. I can get my images up to 1709 and that’s as high as I can go without resealing Windows. I would rather create an updated image and just push the entire updated image instead of having hundreds of computers downloading updates all the time.

Also we use Deep Freeze on our publicly used PCs. The Windows 10 updating is a PITA with those. I was hoping I could pull a new image every couple months to keep them updated but that’s looking to be difficult.

What are you doing to handle Windows 10 updates? Is everyone just using WSUS?

Thanks!

Cheers,

Joe

[george1421]

@Joe-Gill said in Keeping WIN10 Images Updated (Windows Updates):

Thanks for that info. I’m looking into setting up a server with MDT on it. Hopefully that will help these issues.

FWIW: For MDT you don’t need a server class machine or OS. You can use desktop os and computer for this task. Virtualize if you can, but lower class physical hardware for “MDT server” is usable.

[Joe Gill]

@astrugatch
Thanks for the input!

@george1421
Thanks for that info. I’m looking into setting up a server with MDT on it. Hopefully that will help these issues.

[astrugatch]

I make a golden (just OS and staged drivers) in virtual box for each major release we intend to deploy (we only did 1607 and 1803 so far) then incremental machine updates are handled by WSUS.

[george1421]

I think I see two different questions here.

1. Keeping systems updated with latest patches: WSUS or SCCM is/are the best tools for windows ecosystems.

2. How to you keep your golden image up to date: Use MDT to create your golden image. Once you have your task sequences created you can quickly rebuild your golden image with all of your applications and latest windows updates from WSUS/SCCM if you use the lite touch approach to system building. Once MDT finishes then just sysprep and capture with FOG. When a new windows release comes out, upload the dvd into MDT, copy over the older proven task sequences to a new task sequence and rebuild.