Hi, I'm currently in the process to create a custom Win7 image with latest Updates. My setup : ConfigMgr SP2 R3, 1 primary site. All my setup is working correctly. I can build and capture a custom OS with latest udpates(most of them) and then I can deploy that custom image with no problem. My quesiton is, why when I deploy my custom OS, I see 2 updates installing as part of the Install Update task?? The task to install updates is set to Mandatory Updates for both the Build and the Deploy TS. The advertisement for Software Update is done on a master Collection OSD which have a sub collection for build and one for deploy. The advertisement is done to catch sub-collection. So both install receive the exact same advertisment of mandatory Updates. The build and capture install quite a lot of updates. And then the deploy will install 2 updates related to .Net I would like to be sure those update are part of my build instead of installed at each machine I deploy my custom OS. Any idea why is this happening? Thanks Jonathan

What's the order in your Task Sequence used for deployment? Because with deployment, maybe applications will also be installed after Windows 7. If that is the case, it's normally that additional Software updates are installed. It can also happen that multiple reboots are needed to get al Software updates installed. You can check report 177 "Specific software update" to see if each machine is getting the same update(s). My ConfigMgr blog: http://henkhoogendoorn.blogspot.com Follow me on Twitter: @henkhoogendoorn

Hi, The task sequence is pretty much default. I don't add any applications to my base image. I just want to add latest update. So that part can be put aside. As for the multiple reboots, I've figured that could be the issues. So I added a System restart after the Software Update task, and then added another Software Update task to see if that would chance anything. I had no luck with this configuration also. Same updates again installed also, I test both build and deploy on a VM. So there's not much drivers involved. And finally, yes machines receive the same update(vm or physical computer) Any other idea? thanks

Do you know which DotNet updates are installed during OS deployment? Look at reporting for that one or the smsts.log file. Or have a look in Installed Software after deployment (updates selected by date) Otherwise you can use DISM to inject the 2 updates in your image. With DISM it's possible to service an offline image with patches/updates. Have a look here for that: http://www.madsd.dk/blog/comments.php?entry_id=17 My ConfigMgr blog: http://henkhoogendoorn.blogspot.com Follow me on Twitter: @henkhoogendoorn

its possible that your Deploy task sequence is deploying applications that depend on .Net and thus the .Net updates are getting installed in that task sequence, have you checked for that possibility ? My step by step SCCM Guides I'm on Twitter > ncbrady

Hi, The 2 KB are 2416472 and 2446708. I could use DISM to add the updates, but that mean manual operation each time I create a new custom image to add latest updates (to reduce deployment time) I thought I found the answer, as I forgot that I push the Silverlight installation through Software Update. So I thought that .net could be related to it. I did a new capture without the update to install Silverligth and the result is the same. Still those 2 KB installing And Again, my TS couldn't be any more basic. No applications install, no additional Windows Features install.... Still clueless...

Hi Jonathan, You could just add the 2 require updates has part of your build task sequence. (Just like an install software) you can install the MSU update with the WUSA.exe parameter. That way, everytimes, you will build your image, those 2 updates will be in your task sequence. Good Luck Jean-Philippe Jean-Philippe Breton | Senior Microsoft Consultant | MCTS, MCITP, MCT, MVP

Hi, have you seen this already. That's I was looking for when asking the specific DotNet updates. Security update KB2416472 keeps installing: http://answers.microsoft.com/en-us/windows/forum/windows_other-windows_update/security-update-kb2416472-keeps-installing/066db98a-0a93-4285-984f-532e33a79a0c If this doesn't fix it, try to remove .Net Framework 4.0 with the .NET Framework Cleanup Tool (http://blogs.msdn.com/b/astebner/archive/2008/08/28/8904493.aspx ), reinstall . Net Framework 4.0 and install the Updates. The final answer from Microsoft support has been to do a windows repair and all issues will be resolved. update KB2446708 keeps repeating after installation - Security update for the .NET Framework 4: http://answers.microsoft.com/en-us/windows/forum/windows_vista-windows_update/update-kb2446708-keeps-repeating-after/5f7f171b-a166-e011-8dfc-68b599b31bf5 What to do is download dotnetfx_cleanup_tool.zip from here.. http://cid-27e6a35d1a492af7.skydrive.live.com/self.aspx/Blog_Tools/dotnetfx_cleanup_tool.zip Unzip files and run tool and select to remove .NET Framework 4 (there is a drop window asking which .NET Framework you wish to remove,make sure you select .NET Framework 4.)..This tool will safely remove client profile part of .NET Framework 4. You will not be able to remove it by using add/remove programmes as normal because it has become corrupt.Once tool has removed files restart computer and check windows update.You should find .NET Framework 4 client profile offered as an update (KB982670).Download and install this..Restart computer again and run windows update.You should be offered the problem KB2446708 as a high priority update.Install this and it should be fine, you shouldn't see it reappear again as before. Best of luck. As you can see you're not the only one with this behaviour. Just repair the Dotnet updates in your OS image or use the DotNet Framework Cleanup Tool. For a guide of that one: DotNet Framework Cleanup Tool User's Guide: http://blogs.msdn.com/b/astebner/archive/2008/08/28/8904493.aspx My ConfigMgr blog: http://henkhoogendoorn.blogspot.com Follow me on Twitter: @henkhoogendoorn

Let's start with that .NET and its updates are also in my expierence known as being "problem-causers"... But did you also already tried to install the updates without the .NET -updates in the deployment, just to make sure that they are causing the problem. Besides that, if you, for whatever reason, think about patching your Windows 7 image offline, you also might want to take a look at this post: http://www.petervanderwoude.nl/post/configmgr-2007-updating-a-windows-7-image-with-the-latest-software-updates-%e2%80%93-a-less-conventional-but-very-effective-way/My Blog: http://www.petervanderwoude.nl/

Thanks all for those suggestions... Henk : I can't belesive that the .Net is corrupt is some ways... it's a fresh install of Win7 with SP1. Also, when I deploy my custom image, those update will only install once, they don't come back to be re-install. I've seen the issues where those update get back each time SU is trying to install updates and yes the fix was to remove .Net and reinstall it and then the updates would install correctly Peter: Nice script for offline editing of the image. I might give it a try or leave those update as is for now JP: I will give a try also to your suggestion even if I don't like it as it will require a new package for those 2 updates to use as software. Thanks guys