Hi all,

Having some issues with installing security patches in our reference WIM for Windows 7, every 3 months we try inject patches into the original Windows7 SP1 IE9, using VM workstation.

At last count there were 240 patches  they are downloading fine but seems to hang on a random patch say installing 90 of 240, then if you start it again it might hang 120 of 240, so its different everytime. I have removed all the double reboot patches https://support.microsoft.com/en-us/kb/2894518?wa=wsignin1.0 .

I was hoping to see if anyone else had this problem? or what your current procedure for the reference image, it would be nice if microsoft came out with a service pack for Win 7.

What i was thinking that might be okay is download patches say after the release of win7 sp1 and injecting those patches into the install.wim using DISM. Then using this as my base image for the deploy and capture? would this be normal practice.

Hi,

I have used a standalone MDT instead of SCCM for building the reference image the last couple of years, mostly because of the Multiple reboots issues, it works great.
I would recommend that you move to that solution instead, many benefits in the reference image creating, like pausing the TS and doing a snapshot after the first patch cycle and so on.

Regards,
Jrgen

Yes, using DISM is a common approach but doing it manually is quite cumbersome. Is there a reason you aren't using offline servicing? Offline servicing automates the use of DISM to inject updates into a WIM from your Software Updates packages. The only caution here is to make sure you make a backup copy of the WIM before using ofline servicing just in case something weird happens.

Thanks for the replies, I will give offline servicing another go we did have some issues using it earlier on, only problem using offline servicing is that it does not inject office 2010 patches, so will have to look at another method maybe MDT.