Share via


Update wim with non-microsoft programs

Question

Monday, April 29, 2013 10:23 PM

I have a win7 image with standard software installed and we use that as our base image.  We push updates using software update groups etc (standard way) and everything works fine.  I just noticed however that when we do the offline servicing of the wim file any non-Microsoft updates do not get injected into the image.  The one that made me notice this was Adobe (both reader and flash).  The computer that was imaged had old version of both programs on them, they will eventually get the updates once the software update cycle runs but I am wondering if I am doing something wrong or does it just not inject anything except MS updates?

This is SCCM 2012 SP1.

All replies (2)

Monday, April 29, 2013 10:34 PM ✅Answered

Offline Servicing only supports Windows Updates. Third Party updates published with SCUP cannot be applied using offline servicing.

Update - Here's a post by Jason Sandy's that explains why third party updates won't work: http://blogs.catapultsystems.com/jsandys/archive/2011/04/10/software-updates-and-osd-revisited.aspx

What about non-OS (like Office) and third-party updates?

Unfortunately no, Install Updates Offline can only install Windows OS updates because of its DISM roots. That shouldn’t be a big deal though because you can still use an Install Software Updates task to apply these types of updates. Application vulnerabilities only manifest themselves when an application is running so there is no way to exploit them during an OS deployment.

The best scenario though is to only deploy applications that are fully updated in the first-place. This is quite easy with Office (2007 & 2010) because all you have to do is drop the MSPs in the Updates folder and you’re done. It may or may not be as easy with other applications, but you should at least consider it.

Justin Chalfant | My Blog | SCUP Catalog | LinkedIn | Please mark as helpful/answer if this resolved your post


Tuesday, April 30, 2013 2:44 PM

Thanks for the link, could not seem to find that but figured as much.