SCCM – Inject Windows Updates into WIM Image Files Using Windows 10

sccm

If you have custom built images that you are using in your Configuration Manager OSD environment, you may find that keeping them up to date is a real problem. If you are happy with the image itself and do not want to make any changes to it, why should you need to rebuild and recapture it to include all the latest Windows Updates?

One solution is to install Windows Updates during your OSD task sequence which is great, but very time consuming if you image is a few months (in some cases years!) old.



However, there is a way of injecting Windows Updates into your custom WIM files offline and then simply redistributing your WIM file to your local and remote distribution points. You used to have to install WAIK to do this, however, as Windows 10 has DISM built into it, you can now simply use your standard client Windows operating system.

Below is the guide on how to carry this out and a list of downloads that you will require.

DOWNLOAD

Download WSUS Offline Updater

INSTRUCTIONS

STAGE 1 – Download required offline Windows Updates

Download the WSUS Offline Tool from the link above and extract the zip file to a directory on your computer – for this guide purposes, we will use “D:WSUS” (although most people will use a C: drive location).

Run the “UpdateGenerator.exe” file located in the root of extracted files.

You will be presented with a program and you can select the versions of Windows, Office and Legacy products that you wish to update. Remember to include (or exclude) the x86 and x64 versions if you want to update these different architectures.

You also have the option to use a WSUS server on your local network to retrieve the Windows Updates from (this is much quicker if you have a slower internet connection). To do this, click the WSUS button at the bottom and enter the URL of your WSUS server:

If you wish to download all the available updates from Windows Update server, do not enter any information into this setting.

Once you have selected all the options that you want to download updates for, press the Start button at the bottom left. A command box will appear and will start to download all the required updates – this can take a long time depending on your selections and internet speed. These updates will be copied into the folder structure of the extracted files (“D:WSUS”).

Please note that although the first set of downloads will take a while, you can then run this process again at a later date and it will only download any newer updates required. This way you can keep an up to date repository of offline Windows Updates.

Once all your updates have been downloaded, you should then continue with the next stage of the process.

STAGE 2 – Injecting the offline updates into your WIM file

You should copy your WIM file to a location on your Windows 10 client machine, for this guide, we will use “D:WIM”.

You then need to create a temporary directory that will be used to mount the WIM image, we will go ahead and use “D:WIMTEMP”.

You then need to ensure that you use the correct index number by running the following command:

As you can see from the above image, the index we need to use for this process is “index:2” – however this can change depending on how you have created or captured your WIM file so you should always check this first before trying to mount a WIM file.

You then need to open an elevated administrative command prompt and then run the following command to mount the WIM file to your earlier created temporary location:

Please remember to change “wim.wim” to the name of your own WIM file and ensure you enter the correct index number for your image.

Once you have mounted your WIM, you then need to go into the correct directory within your earlier downloaded updates for your WIM file. So, if your WIM file is Windows 7 x64, you should go to:

If your WIM file is Windows 7 x86, you should go to:

If your WIM file is Windows 8.1 x64 you should go to:

When you are in the correct working directory, run the following command:

Note that the above command is for Windows 7 x64 – change the PackagePath as required for the operating system you are trying to update.

This command will step through each update file in the directory, adding the update to the currently mounted WIM file.

When this has completely injected all the required updates into your WIM, you should then run the following command to commit the changes and unmount the WIM image.

This will go through the unmount process and commit the updates to your custom WIM.

Your newly updated WIM file can then be redistributed using your Configuration Manager environment.

COMMENTS

If you have any problems with this or have any questions at all, please use our Disqus system below.



4 Responses

  1. Zoran says:

    I am not able to inject some of the latest ms updates (eg KB3212642).
    Processing the package dism returns error 0x800f082f.
    I tried to re inject them, with no success.
    Any idea how to solve this issue?

  2. Dave Kay says:

    You are missing a slash between the image name and “glb” in the path in your command that applies the packages to the mounted wim file.

  3. Bejay says:

    Whatever I do, I always get an

    Error 161: The directory e:wimtmpWindows does not appear to be a valid Windows directory.
    when I get to the Point of adding packages. I can browse there without Problem. Any idea?

Leave us a message...