locked
How to get the windows update .msu or .cab files to update the install.wim image using a smart way RRS feed

  • Question

  • Hi all,

    To make server's installation faster, I intend to make an updated "install.wim" every 6 months using DISM.

    Then, after installation, the Windows 2008R2 or 2012R2 server connect to a WSUS server to get the latests update not included in the install.wim.

    To get the list of KB to install in the updated install.wim, I find a way using : dism /online /get-packages /format:table from a just installed fully patched server by WSUS

    I search, but I can't find a smart way

    - to get the patches. I installed a WSUS server. I approved some pathes. All the patches are located in  directories tree (arround 200) in \WsusPatches\WsusContent. But there are no .msu files and the names of the .cab do not reflect the number of the KB.

    - to apply the patches in the correct order. I read that I could use an unattended file. But I don't know how to add entry in the .clg file as it's generated from a wim image (in which i intend to store de KBs)

    I checked on VLSC, but I can't see the updates there.

    Thanks

    ML


    • Edited by mldmld Thursday, November 27, 2014 1:30 PM
    Thursday, November 27, 2014 12:40 PM

Answers

  • Hi,

    I answer to myself, I found this :

    https://www.sepago.com/blog/2013/06/14/offline-servicing-of-vhds-against-wsus

    It's a script to do the same thing I want but on Windows Template vhd.

    The idea is to get the right files using Powershell to request the WSUS server using the WSUS computer groups.

    I'm currently modifying the script to update wim images.

    Best


    ML

    • Marked as answer by Steven_Lee0510 Friday, November 28, 2014 1:43 AM
    Thursday, November 27, 2014 6:33 PM

All replies

  • Hi,

    I answer to myself, I found this :

    https://www.sepago.com/blog/2013/06/14/offline-servicing-of-vhds-against-wsus

    It's a script to do the same thing I want but on Windows Template vhd.

    The idea is to get the right files using Powershell to request the WSUS server using the WSUS computer groups.

    I'm currently modifying the script to update wim images.

    Best


    ML

    • Marked as answer by Steven_Lee0510 Friday, November 28, 2014 1:43 AM
    Thursday, November 27, 2014 6:33 PM
  • Hi ML,

    Glad to hear that your issue is resolved and thanks for the sharing!

    Best Regards.



    Steven Lee

    TechNet Community Support

    Friday, November 28, 2014 1:43 AM
  • Hi guys,

    My issue is not yet resolved.

    So I wrote a powershell script to get the update from a WSUS server. This way, I can get the .cab of each KB.

    Using: dism /Image:"$MountDir" /Get-PackageInfo /PackagePath:"$FileName", I can get if the package is installable on the 2012R2 install.wim image.

    For instance, with kb 2919442, I get :

    PS D:\winfactory\MSUpdate> dism /Image:D:\WinFactory\mount /Get-PackageInfo /PackagePath:\\wsus\WsusContent\6D\79322E056 99468189EBB058D892100498EFCE36D.cab Deployment Image Servicing and Management tool Version: 6.3.9600.16384 Image Version: 6.3.9600.16384 Package information: Package Identity : Package_for_KB2919442~31bf3856ad364e35~amd64~~6.3.1.8 Applicable : Yes Copyright : Microsoft Corporation Company : Microsoft Corporation Creation Time : Description : Fix for KB2919442 .../... Support Information : http://support.microsoft.com/?kbid=2919442 State : Not Present Completely offline capable : Yes .../...

    So one can read this .cab can be installed on the wim image :Completely offline capable : Yes

    But I have an issue with KB 2919355.

    With it, I get this package is not offline capable. 

    I compared the .cab of this KB from my Wsus server and the content of Windows8.1-KB2919355-x64.msu extracted using 7zip. The fc /b tells it's the same file.

    But DISM is able to install the .msu on my install.wim file.

    In fact, I don't know the difference between the .cab and the .msu. The .msu contains an WSUSSCAN.cab, but I don't know what to do with this file, as it's not on my WSUS server.

    PS D:\winfactory\MSUpdate> dism /Image:D:\WinFactory\mount /Get-PackageInfo /PackagePath:\\wsus\WsusContent\32\4CB78E585
    1DE430F5EE77449BFC646235EA93D32.cab
    
    Deployment Image Servicing and Management tool
    Version: 6.3.9600.16384
    
    Image Version: 6.3.9600.16384
    
    Package information:
    
    Package Identity : Package_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14
    Applicable : Yes
    Copyright : Microsoft Corporation
    Company : Microsoft Corporation
    .../...
    Support Information : http://support.microsoft.com/?kbid=2919355
    State : Not Present
    Completely offline capable : No
    
    Custom Properties:
    
    Dependency : Language Pack
    
    Features listing for package : Package_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14
    
    (No features found for this package)
    
    The operation completed successfully.


    PS D:\winfactory\MSUpdate> dism /Image:D:\WinFactory\mount /Add-Package /PackagePath:d:\Patch\Windows8.1-KB2919355-x64.m
    su
    
    Deployment Image Servicing and Management tool
    Version: 6.3.9600.16384
    
    Image Version: 6.3.9600.16384
    
    Processing 1 of 1 - Adding package d:\Patch\Windows8.1-KB2919355-x64.msu
    [==========================100.0%==========================]
    The operation completed successfully.


    An another question : Windows 2008R2 KBs do not say if they are offline capable. How to manage that.

    Deployment Image Servicing and Management tool
    Version: 6.3.9600.16384
    
    Image Version: 6.1.7600.16385
    
    Package information:
    
    Package Identity : Package_for_KB2507938~31bf3856ad364e35~amd64~~6.1.1.4
    Applicable : Yes
    Copyright : Microsoft Corporation
    Company : Microsoft Corporation
    Creation Time : 
    Description : Fix for KB2507938
    Install Client : 
    Install Package Name : 
    Install Time : 
    Last Update Time : 
    Name : default
    Product Name : Package_for_KB2507938
    Product Version : 
    Release Type : Security Update
    Restart Required : Possible
    Support Information : http://support.microsoft.com/?kbid=2507938
    State : Not Present
    
    Custom Properties:
    
    (No custom properties found)
    
    Features listing for package : Package_for_KB2507938~31bf3856ad364e35~amd64~~6.1.1.4
    
    (No features found for this package)
    
    The operation completed successfully.

    Thanks

    ML


    • Edited by mldmld Wednesday, December 3, 2014 6:10 PM
    Wednesday, December 3, 2014 6:03 PM