Apply OS update on OS deployment time or later

Roberto 646 Reputation points
2021-02-04T14:36:59.253+00:00

Hello

Because I'm still stuck with an old version of SCCM (System Center 2012 R2 Configuration Manager SP1, 5.0.8239.1000), the most recent Windows 10 version I can deploy is 1909.

I guess that limitation is relative to OSD only.. after that you can apply all needed updates from that old SCCM, right?

So, I wonder what is the best way to update newly installed clients.. at OS Deployment time or later?

I already downloaded 2021-01 Cumulative Update (KB4598298)

And how should I deploy it with SCCM? I'll very much appreciate some guidance. :-)

Thank you.
Roberto

Microsoft Configuration Manager Updates
Microsoft Configuration Manager Updates
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Updates: Broadly released fixes addressing specific issue(s) or related bug(s). Updates may also include new or modified features (i.e. changing default behavior).
967 questions
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
906 questions
Accepted answer
  1. Eswar Koneti 2,201 Reputation points
    2021-02-04T16:20:08.7+00:00

    You seriously need to look at upgrading your site to the current branch due to various reasons and one of the thing is OSD support.

    For the patch deployment, you can create a batch file with command line switch something like below.

    wusa.exe KBNumber.msu /quiet /norestart

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Roberto 646 Reputation points
    2021-02-09T15:56:52.443+00:00

    Hello.

    So, what's the best practice to deploy cumulative update with SCCM? At OSD time or later? Considered that I'm still stuck with 1909 I believe that OSD time would be a good idea.

    In order to try that, I made a new package which includes the msu and in the program the command line suggested by @Eswar Koneti . I distributed the package to the distribution point and then added the package to the task sequence.

    Any hints or suggestions?

    Thank you and best regards.
    Roberto

    0 comments
  2. Gary Blok 1,736 Reputation points
    2021-02-10T06:15:33.507+00:00

    You should always be deploying updated media when you deploy your systems.
    I'd recommend using 1 of 2 items

    1. OSDBuilder: https://docs.recastsoftware.com/ConfigMgr-Docs/Community-Tools/Community-Tools-OSD-Builder.html
    2. WIMWitch: https://docs.recastsoftware.com/ConfigMgr-Docs/Community-Tools/Community-Tools-WIMWitch.html

    But within a month, you'll have to send it patches, so either way, you'll always have to send CU's to your devices.

    Now if you can't do it with CM, you could leverage Windows Update for Business, or just regular Windows Update, and have your machines go right out to the internet to pull down updates.