Add updates to a Windows image

Like other types of packages, you can use DISM to add an update package to a Windows image.

Add a Windows update package to an image

  1. Download a Windows update package. For example, get the latest cumulative from the Microsoft Update catalog. If the update has any prerequisite updates, get those too.

  2. Add the updates to a mounted or online image. For packages with dependencies, either install the packages in order, or add them all at once using a single DISM command.

    Example: adding a cumulative update to a mounted image:

    Dism /Add-Package /Image:"C:\mount\windows" /PackagePath="windows10.0-kb4456655-x64_fca3f0c885da48efc6f9699b0c1eaf424e779434.msu"  /LogPath=C:\mount\dism.log

    Example: adding a cumulative update to a running Windows installation:

    Dism /Add-Package /Online /PackagePath="windows10.0-kb4456655-x64_fca3f0c885da48efc6f9699b0c1eaf424e779434.msu"  /LogPath=C:\mount\dism.log

    Example: adding multiple updates:

    Dism /Add-Package /Image:"C:\mount\windows" /PackagePath="C:\WindowsUpdates\windows10.0-kb00001-x64.msu" /PackagePath="C:\WindowsUpdates\windows10.0-kb00002-x64.msu" /PackagePath="C:\WindowsUpdates\windows10.0-kb00003-x64.msu" /LogPath=C:\mount\dism.log
  3. Verify that the packages appear correctly:

    On a mounted image:

    Dism /Get-Packages /image:<path_to_image>

    On a running Windows installation:

    Dism /Get-Packages /online

    Review the resulting list of packages and verify that the list contains the package. For example:

    Package Identity : Package_for_RollupFix~31bf3856ad364e35~amd64~~15063.250.1.1
    State : Installed
    Release Type : Security Update
    Install Time : 04/29/2017 6:26 PM
    The operation completed successfully.


    Each package will usually be a new KB, and will increase the build revision number of Windows on the device. The revision number of windows a device can be found in the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\UBR.

  4. If you're finished updating a mounted image, you can unmount it, committing changes. For running Windows installations, you may have to restart the PC.


  • Add languages before major updates. Major updates include hotfixes, general distribution releases, or service packs. If you add a language later, you'll need to re-add the updates.
  • Add major updates before apps. These apps include universal Windows apps and desktop applications. If you add an update later, you'll need to re-add the apps.
  • For major updates, update the recovery image too: These may include hotfixes, general distribution releases, service packs, or other pre-release updates. We'll show you how to update these later in Deploy Push-button reset features.
  • If a Servicing Stack Update (SSU) is available, you must install it before applying the most recent General Distribution Release (GDR) or any future GDRs.