For a while now I’ve been deploying Windows 7 on the network using the Microsoft Deployment Toolbox, and it generally works well. However, some of the images I deploy are now about a year old, and a year is a long time in the wonderful world of Microsoft Critical And Security Updates, and so having deployed a new PC there’s still a good hour’s worth of install-reboot-install-reboot-install “fun” with the updates. I decided it was time to start rolling the updates into the images.
One way is via the command line, as documented here, which is good for “live” WIMs and if you’ve only a few to do. However, this way uses the MDT and WSUS to inject the updates as Windows 7 is installed.
Firstly, you’re going to need to get the updates into MDT. Unfortunately, Microsoft doesn’t provide a big “download ALL the cab files” button, so you have to import them all manually. Thankfully, if you have WSUS on your network, you’ve already got them all (assuming you’ve approved them and synced WSUS, anyway).