After installing Windows 7 and Windows 8 a couple of times you get tired of running Microsoft update for the hundred time to run through a bunch of security updates (Which in many cases will leave your clients in a vulnerable state until they are finished patch) and OS bug fixes. Since your deployment (install.wim) only contains the latest patch until it was releases you have to manually patch the image file in order to get the latest patches.
This is where Image servicing comes in. With Image servicing you can update your install image files directly from Configuration Manager (This requires that you have configured your Configuration Manager site with a SUP point) and with it you can create a schedule that automatically updates your images.
One thing about this function that it can only apply Component Based Updates (CBS) (You can read more about CBS here à
http://blogs.technet.com/b/askperf/archive/2008/04/23/understanding-component-based-servicing.aspx
so when you run the wizard you will most likely not see all updates that are available for the OS. In that, there are other ways to update your image.
Either you can use the Task Sequence activity or you can create a new master image, which contains the latest updates.
If you wish to inject a new driver into the image, you can use DISM.
IF you have installed and configured SUP you can open Software Library à Operating Systems à Operating System Images à Right click on the selected Image you wish to update and choose “Schedule updates” à
(Here you will be presented with a list of patches, which meet the following criteria:
* They are CBS updates
* The updates have been deployed to your environment (this is so you can easier use patches that you have already tested and you know it works)
The updates will show according to what architecture you choose à
And from here I can choose to update the image with the patches, so when I choose update the site server will move the updates and the install.wim file to a temp file, mount the wim file via DISM and inject the updates.
Then it will move the wim file back to the original folder.
After the update is complete, you can see under “installed updates” to see which updates are installed.
