Comments on: Windows Update in MDT 2010

By: Andrew

Andrew — Wed, 11 Jan 2012 17:11:38 +0000

I know it’s old but thought this might be the best place for this.
In my initial build I notice ZTIWindowsUpdate tries to INSTALL KB2532531 2 times and has 4 more FOUND lines but it never quite finishes installing. I have to do this after the deployment.
It’s not a big deal and I haven’t troubleshot it – but there you go.

By: Dustin

Dustin — Thu, 17 Mar 2011 16:04:57 +0000

Use the following setting in your CS.INI

WSUSServer=http://servername

By: Brian

Brian — Thu, 21 Oct 2010 13:27:44 +0000

Hi Derek

What I did was just to add a script to the tasksequence that reset the regkey to 0 after ZTIWindowsUpdate.wsf has run.

oShell.RegWrite “HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\NoAutoUpdate”, 0, “REG_DWORD”.

I have a feeling that this error only accour if you make a custom image and import it into MDT. But im not sure.

By: examROAR

examROAR — Fri, 10 Sep 2010 15:30:35 +0000

You use customsettings.ini to point to the WSUS server. Like this:
WSUSServer=http://nameofserver

By: Stephan Schwarz

Stephan Schwarz — Fri, 03 Sep 2010 14:22:54 +0000

here’s an example of how to point the script to wsus when you’re using MDT2010 ( with or without update 1)

Go to the properties of you Deployment Share, and then open the rules tab, add the following line somewhere under the [Default] header.

WSUSServer=http://wsus.domain.local

By: Handige Harry

Handige Harry — Thu, 26 Aug 2010 12:01:13 +0000

In MDT 2010 I’m seeing the same issue as Brian. I have enabled the default MDT ‘Windows Update (Post)’ task, and the script leaves the values NoAutoUpdate (1) and UseWUServer (1) afterwards. (We don’t currently use a WU Server.)

Otherwise, thanks for a very useful script and thanks to Brian and Google for allowing me to solve the issue pretty quick.

By: Bart V

Bart V — Fri, 30 Jul 2010 14:15:00 +0000

Can you post an example of the exclude variables?

I have many sections in my customsettings.ini file (Ex. cpackages, settings, rpackages, etc) and am not sure where to place them, if they need their own ” [xxxxx]” header or not.

By: Alan

Alan — Tue, 13 Jul 2010 14:53:21 +0000

How do you change the script to point to WSUS?

By: Derek

Derek — Sat, 10 Apr 2010 21:43:59 +0000

Brian is right, i have this same issue. I’ve been pulling my hair out trying to figure out what it is. No matter what, if i enable the windows update task, after deployment is complete, you cannot change the windows update settings and it sets it to never install updates.

Did anyone ever find a solution to this?

By: tmintner

tmintner — Mon, 28 Dec 2009 18:30:00 +0000

Hi Eric,

There isn’t a way to select only critical updates but you can use the exclude variables in the customsettings.ini to exclude certain driver packages that are causing problems. You might also consider implementing a WSUS server. By implementing WSUS, you can specifically control what updates are approved and the script will only download and install the approved updates.