Offline Servicing for Operating System Images
In Configuration Manager 2012 there is a new feature for applying updates to operating system images while they are in the Configuration Manager library. This means any operating system image you see in the Operating Systems > Operating Systems Images node from the Software Library wunderbar can be updated with Component Based Servicing (CBS) updates. By updating an image in the Software Library instead of performing a new build and capture of the operating system image you will gain a few distinct advantages. You will be able to reduce the risk of vulnerabilities during operating system deployments and reduce the overall operating system deployment to the end user. You will also reduce the administrative effort to maintain your operating system images.
The feature is applicable for Component Based Servicing (CBS) updates and for the following operating systems:
- Microsoft Windows Vista SP2 and later
- Microsoft Windows Server 2008 SP2 and later
- Microsoft Windows 7 RTM
- Microsoft Windows 2008 R2
*At the launch of ConfigMgr 2012 Beta 2 Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are not supported. They will be supported with Configuration Manager 2012 RTM.How the feature works. As mentioned previously, offline servicing is available for CBS updates. This will work in coordination with the Configuration Manager Software Updates Point role.
Here are a couple steps to do before we start.
- Configure the Software Update Point
- Deploy updates to you Configuration Manager 2012 clients
- From the Software Library Wonderbar, select Operating System > Operating System Images
- Select an image you would like to update. This needs to meet the supported platforms listed above.
- Select an image then click Schedule Updates from the ribbon. The Update Operating System Image wizard will appear. A list of updates will be presented. The list contains updates meeting the following criteria:
- The updates are CBS updates
- The updates have been deployed in your Configuration Manager environment. (This helps limit the selection of updates to those that have been deployed/tested in your enterprise).
- The updates have not successfully been deployed to your image file through the offline servicing feature
- These updates are then filtered to match the architecture of the image file.
- Select the updates you would like to apply to the image.
- Next set a time for the servicing to occur. Servicing occurs on the site server, so you may want to schedule this off hours.
- When the schedule time occurs for the updating the .wim file, the site server will wake ups.
- The site server copies the .wim file from the package source and the appropriate updates from the content library to a temp folder.
- The site server will mount the .wim file in the temp folder.
- It uses DISM to inject the selected updates are applied to the .wim file. The updates will be applied to all applicable images in the .wim file.
- After success, the wim is restored to the package source location. The original copy of the .wim file preserved as a backup copy to help you easy revert if an update causes any issues. Configuration Manager only retains one back up copy. So the previous back up copy will be removed if it exists.
- When the process is completed, the update status can be viewed from within the console. In the event of a failure, you will see which updates could not be successfully applied to the .wim file. Additionally, a historical view of the updates can be seen from the image property page.
- When servicing is complete, you need to “Update Distribution Point”on the image. This will ensure the newly updated image is updated and available on assigned distribution points.