MDT 2012 and Packages “Windows Updates”
I received an email from a viewer and they needed some help.
Problem
“I’ve installed MDT2012 on a new server, the AIK kit is also installed along with all the sub components needed for MDT to work. I have created the deployment share, import the Win7 32bit sp1 OS from source disk, import the out of box drivers, imported the Office 2010 application with custom file. I can get all this to install no problem . The issue comes into play when I import patches from the WSUS server in the Packages. The wizard does the import just fine, I launch my install using the same CD as before and then I get a failure DISM 5627 and 49% if you look at the monitoring tab. If I remove all the patches from the Packages area the install works just fine. I’m using the standard template with no modification to the apply patches setting. I’ve taken the default on almost everything just to see this install smooth.”
Solution
I wanted to test this out, so I build my MDT 2012 environment. check out the video for my findings
WSUS Offline Utility Link: http://wsusoffline.net/
Just followed the video and was at the point of updating my Distribution Share. I was wondering why DSM was trying to update my Boot.wim with windows updates. Good work Ronald 🙂
that’s because it’s trying to inject the updates to the boot image. it’s like a self-contain image that has updates already installed.
Hi Derek,
I can help you quick with your question how to prevent patches will be added in Windows PE.
Open de Deployment Share properties and go to the “Windows PE” tab.
Just below the tab you have to make sure you select the right platform and I advise to do the steps for both x86 and x64.
First go to “Drivers and Patches”
At “Selection Profile” select “Drivers only”.
No you will not have any patches inserted in Windows PE when you update the deployment share.
If you have some specific patches you want to add, just make a new folder under drives and patches, for example “Windows PE patches”. Import the specific patches in this folder. Than make a selection profile and after that you can select this selection profile in de deployment share properties under “Windows PE” as mentioned above.
Thanks for answering the question Ronald I missed this one 🙂
Ronald, Thanks for your Reply!
I thought activity had ended here as I did not notice much activity for a while.
I do have another problem if you can help and if there might be an easy way to sort it out instead of going through the whole process step by step by eliminating some updates.
Failure (5627);Run DISM.exe
Litetouch deployment failed, Return code = -2147467259 0x080004005
Derek,
Unfortunally I have no better solution at this time than the one I posted before:
An easy way to check which update is the problem, go and start the task sequence and you will get the error. Than do not close the pc. Close the error and you will get a command prompt in WinPE and open the logfile x:\windows\logs\dism\dism.log (will auto open in notepad) Search for “error” until you find the one which will tell you the package name which is the problem.
Delete this package from MDT and restart the tasksequence. Unfortunally this will only give you the first package which gives you problems, because than the taks sequence stops, so do this for all the packages which gives the error which in my case was only 1.
Its a easy way but it will take time if there a multiple updates which couses a problem, because you have to restart the installation again per update which gives a problem. So for 5 updates which go wrong you eventually will find out that in 6 tries the installation goes on with no problems.
I also had problems with some internet explorer 9 prerequisites which I wanted to install through packages in MDT and scewed up my installation after the first reboot. So this is even een more difficult issue because I have no way to see which update will give a problem, because it’s at a face that Windows is booting and I cannot get to any log files and the logfiles for MDT don’t show any issues. So I installed the updates as a application to prevent any problems.
Hopefully this will help.
BJ,
Can you do a video request Installing offline updates for Windows 8 Enterprise Eval x64 in MDT 2012 Update 1 using ADK.
I would like to see if you run into problems and how you work your way around them.
How do I ensure that the winpe does not get updated and just the deployed os is only updated?
I seem to be getting a lot of errors saying that this update does not apply to this image.
Thanks!
One more command. It seems when you look at the BDD.log that the packages are added during the preinstall fase of the tasksequence. Later it will apply the packages in the step as said in this video.
So if you only want to added the packages from a specify selection profile, you better open the step “apply patches” under the “preinstall” fase and than select you selection profile.
I’m not sure what every step exactly does so let me know if I’m missing something.
I had exactly the same error and thank you guys for the tip that the reason is one of the updates.
An easy way to check which update is the problem, go and start the task sequence and you will get the error. Than do not close the pc. Close the error and you will get a command prompt in WinPE and open the logfile x:\windows\logs\dism\dism.log (will auto open in notepad) Search for “error” until you find the one which will tell you the package name which is the problem.
Delete this package from MDT and restart the tasksequence. Unfortunally this will only give you the first package which gives you problems, because than the taks sequence stops, so do this for all the packages which gives the error which in my case was only 1.
Thx for the video, you do great work.
I have the same problem as Michael McAllister but what is the quickes way to test which KB(‘s) is/are the problem?
Thx in advance
check the sms log or process of elimination.
I am new to MDT 2012 and I have been trying to create the media option by just installing windows 8×64 Enterprise with just the updates only in the packages folder and it has failed for me after about ten tries to get it right. Your procedure above does not work for this option.
I am using the latest version of MDT 2012 and the ADK.
My error is: (Partial Shown)
FAILURE (5627): -2146498514 0x800F082E: Run DISM.exe
Litetouch deployment failed, Return Code = -2147467259 0x80004005
Failed to save environment to (80070057)
Failed to run the action: Install Operating System.
Unknown error (Error:000015FB; Source: Unknown)
It always happens just after the point of Applying unnatend.xml with Dism.exe
Any help would be appreciated as this is turning out to be a right pain!
Are you able to install the OS by itself using MDT 2012?
I have tried with the OS by itself and that works fine, now I have to try and find out if it is the procedure that I am using to install the updates or if it is an update that is causing the issue?
If I can install the updates by just using the ADK and Dism without a problem, does that mean that there is no problem with the updates and they can be ruled out? Or does the update procedure behave any differently using MDT 2012 as regards to using ADK and Dism via command line.
DISM /Get-WimInfo /WimFile:C:\Win8\sources\install.wim
DISM /Mount-Wim /WimFile:C:\Win8\sources\install.wim /index:1 /MountDir:C:\Share
Dism /image:C:\Share /Add-Package /PackagePath:C:\Win8updates
I am curious when I import an OS into MDT2012 it is an offline image – right?
So if I import offline updates into packages and create a new folder for them, I presume MDT2012 should know that they are offline updates-right?
I then create a standard task sequence
I then create a selection profile that just includes the OS+Task Sequence+ selection profile that I created.
I then create new media then give it a name untick x86 boot image as it is not needed, under driver and patches select the selection profile that I created
Then update the media content
I have just tried this with Windows 7×64 Ultimate Installing the offline updates and it worked fine so there is either an issue with one of my Windows 8 updates that is causing it to fail.
One of windows 8 updates cumulative updates KB2756872 contains delmigprov.exe, could this be a source of failure?
I will have to research a little into istalling this one, I must remove it and then see if it will create an image without failure.
BJ have you tried this yourself with windows 8 offline updates?
I have not tried Windows 8 with offline updates. I normally configure my customsetting.ini file to point to my WSUS server and grab the updates that way. I will do some testing and see how it works out for me. finally got my MDT test box up and running. Doing more video on MDT. stay tune 🙂
I am just following up with an update to this issue I had, I finally got it to work. There were two updates that were the cause of the errors with MDT KB2799494 and KB2807986 both of them are Windows kernel updates and they would error when installed together either one of them on its own would not cause an error. My workaround was to place KB2807986 into a separate package folder update and the installation installed without any errors and all updates were present after install.
My next goal is to install MRT.exe, Adobe Acrobat, Flash, …
That’s great that you found the issue with MDT and off-line updates, next up with your MDT deployment which is packages should be pretty easy I do have a video on my channel about creating packages. If you need any help please let know. Happy Deploying!!
BJTechNews
Excelent video and explanation.
Hello, nice video.
But…my updates are not installed with this configuration. After doing a windows update from the cliënt the updates are still needed from the MS-site.
What could be the problem (doing this with windows 8).
Thx
I am still having this error come up when adding any packages to MDT 2012 Update 1. I am using MDT x64, WAIK x64 and a boot USB with x64. Any ideas
can you shoot me an image of the error.
It’s actually the exact same problem as this issue:
http://social.technet.microsoft.com/Forums/da-DK/mdt/thread/8d328956-324b-4f60-9ccd-57d6be073b04
FAILURE (5627) :1465: RUN DISM.exe
Litetouch deployment failed, Returne Code = -2147467259 0x800040005
Failed to run the action: Install Operating System
Unknown error (Error: 000015FB; Source: Unknown)
Task sequence Engine failed! Code: enExecutionFail
Task sequence execution failed with error code 800040005
Error Task sequence Manager failed to execute task sequence. Code 0x80004005
In the dism.log
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Software
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Software, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\System
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\System, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\SAM
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\SAM, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Components
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Components, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Default
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\Default, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
CBS Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\ntuser.dat
CBS Failed to Unload offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}c:\Windows\system32\Config\ntuser.dat, the client may still need it open [HRESULT = 0x80070005 – E_ACCESSDENIED
I checked my DISM.log and it is giving the same exact errors. Also it’s interesting because it errors after it installs the OS, yet in the task sequence it is supposed to apply the updated before. In DISM it says something like it is postponing the install becasue it is a certain type of update. But it does it with all of them.
i had the same issue. the way i solve it was process of elimination. it seems that there is an update that is causing the issue. for me it was the internet explorer updates. I just removed all the packages and placed only 5 to 10 updates at a time to figure out what the problem was. also make sure the offline task sequence is placed in the right folder. plus you are using offline updates that don’t need to contact outside your LAN.
I had done that 2 or 3 other times with no luck but this time it seems to have done the trick. Thanks!
Okay. Keep me posted
There is also another utility like WSUS Offline Updates called Windows Update Downloader.
You can get it here: http://www.windowsupdatesdownloader.com/
good didn’t know about that :). thanks for the tip.
Good video, I’ve been looking for something like WSUS Offline Updates for a while now. Nice find!
Thanks