I am not sure if you have a WSUS server, so this is what I do….. It is very simple, but it does require a WSUS server.
Since we do not deploy drivers via WSUS I made these config changes: Ø Added this line to the ControlSettings.ini file: WSUSServer=http://servername Ø Enabled Windows Update (Post-Application Installation) [cid:image001.png@01D24177.47ED8DB0] At this point I am done. No port number is needed next to the server name as long it is the default port when setting up WSUS. BR, Dave L. From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Erik Droszcz Sent: Friday, November 18, 2016 6:46 AM To: mdtosd@lists.myitforum.com Subject: Re: [MDT-OSD] MDT / Windows Update / Drivers Thank you both Erik and Michael! I have been doing a few test runs and both your suggestions work :) One scenario I ran was this: Set the WSUS Server in CustomSettings.ini using variable WSUSServer No drivers approved in WSUS. Run the Windows Update steps in MDT without modification of the script or the extra parameters Still, drivers are being downloaded. Is that the correct behavior? I though MDT would just grab whatever was approved in WSUS. Regards Erik On Fri, Nov 18, 2016 at 8:38 AM, Michael Niehaus <michael.nieh...@microsoft.com<mailto:michael.nieh...@microsoft.com>> wrote: There is another way too: You can customize the query. But this wouldn’t be necessary in cases where you are capturing an image. This is the logic from ZTIWindowsUpdate.wsf: If WScript.Arguments.Unnamed.Count > 0 then UpdateCommand = WScript.Arguments.Unnamed.Item(0) Elseif Ucase(oEnvironment.Item("DoCapture")) = "YES" or Ucase(oEnvironment.Item("DoCapture")) = "PREPARE" then UpdateCommand = "IsInstalled = 0 and IsHidden = 0 and Type = 'Software'" Else UpdateCommand = "IsInstalled = 0 and IsHidden = 0" End if So if you’re capturing an image, it should only select ‘Software’ updates, not ‘Driver’ updates. If you want that behavior in other cases, you can modify the command line that runs the step to add your own query (without the smart quotes): Cscript.exe %ScriptRoot%\ZTIWindowsUpdate.wsf “IsInstalled = 0 and IsHidden = 0 and Type = ‘Software’” Thanks, -Michael From: listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com> [mailto:listsad...@lists.myitforum.com<mailto:listsad...@lists.myitforum.com>] On Behalf Of Erik Wold Sent: Thursday, November 17, 2016 1:18 PM To: mdtosd@lists.myitforum.com<mailto:mdtosd@lists.myitforum.com>; mdtosd@lists.myitforum.com<mailto:mdtosd@lists.myitforum.com> Subject: Re: [MDT-OSD] MDT / Windows Update / Drivers Hi, This will help you out: Set bInstall = False in "Drivers" in ZTIWindowsupdate.wsf in Deploymentshare\Scripts Mvh Erik On Thu, Nov 17, 2016 at 8:40 PM +0100, "Erik Droszcz" <e...@droszcz.com<mailto:e...@droszcz.com>> wrote: Hello, I am struggling with deploying Windows 10 v1607 (Build 14393.447) using MDT 8443. The issue I am having is with drivers being downloaded during the Windows Update steps in the Task Sequence. I was reading this article https://technet.microsoft.com/en-us/itpro/windows/manage/waas-configure-wufb and noticed you could set a policy that I understand would skip the drivers when running Windows Update. On the machine I am testing this I have the following values configured: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching\SearchOrderConfig = 0 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\ExcludeWUDriversInQualityUpdate = 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection\AllowTelemetry = 3 But drivers are still being downloaded. I have also tried pausing the Task Sequence just before the Windows Update step and then manually run Windows Update. That also download the drivers. Do you guys have any idea what might be going on and how to prevent drivers from being downloaded/installed when running Windows Update? Regards Erik
