Thank you for these posts, they have proven very helpful. I see you have only added one Dynamic Update file to the list above, yet searching on the Update Catalog shows no fewer than 5 separate DU files available for 1607 that are not superseded and appear to mostly contain unique files: KB3176937 (updated winload efi files) KB3197099 (2 updated dlls) KB4039556 (SetupDU - updated setup 'sources' folder files and localised MUI files) KB4532820 (SetupDU - appears to be a smaller but newer subset of KB4039556 that complements rather than fully supersedes it?) KB5034230 (SafeOS update with lots of delta patches?) I'm trying to create a fully patched and updated ISO for 2016 LTSB, so my plan is to combine the above 5 files with the following 7 to run under W10UI.cmd: KB4486129 (.NET 4.8) KB4589210 (microcode updates) KB5032391 (SSU) KB5033910 (.NET 4.8 CU) KB5034119 (LCU) defender-dism-x64.cab Microsoft-Windows-NetFx3-OnDemand-Package.cab Is my list complete and are any of those 4 extra Dynamic Update files I have identified not required by this process for 2016 LTSB - especially as other LTSC versions only seem to have 2 or 3 files for SetupDU and SafeOS? I know sometimes the metadata on the Update Catalog is not always perfect and it may be that some of the DU cabs I have identified above are obsolete or not needed for LTSB but I'm struggling to find further info on this. Thank you!
@SkirtedMouse Dynamic Updates are mostly for upgrades and not needed (except latest KB5034230 which fix security issue in RE) yes, all DUs you listed are still "applicable", except KB3176937 + latest microcode update is KB5019182 (use 2023-04 version)
I just tried to figure all out and with these additions and the assessment by @abbodi1406 i can complete the list, checking all now: Code: ====================== W10UI v10.38 ======================= [1] Target (x64): "e:\2016_LTSB\Work_x64_NL" [2] Updates: "E:\2016_LTSB\Updates_x64_NL" [3] DISM: "Host OS" [4] Enable .NET 3.5: YES [5] Cleanup System Image: YES [6] Reset Image Base: YES [7] Update WinRE.wim: YES [M] Mount Directory: "c:\W10UImount_15528" [E] Extraction Directory: "E:\W10UItemp_20815" ============================================================ Change a menu option, press 0 to start the process, or 9 to exit: Code: ============================================================ Running W10UI v10.38 ============================================================ ============================================================ Extracting .cab files from .msu files... ============================================================ 1/6: windows10.0-kb4486129-x64_NDP48_Base.msu 2/6: windows10.0-kb4486145-x64_NDP48_NL_LP.msu 3/6: windows10.0-kb5019182-x64_IMC_5793.1.2.msu 4/6: windows10.0-kb5032391-x64_SSU_6451.1.2.msu 5/6: windows10.0-kb5033910-x64-ndp48_CU_4690.2.msu 6/6: windows10.0-kb5034119-x64_LCU_6614.1.6.msu ============================================================ Extracting files from update cabinets (.cab)... *** This will require some disk space, please be patient *** ============================================================ 1/11: defender-dism-x64_steven4554_Jan_10_2024.cab 2/11: windows10.0-kb3197099-x64_DU_Comp_Update_TEST.cab 3/11: windows10.0-kb4039556-x64_DU_Sources_1707_TEST.cab [Setup DU] 4/11: Windows10.0-KB4486129-x64.cab [NetFx] 5/11: Windows10.0-KB4486145-x64.cab [NetFx] 6/11: windows10.0-kb4532820-x64_DU_Sources_3501.cab [Setup DU] 7/11: Windows10.0-KB5019182-x64.cab 8/11: Windows10.0-KB5032391-x64.cab [SSU] 9/11: Windows10.0-KB5033910-x64-NDP48.cab [NetFx] 10/11: Windows10.0-KB5034119-x64.cab [LCU] 11/11: windows10.0-kb5034230-x64_DU_SafeOS_6610.1.4.cab [SafeOS DU] ============================================================ Mounting sources\install.wim - index 1/1 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing servicing stack update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.0 Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 [==========================100.0%==========================] The operation completed successfully. ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 5 - Adding package Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 [==========================100.0%==========================] Processing 2 of 5 - Adding package Package_for_KB3197099~31bf3856ad364e35~amd64~~10.0.1.0 [==========================100.0%==========================] Processing 3 of 5 - Adding package Package_for_KB4486145~31bf3856ad364e35~amd64~~10.0.1.2752 [==========================100.0%==========================] Processing 4 of 5 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2 [==========================100.0%==========================] Processing 5 of 5 - Adding package Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.4690.2 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6 [==========================100.0%==========================] The operation completed successfully. ============================================================ Resetting OS image base... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 [==========================100.0%==========================] [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding Defender update... ============================================================ ============================================================ Adding .NET Framework 3.5 feature... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Enabling feature(s) [==========================100.0%==========================] The operation completed successfully. ============================================================ Reinstalling cumulative update(s)... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6 [==========================100.0%==========================] The operation completed successfully. ============================================================ Updating winre.wim ... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Mounting image [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.0 Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 1 - Adding package Package_for_KB5034230~31bf3856ad364e35~amd64~~14393.6610.1.4 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 [===========================97.8%======================== ] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image File : E:\2016_LTSB\winre.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding updated winre.wim ... ============================================================ 1 file(s) copied. ============================================================ Unmounting sources\install.wim - index 1/1 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image File : e:\2016_LTSB\Work_x64_NL\sources\install.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Rebuilding sources\install.wim ... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Mounting sources\boot.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing servicing stack update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.0 Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 [==========================100.0%==========================] The operation completed successfully. ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 1 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2 [==========================100.0%==========================] The operation completed successfully. ============================================================ Resetting WinPE image base... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 [==========================100.0%==========================] The operation completed successfully. ============================================================ Unmounting sources\boot.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image File : e:\2016_LTSB\Work_x64_NL\sources\boot.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Mounting sources\boot.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing servicing stack update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.0 Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 [==========================100.0%==========================] The operation completed successfully. ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 Processing 1 of 1 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2 [==========================100.0%==========================] The operation completed successfully. ============================================================ Resetting WinPE image base... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image Version: 10.0.14393.6451 [==========================100.0%==========================] The operation completed successfully. ============================================================ Unmounting sources\boot.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Image File : e:\2016_LTSB\Work_x64_NL\sources\boot.wim Image Index : 2 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Rebuilding sources\boot.wim ... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.22621.2792 Exporting image [==========================100.0%==========================] Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding setup dynamic update(s)... ============================================================ windows10.0-kb4039556-x64_DU_Sources_1707_TEST.cab windows10.0-kb4532820-x64_DU_Sources_3501.cab ============================================================ Removing temporary extracted files... ============================================================ ============================================================ Creating updated ISO file... ============================================================ ISO Location: "E:\2016_LTSB" 100% 3638MB 14393.6614.240103-2122.RS1_RELEASE_CLIENT_X64FRE_NL-NL.iso ============================================================ Finished ============================================================ Press 9 or q to exit. I checked the integrations after updating: Used W10UI v38 script settings: Code: :: target distribution, wim file or offline image :: leave it blank to update current online os, or automatically detect wim file next to the script set "Target=e:\2016_LTSB\Work_x64_NL" :: updates location :: leave it blank to automatically detect the current script directory set "Repo=E:\2016_LTSB\Updates_x64_NL" :: dism.exe tool custom path (if Host OS is Win8.1 or earlier and no Win10 ADK installed) set "DismRoot=dism.exe" :: enable .NET 3.5 feature set Net35=1 :: optional, specify custom "folder" path for microsoft-windows-netfx3-ondemand-package.cab set "Net35Source=E:\2016_LTSB\SxS_x64" :: Cleanup OS images to "compress" superseded components (might take long time to complete) set Cleanup=1 :: Rebase OS images to "remove" superseded components (warning: break "Reset this PC" feature) :: require first to set Cleanup=1 set ResetBase=1 :: update winre.wim if detected inside install.wim set WinRE=1 :: Force updating winre.wim with Cumulative Update regardless if SafeOS update detected set LCUwinre=0 :: update ISO boot files bootmgr/memtest/efisys.bin from Cumulative Update set UpdtBootFiles=1 :: 1 = do not install EdgeChromium with Enablement Package or Cumulative Update :: 2 = alternative workaround to avoid EdgeChromium with Cumulative Update only set SkipEdge=0 install.wim Code: Package Identity : Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.4690.2 State : Installed Release Type : Update Install Time : 12/01/2024 10:01 Package Identity : Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106 State : Installed Release Type : Update Install Time : 12/01/2024 10:01 Package Identity : Package_for_KB4486145~31bf3856ad364e35~amd64~~10.0.1.2752 State : Installed Release Type : Update Install Time : 12/01/2024 10:01 Package Identity : Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2 State : Installed Release Type : Update Install Time : 12/01/2024 10:01 Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 State : Installed Release Type : Security Update Install Time : 12/01/2024 10:00 Package Identity : Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6 State : Installed Release Type : Security Update Install Time : 12/01/2024 10:06 boot.wim Code: Package Identity : Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2 State : Installed Release Type : Update Install Time : 12/01/2024 10:15 Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 State : Installed Release Type : Security Update Install Time : 12/01/2024 10:15 winre.wim Code: Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2 State : Installed Release Type : Security Update Install Time : 12/01/2024 10:11 Package Identity : Package_for_KB5034230~31bf3856ad364e35~amd64~~14393.6610.1.4 State : Installed Release Type : Update Install Time : 12/01/2024 10:11 The sources folder also was updated with both DU's as far as i can check. Updated the overview, when something is missing or incorrect please report it
Thank you for this, I've also spent the morning doing similar detailed checks and found mostly the same other than a few observations for you to consider: KB3176937 (updated winload efi files) - agree with @abbodi1406 that this is not needed as all files within are superseded by the files in the LCU. KB3197099 (2 updated dlls) - my own testing has concluded this is not needed either as the two dlls within are superseded by files in the LCU - also appears proven in your DISM package list for install.wim as it is not listed as installed so doesn't seem it 'took'. KB4022632 (oobe update) - you list this as not needed for LTSB however it does install a few non-superseded files into install.wim if applied. Further searching indicate it was designed to offer an update to 1709 during oobe which of course doesn't apply to LTSB, so agree with you as not needed for LTSB. I concur that the two SetupDU files KB4039556 & KB5034230 do both update the ISO sources folder as a mix of files dated 2017 and 2020 from each update appear after application, so agree both are required in addition to SafeOS DU KB5034230 which does apply updates to winre.wim. Thanks @abbodi1406 for the KB5019182 update to the Microcode, I hadn't spotted this one as WU doesn't offer it and I missed spotting it on the Catalog! @Enthousiast on your updated overview post, my only suggestion would be to remove KB3197099 as I don't think it is needed, otherwise all looks good? Many thanks, Martha
Removed from the overview It doesn't get offered on the current LCU updated ISO install (connected during oobe), and LTSB never would upgrade anyway
I know it was before but with the current LCU pre-integrated it was not offered anymore, will do one more check asap.
But that is to integrate into ISO, isn't it?. On a live installation what do I have to do or it's not applicable?
You can get the winre.wim from the recovery partition and update it with the update and put it back (if that is not screwing with the config settings) but at the time 2016 LTSB was released it was not needed to update winre.wim in a live scenario, only offline integrations should get it.
I tried internet connected oobe several times with both updated and clean LTSB 2016 sources, both with and without unattend.xml scripts and I couldn't get any of them to download KB4022632 so I think not needed anymore.
Thank you for this explanation about boot.wim and winre.wim behaviour, and apologies for not spotting it in the changelog or here on the forum! I tried your change and it successfully applied the LCU to the 14393 boot.wim. I had none of the reported issues when installing like errors or setup loops, although if I do in future then I know what to undo.