[DISCUSSION] Windows 10 Enterprise (N) LTSB 2016

Discussion in 'Windows 10' started by Tito, Jul 21, 2016.

  1. SkirtedMouse

    SkirtedMouse MDL Novice

    Oct 20, 2018
    9
    7
    0
    Thank you for these posts, they have proven very helpful.

    I see you have only added one Dynamic Update file to the list above, yet searching on the Update Catalog shows no fewer than 5 separate DU files available for 1607 that are not superseded and appear to mostly contain unique files:

    KB3176937 (updated winload efi files)
    KB3197099 (2 updated dlls)
    KB4039556 (SetupDU - updated setup 'sources' folder files and localised MUI files)
    KB4532820 (SetupDU - appears to be a smaller but newer subset of KB4039556 that complements rather than fully supersedes it?)
    KB5034230 (SafeOS update with lots of delta patches?)

    I'm trying to create a fully patched and updated ISO for 2016 LTSB, so my plan is to combine the above 5 files with the following 7 to run under W10UI.cmd:

    KB4486129 (.NET 4.8)
    KB4589210 (microcode updates)
    KB5032391 (SSU)
    KB5033910 (.NET 4.8 CU)
    KB5034119 (LCU)
    defender-dism-x64.cab
    Microsoft-Windows-NetFx3-OnDemand-Package.cab

    Is my list complete and are any of those 4 extra Dynamic Update files I have identified not required by this process for 2016 LTSB - especially as other LTSC versions only seem to have 2 or 3 files for SetupDU and SafeOS?

    I know sometimes the metadata on the Update Catalog is not always perfect and it may be that some of the DU cabs I have identified above are obsolete or not needed for LTSB but I'm struggling to find further info on this.

    Thank you!
     
  2. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,184
    84,630
    340
    @SkirtedMouse
    Dynamic Updates are mostly for upgrades and not needed (except latest KB5034230 which fix security issue in RE)

    yes, all DUs you listed are still "applicable", except KB3176937
    +
    latest microcode update is KB5019182 (use 2023-04 version)
     
  3. liam2

    liam2 MDL Junior Member

    Jun 23, 2009
    91
    21
    0
    Hi, wich is the method to install KB5034230? I don't know what to do with the cab file.
     
  4. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,189
    94,399
    450
    #1224 Enthousiast, Jan 12, 2024
    Last edited: Jan 12, 2024
    I just tried to figure all out and with these additions and the assessment by @abbodi1406 i can complete the list, checking all now:

    Code:
    ====================== W10UI v10.38 =======================
    [1] Target (x64): "e:\2016_LTSB\Work_x64_NL"
    
    [2] Updates: "E:\2016_LTSB\Updates_x64_NL"
    
    [3] DISM: "Host OS"
    
    [4] Enable .NET 3.5: YES
    
    [5] Cleanup System Image: YES      [6] Reset Image Base: YES
    
    [7] Update WinRE.wim: YES
    
    [M] Mount Directory: "c:\W10UImount_15528"
    
    [E] Extraction Directory: "E:\W10UItemp_20815"
    
    ============================================================
    Change a menu option, press 0 to start the process, or 9 to exit:
    
    Code:
    ============================================================
    Running W10UI v10.38
    ============================================================
    
    ============================================================
    Extracting .cab files from .msu files...
    ============================================================
    
    1/6: windows10.0-kb4486129-x64_NDP48_Base.msu
    2/6: windows10.0-kb4486145-x64_NDP48_NL_LP.msu
    3/6: windows10.0-kb5019182-x64_IMC_5793.1.2.msu
    4/6: windows10.0-kb5032391-x64_SSU_6451.1.2.msu
    5/6: windows10.0-kb5033910-x64-ndp48_CU_4690.2.msu
    6/6: windows10.0-kb5034119-x64_LCU_6614.1.6.msu
    
    ============================================================
    Extracting files from update cabinets (.cab)...
    *** This will require some disk space, please be patient ***
    ============================================================
    
    1/11: defender-dism-x64_steven4554_Jan_10_2024.cab
    2/11: windows10.0-kb3197099-x64_DU_Comp_Update_TEST.cab
    3/11: windows10.0-kb4039556-x64_DU_Sources_1707_TEST.cab [Setup DU]
    4/11: Windows10.0-KB4486129-x64.cab [NetFx]
    5/11: Windows10.0-KB4486145-x64.cab [NetFx]
    6/11: windows10.0-kb4532820-x64_DU_Sources_3501.cab [Setup DU]
    7/11: Windows10.0-KB5019182-x64.cab
    8/11: Windows10.0-KB5032391-x64.cab [SSU]
    9/11: Windows10.0-KB5033910-x64-NDP48.cab [NetFx]
    10/11: Windows10.0-KB5034119-x64.cab [LCU]
    11/11: windows10.0-kb5034230-x64_DU_SafeOS_6610.1.4.cab [SafeOS DU]
    
    ============================================================
    Mounting sources\install.wim - index 1/1
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Mounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Checking Updates...
    ============================================================
    
    ============================================================
    Installing servicing stack update...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.0
    
    Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Installing updates...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 5 - Adding package Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106
    [==========================100.0%==========================]
    Processing 2 of 5 - Adding package Package_for_KB3197099~31bf3856ad364e35~amd64~~10.0.1.0
    [==========================100.0%==========================]
    Processing 3 of 5 - Adding package Package_for_KB4486145~31bf3856ad364e35~amd64~~10.0.1.2752
    [==========================100.0%==========================]
    Processing 4 of 5 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2
    [==========================100.0%==========================]
    Processing 5 of 5 - Adding package Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.4690.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Resetting OS image base...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    [==========================100.0%==========================]
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Adding Defender update...
    ============================================================
    
    
    ============================================================
    Adding .NET Framework 3.5 feature...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Enabling feature(s)
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Reinstalling cumulative update(s)...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Updating winre.wim ...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Mounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.0
    
    Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 1 - Adding package Package_for_KB5034230~31bf3856ad364e35~amd64~~14393.6610.1.4
    [==========================100.0%==========================]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    [===========================97.8%========================  ]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image File : E:\2016_LTSB\winre.wim
    Image Index : 1
    Saving image
    [==========================100.0%==========================]
    Unmounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Exporting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Adding updated winre.wim ...
    ============================================================
    
            1 file(s) copied.
    
    ============================================================
    Unmounting sources\install.wim - index 1/1
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image File : e:\2016_LTSB\Work_x64_NL\sources\install.wim
    Image Index : 1
    Saving image
    [==========================100.0%==========================]
    Unmounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Rebuilding sources\install.wim ...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Exporting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Mounting sources\boot.wim - index 1/2
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Mounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Checking Updates...
    ============================================================
    
    ============================================================
    Installing servicing stack update...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.0
    
    Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Installing updates...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 1 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Resetting WinPE image base...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Unmounting sources\boot.wim - index 1/2
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image File : e:\2016_LTSB\Work_x64_NL\sources\boot.wim
    Image Index : 1
    Saving image
    [==========================100.0%==========================]
    Unmounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Mounting sources\boot.wim - index 2/2
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Mounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Checking Updates...
    ============================================================
    
    ============================================================
    Installing servicing stack update...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.0
    
    Processing 1 of 1 - Adding package Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Installing updates...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    Processing 1 of 1 - Adding package Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Resetting WinPE image base...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image Version: 10.0.14393.6451
    
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Unmounting sources\boot.wim - index 2/2
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Image File : e:\2016_LTSB\Work_x64_NL\sources\boot.wim
    Image Index : 2
    Saving image
    [==========================100.0%==========================]
    Unmounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Rebuilding sources\boot.wim ...
    ============================================================
    
    Deployment Image Servicing and Management tool
    Version: 10.0.22621.2792
    
    Exporting image
    [==========================100.0%==========================]
    Exporting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    ============================================================
    Adding setup dynamic update(s)...
    ============================================================
    
    windows10.0-kb4039556-x64_DU_Sources_1707_TEST.cab
    windows10.0-kb4532820-x64_DU_Sources_3501.cab
    
    ============================================================
    Removing temporary extracted files...
    ============================================================
    
    
    ============================================================
    Creating updated ISO file...
    ============================================================
    
    ISO Location:
    "E:\2016_LTSB"
    100%  3638MB 14393.6614.240103-2122.RS1_RELEASE_CLIENT_X64FRE_NL-NL.iso
    
    ============================================================
       Finished
    ============================================================
    
    
    Press 9 or q to exit.
    
    I checked the integrations after updating:
    Used W10UI v38 script settings:
    Code:
    :: target distribution, wim file or offline image
    :: leave it blank to update current online os, or automatically detect wim file next to the script
    set "Target=e:\2016_LTSB\Work_x64_NL"
    
    :: updates location
    :: leave it blank to automatically detect the current script directory
    set "Repo=E:\2016_LTSB\Updates_x64_NL"
    
    :: dism.exe tool custom path (if Host OS is Win8.1 or earlier and no Win10 ADK installed)
    set "DismRoot=dism.exe"
    
    :: enable .NET 3.5 feature
    set Net35=1
    
    :: optional, specify custom "folder" path for microsoft-windows-netfx3-ondemand-package.cab
    set "Net35Source=E:\2016_LTSB\SxS_x64"
    
    :: Cleanup OS images to "compress" superseded components (might take long time to complete)
    set Cleanup=1
    
    :: Rebase OS images to "remove" superseded components (warning: break "Reset this PC" feature)
    :: require first to set Cleanup=1
    set ResetBase=1
    
    :: update winre.wim if detected inside install.wim
    set WinRE=1
    
    :: Force updating winre.wim with Cumulative Update regardless if SafeOS update detected
    set LCUwinre=0
    
    :: update ISO boot files bootmgr/memtest/efisys.bin from Cumulative Update
    set UpdtBootFiles=1
    
    :: 1 = do not install EdgeChromium with Enablement Package or Cumulative Update
    :: 2 = alternative workaround to avoid EdgeChromium with Cumulative Update only
    set SkipEdge=0
    
    
    
    install.wim
    Code:
    Package Identity : Package_for_DotNetRollup~31bf3856ad364e35~amd64~~10.0.4690.2
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:01
    
    Package Identity : Package_for_KB4486129~31bf3856ad364e35~amd64~~10.0.1.3106
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:01
    
    Package Identity : Package_for_KB4486145~31bf3856ad364e35~amd64~~10.0.1.2752
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:01
    
    Package Identity : Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:01
    
    Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    State : Installed
    Release Type : Security Update
    Install Time : 12/01/2024 10:00
    
    Package Identity : Package_for_RollupFix~31bf3856ad364e35~amd64~~14393.6614.1.6
    State : Installed
    Release Type : Security Update
    Install Time : 12/01/2024 10:06
    
    boot.wim
    Code:
    Package Identity : Package_for_KB5019182~31bf3856ad364e35~amd64~~14393.5793.1.2
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:15
    
    Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    State : Installed
    Release Type : Security Update
    Install Time : 12/01/2024 10:15
    
    winre.wim
    Code:
    Package Identity : Package_for_KB5032391~31bf3856ad364e35~amd64~~14393.6451.1.2
    State : Installed
    Release Type : Security Update
    Install Time : 12/01/2024 10:11
    
    Package Identity : Package_for_KB5034230~31bf3856ad364e35~amd64~~14393.6610.1.4
    State : Installed
    Release Type : Update
    Install Time : 12/01/2024 10:11
    
    The sources folder also was updated with both DU's as far as i can check.

    Updated the overview, when something is missing or incorrect please report it:)
     
  5. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,189
    94,399
    450
    It goes into winre.wim, check my reply above:)
     
  6. SkirtedMouse

    SkirtedMouse MDL Novice

    Oct 20, 2018
    9
    7
    0
    Thank you for this, I've also spent the morning doing similar detailed checks and found mostly the same other than a few observations for you to consider:

    KB3176937 (updated winload efi files) - agree with @abbodi1406 that this is not needed as all files within are superseded by the files in the LCU.

    KB3197099 (2 updated dlls) - my own testing has concluded this is not needed either as the two dlls within are superseded by files in the LCU - also appears proven in your DISM package list for install.wim as it is not listed as installed so doesn't seem it 'took'.

    KB4022632 (oobe update) - you list this as not needed for LTSB however it does install a few non-superseded files into install.wim if applied. Further searching indicate it was designed to offer an update to 1709 during oobe which of course doesn't apply to LTSB, so agree with you as not needed for LTSB.

    I concur that the two SetupDU files KB4039556 & KB5034230 do both update the ISO sources folder as a mix of files dated 2017 and 2020 from each update appear after application, so agree both are required in addition to SafeOS DU KB5034230 which does apply updates to winre.wim.

    Thanks @abbodi1406 for the KB5019182 update to the Microcode, I hadn't spotted this one as WU doesn't offer it and I missed spotting it on the Catalog!

    @Enthousiast on your updated overview post, my only suggestion would be to remove KB3197099 as I don't think it is needed, otherwise all looks good?

    Many thanks, Martha
     
  7. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,189
    94,399
    450
    Removed from the overview:)
    It doesn't get offered on the current LCU updated ISO install (connected during oobe), and LTSB never would upgrade anyway:)
     
  8. SkirtedMouse

    SkirtedMouse MDL Novice

    Oct 20, 2018
    9
    7
    0
  9. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,189
    94,399
    450
  10. liam2

    liam2 MDL Junior Member

    Jun 23, 2009
    91
    21
    0
    But that is to integrate into ISO, isn't it?. On a live installation what do I have to do or it's not applicable?
     
  11. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    47,189
    94,399
    450
    You can get the winre.wim from the recovery partition and update it with the update and put it back (if that is not screwing with the config settings) but at the time 2016 LTSB was released it was not needed to update winre.wim in a live scenario, only offline integrations should get it.
     
  12. SkirtedMouse

    SkirtedMouse MDL Novice

    Oct 20, 2018
    9
    7
    0
    I tried internet connected oobe several times with both updated and clean LTSB 2016 sources, both with and without unattend.xml scripts and I couldn't get any of them to download KB4022632 so I think not needed anymore.
     
  13. haris_mdlf69

    haris_mdlf69 MDL Senior Member

    Oct 23, 2018
    422
    660
    10
  14. SkirtedMouse

    SkirtedMouse MDL Novice

    Oct 20, 2018
    9
    7
    0
    Thank you for this explanation about boot.wim and winre.wim behaviour, and apologies for not spotting it in the changelog or here on the forum!

    I tried your change and it successfully applied the LCU to the 14393 boot.wim. I had none of the reported issues when installing like errors or setup loops, although if I do in future then I know what to undo.
     
  15. haris_mdlf69

    haris_mdlf69 MDL Senior Member

    Oct 23, 2018
    422
    660
    10
  16. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,365
    1,582
    90
    #1238 pm67310, Jan 24, 2024
    Last edited: Jan 24, 2024
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. haris_mdlf69

    haris_mdlf69 MDL Senior Member

    Oct 23, 2018
    422
    660
    10
  18. pm67310

    pm67310 MDL Guru

    Sep 6, 2011
    2,365
    1,582
    90
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...