master-client(-management)

Take Windows Up to 11

Tag: Task Sequence

Install Microsofts January Meltdown / Spectre Updates during SCCM or MDT Build and Capture Task Sequence

Problem

I tried to create images of Windows 7 and Windows 10 (1607, 1703, 1709) with a SCCM Build and Capture Task Sequence. I deployed the January Windows Updates to the imaging clients so that the images should include the fixes for the Meltdown and Spectre vulnerabilities. But unfortunately this did not work. The reason is that the Antivirus compatibility Registrykey mentioned in this article had not been set before the updates were installed.

Update: After testing Build and Capture of Windows 10 with MDT I have added the necessary steps to the article.
Update 2: Thanks to @manelrodero for pointing out that a reboot is not required between setting the key and the Install Update step.
Update 3: Microsoft announced that this is not longer necessary beginning with the Cumulative Update 03-2018

Solution

You just have to add the registry in your Build and Capture sequence right before the update step performs the update scan.

SCCM

  1. Add a Run Command Line Step to your Build and Capture Task Sequence before the Install Updates step containing the following line
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" /v cadca5fe-87d3-4b96-b7fb-a231484277cc /T REG_DWORD /D "0x00000000" /F

QualityCompat Key
2. Make sure that the box Evaluate software updates from cached scan results is not checked in the first Install Updates step.

Install Updates step

MDT

  1. Add a Run Command Line Step to your Build and Capture Task Sequence before the Windows Update (Pre-Application Installation) step containing the following line
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" /v cadca5fe-87d3-4b96-b7fb-a231484277cc /T REG_DWORD /D "0x00000000" /F

QualityCompat Key

Task sequences are not showing up in SCCM Software Center when multiple users are logged on

Problem

I recently ran into the problem that the task sequence I wanted to test won’t show up in the SCCM Software Center. I checked for a common misconfiguration like

  • Deployment schedule
  • Configuration Manager Client active
  • Client in the correct collection
  • Deployment deployed to the correct collection
  • Client in a boundary with a distribution point
  • Packages deployed to the Distribution Point
  • Check the _SCCLient_%USER%.log, LocationServices.log, PolicyAgent.log, PolicyEvaluator.log,…
  • etc.

But all this was configured correct or did not show any errors.

Solution

I found out after some time that my colleague was still logged on to this computer. After logging him off the Deployments appeared as expected in the Software Center.

Knowing what to look for I found this thread:

Technet: Applications but not Programs showing in Software Centre

What have I learned:
Check if you have the lowest session ID when multiple sessions exist!