Windows 11 feature update deployment using Patch Management Solution
search cancel

Windows 11 feature update deployment using Patch Management Solution

book

Article ID: 184951

calendar_today

Updated On:

Products

IT Management Suite Patch Management Solution Client Management Suite

Issue/Introduction

Microsoft packages new features into feature updates that can be deployed using existing management tools. Patch Management's Software Update Policies can be used to deploy Windows 11 feature updates. Windows 11 feature updates are downloaded from Microsoft as ISO files.

NOTE: This KB was written to address the changes with Windows 11 Feature Updates.  The same process is valid with Windows 11, and also from upgrading from Windows 10 to 11.

NOTE: An alternative process to deploy these upgrades using Software Management, instead of Patch Management, is detailed here: Upgrading to Windows 11 using Software Management Solution.  This is mentioned here as Software Management Solution has more flexibility in deployment.

Environment

8.x

Resolution

Before enabling a software update policy, consider the following:

  • Admin must manually add an ISO file of the corresponding update to the policy distribution package because Microsoft does not allow the ISO files to be directly downloaded.

  • In a hierarchy, Admin must manually add an ISO file of the corresponding update to the policy distribution package on each child Notification Server.

  • If the ISO contains multiple editions (enterprise, pro, etc) the installer will automatically choose the appropriate edition based on the targeted computers.
  • If switching the Default system UI language through unattended installation to a different embedded language, then the ISO file with that same native language must be used to upgrade such installation.

  • If computers with Windows 11 English language or language-neutral version exist in environment, and language packs are installed on these computers, the language packs are removed during the feature update installation. The Default system UI language will be used instead.
    If the language packs are needed, you need to reinstall them. For example, it is possible to use Software Management Solution to add the language packs. After the language packs are reinstalled, and log in again, the language setting is restored for the user account.

  • If computers exist with Windows 11 non-English language version in the environment that require feature update installation, the Admin needs to select the languages used on these computers on the Import Patch Data for Windows page, and then add the ISO files of these languages to the corresponding policy distribution packages.

 

To configure a software update policy for Windows 11 feature update deployment

  1. In the Symantec Management Console, on the Home Menu, click Patch Management.

  1. In the left pane, under Patch Management, expand Windows, and under Software Updates, click Bulletins and Updates.
     
  2. In the right pane, under Parameters, right-click the bulletin for Windows 11 to update with an ISO file, and then click Distribute Packages.



     
  3. In the Distribute Software Updates Wizard, click Step 2, ensure that the software update policy is disabled, and then click Distribute software updates.
    Note: The software update policy for SBSP-Windows11_25H2 will have the following Update Name: Windows11x64Enterprise25H2-ENU.bat


     
  4. On the Creating Software Update Policy page of the wizard, click the Software Update Policy name.


     
  1. To add the appropriate ISO file for Windows 11 to the policy distribution package, perform the following steps in order:

6.1. On the Software Update Policy page, on the Advanced tab, view the package parameters that help you select the correct ISO file.
Note: For a successful installation, the ISO file must contain an OS image with Windows version, edition, architecture, build, and language identical to the target package.
For example, if the target package parameters are "Windows11x64Enterprise25H2-ENU.bat / English", you need to download the ISO file that contains an OS image with the following parameters:
- Windows version: Windows11
- Edition: Windows 11 Enterprise
- Architecture: x64
- Build: 25H2
- Language: English


 

6.2. Download the necessary ISO files for the required Windows 11 version to your Notification Server computer from one of the following public Microsoft resources:

 

6.3. On the Software Update Policy page, on the Advanced tab, under Package, click the package name.


 

6.4. On the Software Update Package page, click on the Package tab, and find the Package location, and then open the package location on the Notification Server computer.


 

6.5. Navigate to the location of the appropriate ISO file, and paste the ISO file to the package location.  Name ISO file correctly.
Copy the package name from step 6.4 and rename the ISO file using the copied package name and leave the .iso extension.
For example, if the package name is Windows11x64Enterprise25H2-ENU.bat, the ISO file name is Windows11x64Enterprise25H2-ENU.iso


 

6.7. On the Software Update Package page, click Update Distribution Points, and then close the page.

  1. (Optional) To add ISO files for other Windows 11 editions to the distribution package, repeat the procedure in the step 6.
    Note: This step is required only if you have client computers with additional Windows 10 editions (i.e., Pro and Enterprise) and languages (i.e., English and German) in your environment.
     
  2. On the Software Update Policy page, enable the policy, and Save Changes.

     


Additional Information

 
To make sure the OS being upgraded is supported by the downloaded ISO file: Finding the build and language code from ISO