Deploying Windows 10/11 feature updates with Patch Management Solution

Products

IT Management Suite Patch Management Solution Client Management Suite

Issue/Introduction

With Windows 10 and 11, Microsoft packages new features into feature updates that can be deployed using existing management tools. You can use Patch Management Solution software update policies to deploy Windows 10 and 11 feature updates. Windows 10 and 11 feature updates are packaged as ISO files.

NOTE: This KB was written to address the changes with Windows 10 Feature Updates. The same process is valid with Windows 11, and also from upgrading from Windows 10 to 11.

NOTE: An alternative process to deploy these upgrades outside Patch Management is detailed on 178784. Software Management Solution has more flexibility in deployment.

We also cover Best Practices for deploying OS upgrades in KB 178784

Environment

8.x

Resolution

Before you enable a software update policy, consider the following:

You must manually add an ISO file of the corresponding update to the policy distribution package because Microsoft does not allow the ISO files to be directly downloaded.
In a hierarchy, you must manually add an ISO file of the corresponding update to the policy distribution package on each child Notification Server.
If your ISO contains multiple editions (enterprise, pro, etc) the installer will automatically choose the appropriate edition based on the targeted computers.
If you switch the Default system UI language through unattended installation to a different embedded language, then you must use the ISO file with that same native language to upgrade such installation.
If you have the computers with Windows 10 English language or language-neutral version in your environment, and you use language packs on these computers, the language packs are removed during the feature update installation. The Default system UI language will be used instead.
If you want to continue using your language packs, you need to reinstall them. For example, you can use Software Management Solution to add the language packs. After you reinstall the language packs and log in again, the language setting is restored for your user account.
If you have the computers with Windows 10 non-English language version in your environment that require feature update installation, you need to select the languages used on these computers on the Import Patch Data for Windows page, and then you must add the ISO files of these languages to the corresponding policy distribution packages.

To configure a software update policy for Windows 10 feature update deployment

In the Symantec Management Console, on the Home Menu, click Patch Management.

In the left pane, under Patch Management, expand Windows, and under Software Updates, click Bulletins and Updates.
In the right pane, under Parameters, right-click the bulletin for Windows 10 that you want to update with an ISO file, and then click Distribute Packages.
In the Distribute Software Updates Wizard, click Step 2, ensure that the software update policy is disabled, and then click Distribute software updates.
Note: The software update policy for SBSP-Windows10_20H2 will have the following Update Name: Windows10x64ProforWorkstationN20H2-ENU.bat
On the Creating Software Update Policy page of the wizard, click the policy name next to Software Update Policy.

To add the appropriate ISO file for Windows 10 version x86 to the policy distribution package, perform the following steps in order:

6.1. On the Software Update Policy page, on the Advanced tab, view the package parameters that help you select the correct ISO file.
Note: For a successful installation, the ISO file must contain an OS image with Windows version, edition, architecture, build, and language identical to the target package.
For example, if the target package parameters are Windows10x64ProforWorkstationN20H2.bat / English, you need to download the ISO file that contains an OS image with the following parameters:
- Windows version: Windows10
- Edition: Windows 10 Pro N for Workstations (part of Consumer Editions ISO)
- Architecture: x64
- Build: 20H2
- Language: English
6.2. Download the necessary ISO files for the required Windows 10 version to your Notification Server computer from one of the following public Microsoft resources:
- Microsoft Media Creation tools
- Visual Studio Dev Essentials
- Microsoft Volume Licensing Service Center
  For more information, see KB 176243.
6.3. On the Software Update Policy page, on the Advanced tab, under Package, click the package name.
6.4. On the Patch Management Software Update Package page, on the Package tab, under Package location, find the package location, and then open the package location on the Notification Server computer.
6.5. Navigate to the location of the appropriate ISO file, and then copy and paste the ISO file to the package location.
6.6. Give the correct name to the ISO file.
Copy the package name and rename the ISO file using the copied package name and the .iso extension.
For example, if the package name is Windows10x64ProforWorkstationN20H2.bat, the ISO file name is Windows10x64ProforWorkstationN20H2.iso
6.7. On the Patch Management Software Update Package page, on the Package tab, click Update Distribution Points, and then close the page.

(Optional) To add the appropriate ISO file for other Windows 10 editions to the policy distribution package, repeat the procedure in the step 6.
Note: This step is required only if you have client computers with additional Windows 10 editions (i.e., Pro and Enterprise) and languages (i.e., English and German) in your environment.
On the Software Update Policy page, enable the policy.
At the upper right of the page, click the colored circle, and then click On.
Click Save changes.

Additional Information

SBSP-Windows10_21H2 was added to PMImport version 7.3.911 (December 14, 2021) which provides the ability to upgrade to Windows 10 21H2 from earlier versions using the ISO based approach.