Getting Windows 8 / 8.1 updates out of WSUS
Many of the Windows 8 or 8.1 devices don't come with a wired network port or only come with a single USB port. There are work arounds, a dock or hub will allow you to connect an external usb network adapter this will let you patch your build directly from WSUS while it's building.
Then you realize that your WSUS doesn't have the Windows 8 patches approved......
So if you want to build a patched image you will need to get the patches from somewhere to use in your deployment.
I had tried the "Windows update downloader' software it downloaded a bunch of patches but none of the actually applied correctly for me. I'm going to revist this, as it would be really handy.
Next I decided to setup my own WSUS server and connect it directly to the internet to download the patches. Make sure that you ONLY select windows 8 or 8.1 (whichever you need) otherwise you will end up with a lot of patches.
Let you WSUS server synchronize, when it's done your wsuscontent folder will have a whole pile of folders with hex value names, which may or may not have any cab files in them. It's not very helpful, but if you setup our selection for products right the only cabs in the folders should be the windows updates we want. Now all we have to do is move them all out....and import them into MDT.
I agree...no way in hell i'm doing it manually....I put a nice powershell script below that will copy them out of the folders and save them indo d:\81update which you will change to suit your needs.
Run the script from the wscontent folder or adjust the Get-childitem source which is currently .\
-----------------copycab.ps1 -----------start cut ---------------------------
$files = (Get-ChildItem .\ -recurse -filter *.cab | Where-Object { -not ($_.psiscontainer)})
$files | %($_){cp $_.fullname D:\81update\$_name}
----------------------------------copyucab.ps1 ---- end cut-------------------------
NEXT.....this is longer than it should need to be.....
Import the updates into the packages in your MDT you should create a folder first to help with selection profiles later, so create win81updates folder then import the packges.
If you only have one OS version then you don't need a selection profile use "all packages", otherwise create a selection profile for the packages folder you want.
Add a Apply updates offline step to your task sequence in the PREINSTALL section, I put mine right after inject drivers and before Next phase.
Remember what is happening here is that the udpates are injected into the OFFLINE wim file using DISM before it is copied, which is why it's in pre-install. You may see a reboot or two because of the updates.
That should be it.....good luck
JAW