Domain

Ah... very true. I didn't really think about this, since the early days when I automated the process, I always copy in a fresh wim at the start, and run the entire thing from scratch. It takes awhile, but it can just churn away while I am working on something else. Also in case anyone cares, the only update to my previous lists from above for today's patch release was windows6.1-kb2807986-x64.msu (assuming IE10 is integrated, otherwise there are more) *Edit* I take that back windows6.1-kb2791765-x64.msu also replaced windows6.1-kb2762895-x64.msu

I can't say exactly what the issue is here... there is significant patch overlap once you start integrating IE... I believe you can end up breaking the image by trying to push a patch that was for previous version of IE into an image that already has a newer version integrated. For reference, these are the current set of patches used in my image to bring it fully up to date (at least until patch Tuesday tomorrow): Pre-Req: Critical: Optional:

Hmm, good information, fully tested and working here now. I don't bother with applying every single patch individually, based my testing only order required is to make sure prerequisites are handled first (otherwise it will fail during IE 10 steps), then Internet Explorer 10, then Hyphenation/Spelling, followed by everything else. My base image is now 6 packages (prerequisites), IE 10, 62 critical, and 31 optional updates to get a Windows 7 image requiring no Windows update patches (not counting KB2533552 and Malicious Software Removal Tool) dism /Image:.\mount /Add-Package /PackagePath:.\updates\prereq dism /Image:.\mount /Add-Package /PackagePath:.\updates\ie10\IE-Win7.CAB dism /Image:.\mount /Add-Package /PackagePath:.\updates\ie10\IE-Hyphenation-NEU.MSU dism /Image:.\mount /Add-Package /PackagePath:.\updates\ie10\IE-Spelling-NEU.MSU dism /Image:.\mount /Add-Package /PackagePath:.\updates\crit dism /Image:.\mount /Add-Package /PackagePath:.\updates\opt As for welcome screen/first run, this is working fine (as it has since GA release for IE8/IE9/IE10) <settings pass="specialize"> <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64"> <DisableFirstRunWizard>true</DisableFirstRunWizard> <Home_Page>about:blank</Home_Page> </settings>