Author: Aaron Czechowski, Senior Program Manager
This post applies to customers using the Microsoft Deployment Toolkit (MDT) 2013.
A revision to the Windows Assessment and Deployment Kit (ADK) for Windows 8.1 Update is now available. See this post for more information. If you are also using Configuration Manager see this post. (You’ll find it looks very similar to this post, but there are some differences.)
We recommend that all customers of MDT 2013 upgrade to the latest ADK, but this upgrade is not required. You can continue to use an existing version of the Windows 8.1 ADK or the Windows 8.1 Update revision to service and deploy all Windows 8.1 (including Windows 8.1 Update), Windows 8, and Windows 7 images. If you do upgrade, you don’t have to uninstall the previous version first; running the ADK setup will update the existing components of the ADK installation.
After upgrading the ADK to the latest version, here are a few general items of note for MDT:
The Windows ADK for Windows 8.1 Update still includes Windows PE 5.0 (including the Windows PE 5.0 optional components and language packs), the same as the previous versions of the Windows ADK for Windows 8.1. The Windows PE documentation references Windows PE 5.1 for supporting WimBoot deployments. (Remember, MDT does not yet support WimBoot.) Windows PE version 5.1 is not needed for MDT and can actually be problematic if you try to use it. Windows PE 5.0 can continue to be used to deploy Windows 8.1 Update. There is a documented process to upgrade Windows PE to version 5.1, but this should be considered incompatible with MDT at this time. Keep reading if you want more details about this, otherwise skip to the next section.
Why can’t MDT use Windows PE 5.1? The process to create Windows PE 5.1 requires injecting the Windows 8.1 Update package into the Windows PE image, and if it also includes optional components or language packs these must be done in a specific order. The process then requires using the DISM /Cleanup-Image option with the /ResetBase parameter to cleanup and optimize the image before unmounting the image and committing the changes. MDT doesn’t currently support this sort of process during boot image servicing. Optimizations aside, even though MDT allows for updates to be injected to Windows PE, the order of operation when applying updates is not guaranteed.
As stated above, we recommend using the latest Windows 8.1 Update full media. If you need to service an existing Windows 8.1 image here are some tips:
If your images and deployments include language packs, be sure to consider the following:
We’ve been working closely with Windows engineering on streamlining this process as much as possible. I’m always interested in your feedback, or feel free to post your questions below, especially if there are MDT deployment scenarios not covered here.
-- Aaron Czechowski, Sr. Program Manager
This posting is provided "AS IS" with no warranties and confers no rights.
Thank you for the very thorough description that answered most of my questions. The only thing that I would add is that it is always nice when there is alignment between MDT, ADK, and OS releases.
Unfortunately ADK8.1 Update 1 still has one big problem: it doesn't seem to be able to download things through a proxy that requires authentication -- or am I a special case?
@Sean - thanks for the feedback! That's our goal as well, and are looking at ways we can improve the experience in the future with respect to ADK alignment.@hubertlam - I'm not familiar with that issue. You should be able to download from a separate system (that does not use the proxy) and then install from that cached content. Otherwise I recommend following the link above to the Windows Springboard blog and providing your feedback there.
I've resolved the issue downloading via proxy author using this method http://chentiangemalc.wordpress.com/tag/runas-windows-adk-407-proxy-authentication-required-fiddler-netonly-web-installer-access-denied/
Aaron, so if I want to add the Update via MDT adding the package from the Applications node, do I have to set a restart after each installation?
@Sergio - that's probably the safest route. Both KBs mention, "You must restart the computer after you apply this update." And it's important to note again that if you're doing online servicing during the task sequence, make sure any language packs are applied _before_ the updates are installed. Refresh media is available now on MSDN, and will be posted to the VLSC in about 10 days.
We are a small company without MSDN or VLSC. Is there a way to download a refresh media (iso) for us?
Hi,Many thanks for this. In your last paragraph you say " we recommend using the Windows 8.1 Update refresh media".. Do you mean the full windows 8.1 media ? What about Windows Enterprise deployments ? could you kindly add a couple of lines to say whether or / not the process applies to windows 8.0 Enterprise deployment s as well please ?
@Reto - you should get the media the same as you would normally. The two primary channels of which I'm aware are MSDN and VLSC. I'm not sure of the schedules for refresh media via other distribution channels.@Nalin - yes, "refresh media" is the full Windows 8.1 media that is refreshed to include the Windows 8.1 Update. Media was similarly refreshed back in October around the general availability timeframe; the April refresh is specifically what I'm referring to. And this should be consistent across any edition available via these channels, including Enterprise.
Why didn't MSFT fix the WinPE image (boot.wim) in the ADK 8.1 Update ? This is extra work for consumers of WinPE.
Very good Article, thanks
Is MDT 2013 Update 1 on the horizon?
When I try installing adksetup.exe on a VM Server 2008 R2 I get a general error "Access Denied." Looking at the logs I see Error 0x80072ee2: Failed while reading from internet. We use a proxy here, how do I install adk 8.1 using a proxy? I am able to start
IE and access the internet and navigate the the link that fails. I am running adksetup.exe as admin. I also tried running it from an elevated cmd prompt.