We help IT Professionals succeed at work.

Push out Windows 10 Anniversary (1607) through WSUS 2008

Tarkisal
Tarkisal asked
on
751 Views
Last Modified: 2017-09-28
Forgive me if this is a dumb question but I can't seem to find out exactly how I'm supposed to do this. Last year I upgraded my entire office from a combination of Windows 7 Pro and 8 Pro machines to Windows 10 Pro. The office is about 100 computers and I did so manually by using 7 or so USB flash drives at a time and installing it on each machine. (This was during the free upgrade period.) Now most of my computers are on version 1511, though I do have some later purchases that are on 1607.

However, when researching the just released Creators Edition I found out that these older branches will be unsupported as the new ones come in! So my question is this - how do I use WSUS (I currently have Windows Server 2008 R2) to deploy the 1607 update without having to manually touch each computer again? I am getting security updates for all versions but the "editions" don't show up as regular updates. Is there a way to make that possible?

If not, is there a third party program I can use to achieve this goal? Perhaps PDQ Deploy? (I currently use PDQ Inventory.) I know there is also system center but that is a very expensive program and I don't think management would go for that.

So, to sum up, I'm looking for a way to upgrade Windows 1511 to 1607 without having to manually touch each computer.

Thanks very much
Comment
Watch Question

CERTIFIED EXPERT
Distinguished Expert 2018
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
DonNetwork Administrator
CERTIFIED EXPERT
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
There are still updates for 1511 available, so there is no need for a rush yet. But yes, your only ways are manual installation or using a more recent WSUS release ...
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Donald is correct, that one-liner script is a very good alternative to WSUS deployment. It can be used as  startup script that you deploy as part of a GPO to those computers in question. Of course, you need to add a version check so that it won't run more than once.

You also need to understand that if security matters, those upgrades should not run while anyone has physical access to those computers, since during the upgrade, bitlocker is suspended and the installation is easily manipulated.

If you have questions about the process, just say, we did it that way moving forward through all the editions of win10 up to the latest.
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
I've seen enough issues with trying it as a startup script that I can't recommend it. Even on a gigabit network, having several machines starting a 4GB setup all at 9am slows down their upgrades significantly (becoming all-day affairs) and often saturates the rest of the network. I've even seen logins fail and group policies start reverting settings, compounding the issue. It really just isn't a wise approach most of the time.
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
That's not what I see here. Done hundreds. It is not hard to find ways to manage bandwidth.
Qlemo"Batchelor", Developer and EE Topic Advisor
CERTIFIED EXPERT
Top Expert 2015

Commented:
Why would you want that run as startup script in the morning? That is asking for trouble and grief (people not being able to use the computer at a time they need it most).
You run that upgrade outside of usage hours in bulk, or very restrictive while office hours.
CERTIFIED EXPERT
Distinguished Expert 2018

Commented:
Exactly. And unfortunately with startup or login scripts, they run when it is least convenient. Which is why I can't recommend that method.
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Author

Commented:
Thank you to everyone for the quick and helpful responses.

I'll start by saying that if and when I push this update, however I do it, it will be done off-hours where no one else will be in the building. Therefore, security in that respect is not a concern.

I like the idea of being able to push it out as a group policy, but I might need a little more help and direction as to how to setup the code to run through group policy as you listed above.

Would anyone recommend buying System Center 2016? It appears to have the ability to push out these updates, but it also seems to come with a lot of features my company simply wouldn't use. Also, I should mention that my company's original plan was to upgrade our servers from our current Server 2008 R2 to Server 2016 standard at the end of the year. Perhaps it would make more sense to do that upgrade sooner rather than later so I could use WSUS?  Can I upgrade my servers piece by piece? For instance, leave the DC on 2008 for now but upgrade the WSUS server to 2016 to aid in this issue?

Lastly, I know 1511 still has some life in it so it's not a last minute problem. I have 3 or 4 computers on the version before that and that one I need to take care of immediately because, as I understand it, is expiring in about two weeks (May 9th, I've read.) I can do those computers manually, but 1511 will expire in the near future and I want to be ready so I'm prepared before security for that release dries up.

Lastly, I'm a little confused on how the branching now works. I've read the following article 3 times but I still don't quite get it. Reading the article it first says 1511 will end support in August, but then it says the Business Branch will expire in December. Does the fact that this is a business environment automatically allow me that extra time? Or do I need to be in some kind of program to qualify for the CBB time frame?

https://blog.juriba.com/windows-10-branching-timeline

Thanks again for everyone's help
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.