Support Tip: Computers connect to Windows Update to download updates during ConfigMgr Task Sequence execution

~ Bryan Xiao

ToolsWhen deploying an operating system to clients using an OS image with either System Center Configuration Manager 2007 (ConfigMgr 2007) or System Center 2012 Configuration Manager (ConfigMgr 2012), even if there's an "Install Software Update" step in the Task Sequence, computers will try to connect to Windows Update to download some updates before initiating the "Install Software Update" step. This is a normal behavior and we can monitor this via Windowsupdate.log by looking for the following entries:

1004 7bc Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
1004 7bc Agent *********

1004 7bc Agent   * Online = Yes; Ignore download priority = No

1004 7bc Agent * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1 or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"

1004 7bc Agent   * ServiceID = {9482F4B4-E343-43B6-B170-9A65BC822C77} Windows Update

1004 7bc Agent   * Search Scope = {Machine}

1004 7bc Setup Checking for agent SelfUpdate

While this behavior is normal, it can potentially introduce a couple of issues:

- If the computers do not have Internet access they will retry the connection several times before proceeding with next action, thus prolonging the overall execution time of the Task Sequence.

- If the computers do have Internet access, this may cause high utilization of the Internet connection if many computers are running the Task Sequence.

Fortunately for us there is a way we can modify this behavior. To suppress the Windows Update Agent until the "Install Software Update" step runs in the Task Sequence, you can use an unattend.xml file to set the "ProtectYourPC" property to "3" in OOBE and add it in the Task Sequence.

Microsoft recommends using Windows System Image Manager (Windows SIM) when creating your unattend.xml file. The Windows System Image Manager technical reference can be found here:

For reference, here is an example of how one such file might look for Windows 7 x86:

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="oobeSystem">
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="" xmlns:xsi="">
    <cpi:offlineImage cpi:source="catalog://cm12std-sp1/dsources/install_windows 7 enterprise.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

Hope this helps!

Bryan Xiao | Support Engineer | Microsoft

Get the latest System Center news on Facebook and Twitter:

clip_image001 clip_image002

System Center All Up:
System Center – Configuration Manager Support Team blog:
System Center – Data Protection Manager Team blog:
System Center – Orchestrator Support Team blog:
System Center – Operations Manager Team blog:
System Center – Service Manager Team blog:
System Center – Virtual Machine Manager Team blog:

Windows Intune:
WSUS Support Team blog:
The AD RMS blog:

App-V Team blog:
MED-V Team blog:
Server App-V Team blog:

The Forefront Endpoint Protection blog :
The Forefront Identity Manager blog :
The Forefront TMG blog:
The Forefront UAG blog:

Comments (4)
  1. Anonymous says:

    L’équipe ConfigMgr a publié un billet sur son blog concernant un comportement observé durant le déploiement de systèmes d’exploitation avec System Center Configuration Manager 2007 et 2012 . En effet, les

  2. Snoop Watty Watt says:

    Adding this to the Apply Operating System step crashes the TS. Perhaps you could outline those steps also?
    I created a package, with the xml file with no program, selected the package and selected the file unattend_wsus.xml – which I created properly in WSIM

  3. Anonymous says:

    227 Microsoft Team blogs searched, 60 blogs have new articles. 141 new articles found searching from

  4. Kyle says:

    What is the following line referencing, your internal SCCM server?

    cpi:offlineImage cpi:source="catalog://cm12std-sp1/dsources/install_windows 7 enterprise.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

Comments are closed.

Skip to main content