How to address feature update refreshes in your environment

Applies to: Windows 10, version 20H2, all editionsWindows 10, version 2004, all editionsWindows 10, version 1909, all editions

Summary


In two instances recently (CVE-2020-1571 and CVE-2020-16908), you might have seen feature update bundles or media refreshing within your managed environment. This article is intended to provide more information and general guidance about why those refreshes happen and what is needed once it does. 

Refreshing feature update installation source or media is an important part of managing your environment, especially when there are security issues addressed. Refreshed feature update media can also help resolve general installation issues and remove safeguard holds (such as those listed on Windows release health page).  To do this, you will need to download the most recent updated installation media or to sync to the latest feature update bundle in your update management tool.  Some examples of management tools include Windows Server Update Services (WSUS) and Microsoft Endpoint Configuration Manager, as well as third-party management tools. 

Note Devices using Windows Update for Business or that connect directly to Windows Update should receive the latest Windows Setup from Windows Update without any extra steps. 

Updating from physical Windows media or an ISO image file


If you are using physical Windows media or an ISO image file to update devices to a new version of Windows 10, you will need to download an updated ISO image file that has the latest Windows Setup.  If you require physical media, you will need to burn the ISO image file to a DVD or USB flash drive. 

If you are using Microsoft Volume Licensing, you can download an updated ISO image file from Volume Licensing Service Center (VLSC).

If you are using Visual Studio Subscriptions (Formerly MSDN Subscriptions),  you can download an updated ISO image file here.

If you are not a part of either program, please see Download Windows 10 for information on how to download ISO files or create physical Windows media. 

Note You can download the latest Setup DU packages for a specific version of Windows 10 from the Microsoft Update Catalog website and update your existing media. For instructions, see Update Windows 10 media with Dynamic Update

Updating using an update management tool


If you are using an update management tool, you should ensure that the tool is updated, and the latest updates have been synced within the tool.  You will need to follow instructions for your specific tool on how to do this.  The instructions might change depending on the originating version of Windows 10 or the version of Windows 10 you are updating to. 

If you are using Microsoft Endpoint Configuration Manager, you will need to synchronize the latest feature update bundles. For information on how to do this, see Synchronize software updates. For information on why a previously downloaded feature update might no longer show as downloaded, see Windows 10 feature update Downloaded status reverted to No.

If you are using Windows Server Update Services (WSUS), you will need to synchronize the latest feature update bundles. For more information on how to do this, see Deploy Windows 10 updates using Windows Server Update Services (WSUS)

If you are using a third-party update management tool, you will need to check the documentation or consult support on how to synchronize the latest feature update bundle or ISO in that specific tool. 

Note In managed environments, the refreshing of feature updates will require the content files to be redownloaded to your server. This might invalidate any pre-cached versions of the feature update and the feature update might need to be re-cached.  This is a normal consequence of the files within the feature update changing with the new bundle.