Security patches for Windows 10 IoT Enterprise (build 1607)-March 2019

1. Do not power off your system during Windows Update or QFE installation.
2. Updating latest WDA on client side is recommended before updating Security Updates through WDM and WMS.
3. Wyse 5070 thin client that runs Windows 10 IoT Enterprise Red Stone 1 does not support WDM
4. DotNetCompilation WIE10.exe
- This package is only for DotNetCompilation and deletion of Software distribution downloaded folder.
- You must push the package after. msu security patches deployment through WMS and WDM
- This package will push only for Windows 10 IoT Enterprise Red Stone 1 builds.
- Entire package push requires two reboots.
5. OSComponentCleanup.msi
- This add-on package is used to perform cleanup of superseded OS Components which are accumulated during installation of monthly cumulative security updates released by Microsoft.
- This command execution will provide additional free space in the disk and will help to optimize the disk space in the Windows 10 IoT Enterprise based thin clients with 32 GB or higher disk configuration.
- Minimum free space required to install this package is 30MB.
- You must push this package after pushing .msu security patches deployment through WMS and WDM
- Silent installation parameter is --silent
- Component Clean Up may take one to three hours to clean up the data for the first time. It may take 30-60 minutes in subsequent execution.
- This package is executed as maintenance tasks to free up the space on the disk which are accumulated during installation of monthly cumulative security updates released by Microsoft.
- Silent installation parameter is /qn.

Wyse Device Manager (WDM)
Installation of this package is possible through WDM by following the below procedure:
1. Download and open the Package Registration Utility dialog box.
2. Click the EXE tile displayed on the WDM Package Registration Utility dialog box.
3. Browse the exe, msi, msu, or bat files only or package to upload. The following details of the selected package is displayed.
- Name
- Description
- Operating System
- Category
- Image Size
- Install Path
- Command Parameters
4. From the Operating System drop-down list, select the operating system.
5. Enter a valid thin client path to install the package in the provided field.
6. Enter the command parameters in the provided field.
7. Click Upload.
8. Schedule the package to the target client
9. The directory C:\Temp is not deleted. You must edit the .rsp manually with the delete command to delete the directory. For example, DT C:\Temp.
Lock screen is disabled when the package pushed from WDM
Wyse Management Suite
Installation of this package is possible through WMS by following the below procedure:
1. Register the Device to WMS server and add to respective add-on group.
2. Download the .msu file.
3. Copy. msu file to the WMS server Repository.
4. Launch the browser and log in to WMS server.
5. Go to Portal Administration> File Repository.
6. Check the File Repository and click Sync Files.
7. Go to Apps & Data>App Inventory>Thin Client, and verify the files listing in the Thin Client.
8. Go to Apps & Data>App Policies>Thin Client>Add Policy.
9. Configure the options Policy Name, Group, Task, OS Type, Application, and OS subtype Filter.
10. Click Save.
11. Click Yes to schedule a Job Immediately.
12. Go to App Policy Job, and update description.
13. Click Run> Immediately, and then click Preview.
14. Click Schedule.
15. Go to Jobs to verify the Job status.
Lock screen is enabled when the package is pushed from WMS.