Windows Server: Add a Cumulative Update to an Offline Windows Image

Adding updates to an offline Windows Server image is useful in deployment scenarios, as it keeps the installation source image up to date. It may also be necessary in order to successfully perform operating system (OS) repairs with the dism or sfc commands. These commands require source files whose versions match those being repaired. Up-to-date source files are also required when adding roles or features that have been removed using the Uninstall-WindowsFeature command with the -Remove switch. Removing roles or features with this command reduces disk usage by deleting the corresponding source files from the side-by-side (WinSxS) store. Attempting to add one of the removed features typically results in error 0x800F081F, indicating that the source files could not be found.

To add an update to a Windows Server image, perform the following steps:

1. On the affected server, create folders named image, mount, and update. In this example, those folders are created on the C: drive, but they can be created anywhere there is adequate free space. Adjust the paths in the commands below as needed.
2. Open Windows Update and check Update History. Note the most recent monthly cumulative OS update that was successfully installed on the server.
3. From the Microsoft Update Catalog, download the .msu file for the cumulative update in step 2. Save it in C:\update.
4. Mount the OS installation ISO image or insert the installation media into the optical drive. If a popup appears, cancel it.
5. In File Explorer, browse to the sources folder on the installation media or image. Copy the install.wim file from this folder to C:\image.
6. Launch an elevated PowerShell prompt.
7. Run this command to list all indexes contained within the install.wim file:

   Get-WindowsImage -ImagePath C:\image\install.wim

8. Note the index number that corresponds to the running Windows Server version. In this example, Windows Server 2022 Standard (Desktop Experience) is installed, which is index #2. Change the index number as needed in the commands below.
9. Mount the install.wim file using this command:

   Mount-WindowsImage -Path C:\mount -ImagePath C:\image\install.wim -Index 2

10. Attempt to add the update to the mounted image with this command:

    Add-WindowsPackage -PackagePath C:\update\<filename>.msu -Path C:\mount

     In the command, <filename> is the name of the update file, which is long. It may be easier to copy and paste the filename into the command than to type it.
11. Skip this step if no error is returned. If the previous command returns error 0x800F0823, then another update must be added to the image first. This depends on the age of the installation media and is due to a servicing stack update (SSU) dependency.
    1. Read the Microsoft article that corresponds to the update, looking for information about a required SSU version or other dependency. This information can often be found in the How to get this update section of the article, as shown here:
         
       Figure 1: This article shows that the update in question requires update KB5030216 to be added to the image first.
    2. From the Microsoft Update Catalog, download the .msu file for the prerequisite update mentioned in the article. Save the file in C:\update.
    3. Run the previous command, but with the filename of the prerequisite update.
    4. Dismount and save the image with this command:

       Dismount-WindowsImage -Path C:\mount -Save

    5. Mount the image again with the command in step 9.
    6. Perform step 10 again to add the original update to the image.
12. Dismount and save the image with this command:

    Dismount-WindowsImage -Path C:\mount -Save

The install.wim file now includes the cumulative update. It can be used for OS deployment or as a file source for dism, sfc, and addition of roles or features.