In the future we plan on supporting security updates through Microsoft Update, for this to work well, the installer should ask users to opt-in to Microsoft Update.

Workflow

• check existing MU opt-in status
  • If already opt-in to MU, go to the last step
  • if not, go to next step.
• Show opt-in UI
  • if the user opts out, go to the last step
  • if the user opts in, got to next step
• Add MU service using WUA API (see examples in a separate section)
• Configure AU
  • If Windows 10, goto to last step
  • if AU is on, goto last step
  • check OS install type
    • if client OS set AU notification level (see examples in a separate section) to scheduled installs
    • if server OS set AU notification level (see examples in a separate section) to notify before installation
• Continue with the installation

example how to set AU notification level

PowerShell

https://github.com/PowerShell/xWindowsUpdate/blob/dev/DscResources/MSFT_xWindowsUpdateAgent/MSFT_xWindowsUpdateAgent.psm1#L490

API

https://msdn.microsoft.com/en-us/library/windows/desktop/aa385824(v=vs.85).aspx

example how to add MU service using WUA API

in PowerShell

https://github.com/dsccommunity/xWindowsUpdate/blob/6aab96e94e4a53b817e9f9b7cc403b8036c8b93f/source/DSCResources/MSFT_xWindowsUpdateAgent/MSFT_xWindowsUpdateAgent.psm1#L747

VB

And the documentation: https://msdn.microsoft.com/en-us/library/windows/desktop/aa826676(v=vs.85).aspx

screen layout

example

Here is what the screen should say and look like (icon blurred until we get permission to use them):

text

urls

• Microsoft Update online FAQ URL

http://go.microsoft.com/fwlink/?LinkID=57191​

• Microsoft Update privacy statement URL

http://go.microsoft.com/fwlink/?LinkID=57190