The Issue:
There is an issue with KB3106614. The issue is that it should not be installed att all on a Windows Server 2008 R2 Core Server. That patch is a Security Update for Silverlight and it has nothing to do with the Core edition of Windows Server 2008 R2, this is what happens:
The never ending install of KB3106614 in Windows Server 2008 R2 Core.
The Solution:
We cannot change the settings on the patch(wich is in this case obvisily incorrect), but we can prevent the update process in LiteTouch to install it by adding WUMU_ExcludeKB. It is also possible to set this in customsettings.ini, but that will prevent this from being installed for other Operating System. So, IMHO, for a ref image creation the easiest way would be to block it by setting this in the Task Sequence.
Prevent the patch from ever being installed using WUMU_ExcludeKB.
/mike
Categories: OS Deployment, OSD, Patching, Windows Server 2008 R2
does the WUMU_ExcludeKB variables work in SCCM?
If you use ConfigMgr for patching, no