The latest Dell KACE K1000 release 6.4 SP2 (6.4.120756) now supports Patch Management for Windows Embedded 7 and 8.1.

Because Windows Embedded comes with enabled Write Filters in order to prevent unwanted changes on the Embedded devices these filters must be disabled before installing OS and Software updates.

Since the KACE K1000 appliance does not have that functionality I have developed 3 custom inventory rules which return the write filter status on the Windows embedded devices and two scripts which can diable or enable the write filter(s).

The CI rules and scripts can be downloaded from Here and imported into the K1000 appliance. They require an installed K1000 Agent on the device(s) running Windows Embedded.

There is an automated  recognition of OS version and write filter mode (file base, enhanced or UWF) built in.

- CI_Win_Embedded_EWF returns the status of the Enhanced Write Filter (if available)

- CI_Win_Embedded_FBWF returns the status of the File Based Write Filter (if available)

- CI_Win_Embedded_UWF  returns the status of the Unified Write Filter (if available)

- Windows Embedded Write Filter Disable is the script that scans the device for the available write filters and disables them. It must be executed before a patch job is scheduled to run.

- Windows Embedded Write Filter Enable is the script that scans the device for the available write filters and enables them. It must be executed after the patch Job has completed in order to enable the write filter(s) again.

Since the modification of the write filter(s) requires a restart in order to become active, both scripts include a reboot command.

NOTE:
Windows Embedded OSs are currently supported on a limited basis. For information on supported platforms and features, please view: https://support.software.dell.com/k1000-systems-management-appliance/kb/188754