In MDT: "Update Deployment Share" copy the d:\deploymentshare\boot\LiteTouchPE_x64.wim to d:\MDTofflineDefenderx64.wim md d:\offline Dism /Mount-Image /ImageFile:D:\MDTofflinedefenderx64.wim /index:1 /MountDir:d:\offline Unzip Microsoft Security Client.zip copy Microsoft Security Client to D:\offline\Program Files Download and Unzip Unattend.zip copy unattend.xml to d:\offline (overwite existing file) Download the latest Virus Defs from here: (note if the client has network connectivy they can upload inside the WinPE boot) http://go.microsoft.com/fwlink/?LinkID=121721&clcid=0x409&arch=x64 Make sure the file is called: "mpam-fex64.exe" Copy mpam-fex64.exe to D:\Offline\Program Files\Microsoft Security Client Copy mpam-fex64.exe to D:\Offline Dism /Unmount-Image /MountDir:C:\test\offline /commit Add .WIM to WDS Boot Images