dwagner1 - thanks for your reply also - I cannot answer all of your questions, but below are the ones I can. Perhaps when I have more time I can delve into this a little deeper, but for now, Peter's suggestion works and gets me moving forward again.
- What is the Patch System action? Scan only, Scan and remediate vulnerability or Scan and remediate group?
- Scan and remediate group - this option worked prior to my upgrade to SP1
- If set to either of the last 2 settings, does your "OSD agent" actually scan for the vulnerabilities before the Patch action?
- I'm not sure, but if that is the case, then that complicates things a bit, as I am using a "provisioning agent" much like yourself during the imaging process, with very limited functionality
- If set to scan and remediate group, are the patches set to "Auto-Fix"?
- No - is this necessary to patch during provisioning? Seems like it shouldn't be