I'm deploying Windows Server 2012 R2 with SCCM 2012 SP1 CU4 to a Cisco UCS B250 M2 (btw, avoid cisco UCS hardware, it's FAR more trouble than it's worth... seriously, relying on flash and java for management?). It deploys without errors. When it's done, the device manager lists six devices with the yellow alert icon, "Universal Serial Bus (USB) Controller". The status shows "Reinstall the drivers for this device. (Code 18) To reinstall the drivers for this device, click Reinstall Driver." I can click on reinstall driver, then "browse my computer for driver software", then "let me pick from a list of device drivers on my computer", it shows three drivers. I can choose any of the three, click next, and the device installs properly. But looking at setupapi.dev.log, it finds two drivers already integrated ("Signer Score - INBOX- WHQL"). The DeviceSetupManager event log shows several ID 123 events (each along the lines of "The DSM service was delayed by 12 seconds for a driver query/download/install on device 'PCI\VEN_8086&DEV_3A34&SUBSYS_01011137&REV_00\3&11583659&0&E8'", which match the IDs of the affected devices). T2003. So that's a problem too.
I've tried several things, each with not effect.
First I searched SCCM, the boot image, and the installation image. None of them have the driver.
I've also tried adding "<DynamicUpdate><Enable>false</Enable><WillShowUI>Never</WillShowUI></DynamicUpdate>" (nested in unattend and settings notes, and verified that it is integrated into the sysprep file). It seems to ignore that.
I've also tried setting HKLM\OfflineSoftware\Microsoft\Windows\CurrentVersion\DriverSearching SearchOrderConfig but it seems to be deleted after deployment (It's definitely not in Wow6432Node). That is, in WinPE I use reg.exe to load the software hive (c:\windows\system32\config\software), add the value, then unload it.
I've tried setting local policy the same way (HKLM\Software\Policies\Microsoft\Windows\DriverSearching SearchOrderConfig"), but it is ignored/removed before the deployment continues.
Devcon doesn't help. It won't remove the affected driver even if I use "devcon.exe -f oem63.inf".
Basically, I need to either remove the broken driver, block it from installation, adjust the score, make the device not match the wrong OS, or block windows from connecting to WU/WSUS. I can't figure out any way to make that happen in a task sequence. Does anyone have any ideas?