What is Deployment Image Servicing & Management (DISM)?
Deployment Image Servicing and Management (DISM) mounts a Windows image (.wim) file or virtual hard disk (.vhd or .vhdx) for servicing.
Do Windows Server container images need to match kb4534273?
Any Windows Server container deployed to this host must be based on a Windows Server version 1809 (10.0.17763) container base image, but doesn't need to match the host KB. If KB4534273 is applied to the host, the container images will still be supported, but we recommend you update them to address any potential security issues.
Why can't I run a container image on a host?
For any other scenario where there is a mismatch in host/guest Windows versioning compatibility between User/Kernel mode is possible, but not guaranteed, and thus the container image will be prevented from running on the host.