This post assumes the following:
- You have Windows ADK 10 Installed - http://blogs.technet.com/b/yongrhee/archive/2015/08/11/download-windows-10-assessment-and-deployment-kit-adk.aspx
- You have MDT 2013 Update 1 Installed - https://www.microsoft.com/en-us/download/details.aspx?id=48595
- Follow the steps listed here until step 7 http://deploymentresearch.com/Research/Post/496/Building-a-Windows-10-Reference-Image-using-MDT-2013-Update-1
- Update your ADMX Templates for the 1511 build from https://www.microsoft.com/en-us/download/details.aspx?id=48257
After following Johans steps, go back into your task sequence and add the following steps:
After the step "Apply Local GPO Package" add a step named "Pause" with a run command line of:
Adding the pause step will cause the TS to pause, letting you configure your image as much as you like. To resume the task sequence you would run the "Resume Task Sequence" shortcut that is placed on your desktop.
cscript.exe %SCRIPTROOT%\LTISuspend.wsf
Adding the pause step will cause the TS to pause, letting you configure your image as much as you like. To resume the task sequence you would run the "Resume Task Sequence" shortcut that is placed on your desktop.
Go back to your list of applications and add a new application called "Cleanup Windows Before Sysprep" - your step should look like below:
You can get the script here: https://onedrive.live.com/?id=8563304F134DDCB6%211162216&cid=8563304F134DDCB6&group=0
Adding this step will clean the hard disk of any unnecessary files before capture. especially if your build and capture installs lots of updates.
Add this app as a step in the following location:
( i like to put a restart either side of this)
Open your VM Console and point your VM to boot off your newly created media in your MDT Boot Folder (x86/x64). If all steps have been followed correctly you should be prompted to choose your Task Sequence, if you get additional prompts first make sure you have set your Bootstrap.ini correctly.
When your task sequence gets to the Pause step you will see this prompt:
From here you can customise Windows as much as you like , remember not to bother setting anything profile specific unless you plan on using CopyProfile (see here) . Personally i don't see the need to do anything profile specific within my reference image, i will get to customise steps later on in this post.
The few things i do set during the "Pause" is : Setting language preferences, changing security settings and removing unwanted Windows 10 apps.
Apply Language Pack
To apply language packs offline, first login to your VLC and download the following file ISO:
This download is specific to the 1511 build (November '15)
Extract the downloaded iso (SW_DVD5_Win_10_1511_32-BIT_X64_MultiLang_LangPackAll_LIP_OEM_VL_X20-75632) to a network location.
Perform the command seen in the below screenshot on the machine for each language pack you intend to install (make sure command prompt is elevated):
Once you have installed the language pack you will need to go ahead and add it as default if need be. In my case i wanted to set en-GB (English United Kingdom) as default system wide, including speech. Simply installing the language pack above will not give you all the features you need.
Microsoft have now split the way they manage language packs in an attempt to reduce disk real estate, they now include these items as "Features on Demand". You COULD get these by connecting your Reference VM to the internet, but this is never recommended, as you cant control what other nasties get applied behind the scenes. (See: http://blogs.technet.com/b/mniehaus/archive/2015/11/23/seeing-extra-apps-turn-them-off.aspx )
You can read more about this here: https://msdn.microsoft.com/en-us/library/windows/hardware/mt171094(v=vs.85).aspx
What you will want to do next is log back into your VLC and download the following:
The contents of this file are:
To Enable these features, you will want to perform the following command(s):
(these are for en-GB only)
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Handwriting-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Speech-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-TextToSpeech-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package.cab
You will now be able to choose en-GB from the speech menu:
Remove Unwanted W10 Apps
Here is the full list of Windows Packages installed in the 1511 Build
Get-AppxProvisionedPackage -Online
| DisplayName | PackageName | ||||||||
| ----------- | ----------- | ||||||||
| Microsoft.3DBuilder | Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Appconnector | Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingFinance | Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingNews | Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingSports | Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingWeather | Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.CommsPhone | Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ConnectivityStore | Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Getstarted | Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Messaging | Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.MicrosoftOfficeHub | Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.MicrosoftSolitaireCollection | Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Office.OneNote | Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Office.Sway | Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.People | Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.SkypeApp | Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c | ||||||||
| Microsoft.Windows.Photos | Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsAlarms | Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsCalculator | Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsCamera | Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe | ||||||||
| microsoft.windowscommunicationsapps | microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsMaps | Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsPhone | Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsSoundRecorder | Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsStore | Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.XboxApp | Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ZuneMusic | Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ZuneVideo | Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe | ||||||||
These are the apps i remove.
remove-AppxProvisionedPackage -package Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c -Online
remove-AppxProvisionedPackage -package Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe -Online
Note: I have since learned that if you do this within your reference image , your sysprep will fail, please see this KB:
Sysprep fails after you remove or update Windows Store apps that include built-in Windows images
Sysprep fails after you remove or update Windows Store apps that include built-in Windows images
https://support.microsoft.com/en-us/kb/2769827
Sysprep has an additional provider that's added in Windows 10 and Windows 8 to clean Appx packages and to generalize the image. The provider works only if the Appx package is a per-user package or an all-user provisioned package.
If an all-user package that's provisioned into the image was manually deprovisioned from the image but not removed for a particular user, the provider will encounter an error while cleaning out this package during sysprep. The provider will also fail if an all-user package that's provisioned into the image was updated by one of the users on this reference computer.
To resolve this issue, remove the package for the user who's running sysprep, and also remove the provisioning. To do this, follow these steps.
Note To prevent Windows Store from updating apps, unplug the Internet connection or disable Automatic Updates in Audit mode before you create the image.
Note The issue does not occur if you are servicing an offline image. In that scenario, the provisioning is automatically cleared for all users. This includes the user who runs the command.
- Per-user package means that the Appx package is installed for a particular user account and is not available for other users of the computer.
- All-user package means that the Appx has been provisioned into the image so that all users who use this image can access the app.
If an all-user package that's provisioned into the image was manually deprovisioned from the image but not removed for a particular user, the provider will encounter an error while cleaning out this package during sysprep. The provider will also fail if an all-user package that's provisioned into the image was updated by one of the users on this reference computer.
Resolution
Note To prevent Windows Store from updating apps, unplug the Internet connection or disable Automatic Updates in Audit mode before you create the image.
- Run the Import-Module Appx PowerShell cmdlet.
- Run Import-Module Dism.
- Run Get-AppxPackage -AllUser | Where PublisherId -eq 8wekyb3d8bbwe | Format-List -Property PackageFullName,PackageUserInformation.
Notes- In the output of this last cmdlet, check the users for whom the package is showing up as Installed. Delete these user accounts from the reference computer, or log on to the computer by using these user accounts. Then, run the cmdlet in step 4 to remove the Appx package.
- This command lists all packages that were published by Microsoft and installed by any user of that reference computer. Because the computer is to be sysprepped, we assume that these user profiles no longer require the package.
- If you have manually provisioned apps that belong to other publishers, run the following command to list them:
Get-AppxPackage -AllUser | Format-List -Property PackageFullName,PackageUserInformation
- Run Remove-AppxPackage -Package
. - Remove the provisioning by running the following cmdlet:
Remove-AppxProvisionedPackage -Online -PackageName
Note The issue does not occur if you are servicing an offline image. In that scenario, the provisioning is automatically cleared for all users. This includes the user who runs the command.
To remove these apps during OSD, follow the guide here:
http://blogs.technet.com/b/mniehaus/archive/2015/11/11/removing-windows-10-in-box-apps-during-a-task-sequence.aspx#comments
The contents of my XML file he talks about is:
Formatted exactly as this:
Microsoft.3DBuilder Microsoft.Appconnector Microsoft.BingSports Microsoft.Getstarted Microsoft.MicrosoftOfficeHub Microsoft.MicrosoftSolitaireCollection Microsoft.Office.OneNote Microsoft.People Microsoft.SkypeApp Microsoft.XboxApp Microsoft.CommsPhone Microsoft.ConnectivityStore microsoft.windowscommunicationsapps Microsoft.ZuneMusic Microsoft.ZuneVideo
Modify Privacy Settings:
There are many privacy settings you will want to turn off for an Enterprise deployment of Windows 10, i wont list them all here but i suggest you read this post to familiarise yourself with what to disable.
Set Support Info:
Running the below commands will set OEM info in windows "System"
# Set Reg Entries
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v Manufacturer /d "My Company" /t REG_SZ /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v SupportHours /d "0830-1730 Mon-Fri" /t REG_SZ /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v SupportPhone /d "02000000000" /t REG_SZ /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v SupportURL /d "mailto:servicedesk@contoso.com" /t REG_SZ /f
Start Menu Customisation:
Customisations to the start menu are stored per user profile, so its best to build your Start Menu the way you like it, then export the configuration. You can either then re-import this during your build task sequence (like i do) or you can set this via Group Policy. If you do set your Start Layout via Group Policy users will not be allowed to pin items or customise it in any way,
Things to note: If you want to include Office and other applications in your base start menu layout, you will need to do this while they are installed. If you don't install these apps on your base image (and its not a good idea too usually) you can export the start menu from a finished and imaged machine with these apps (Capturing start menu layout on a clean machine is not too important)
To export your start menu layout run the following command:
Export-StartLayout -Path C:\StartLayout.XML
To import:
powershell.exe -executionpolicy bypass import-startlayout -layoutpath .\start-layout.xml -mountpath %systemdrive%\
My Start Layout:
Capture:
Once you are happy with your customisations go ahead and run the desktop shortcut to resume the task sequence and capture.
Completion:
Once your WIM is captured to disk you can go ahead and import it into SCCM. I will post another entry shortly with some customisation steps i have in my TS along with BitLocker info.
Courtesy Link : http://apppackagetips.blogspot.co.uk/2015/11/windows-10-task-sequence-bitlocker-steps.html
Courtesy Link : http://apppackagetips.blogspot.co.uk/2015/11/windows-10-task-sequence-bitlocker-steps.html
No comments:
Post a Comment