In this post i will go through the steps i have taken to build my Windows 10 (Build 1511) Reference image. I have Confimgr 2012 R2Sp1 Cu1 and MDT 2013 Update 1 (Integrated)
This post assumes the following:
- You have Windows ADK 10 Installed - http://blogs.technet.com/b/yongrhee/archive/2015/08/11/download-windows-10-assessment-and-deployment-kit-adk.aspx
- You have MDT 2013 Update 1 Installed - https://www.microsoft.com/en-us/download/details.aspx?id=48595
- Follow the steps listed here until step 7 http://deploymentresearch.com/Research/Post/496/Building-a-Windows-10-Reference-Image-using-MDT-2013-Update-1
- Update your ADMX Templates for the 1511 build from https://www.microsoft.com/en-us/download/details.aspx?id=48257
After following Johans steps, go back into your task sequence and add the following steps:
After the step "Apply Local GPO Package" add a step named "Pause" with a run command line of:
Adding the pause step will cause the TS to pause, letting you configure your image as much as you like. To resume the task sequence you would run the "Resume Task Sequence" shortcut that is placed on your desktop.
cscript.exe %SCRIPTROOT%\LTISuspend.wsf
Adding the pause step will cause the TS to pause, letting you configure your image as much as you like. To resume the task sequence you would run the "Resume Task Sequence" shortcut that is placed on your desktop.
Go back to your list of applications and add a new application called "Cleanup Windows Before Sysprep" - your step should look like below:
You can get the script here: https://onedrive.live.com/?id=8563304F134DDCB6%211162216&cid=8563304F134DDCB6&group=0
Adding this step will clean the hard disk of any unnecessary files before capture. especially if your build and capture installs lots of updates.
Add this app as a step in the following location:
( i like to put a restart either side of this)
It is important to ensure that your reference machine does not connect to the internet during capture, depending on your network setup you may have to change your network settings.
Insert a step similar to the following;
Open your VM Console and point your VM to boot off your newly created media in your MDT Boot Folder (x86/x64). If all steps have been followed correctly you should be prompted to choose your Task Sequence, if you get additional prompts first make sure you have set your Bootstrap.ini correctly (if not refer back to Johans guide)
When your task sequence gets to the Pause step you will see this prompt:
The few things i do set during the "Pause" is : Setting language preferences, changing security settings and removing unwanted Windows 10 apps.
Apply Language Pack
To apply language packs offline, first login to your VLC and download the following file ISO:
This download is specific to the 1511 build (November '15)
Extract the downloaded iso (SW_DVD5_Win_10_1511_32-BIT_X64_MultiLang_LangPackAll_LIP_OEM_VL_X20-75632) to a network location.
Perform the command seen in the below screenshot on the machine for each language pack you intend to install (make sure command prompt is elevated):
Once you have installed the language pack you will need to go ahead and add it as default if need be. In my case i wanted to set en-GB (English United Kingdom) as default system wide, including speech. Simply installing the language pack above will not give you all the features you need.
Microsoft have now split the way they manage language packs in an attempt to reduce disk real estate, they now include these items as "Features on Demand". You COULD get these by connecting your Reference VM to the internet, but this is never recommended, as you cant control what other nasties get applied behind the scenes. (See: http://blogs.technet.com/b/mniehaus/archive/2015/11/23/seeing-extra-apps-turn-them-off.aspx )
You can read more about this here: https://msdn.microsoft.com/en-us/library/windows/hardware/mt171094(v=vs.85).aspx
What you will want to do next is log back into your VLC and download the following:
The contents of this file are:
To Enable these features, you will want to perform the following command(s):
(these are for en-GB only)
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Handwriting-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-OCR-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Speech-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-TextToSpeech-en-gb-Package.cab
DISM /Online /Add-Package /PackagePath:Microsoft-Windows-LanguageFeatures-Basic-en-gb-Package.cab
You will now be able to choose en-GB from the speech menu:
Capture:
Once you are happy with your customisations go ahead and run the desktop shortcut to resume the task sequence and capture.
Reference Completion:
Once your WIM is captured to disk you can go ahead and import it into SCCM.
Windows 10 Task Sequence :
I will outline some of the specific steps i perform during my Windows 10 TS. This will not be an in-depth TS guide. If you want specific steps regarding Bitlocker/MBAM please see my detailed guide here:
Set AD Description & Group Membership
To set AD Description and Groups during your TS you will need the following two scripts.
1. Set AD Groups
2. Set AD Description
1. Set AD Groups
wscript.exe adgroup.vbs "Group"
2. Set AD Description
cscript.exe "adcompdesc.vbs" "[%XHWChassisType%] - [%Model%] - [%PrimaryUsername%]" Note: These variables are set earlier in my TS
Start Menu Customisation:
Customisations to the start menu are stored per user profile, so its best to build your Start Menu the way you like it, then export the configuration. You can either then re-import this during your build task sequence (like i do) or you can set this via Group Policy. If you do set your Start Layout via Group Policy users will not be allowed to pin items or customise it in any way,
Things to note: If you want to include Office and other applications in your base start menu layout, you will need to do this while they are installed. If you don't install these apps on your base image (and its not a good idea too usually) you can export the start menu from a finished and imaged machine with these apps (Capturing start menu layout on a clean machine is not too important)
To export your start menu layout run the following command:
Export-StartLayout -Path C:\StartLayout.XML
To import:
powershell.exe -executionpolicy bypass import-startlayout -layoutpath .\start-layout.xml -mountpath %systemdrive%\
My Start Layout:
Export-StartLayout -Path C:\StartLayout.XML
Remove Unwanted W10 Apps
Do not remove any apps during your image capture - see here for why
Here is the full list of Windows Packages installed in the 1511 Build
Get-AppxProvisionedPackage -Online
| DisplayName | PackageName | ||||||||
| ----------- | ----------- | ||||||||
| Microsoft.3DBuilder | Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Appconnector | Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingFinance | Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingNews | Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingSports | Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.BingWeather | Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.CommsPhone | Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ConnectivityStore | Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Getstarted | Microsoft.Getstarted_2.3.7.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Messaging | Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.MicrosoftOfficeHub | Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.MicrosoftSolitaireCollection | Microsoft.MicrosoftSolitaireCollection_3.3.9211.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Office.OneNote | Microsoft.Office.OneNote_2015.6131.10051.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.Office.Sway | Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.People | Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.SkypeApp | Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c | ||||||||
| Microsoft.Windows.Photos | Microsoft.Windows.Photos_2015.1001.17200.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsAlarms | Microsoft.WindowsAlarms_2015.1012.20.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsCalculator | Microsoft.WindowsCalculator_2015.1009.20.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsCamera | Microsoft.WindowsCamera_2015.1071.40.0_neutral_~_8wekyb3d8bbwe | ||||||||
| microsoft.windowscommunicationsapps | microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsMaps | Microsoft.WindowsMaps_4.1509.50911.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsPhone | Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsSoundRecorder | Microsoft.WindowsSoundRecorder_2015.1012.110.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.WindowsStore | Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.XboxApp | Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ZuneMusic | Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe | ||||||||
| Microsoft.ZuneVideo | Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe | ||||||||
These are the apps i remove.
remove-AppxProvisionedPackage -package Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.Messaging_1.10.22012.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.MicrosoftOfficeHub_2015.6306.23501.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.People_2015.1012.106.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.SkypeApp_3.2.1.0_neutral_~_kzf8qxf38zg5c -Online
remove-AppxProvisionedPackage -package Microsoft.WindowsStore_2015.1013.14.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.XboxApp_2015.930.526.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ZuneMusic_2019.6.13251.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ZuneVideo_2019.6.13251.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package microsoft.windowscommunicationsapps_2015.6308.42271.0_neutral_~_8wekyb3d8bbwe -Online
remove-AppxProvisionedPackage -package Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe -Online
To remove these apps during OSD, follow the guide here:
http://blogs.technet.com/b/mniehaus/archive/2015/11/11/removing-windows-10-in-box-apps-during-a-task-sequence.aspx#comments
The contents of my XML file he talks about is:
Formatted exactly as this:
http://blogs.technet.com/b/mniehaus/archive/2015/11/11/removing-windows-10-in-box-apps-during-a-task-sequence.aspx#comments
The contents of my XML file he talks about is:
Formatted exactly as this:
Microsoft.3DBuilder Microsoft.Appconnector Microsoft.BingSports Microsoft.Getstarted Microsoft.MicrosoftOfficeHub Microsoft.MicrosoftSolitaireCollection Microsoft.Office.OneNote Microsoft.People Microsoft.SkypeApp Microsoft.XboxApp Microsoft.CommsPhone Microsoft.ConnectivityStore microsoft.windowscommunicationsapps Microsoft.ZuneMusic Microsoft.ZuneVideo
%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -executionpolicy bypass -file .\RemoveApps.ps1
Set Default App Associations
I set default application associations during build. If you set these via group policy they will be locked and users will not be able to set their own. See herefor more info.
dism /online /Import-DefaultAppAssociations:"DefaultAppAssoc.xml"
This specific file is simply changing the default PDF viewer to Acrobat.
Block Windows 10 Apps Installing
Add this step to your TS to block windows installing store apps as soon as it gets an internet connection, this would undo all your hard work in removing unwanted apps . See here for more info
reg add HKLM\Software\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f
Finish
link from : http://apppackagetips.blogspot.hk/2015/11/building-clean-windows-10-reference.html
No comments:
Post a Comment