MDT to create GOLD image.

[kennysarmy]

So I think I've now finished my group policy testing part of the Windows 10 deployment and I'm now switching back to look at deployment.

 

I've followed this guide before:

https://blogs.technet.microsoft.com/askpfeplat/2014/08/04/mdt-2013-part-i-mdt-configuration-capture-a-windows-server-2012-r2-base-os-image/

 

But in it it talks about not joining the PC to the domain before running SYSPREP.

 

So basically, import the OS media ( which I've customized to remove some of the build in APPS from the education version)

Create a task sequence to capture the image (which I've done)

 

It then talks about "build your base OS and customize it as desired".

 

So I've used MDT to install Windows 10 to a test virtual machine.

 

I'd then like to join this PC to my domain to install software that I want to be on the image....but the instructions I'm following say: "I did NOT join a domain – I left the system in a workgroup otherwise, later on, my capture would fail"

 

?

 

So do I have to install any software whilst the PC is off the network?

 

I'm talking about things like

 

Adobe CS3

Autograph

Corel Draw

Google Earth

etc

[altecsole]

It's not a good idea to join a domain.

 

You could map a drive to your deployment share and install software, or install from a portable hard drive? Or just deploy your software later via Group Policy, or whatever other method you use?

[SHimmer45]

i install certain bits of software in my image before capturing like Office and a couple of core applications, i just navigate to the share on my server where the install media is and authenticate (using a domain account) and install as needed.

 

other options would be GPO or adding applications as part of the deployment process in MDT (using selection profile would spring to mind its not something i have used to install applications with)

 

In my experience adobe CS products dont like the sysprep process much anyway?

[KK20]

I don't let my golden sample join the domain - I VPN into the system and open a direct share to whatever needs installing just when im preparing my golden sample (removing the share afterwards).

[sted]

i dont think if you removed apps from windows 10 you can sysprep it you either need to edit the wim you start with to remove them so they never existed in the 1st place on your gold machine or leave them in and script the removal as part of the deployment process

[dry]

i dont think if you removed apps from windows 10 you can sysprep it you either need to edit the wim you start with to remove them so they never existed in the 1st place on your gold machine or leave them in and script the removal as part of the deployment process

I found a Powershell script that successfully removed the majority of in-built Windows 10 apps... annoyingly I haven't got a link to hand. It worked and I successfully captured an image after app removal (using SCCM admittedly)

[fiza]

I found a Powershell script that successfully removed the majority of in-built Windows 10 apps... annoyingly I haven't got a link to hand. It worked and I successfully captured an image after app removal (using SCCM admittedly)

 

Would be interested in this script if you can find it.

[SHimmer45]

this might be useful https://support.microsoft.com/en-gb/kb/2769827

[altecsole]

 

In my experience adobe CS products dont like the sysprep process much anyway?

 

We deploy CS3 in the SCCM Task Sequence.

[Arthur]

Would be interested in this script if you can find it.

It's probably either of these two scripts.

 

https://blogs.technet.microsoft.com/mniehaus/2015/11/11/removing-windows-10-in-box-apps-during-a-task-sequence/

http://www.scconfigmgr.com/2016/03/01/remove-built-in-apps-when-creating-a-windows-10-reference-image/

 

Edit. The script @kennysarmy posted below is the one I created here...

 

www.edugeek.net/forums/windows-10/165029-how-get-rid-candy-crush-soda-saga-other-windows-10-start-menu-junk-good-3.html#post1523073

Edited December 7, 2016 by Arthur

[Arthur]

I'm talking about things like

 

Adobe CS3

Autograph

Corel Draw

Google Earth

etc

All of those programs can be added as Applications in MDT so that they install automatically post-image deployment.

 

With CS3 this is the command-line you need to use...

 

Setup.exe --mode=Silent --skipProcessCheck=1 --deploymentFile="deployment\install.xml"

 

 

install.xml

  en_US
  \\Server\Software$\Adobe Creative Suite 3 Design Premium\



  
  
     install
  

  
  
     install
  

  
  
     install
  

  
  
     install
  

  
  
     install
  

  
  
     install
  

  
  
     install
  

  
  
     install
  

 

uninstall.xml

  en_US



  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

  
  
     remove
  

[kennysarmy]

i dont think if you removed apps from windows 10 you can sysprep it you either need to edit the wim you start with to remove them so they never existed in the 1st place on your gold machine or leave them in and script the removal as part of the deployment process

 

Well my Capture Task Sequence (sysprep) seems to be working OK - as we speak it's at 24% create WIM !

[kennysarmy]

Would be interested in this script if you can find it.

 

I used this:

 

#Requires –Version 5.0

#Requires -RunAsAdministrator

#Requires –Modules Dism

 

# Get script directory

if ($myInvocation.MyCommand.CommandType -ne [system.Management.Automation.CommandTypes]::Script) {

$ScriptDir = [system.IO.Path]::GetDirectoryName($myInvocation.MyCommand.Definition)

} else {

$ScriptDir = [system.IO.Path]::GetDirectoryName($psISE.CurrentFile.FullPath)

}

Set-Location "$ScriptDir"

 

# Create mount folder if it doesn't exist

if (!(Test-Path -path "$ScriptDir\Mount")) {

New-Item "$ScriptDir\Mount" -Type Directory -Force | Out-Null

}

 

Get-WindowsImage -ImagePath "$ScriptDir\install.wim" -ErrorAction Stop | ForEach-Object {

 

# Mount image(s)

"{0} {1} {2}" -f "Mounting image", $($_.ImageIndex), "`n"

Mount-WindowsImage -Path "$ScriptDir\Mount" -ErrorAction Stop -Index $_.ImageIndex -ImagePath $_.ImagePath | Out-Null

 

# Get a list of all apps

$AppArrayList = Get-AppxProvisionedPackage -Path "$ScriptDir\Mount" | Select-Object -Property DisplayName,PackageName | Sort-Object -Property DisplayName

 

# Loop through the list of apps

ForEach ($App in $AppArrayList) {

 

# Exclude essential Windows apps

if (($App.DisplayName -in "Microsoft.WindowsCalculator","Microsoft.WindowsStore","Microsoft.Appconnector","Microsoft.WindowsSoundRecorder")) {

Write-Output -InputObject "Skipping: $($App.DisplayName)"

}

# Remove everything else

else {

$AppProvisioningPackageName = Get-AppxProvisionedPackage -Path "$ScriptDir\Mount" | Where-Object { $_.DisplayName -like $App.DisplayName } | Select-Object -ExpandProperty PackageName

 

# Attempt to remove AppxProvisioningPackage

try {

Write-Output -InputObject "Removing: $AppProvisioningPackageName"

Remove-AppxProvisionedPackage -PackageName $AppProvisioningPackageName -Path "$ScriptDir\Mount" -ErrorAction Stop | Out-Null

}

catch [system.Exception] {

Write-Warning -Message $_.Exception.Message

}

} # Else

} # ForEach

 

#region Customise Default User Profile

Write-Output -InputObject "`nCustomising the default user profile"

REG LOAD "HKLM\_USER" "$ScriptDir\Mount\Users\Default\NTUSER.DAT" | Out-Null

REG LOAD "HKLM\_SOFTWARE" "$ScriptDir\Mount\Windows\System32\config\SOFTWARE" | Out-Null

 

& REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v LaunchTo /d 1 /t REG_DWORD /f

& REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Search" /v BingSearchEnabled /d 0 /t REG_DWORD /f

& REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Search" /v SearchboxTaskbarMode /d 1 /t REG_DWORD /f

& REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsConsumerFeatures /d 1 /t REG_DWORD /f

 

REG UNLOAD "HKLM\_USER" | Out-Null

REG UNLOAD "HKLM\_SOFTWARE" | Out-Null

#endregion

 

"{0} {1}" -f "`nUnmounting image", $($_.ImageIndex)

Get-WindowsImage -Mounted | Dismount-WindowsImage -Save -ErrorAction Stop | Out-Null

 

} # Get-WindowsImage