Best way to deploy windows 10?

[supps]

Hi all,

 

We were planning to move to Windows 10 during next Academic year, but we have been forced to do this over the summer for our Computing PCs.

 

We have SCCM on latest version, but I haven't been involved with image deployment before.

 

Looking online is a bit of a minefield of the best way to deploy with SCCM. MDT, or create base image or use NTLite. Can anyone recommend any good guides or summary of where to start?

 

I have looked through this forum, but can't find any definitive guide?

 

Thanks,

Scott

[Geoff]

SCCM is best if you have it, MDT if you dont. As you do, the best guides I find is the System Centre Dudes one.

 

https://www.systemcenterdudes.com/sccm-windows-10-deployment/

 

Generally you don't customise an image in SCCM (well you can if you want). Instead you do all your customisation in the task sequence to get the newly imaged machine in the right state.

 

https://www.systemcenterdudes.com/sccm-windows-10-task-sequence/

[sparkeh]

Sccm is best as it gives you the most control over the deployment. Im a big fan of the windows noobs guides https://www.windows-noob.com/forums/topic/13288-step-by-step-guides-system-center-configuration-manager-current-branch-and-technical-preview/

 

I tend to not muck around with the image too much but I do strip out the modern apps beforehand rather than do it at deployment time.

[supps]

Thanks for the help so far. I had looked at these guides before but it looked to simple to be correct! I guess I can use Task Sequence to disable Cortana/Store Apps etc withouth havign to create a image.

 

I will give this a go today.

 

Thanks

[gshaw]

MDT, keep it very clean using the VLSC media and use a script to remove the apps as part of the Task Sequence. When a new version of 10 is released just swap out the .wim file, simples

[djones]

Could you post a screenshot or two of your tasks by any chance?

[DCUK6]

I use MDT with a pause task in

https://blogs.technet.microsoft.com/mniehaus/2009/06/26/mdt-2010-new-feature-3-suspend-and-resume-a-lite-touch-task-sequence/

 

This enables me to install the OS with MDT, pause to install any programs/settings im not deploying through GPO and then continue.

 

I did also have to create a manual image, install win 10 and put into audit mode and install programs, then sysprep.

This was only because i had 2 weeks to do the entire network and didnt have time to figure out shy some machines didnt like the MDT image.

[gshaw]

@djones here's my current one - the "Remove Windows 10 Apps" is a script you can get from here:

 

https://github.com/W4RH4WK/Debloat-Windows-10/blob/master/scripts/remove-default-apps.ps1

 

 

I do things a bit differently in MDT so some steps will look a tad unusual e.g.

 

• I use a custom script to Domain Join as it lets me choose whether to put a machine in local Active Directory or Azure AD
  
• Windows Updates are installed by a separate utility called ABC Update as it worked better during testing
  
• additional steps for custom registry edits and Wi-Fi profiles specific to our network
  
• SMART Notebook only installed for machines matching a specific WMI query based on name and role
  

Edited July 11, 2017 by gshaw

[angrycomputingteacher]

@djones here's my current one - the "Remove Windows 10 Apps" is a script you can get from here:

 

https://github.com/W4RH4WK/Debloat-Windows-10/blob/master/scripts/remove-default-apps.ps1

 

[ATTACH=CONFIG]44452[/ATTACH]

 

I do things a bit differently in MDT so some steps will look a tad unusual e.g.

 

• I use a custom script to Domain Join as it lets me choose whether to put a machine in local Active Directory or Azure AD
  
• Windows Updates are installed by a separate utility called ABC Update as it worked better during testing
  
• additional steps for custom registry edits and Wi-Fi profiles specific to our network
  
• SMART Notebook only installed for machines matching a specific WMI query based on name and role
  

How do you do an AD Domain Join if you don't mind me asking.

[gshaw]

How do you do an AD Domain Join if you don't mind me asking.

I have a custom PowerShell script I used in the previous imaging system I built that checks AD for an existing Computer account and joins with that; if no account exists the machine gets joined as a new Computer