MDT Where are the answers to the Windows PE questions stored?

[Caffeine11]

I am testing WDT. I have got Windows 10 1809 and have created a Windows PE USB stick.

 

When I boot from the USB stick, I get asked a series of questions:

 

On the first screen (Welcome), the keyboard layout is US not UK.

 

On another screen (Locale and Time), the language settings and time zone are all US.

 

I want to see all the screens but I want to change the default answers on some of them. For example, on Locale and Time, I want the language settings and time zone to be UK.

 

Where are these settings stored in MDT?

 

Secondly, when the OS is installed, the window is named "IT Organisation". I presume I can change this to our school name?

[Davit2005]

Right click the deployment share, then click properties then go to rules.

 

Take a copy of the rules and then as an example of mine which sets the locale, keyboard and time zone below just modify existing entries and add the new ones and test.

 

I'd also recommend using an service account with delegated access for joining the computer to the domain rather than using a Domain Admin account.

 

[Default]

SkipLocaleSelection=YES

UILanguage=en-GB

UserLocale=en-GB

KeyboardLocale=0809:00000809

SkipTimeZone=YES

TimeZoneName=GMT Standard Time

[BKGarry]

And then update your deployment share and import the boot files again into WDS

[Caffeine11]

OK. Thank you.

[Warwick_Tech]

Right click the deployment share, then click properties then go to rules.

 

Take a copy of the rules and then as an example of mine which sets the locale, keyboard and time zone below just modify existing entries and add the new ones and test.

 

I'd also recommend using an service account with delegated access for joining the computer to the domain rather than using a Domain Admin account.

 

[Default]

SkipLocaleSelection=YES

UILanguage=en-GB

UserLocale=en-GB

KeyboardLocale=0809:00000809

SkipTimeZone=YES

TimeZoneName=GMT Standard Time

 

I always wondered this one; as the PW is stored in plain text (presumably) what is the minimum rights an account needs to join PC's to the domain?

 

I believe accessing the network shares UN/PW on launch and task sequence permissions are all encrypted, but things like the local admin and this PW are still in plain text -

 

What rights has everyone got for this user?

[Davit2005]

I always wondered this one; as the PW is stored in plain text (presumably) what is the minimum rights an account needs to join PC's to the domain?

 

I believe accessing the network shares UN/PW on launch and task sequence permissions are all encrypted, but things like the local admin and this PW are still in plain text -

 

What rights has everyone got for this user?

 

The best route is to set up a service account and then specify only the needed delegated rights to add computers to a specific OU. Then specify the OU in the answers. Don't be tempted to use a domain admin account as I've seen these compromised.

 

The instructions I found on the www somewhere for the permissions needed.

 

An example of my home MDT setup for joining domain. adjust to suit your domain

 

JoinDomain=test

DomainAdmin=serviceaccount

DomainAdminDomain=test.local

DomainAdminPassword=password

MachineObjectOU=OU=MDT Deployed,DC=test,DC=local

Edited July 13, 2021 by Davit2005