Microsoft Ignite NZ 25-28 October 2016 SKYCITY, Auckland

Customizing Windows 10: Image Creation Tips and Tricks Michael Niehaus

Traditional Deployment 9/20/2018 How to deploy Windows 10 From Windows 7, 8, 8.1 In-Place Upgrade Traditional Deployment New Devices Provisioning Windows 10: Stay Current © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Requirements for Windows 10 9/20/2018 Requirements for Windows 10 Assessment and Deployment Kit ADK 1607 preferred, although ADK 1511 should work fine Microsoft Deployment Toolkit MDT 2013 Update 2 recommended, new update with bug fixes due any time Windows Server Update Services WSUS 4.0 (Windows Server 2012 or higher) recommended, with KB 3159706 WSUS 3.0 SP2 good enough for monthly patches Configuration Manager ConfigMgr current branch 1606 recommended for Windows 10 1607, although 1602 is OK Key Management Service (KMS) Requires Windows 10 keys, hotfix 3058168 (from 2015) Updated for Windows 10 Enterprise LTSB 2016, hotfixes 3172615 (2012) or 3172614 (2012 R2) – only needed for the new LTSB release or Windows Server 2016 © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Suggestions for Windows 10 9/20/2018 Suggestions for Windows 10 Consider building an image in a disconnected environment Avoids complications caused by background updates Patched media is a convenience Media is typically updated after CBB has been declared, with the latest cumulative update injected Inject yourself (either in the image, or using MDT to inject just-in-time) to ensure the best experience Don’t get carried away Keep the customizations to a minimum – many aren’t required Take advantage of a new image to deliver new apps Best time to deploy new versions of Office and other productivity tools Make sure you have a good browser strategy Edge for modern sites, IE for legacy sites with compatibility issues Enterprise Mode to make going back and forth automatic and easy No recovery images supported Windows rebuilds the OS using WinSXS, with an optional provisioning package © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Universal Windows Apps for Windows 10 9/20/2018 Universal Windows Apps for Windows 10 Understand the key concepts Installation is per-user and does not require admin rights Provisioning is a machine-wide operation that enables automatic per-user installation Apps are automatically updated using the Windows Store and Windows Update Most in-box apps can be removed PowerShell commands to remove installed apps (per-user) and provisioned apps (per-machine) They get put back at the moment when installing a feature update Not worth updating the in-box ones You can get updated versions from the Windows Store for Business, but they are updated so frequently they’ll quickly be out of date. You can add your own Available from the Windows Store for business – get an offline license and installation files Sideload your organization’s own signed apps © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Sysprep changes Previously, Sysprep did not support upgraded Oses 9/20/2018 Sysprep changes Previously, Sysprep did not support upgraded Oses For example, upgrading from Windows 7 to Windows 10, then trying to Sysprep and capture would always fail With Windows 10 1607, Sysprep is now supported on upgraded OSes That doesn’t mean it’s a good idea Still recommend using MDT or similar processes to perform an automated build and capture – drop in a new Windows 10 media and go Really intended to help customers that aren’t sophisticated enough to do this © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo The starting point… Microsoft Ignite 2016 9/20/2018 9:23 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Removing Unwanted Apps 9/20/2018 Removing Unwanted Apps In-box apps can be removed offline Avoids extra time installing them per-user and then uninstalling them per-user Avoids installation of updates for apps that are being removed, which can cause later sysprep failures Can be done “just in time” as part of the imaging process Add a step to the task sequence to remove them PowerShell-based process, run from Windows PE See https://blogs.technet.microsoft.com/mniehaus/2015/11/11/removing-windows-10-in-box-apps-during-a-task-sequence/ for an example script, which requires some minor customization to limit the apps removed See https://blogs.technet.microsoft.com/mniehaus/2016/08/23/windows-10-1607-keeping-apps-from-coming-back-when-deploying-the-feature-update/ or workarounds related to apps coming back after a feature update © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Removing in-box apps Microsoft Ignite 2016 9/20/2018 9:23 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Adding Additional Universal Windows Apps 9/20/2018 Adding Additional Universal Windows Apps Obtain needed installation files Downloaded from the Windows Store for Business, or obtained from a developer Set up app for installation MDT 2013 Update 2 and later understands how to provision apps on the computer, so leverage that capability See https://blogs.technet.microsoft.com/mniehaus/2016/01/11/using-the-windows-store-for-business-with-mdt-2013/ for details, but beware of a couple of small bugs You can build your own PowerShell commands if using ConfigMgr © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Adding new Universal Windows Apps Microsoft Ignite 2016 9/20/2018 9:23 AM Demo Adding new Universal Windows Apps © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Customizing the Start Menu 9/20/2018 Customizing the Start Menu Steps: Manually configure start menu layout Export using PowerShell Export-StartLayout cmdlet Edit manually if necessary to configure a partial layout Import into a new OS or set via GPO/MDM See https://technet.microsoft.com/en-us/itpro/windows/manage/customize-and-export-start-layout Implementing with MDT or ConfigMgr: Take the exported layout and place it on the deployment share or in the toolkit package Add a step into the task sequence to import the layout into a new OS using PowerShell – just needs to be present before users log in Notes: Everyone needs to do this, unless you don’t remove any apps and don’t turn off consumerization features; otherwise, you’ll end up with odd-looking placeholder icons © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Customizing the start menu Microsoft Ignite 2016 9/20/2018 9:23 AM Demo Customizing the start menu © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Customizing the Task Bar 9/20/2018 Customizing the Task Bar Steps: Manually edit a layout XML file, specifying items to append or a complete replacement layout Append to the start layout, if using GPO or MDM Place LayoutModification.xml file at C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml to make it the default for new users See https://technet.microsoft.com/en-us/itpro/windows/manage/configure-windows-10-taskbar and https://msdn.microsoft.com/en-us/library/windows/hardware/mt171092(v=vs.85).aspx for details Implementing with MDT or ConfigMgr: Place the LayoutModification.xml file on the deployment share or in the toolkit package Add a step into the task sequence to copy the file into C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml Notes: For desktop apps, you specify the path to the .lnk file; for Universal Windows Apps, it’s the app ID © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Customizing the task bar Microsoft Ignite 2016 9/20/2018 9:23 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

File type associations 9/20/2018 File type associations Why do you want to configure file type associations? To change default apps, e.g. a different PDF reader or browser Steps: Manually configure default apps as needed Export with Dism /Online /Export-DefaultAppAssociations:file.xml Import into OS image using Dism /Online /Import-DefaultAppAssociations or /Image:<path> /Import-DefaultAppAssociations See https://msdn.microsoft.com/en-us/windows/hardware/commercialize/manufacture/desktop/dism-default-application-association-servicing-command-line-options for more information Implementing with MDT or ConfigMgr: Place the DefaultAssociations.xml file on the deployment share or in the toolkit package Add a step into the task sequence to apply the XML file using DISM /Image:<path> /Import-DefaultAppAssociations:<path> Notes: There have been some bugs that have caused some file associations to be reset with Windows 10, but those should be resolved now © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Configuring file type associations Microsoft Ignite 2016 9/20/2018 9:23 AM Demo Configuring file type associations © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Language Packs Language packs Steps: 9/20/2018 Language Packs Language packs There are multiple pieces needed: Language pack, basic, OCR, handwriting, text-to-speech, speech, and (sometimes) fonts There are also language interface packs, which are more like “tweaks” to an existing, pre-requisite language pack See https://msdn.microsoft.com/en-us/windows/hardware/commercialize/manufacture/desktop/add-language-packs-to-windows for more information Steps: Download all the needed pieces Add to the OS using Dism /Image:<path> /Add-Package Then patch Implementing with MDT or ConfigMgr: MDT handles language packs with Lite Touch wizards, but not the other pieces – no support for installing in order either Use DISM in the task sequence to inject Notes: Feature updates remove language packs; they need to be reinstalled. Also, the system UI language must match the upgrade image. © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

Demo Adding language packs Microsoft Ignite 2016 9/20/2018 9:23 AM © 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Putting it all together 9/20/2018 Putting it all together Assemble all the steps into a single task sequence Remove apps Add apps Configure start menu Configure task bar Configure default apps Add language packs Deploy None of the above steps *require* a custom image – the steps can be done “just in time” as the install.wim is being deployed Sysprep and capture might save some time (especially if you add lots of apps) Again, don’t get carried away with customizations – it’s a lot of work with little value © 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

9/20/2018 9:23 AM © 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.