1. Microsoft Ignite NZ
25-28 October 2016
SKYCITY, Auckland

2. Customizing Windows 10: Image Creation Tips and Tricks
Michael Niehaus

3. Traditional Deployment
9/20/2018
How to deploy Windows 10
From Windows 7, 8, 8.1
In-Place Upgrade
Traditional Deployment
New Devices
Provisioning
Windows 10: Stay Current
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

4. Requirements for Windows 10
9/20/2018
Requirements for Windows 10
Assessment and Deployment Kit
ADK 1607 preferred, although ADK 1511 should work fine
Microsoft Deployment Toolkit
MDT 2013 Update 2 recommended, new update with bug fixes due any time
Windows Server Update Services
WSUS 4.0 (Windows Server 2012 or higher) recommended, with KB
WSUS 3.0 SP2 good enough for monthly patches
Configuration Manager
ConfigMgr current branch 1606 recommended for Windows , although 1602 is OK
Key Management Service (KMS)
Requires Windows 10 keys, hotfix (from 2015)
Updated for Windows 10 Enterprise LTSB 2016, hotfixes (2012) or (2012 R2) – only needed for the new LTSB release or Windows Server 2016
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

5. Suggestions for Windows 10
9/20/2018
Suggestions for Windows 10
Consider building an image in a disconnected environment
Avoids complications caused by background updates
Patched media is a convenience
Media is typically updated after CBB has been declared, with the latest cumulative update injected
Inject yourself (either in the image, or using MDT to inject just-in-time) to ensure the best experience
Don’t get carried away
Keep the customizations to a minimum – many aren’t required
Take advantage of a new image to deliver new apps
Best time to deploy new versions of Office and other productivity tools
Make sure you have a good browser strategy
Edge for modern sites, IE for legacy sites with compatibility issues
Enterprise Mode to make going back and forth automatic and easy
No recovery images supported
Windows rebuilds the OS using WinSXS, with an optional provisioning package
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

6. Universal Windows Apps for Windows 10
9/20/2018
Universal Windows Apps for Windows 10
Understand the key concepts
Installation is per-user and does not require admin rights
Provisioning is a machine-wide operation that enables automatic per-user installation
Apps are automatically updated using the Windows Store and Windows Update
Most in-box apps can be removed
PowerShell commands to remove installed apps (per-user) and provisioned apps (per-machine)
They get put back at the moment when installing a feature update
Not worth updating the in-box ones
You can get updated versions from the Windows Store for Business, but they are updated so frequently they’ll quickly be out of date.
You can add your own
Available from the Windows Store for business – get an offline license and installation files
Sideload your organization’s own signed apps
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

7. Sysprep changes Previously, Sysprep did not support upgraded Oses
9/20/2018
Sysprep changes
Previously, Sysprep did not support upgraded Oses
For example, upgrading from Windows 7 to Windows 10, then trying to Sysprep and capture would always fail
With Windows , Sysprep is now supported on upgraded OSes
That doesn’t mean it’s a good idea
Still recommend using MDT or similar processes to perform an automated build and capture – drop in a new Windows 10 media and go
Really intended to help customers that aren’t sophisticated enough to do this
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

8. Demo The starting point… Microsoft Ignite 2016 9/20/2018 9:23 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. Removing Unwanted Apps
9/20/2018
Removing Unwanted Apps
In-box apps can be removed offline
Avoids extra time installing them per-user and then uninstalling them per-user
Avoids installation of updates for apps that are being removed, which can cause later sysprep failures
Can be done “just in time” as part of the imaging process
Add a step to the task sequence to remove them
PowerShell-based process, run from Windows PE
See for an example script, which requires some minor customization to limit the apps removed
See or workarounds related to apps coming back after a feature update
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

10. Demo Removing in-box apps Microsoft Ignite 2016 9/20/2018 9:23 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Adding Additional Universal Windows Apps
9/20/2018
Adding Additional Universal Windows Apps
Obtain needed installation files
Downloaded from the Windows Store for Business, or obtained from a developer
Set up app for installation
MDT 2013 Update 2 and later understands how to provision apps on the computer, so leverage that capability
See for details, but beware of a couple of small bugs
You can build your own PowerShell commands if using ConfigMgr
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

12. Demo Adding new Universal Windows Apps Microsoft Ignite 2016
9/20/2018 9:23 AM
Demo
Adding new Universal Windows Apps
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Customizing the Start Menu
9/20/2018
Customizing the Start Menu
Steps:
Manually configure start menu layout
Export using PowerShell Export-StartLayout cmdlet
Edit manually if necessary to configure a partial layout
Import into a new OS or set via GPO/MDM
See
Implementing with MDT or ConfigMgr:
Take the exported layout and place it on the deployment share or in the toolkit package
Add a step into the task sequence to import the layout into a new OS using PowerShell – just needs to be present before users log in
Notes:
Everyone needs to do this, unless you don’t remove any apps and don’t turn off consumerization features; otherwise, you’ll end up with odd-looking placeholder icons
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

14. Demo Customizing the start menu Microsoft Ignite 2016
9/20/2018 9:23 AM
Demo
Customizing the start menu
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Customizing the Task Bar
9/20/2018
Customizing the Task Bar
Steps:
Manually edit a layout XML file, specifying items to append or a complete replacement layout
Append to the start layout, if using GPO or MDM
Place LayoutModification.xml file at C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml to make it the default for new users
See and for details
Implementing with MDT or ConfigMgr:
Place the LayoutModification.xml file on the deployment share or in the toolkit package
Add a step into the task sequence to copy the file into C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml
Notes:
For desktop apps, you specify the path to the .lnk file; for Universal Windows Apps, it’s the app ID
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

16. Demo Customizing the task bar Microsoft Ignite 2016 9/20/2018 9:23 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. File type associations
9/20/2018
File type associations
Why do you want to configure file type associations?
To change default apps, e.g. a different PDF reader or browser
Steps:
Manually configure default apps as needed
Export with Dism /Online /Export-DefaultAppAssociations:file.xml
Import into OS image using Dism /Online /Import-DefaultAppAssociations or /Image:<path> /Import-DefaultAppAssociations
See for more information
Implementing with MDT or ConfigMgr:
Place the DefaultAssociations.xml file on the deployment share or in the toolkit package
Add a step into the task sequence to apply the XML file using DISM /Image:<path> /Import-DefaultAppAssociations:<path>
Notes:
There have been some bugs that have caused some file associations to be reset with Windows 10, but those should be resolved now
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

18. Demo Configuring file type associations Microsoft Ignite 2016
9/20/2018 9:23 AM
Demo
Configuring file type associations
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

19. Language Packs Language packs Steps:
9/20/2018
Language Packs
Language packs
There are multiple pieces needed: Language pack, basic, OCR, handwriting, text-to-speech, speech, and (sometimes) fonts
There are also language interface packs, which are more like “tweaks” to an existing, pre-requisite language pack
See for more information
Steps:
Download all the needed pieces
Add to the OS using Dism /Image:<path> /Add-Package
Then patch
Implementing with MDT or ConfigMgr:
MDT handles language packs with Lite Touch wizards, but not the other pieces – no support for installing in order either
Use DISM in the task sequence to inject
Notes:
Feature updates remove language packs; they need to be reinstalled. Also, the system UI language must match the upgrade image.
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

20. Demo Adding language packs Microsoft Ignite 2016 9/20/2018 9:23 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

21. Putting it all together
9/20/2018
Putting it all together
Assemble all the steps into a single task sequence
Remove apps
Add apps
Configure start menu
Configure task bar
Configure default apps
Add language packs
Deploy
None of the above steps *require* a custom image – the steps can be done “just in time” as the install.wim is being deployed
Sysprep and capture might save some time (especially if you add lots of apps)
Again, don’t get carried away with customizations – it’s a lot of work with little value
© 2015 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION

22. 9/20/2018 9:23 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.