Windows 10 Image Preparation Discuss the process to prepare for Windows 10 Imaging

Overview General Information Image Core Build Local Account Core App List Updates on the Image UAC Settings Start Menu NEW Start Menu Final Clean Up Deleting Other Apps Prep the Image Capture the Image

Windows 10 General Information Recommend using Windows 10 “Education Version” (EES) Same as enterprise edition, but with a K12 twist Current build – 1607 Next Release – Creator Edition – Build number either 1703 or 1704 Microsoft officially supporting 2 builds Releasing new builds every 6 months They are pushing to allow auto-updates

First Things First Build the Core Image Build image using a VM (HyperV or ESX) Quick image build Allows you to take CheckPoint or SnapShot to recover, if sysprep fails

Local Account Create the initial default local user and ONLY logon as that user (ITAdmin) Join the domain, but always logon locally with the ITAdmin account

Core Apps List Typical Install your core apps using the initial account Either manually install the apps or Try a program called PDQ Deploy - Demo Java 8.x Java 8.x (64-bit) Microsoft Office 2016 Microsoft Silverlight Mozilla FireFox NotePad ++ PhotoStory 3 QuickTime UltraVNC VLC Player Windows Essentials – Movie Maker Adobe Reader Adobe Air Adobe Flash - FireFox Adobe Shockwave Audacity with LAME ClassicShell GIMP Google Chrome Google Earth ITunes

Be sure to add .Net 3.5 Control Panel\All Control Panel Items\Programs and Features – Turn Windows Features On or Off

Updates on Image Make sure to run all windows updates – takes forever… Change settings – Advanced – Give updates for other MS products Defer feature updates – please. (GPO discussed tomorrow)… ** Remove Checkbox for Other MS products before sysprep

Default Apps Settings > System > Default Apps

UAC Settings Change the UAC on the image Will discuss in more detail in next session Up 1 from bottom for App Store support Talk about GPO later (tomorrow) ** Also turn off the firewall

UAC LEVEL 2 - Use for Windows 10 Admin Approval Mode for the Built-in Administrator account = Disabled Allow UIAccess applications to prompt for elevation without using the secure desktop = Disabled Behavior of the elevation prompt for administrators in Admin Approval Mode = Prompt for consent for non-Windows binaries Behavior of the elevation prompt for standard users = Prompt for credentials Detect application installations and prompt for elevation = Enabled Only elevate executables that are signed and validated = Disabled Only elevate UIAccess applications that are installed in secure locations = Enabled Run all administrators in Admin Approval Mode = Enabled Switch to the secure desktop when prompting for elevation = Disabled Virtualize file and registry write failures to per-user locations = Enabled http://www.practicalsolutionsit.com/downloads.html

Start Menu – Looks Like 7 ClassicShell – www.classicshell.net Customize using REGEDIT HKLM\Software\IvoSoft\ClassicStartMenu add a string - MenuStyle_Default - set to one of these - Classic1, Classic2 or Win7 "EnableExit"=dword:00000000 "EnableExplorer"=dword:00000000 "EnableSettings"=dword:00000000 Windows 10 Changes for Image HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization add - DWORD NoLockScreen and set its value to 1 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System add - EnableFirstLogonAnimation DWORD - 0 to disable it.

Reg Add to Set the Menu Style Create a batch with these “REG ADD” commands and run it REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v NoLockScreen /t REG_DWORD /d 1 REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableFirstLogonAnimation /t REG_DWORD /d 0 REG ADD "HKLM\Software\IvoSoft\ClassicStartMenu" /v MenuStyle_Default /t REG_SZ /d Classic1 REG ADD "HKLM\Software\IvoSoft\ClassicStartMenu" /v EnableExit /t REG_DWORD /d 0 REG ADD "HKLM\Software\IvoSoft\ClassicStartMenu" /v EnableExplorer /t REG_DWORD /d 0 REG ADD "HKLM\Software\IvoSoft\ClassicStartMenu" /v EnableSettings /t REG_DWORD /d 0

Start Menu (Tiles) Customize the Start Menu Tiles Remove most of the default tiles Add tiles you want to use as a default “template” Once completed – need to export Open Powershell console as Admin export-startlayout -path c:\download\startw10.xml  import-startlayout –layoutpath c:\download\startw10.xml -mountpath c:\

New Start Menu (Tiles) Creator Edition Build 1703 / 1704 Customize the Start Menu Tiles More Flexibility Sub-Folders with Tiles

Final Clean-Up Remove App Store Apps before sysprep Will cause sysprep to fail if not removed Only need to remove for local (ITAdmin) account Launch PowerShell as current user Get-AppxPackage | Remove-AppxPackge I normally run this 3 times

Deleting All Apps If you wish to remove some or all App Store apps, then use this link as a reference I use 4sysops.com and other specific sites for good Windows information https://4sysops.com/archives/remove-provisioned-built-in-apps-in-windows-10/

Prep the Image Take a SnapShot (ESX) or CheckPoint (HyperV) Remove the App Store apps from the current user (only) Launch PowerShell as the current user (Not Run as Admin) Get-AppxPackage | Remove-AppxPackage Sysprep C:\Windows\System32\Sysprep folder Run Sysprep Will shutdown once finished

Capture the Image PXE boot using the regular boot wim At the first stop, press F8 (command prompt) Go to the D: drive (actually the C: drive) Delete the MININT folder Del d:\minint /s /f /q Rd d:\minint /s /q Go to the Z: drive Change to Z:\tools\x86 Run Imagex… Imagex /capture d:\ z:\captures\W1064C1607032117.wim “W1064C1607”

Practical Solutions IT www. practicalsolutionsit Practical Solutions IT www.practicalsolutionsit.com Email:djones@practicalsolutionsit.com