{"id":960,"date":"2020-09-02T21:21:48","date_gmt":"2020-09-03T02:21:48","guid":{"rendered":"http:\/\/zewwy.ca\/?p=960"},"modified":"2020-10-03T13:48:08","modified_gmt":"2020-10-03T18:48:08","slug":"creating-a-windows-image-for-deployment-without-wds-adm","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2020\/09\/02\/creating-a-windows-image-for-deployment-without-wds-adm\/","title":{"rendered":"Creating a Windows Image for Deployment without WDS\/ADM"},"content":{"rendered":"

<\/span>Creating a Windows Image<\/span><\/h1>\n

<\/span>Intro<\/span><\/h2>\n

If you got the administrative team in your org to handle all the ins and outs of WDS and ADM deployments including using DISM for driver injection for custom images and ALL THAT jazz. Rock on!<\/p>\n

If you find you have only a small amount of OS’s to support and want to keep up with only one image of the latest version with set software without having to learn all the WDS and ADM, and networking with PXE and DHCP and all that fun stuff then this might be a nice alternative for your needs.<\/p>\n

<\/span>Intro<\/span><\/h2>\n

You can technically prep the OS on any laptop or a VM as long as you generalize the image during the final prep stage into OOBE mode. If you want to keep hardware specific drivers and such then do not generalize the image.<\/p>\n

<\/span>Basic Steps<\/span><\/h2>\n

I used a VM and started it as follows:<\/p>\n

    \n
  1. Boot and install Windows 10 (I gave it a bare minimum 40 Gig drive)<\/li>\n
  2. At the OOBE first time boot after install, press CTRL+SHIFT+F3, let the system boot into the admin account using AUDIT mode.<\/li>\n
  3. Install Apps, All Updates, run the community decrapifer<\/a>, clean up the start menu.<\/li>\n
  4. in Sysprep Pick OOBE and shutdown<\/li>\n
  5. Using Linux Live DD drive to any shared storage.<\/li>\n
  6. Use Linux Live to DD image from shared storage to local desktop\/laptop drive and boot, which will boot right into OOBE ready for AD joining or whatever.<\/li>\n<\/ol>\n

    <\/span>Caveats<\/span><\/h2>\n

    *known caveat…<\/p>\n

      \n
    1. Don’t open Bitlocker area while configuring the system in Audit mode<\/a>.<\/li>\n<\/ol>\n

      All good right? Well normally after I dd the image and let the OOBE run, I like to extend the partition space from the initial 40 to the remainder of the local disk, whatever size it happens to be until…<\/p>\n

      \"\"<\/a><\/p>\n

      You might wondering what the big deal is here, now with the existing system, not much, however if I extend the VM’s drive to replicate copying this image over, you will notice the ability to extend the partition is grayed out this is cause the sectors of the partition would not be contiguous, which is not allowed with partitions on a disk… since MS provides no way to nicely move it using Disk Management we have to rely on other tools. In this case I’m going to rely on gparted.<\/p>\n

      You can grab gparted live from here<\/a><\/p>\n

      <\/span>GParted to Move WinRE Partition<\/span><\/h2>\n

      This is the part that sucks the most cause even though it’s easily possible MS made the install wizard place the WinRE partition at the end of the disk (this might be able to be manually configured, but I did the ol, pick disk, click install.<\/p>\n

      Normally I’d have my IODD device with a huge drive attach to write stuff to, but in this case since it’s a VM I’ll add a 1 Gig disk to save the WinRE partition to while moving the rest of the data to the end of the disk.<\/p>\n

      So add drive, then edit VM boot options to force into EUFI menu, then once powered on, upper right click disk icon and mount ISO, once all green dots to indicate they are mounted, boot from CD\/DVD…<\/p>\n

      \"\"<\/a><\/p>\n

      No keymap changes, enter yeah default lanuage, auto login whatever…<\/p>\n

      there it is, the two drives we want to work with, now lets quickly format the 1 gig drive..<\/p>\n

      \"\"<\/a><\/p>\n

      So create the MBT (Device -> create partition table), new partition, all space, FS NTFS, click green check mark.<\/p>\n

      Awesome, as you can see I then mounted that partition and used DD to copy the WinRE partition as a whole…<\/p>\n

      \"\"<\/a><\/p>\n

      I sort of covered up the gparted window but I know \/dev\/sda4 was the WinRE partition based on the size and information.<\/p>\n

      Now for the biggest pain… we have to delete that partition, move the data partition over and then re-create the open space as the same partition we just deleted, and copy the contents back, so that the data partition sectors can be contiguous even though it remains the “3rd” partition.<\/p>\n

      Weird computer science…<\/p>\n

      Anyway let’s do this..<\/p>\n

      Delete the WinRE Parittion, \/dev\/sda4 in my case:<\/p>\n

      \"\"<\/a><\/p>\n

      shift \/dev\/sda3 to end of disk, I selected move\/size and just dragged the partition on the slider all the way to the right, click ok and it should look like this:<\/p>\n

      \"\"<\/a>Now we re-create the \/dev\/sda4 as ntfs and hidden,diag flags:<\/p>\n

      \"\"<\/a><\/p>\n

      *NOTE* This takes a lot of CPU and Disk I\/O as the all the data has to be shifted which is also why the alerts of possible data loss (if there’s any issue with the actual disk). So the time it takes depends on the size of the over data partition, also recommend to only do this after a backup, or some alternative copy is made. In terms of VMware I had this on it’s own VM cloned from another, I avoided a snapshot as it would create a delta v file larger than simply cloning the VM. High CPU and Disk I\/O was noticed during this operation.<\/p>\n

      *Note* Manage flags will be grayed out till the partition is created and applied.<\/p>\n

      Then we copy the contents back…<\/p>\n

      \"\"<\/a><\/p>\n

      Time for the fun part, does windows still boot?<\/p>\n

      Sweet still boots, still in sysprep audit mode, lets quickly check the disk.<\/p>\n

      chkdsk \/f<\/pre>\n
      \"\"<\/a><\/p>\n
      all’s good, and here’s a nice picture to show the data drive at the end of the disk as to be extendable to any machine it’s deployed to:<\/p>\n
      \"\"<\/a><\/p>\n
      I can now remove the 1GB drive, and fix the WinRE now.<\/a><\/p>\n
      <\/span>Fix WinRE<\/span><\/h2>\n
      <\/span>Checking with BCDedit<\/span><\/h3>\n
      bcdedit<\/pre>\n
      <\/p>\n
      <\/span>Checking with reagentc<\/span><\/h3>\n
      reagentc \/info<\/pre>\n
      \"\"<\/a><\/p>\n
      bcdedit \/set {current} recoveryenabled no\r\nbcdedit \/deletevalue {current} recoveryenabled\r\nbcdedit \/deletevalue {current} recoverysequence<\/pre>\n
      Then mount that recovery partition we moved above (part 4)<\/p>\n
      diskpart\r\nselect disk 0\r\nselect part 4\r\nassign letter=r<\/pre>\n
      \"\"<\/a><\/p>\n
      change dir to c:\\windows\\system32\\recovery<\/p>\n
      fix up reagent.xml to:<\/p>\n
      <?<\/span>xml version<\/span>=<\/span>'1.0'<\/span> encoding<\/span>=<\/span>'utf-8'<\/span> standalone<\/span>=<\/span>'yes'<\/span>?><\/span>\r\n<WindowsRE<\/span> version<\/span>=<\/span>\"2.0\"<\/span>><\/span>\r\n\t<WinreBCD<\/span> id<\/span>=<\/span>\"\"<\/span>><\/WinreBCD><\/span>\r\n\t<WinreLocation<\/span> path<\/span>=<\/span>\"\"<\/span> id<\/span>=<\/span>\"0\"<\/span> offset<\/span>=<\/span>\"0\"<\/span>><\/WinreLocation><\/span>\r\n\t<ImageLocation<\/span> path<\/span>=<\/span>\"\"<\/span> id<\/span>=<\/span>\"0\"<\/span> offset<\/span>=<\/span>\"0\"<\/span>><\/ImageLocation><\/span>\r\n\t<PBRImageLocation<\/span> path<\/span>=<\/span>\"\"<\/span> id<\/span>=<\/span>\"0\"<\/span> offset<\/span>=<\/span>\"0\"<\/span> index<\/span>=<\/span>\"0\"<\/span>><\/PBRImageLocation><\/span>\r\n\t<PBRCustomImageLocation<\/span> path<\/span>=<\/span>\"\"<\/span> id<\/span>=<\/span>\"0\"<\/span> offset<\/span>=<\/span>\"0\"<\/span> index<\/span>=<\/span>\"0\"<\/span>><\/PBRCustomImageLocation><\/span>\r\n\t<InstallState<\/span> state<\/span>=<\/span>\"0\"<\/span>><\/InstallState><\/span>\r\n\t<OsInstallAvailable<\/span> state<\/span>=<\/span>\"0\"<\/span>><\/OsInstallAvailable><\/span>\r\n\t<CustomImageAvailable<\/span> state<\/span>=<\/span>\"0\"<\/span>><\/CustomImageAvailable><\/span>\r\n\t<WinREStaged<\/span> state<\/span>=<\/span>\"0\"<\/span>><\/WinREStaged><\/span>\r\n\t<ScheduledOperation<\/span> state<\/span>=<\/span>\"4\"<\/span>><\/ScheduledOperation><\/span>\r\n\t<OperationParam<\/span> path<\/span>=<\/span>\"\"<\/span>><\/OperationParam><\/span>\r\n\t<OsBuildVersion<\/span> path<\/span>=<\/span>\"\"<\/span>><\/OsBuildVersion><\/span>\r\n\t<OemTool<\/span> state<\/span>=<\/span>\"0\"<\/span>><\/OemTool><\/span>\r\n<\/WindowsRE><\/span><\/pre>\n
      Then use reagentc to reset the path:<\/p>\n
      reagentc \/setreimage \/path r:\\recovery\\WindowsRE<\/pre>\n
      This succeeded then<\/p>\n
      reagentc \/enable<\/pre>\n
      and of course error till I read this technet<\/a>… offf<\/p>\n
      huh..<\/p>\n
      reagentc \/enable \/auditmode<\/pre>\n
      Yay that worked..<\/p>\n
      \"\"<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
      Creating a Windows Image Intro If you got the administrative team in your org to handle all the ins and outs of WDS and ADM deployments including using DISM for driver injection for custom images and ALL THAT jazz. Rock on! If you find you have only a small amount of OS’s to support and … <\/p>\n
      Continue reading “Creating a Windows Image for Deployment without WDS\/ADM”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[8],"tags":[297,28],"class_list":["post-960","post","type-post","status-publish","format-standard","hentry","category-server-administration","tag-imaging","tag-windows"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=960"}],"version-history":[{"count":2,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/960\/revisions"}],"predecessor-version":[{"id":990,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/960\/revisions\/990"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}