Home

Windows 10 deployment

59 Conversations

Latest Activity

Custom List Message Item

We are very excited to announce an upcoming opportunity to 'Ask Microsoft Anything' (AMA) about Windows 10 for education!

The AMA will take place on Thursday, August 31st, 2017 from 9:00 a.m. to 10:00 a.m. Pacific Time in the Windows 10 deployment space.

... Read More
1,500 Views
0 Reply

Hi Everyone! I just wrote a new blog post on how I use Microsoft 365 to rebuild my PC in under an hour and a little bit about my workstyle that allows me to do this and would like to share with the community. If you have feedback or questions or ideas on

... Read More
48 Views
0 Reply

There is someone here which already deployed Windows 10 E3 over this licensing model? What are the requirements? 

82 Views
5 Replies

Check it out here WIndows 10 E3 CSP. https://docs.microsoft.com/en-us/windows/deployment/windows-10-enterprise-e3-overview

 

PC OEM requirements for Device Guard and Creden

... Read More

Hi community,

 

we have  the following infrastructure. WDS Server for UEFI and one for BIOS Images. Both have MDT 6.3.8443.1000 and ADK 10.1.15063.0 installed.

 

 

The BIOS WDS Server works just fine. The UEFI one however does not seems to respond correctly, b

... Read More
65 Views
2 Replies
Hi
First of all you don't need 2 wds servers. I expect you are configuring DHCP options to point to each. Remove DHCP options and add an IP helper on the switch to look t ... Read More

Update:

 

This video actually describes how to do reformating of a OS Disk only, but there is one option missing in the "Install Operating System" Task in the MDT 6.3.8443.1000. The picture show, probably an older version of MDT

 

During Refresh scenarios, install to original Disk and PartitionDuring Refresh scenarios, in

... Read More
213 Views
1 Reply

Reminder to the actual problem:

 

This then led to my task finally doing what it is supposed to. The goal was to have a Windows 10 on a Windows 7 machine that has a large d

... Read More

If you haven't checked it out yet, Windows AutoPilot enables you to set up and pre-configure new Windows 10 devices for your organization, right out of the box, without imaging, with no infrastructure to manage. It can also be used to easily reset, repurp

... Read More
323 Views
7 Replies

When I buy a Win 10 device is has to have Win10 Pro on it to use Autopilot?

So when my user buys a Surface laptop (Windows 10 s), I first have to update it, by hand, to Wi

... Read More

@Heather Poulsen @Hayden Smith

At this moment we image our devices "by hand". Intune in place and everything else working fine. The problem we face are the Major updates.

... Read More
What if a company builds their own computers. Would we still be able to take advantage of this service?

I have been doing an Windows 10 in-place upgrade using SCCM and manual installations from a file share. There are some PCs that complete the installation but after the last restart instead of booting Windows 10 they restore back to Windows 7. For others,

... Read More
31 Views
0 Reply

Any chance that the Fall Creators Update will not require a reinstallation of RSAT?  This has been a problem since RTM and is very inconvenient.

45 Views
0 Reply

How can I get an export of the organisation's Windows Store order history?

 

I've looked around and couldn't find anything for PowerShell or other management interface. I can load the web interface just fine at https://educationstore.microsoft.com/en-au/manage/apps-software/apps

... Read More
41 Views
0 Reply

I have SCCM 1702 with Win10 ENT 1607. I have done lot of work to fully customize and automatize this enviroment. Now everything works and everyone is happy.
 
If I change 1607 CBB to 1703 CB in my SCCM OSD Wipe-and-Load deployment, this things will break/lo

... Read More
103 Views
0 Reply

We have about 1600 student laptops in the school that we usually reimage during the summer. We are looking for the most effective method to deploy images (that include Windows, Office 365, security software, printer configurations, etc.) to the laptops. W

... Read More
314 Views
6 Replies

I also work in a school district and we had SCCM, it broke and we chose not to fix it or upgrade.

We have used Ghost, Fog, SCCM and now MDT. I am still getting the hang of

... Read More

SCCM is another option. or SCCM + MDT

 

Deploy Windows 10 with SCCM or MDT

Deploying Windows 10 with SCCM MVA course

 

Does this help you out? I work for an educational instit

... Read More
a good starting place would be the Microsoft Deployment Toolkit www.microsoft.com/mdt

The Microsoft Deployment Toolkit (MDT) provides a unified collection of tools, proces... Read More

is it possible to upgrade to windows 10 enterprise  from  windows 7 professional ?

160 Views
2 Replies
Google is your friend: https://docs.microsoft.com/en-us/windows/deployment/upgrade/windows-10-upgrade-paths Bottom line: It's supported, whether YOU can do it depends on ... Read More

We have over 4k windows 7 computers to upgrade by January '18. What is the maximum number of upgrades that a single MDT server can handle (aside from hardware limitations - assume a high end and 10g connected server) at once? Also, we're not going to use

... Read More
206 Views
2 Replies

Hi Todd,
this computer are in same location or distributed in various locations?

If these deployments are on same location and you are using MDT with multicasting is possib

... Read More

Something went wrong

I'm using SCCM 5.00.8498.1700 to deploy windows 10 1703 to a domain.
Each deployment at first logon says "something went wrong".
After that I can click try again, or cancel and next it appears to do an update check.

I understand this migh

... Read More
346 Views
2 Replies

We are investigating that issue.  It appears with some UAC policies applied, OOBE gets tripped up when trying to prompt for elevation when there's no way for a user to re

... Read More
56 Views
0 Reply

Is there a trick since 1511 to apply the start menu layout?

I cannot for the life of me get a customized StartLayout.xml file to work.

332 Views
7 Replies

You can use my xml (using throw gpo)

<?xml version="1.0" encoding="utf-8"?>
<LayoutModificationTemplate
    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification

... Read More

One thing that I had to fiddle with were the scemas included in the .xml found in the <LayoutModificationTemplate> tag. The instructions on TechNet provided a good framew

... Read More

Are you using provisioning packages?

I am new to WDS, MDT in a company.

 

I created deployment shares and debugging them was very hard without asking the senior guys.

 

Is there a best practice, especiallz on finding out which part are missing in Bootstrap.ini, unattanded.xml, task sequence, rig

... Read More
213 Views
5 Replies
I actually came across a link that is priceless when Debugging MDT:

https://keithga.wordpress.com/2014/10/24/video-mdt-2013-log-files-basics-bdd-log-and-smsts-log/
Read More
Linking shares and syncing them also does not do what one would expect. Comes down to the same point, no Debugging help, just figuring out by yourself that the bootstrap.... Read More

That's a rather broad question :-)  We do provide a lot of docs to help at https://docs.microsoft.com/en-us/windows/deployment/index, including step-by-step guidance.  Th

... Read More

 

I would like to ask a question about the deployment process.

 

My organization is still struggling to come to grips with how best to deploy Windows 10.

 

We are an educational institution, so you may find 40 or more gigabytes worth of additional applications

... Read More
809 Views
18 Replies
You may want to check out this blog post to consider the benefits of thick images.
https://svenaelterman.wordpress.com/2017/04/27/why-i-use-thick-images-for-lab-deployment/ Read More

Also an education institution. My reference image is a modified stock image, only remove unwanted UWP apps, and add required components. All of the magic is done in the S

... Read More

I'm in the same situation, educational institution that requires a lot of specialized applications installed (Geography and Math apps are some of the largest).

 

In my case

... Read More

This is a tough one.

 

Ideally, you would try to minimize the payload on every machine by only deploying what is needed. You could look into something like Software Center

... Read More

Is there a general best practice around what a base image / install should contain:

 

ours typically consistent of:

Wim: Windows + language packs + virusscanner

in deployment the following are added:

office 

adobe reader

c+ redists

management agents, sccm, mbam

fe

... Read More
265 Views
3 Replies
I would not include the virus scanner in the base because a) it will slow down the rest of the process and b) it needs updating too frequently and c) an enterprise AV lik... Read More

Is it possible to disable the store on enterprise edition? We have generic logins on computers that are shared with multiple employees and wish to prevent staff from signing into the store and downloading app. 

203 Views
8 Replies
Disabling the Windows Store using the user setting still allows app updates; the computer setting typically disables app updates altogether.
if I "turn off store", will build in apps receive updates?
I believe it only works in Enterprise.

Does this only work in Enterprise edition or will it work across all versions? Also does this work on administrator account or only user level account?

we have a similar setting in the user area, however, since you've mentioned generic logins, you'd probably want to do that on the computer level.

I have been unsuccesfull at finding a work around for the removal of Get Help and Mixed Reality Portal apps from 1703 Enterprise.  Is there a way to remove or hide these apps from the start menu?

1,508 Views
3 Replies
If you are removing the app in an image, then you would uninstall and deprovision the apps using PowerShell. If the system is already deployed, then you would have to do ... Read More

How will organizations calculate semi-annual channel (broad) milestones, the formerly known "current branch for business" deployment milestones for Windows 10? 

 

We've heard previously from Microsoft that organizations have 18 months before they have to pe

... Read More
328 Views
4 Replies

Semi-Annual Channel releases are serviced for 18 months from the date of release.  So for example, Windows 10 1703 was released on April 11th; it will be serviced through

... Read More

Hello

I asked the same question in French MPN yammer, and the following milestones have been validated :

a) T0 : Sept 2017 : Windows 10 1709 released in Pilot version (ex-C

... Read More

Is there a best practice to set default wallpapers and lock screen backgrounds to deal with corporate branding?

 

There seems to be lots of different methods with a combination of scripts/Group Policy settings. Is there any plans to simplify how to deal wit

... Read More
438 Views
7 Replies

It seems like provisioning packages (especially once they get the kinks worked out) would work for this: Provisioning Packages (advanced setup, not basic) are the way to

... Read More

Here's our batch file we deploy as an application through SCCM. img100.jpg should be your custom image and in the same directory as the batch file. This overwrites the de

... Read More

I am using GPO for these tasks, but you need to decide where to place the images, if it is on network, you will run in problems if the machine is offline, e.g. screensave

... Read More

We have had success with using Group Policy to force a specific lock screen for our users. The image file is put on the computer with a setup script that we've been runni

... Read More

1.  I deploy Windows 10 enterprise in a lab environment where hundreds of unique domain users are logging in and using the computers every monthy.  We've had a problem where after a few weeks the Start Menu (and cortana) will become unresponsive, leaving

... Read More
1,326 Views
10 Replies

UPDATE - WORKAROUND:
Adding these lines to the SetupComplete script for Sysprep fixed the CopyProfile issues for us in 1703:

Add these to:  %WINDIR%\Setup\Scripts\SetupComp

... Read More

We had the same experience on Windows 10 machines you describe in #1. We also use Office 365 and download Office 2016 from the portal. We found Uninstalling Office 2016 a

... Read More
You can still use CopyProfile, but it's not required if all you want is a custom start menu layout - you can import that using the PowerShell "Import-StartLayout" command... Read More
Is there a way to use copy profile and have start menu customizations both work creating a W10 image?

1.  We have addressed a few issues in early Windows 10 releases like this, but this shouldn't be happening any more.  This can also happen with older antivirus software p

... Read More

Is there a way to only show GPOs that are relivant to your version of Windows 10? For example, is there a way to hide Enterprise level GPOs on a Pro system? This would prevent confusion as to which policies can be implemented or not.  

Read More
102 Views
0 Reply

When will Microsoft remove the bloat (Minecraft, Xbox, Candy Crush etc.) from the Windows Enterprise SKU? 

 

An approach like this is a real value proposition to organisations as every time we look to upgrade to a new version of Windows, many a hour is spen

... Read More
223 Views
0 Reply

I have 2 config questions for inplace upgrades

1. How can I go about setting up the Start menu just for layout of pinned apps? Keeping in mind that I want this to be a one time setting and still allow users to modify thier own start menu after.

2. How do i

... Read More
180 Views
2 Replies

1.  You can import a start menu layout XML file into the default user profile.  See the TechNet docs on Import-StartLayout and Export-StartLayout.  See https://docs.microsoft.com/en-us/windows/configuration/customize-and-export-start-layout

... Read More

Are there any recommandation to update Onedrive on your reference image ? Is it safe to just replace the exe with a newer version ? 

102 Views
0 Reply

Great to see some familiar faces up there. Here is my first question.

 

In the scenario where an Enterprise wishes to disable the Windows Store on Windows 10 (1607), how does Microsoft recommend their customers to keep the built-in apps updated without open

... Read More
313 Views
2 Replies
Hey Dan - so, in 8.1 we made a change such that if you disabled the store for users rather than for computers then you'd still get updates. It may be the case that in-box... Read More
How would you optimize your code for Mobile
170 Views
6 Replies
well as we know microsoft mobile is different from desktop applications so you have to be careful with the battery life and everything else so what implementations would ... Read More
Part of me wants to just post the unhelpful response, which is "write less of it, because less code runs faster". That part won.

But then another part of me decided it wou... Read More
Could you be more specific?

Is it possible to reinstall apps removed during OSD task sequence? Windows Store is not available.

164 Views
5 Replies
One method to do that would be using PowerShell cmdlet (like Add-AppxPackage). You will need the Appx package for that. That can be obtained through Microsoft Store for B... Read More
Yes. For example Windows Photos
Do you mean UWP apps ? (apps that are typically installed through the store)

When deploying Windows 10 Upgrade as a task sequence, What is an easy way to scan a set of computers for compatibility before a task sequence upgrade deployment? The error codes listed here are a lot to sort through https://docs.microsoft.com/en-us/windows/deployment/upgrade/resolve-windows-10-upgrade-errors#extend-codes

Read More
118 Views
5 Replies

You can use Upgrade Readiness to scan your computers prior to upgrade: https://docs.microsoft.com/en-us/windows/deployment/upgrade/upgrade-readiness-get-started 

 


Read More

Hello,

 

What would be the best tools or methods to deploy Windows 10 in classified enviorment? Hardware refresh cycle coming soon. No SCCM.

 

Thanks,

126 Views
2 Replies

When you say classified, do you mean disconnected from the internet?

 

Generally, we offer 2 solutions - 

1. SCCM

2. MDT

 

There are additional deployment tools you can r

... Read More

It's 10:00 a.m. and our Windows 10 deployment AMA has come to a close. Thank to all who joined us today! We will put together a summary of what was covered during the AMA and share it here.

We hope you will continue ask questions, share tips with each oth

... Read More
114 Views
0 Reply

We are looking at using the (Private) Store for Education in a domain environment. We can make only the private store available via group policy, but opening the Store prompts for a login even when logged into the computer using domain credentials.

Is it p

... Read More
101 Views
2 Replies

The private store using Azure Active Directory accounts.  Typically if your accounts are synced between AD and AAD, it should be possible to do this without logging in ag

... Read More

Hi, is there any way to run a script to remove provisioned apps that reinstall after an upgrade from 1607 to 1703 when using SCCM servicing plans to do the upgrade?  If not, what is the best way to do this?  I have read Michael Niehaus blog posts and have

... Read More
243 Views
1 Reply

What is the recomended process to ensure both the TPM and Bitlocker keys are backed up. I know AD backup was recently disabled for TPM keys in windows 10. MBAM requires a licensed SQL database, which isn't ideal.

Is there a process to do this as part of th

... Read More
139 Views
3 Replies
If you are deploying Windows 10 1607, the TPM owner password does not need to be backed up. The TPM owner password allowed the bearer of the password to take ownership. I... Read More

I am on a 111ish kb a sec rurl connection and when researching deployment incintives I stumbled across one beginning June 29th, something to the effect of cdnc or dncm where w can enter our MPNID code into the deployment image to recieve credits for each

... Read More
132 Views
3 Replies

Assuming two releases per year (e.g., xx03 and xx09), is it possible to deploy one release per year to Windows 10 Enterprise via WSUS? (i.e., always deploy the xx03 version directly without having to deploy xx09 first)

Thank you.

219 Views
6 Replies

As I read the original poster's question, I assumed one of the reasons he was asking was because deployment velocity could be an issue for him?

 

I would suggest looking at

... Read More
As long as you are fast enough to test and deploy everything in the 6 month you have until you run out of support, technically this will work, but I would not recommend t... Read More

yes, you could just approve the Windows 10 Enterprise Edition Feature Update you want to install via WSUS.  Each release is supported for 18 months, so make sure you give

... Read More
Best Response

Do the new cumulative nonsecurity updates arrive on "D week," or the last Tuesday of the month? Is it a fixed schedule for their arrival each month? Are they test releases or should they just be deployed as completed products? How do you want organization

... Read More
118 Views
1 Reply

As we announced in a blog (https://blogs.technet.microsoft.com/windowsitpro/2017/04/24/new-update-options-for-windows-10-1703/), the cumulative updates with new non-secur

... Read More
Best Response

In the scenario where an Enterprise wishes to disable the Windows Store on Windows 10 (1607), how does Microsoft recommend their customers to keep the built-in apps updated without opening the floodgates of patches and updates from Windows Update.

 

 

------

... Read More
107 Views
0 Reply

What are your tips / best practices, if we want either to update a device's firmware (e.g. surface pro, book) or to simply change bios setting (even switch from secure boot off to on) WITHOUT any manual step ?

Even your SEMM (for Surface models) does not e

... Read More
107 Views
1 Reply
You need to go through a manual process once, to enable the device to be centrally managed. After that point, it should be possible to update firmware and settings quietl... Read More

Feel free to "Start a new conversation" with your application compatibility questions as well.

63 Views
0 Reply

Why does Edge keep reclaiming the PDF file association from Adobe Acrobat Reader DC?  It happens right after Acrobat Reader is installed (as part of the task sequence).  I can manually change it back to Acrobat Reader, but whenever an update to Acrobat Re

... Read More
167 Views
1 Reply

I would recommend posting that as feedback on the feedback hub.

I'm not aware of a specific issue, but there are various reasons for this happening. Usually, this behavio

... Read More

Is it possible to create a restore point before the in-place upgrade to allow roll back, if necessary?

91 Views
4 Replies
Are their any plans to let enterprises control the rollback and automatic cleanup threshold?
Windows 10 automatically does this before each Feature Update, and you have 10 days to rollback to the previous Feature Update version.

As someone who hasn't bothered keeping up with best practices or new technology, what is the recommended way to deploy Windows 10 in a company? (That also doesn't require licensing to use)

 

Currently using MDT2013 via WDS with Windows 7.

 

 

Read More
154 Views
2 Replies
Without licensing a product, you would likely stick with MDT and WDS. Though you would want to consider the scale at which you will be deploying at, and then consider a m... Read More

 We set up public computers for use in a library while giving patrons access to administrator rights like installing their own programs. Is it possible to disable Windows Update but allow the Windows Store to still function?

138 Views
6 Replies

Out of curiosity, why would you want to give the public admin rights on public devices? How can you possibly secure that?

 

First things first, if you give everyone admin

... Read More
Using policies, yes. You need to allow access to the Windows Update servers in order to access the store apps themselves, since the app files are located on WU. But there... Read More

Any plans for this?  It'd be nice to get away from removing these with a script during the image process.  For those that weren't removed, it makes it difficult after the fact.  I'd like to specify which default ones are allowed and which aren't (Weather

... Read More
235 Views
1 Reply

Remember that there are two sets of apps:  Those provisioned into the OS (e.g. Mail) and those that are pushed down from the Windows Store (e.g. Twitter or Candy Crush).

... Read More

As Microsoft hasn't settled on their environment yet, Intune, MDM, Dashboards, O365 integration, legacy deployment tools... we havent spent too much time paying attention to the everchanging envionrment.

 

What we want to see is a much more mature and obvio

... Read More
100 Views
2 Replies

Intune continues to add a lot of features around this.  For example, the new Intune for Education tries to do this for the things that schools care about.  And Office 365

... Read More