Recommended guide for Windows 10 image creation (from scratch) ?



  • I have searched both these forums and the wider internet, but haven’t really come up with much on this topic, other than maybe this:

    http://www.tenforums.com/tutorials/3020-windows-10-image-customize-audit-mode-sysprep.html

    (I suspect my google search terms are not that good- there has got to be plenty of people out there that have already dealt with this?)

    Basically, I’d like to start work on a new standard operating environment image for our organisation. Would be based around Windows 10 Enterprise x64, and activate against our KMS server. Obviously, would be using FOG to capture / deploy the image :-)

    Last time I created an image from scratch was for Windows 7 (our currently in-production SOE). So I have a little experience with sysprep, answer files etc.

    I guess I am being lazy and hoping there is a good step-by-step guide to preparing a Windows 10 SOE image already!

    Suggestions / advise much appreciated. Thanks



  • @MRCUR said in Recommended guide for Windows 10 image creation (from scratch) ?:

    @x23piracy Are you keeping all 3 of the “store” apps? “ConnectivityStore”, “StorePurchasesApp” & “WindowsStore”?

    I can’t find a clear answer on what of those three (besides “WindowsStore”) is required to make the store functional if we decide to enable it in the future. I’ve also seen it noted that “DesktopAppInstaller” may be needed for some apps to be installed through the store.

    Since i use WILDCARDstoreWILDCARD i think yes because all of that apps cover the word “store”


  • Testers

    @x23piracy Are you keeping all 3 of the “store” apps? “ConnectivityStore”, “StorePurchasesApp” & “WindowsStore”?

    I can’t find a clear answer on what of those three (besides “WindowsStore”) is required to make the store functional if we decide to enable it in the future. I’ve also seen it noted that “DesktopAppInstaller” may be needed for some apps to be installed through the store.


  • Testers

    @Scott-Adams Computer Config - Admin Templates - Windows Components - Store - “Disable all apps from Windows Store”. If you enable this, all “modern” apps plus the store will be disabled.

    You must be using Enterprise or Education editions to use this (I still don’t know what the difference is between Ent & EDU, so we deploy Ent at our district).



  • @MRCUR What is the group policy setting? Could be extremely beneficial to us in the education sector.


  • Moderator

    @Scott-Adams My script essentially is the same as your except I have an array of applications that I look through and remove but they heart of the script does the same as your script does. The only difference is I’m not doing it in audit mode (if that matters).


  • Testers

    @george1421 Interesting & good to know. We’re still actively deploying build 1511 and just starting to test 1607 so we haven’t seen any issues with WSUS patching 1511 so far.


  • Moderator

    @MRCUR said in Recommended guide for Windows 10 image creation (from scratch) ?:

    @george1421 If you use WSUS then updates will not force themselves on the machines unless you approve them. The “Windows Update for Business” stuff only applies to non-WSUS deployments where you’re controlling Windows Update only with group policy and no WSUS.

    FWIW: There are documented “bugs” with CBB 1607 where windows updates will hang applying them. This happens with images being built in MDT as well as images already in production. The late September cume update kb3193494 as well as setting the DeliveryOptimization registry key fixed the MDT / WSUS deployment issues with image creation. I suspect that kb3193494 will also address the 1607 systems in the wild too, but we don’t have any as of now. Which will be interesting since wsus is broken so the only way to deploy that update is via some alternate methods.


  • Testers

    @adukes40 I’ll just mention that you can disable the Store and all “modern” apps with a single group policy setting. You may not need to go the drastic route of deploying LTSB if your primary concern is access to the Store & modern apps.


  • Testers

    @george1421 If you use WSUS then updates will not force themselves on the machines unless you approve them. The “Windows Update for Business” stuff only applies to non-WSUS deployments where you’re controlling Windows Update only with group policy and no WSUS.



  • Not sure why, but the post removed my asterisks. There should be asterisks enclosing 3dbuilder and windowsalarms for the Get-appxpackage portions.



  • @george1421 I’m doing it from audit mode, so there is only the default administrator account at that time.

    I uninstall the user app and the provisioned app using a powershell script. An example of my script is:

    Get-appxpackage *3dbuilder* | Remove-AppxPackage
    Get-appxprovisionedpackage –online | where-object {$_.packagename –like "*3dbuilder*"} | remove-appxprovisionedpackage –online
    Get-appxpackage *windowsalarms* | Remove-AppxPackage
    Get-appxprovisionedpackage –online | where-object {$_.packagename –like "*windowsalarms*"} | remove-appxprovisionedpackage –online
    

    Tom Elliott – Modded to use code format. Asterisks italicize the font in MD language.


  • Moderator

    @adukes40 We went with LTSB for a few reasons, not having the consumer apps was one, the other was the longer refresh cycle. CBB will force an update even if you mark it to delay the upgrade. The force update will be 6 months after the current release was released. We have to verify each of our core applications work before we can release an new OS and twice a year is a little much OS thrashing. As soon as we would get one version tested and approved we would have to start on the next release. That is a bit crazy.

    [edit] FWIW: I was just able to get CBB 1607 to create cleanly with mdt and windows updates after a bit of hacking about. The late sept 1607 cume update and setting the delivery optimization to 100d fixed the wsus updates getting stuck issue.



  • @george1421 thats good to hear, I was thinking about using LTSB instead of Education, because of its simplicity. Don’t have to worry about the apps, or store, and all that mess.


  • Moderator

    @adukes40 Only in the dev lab. We are not quite ready to roll it out to the organization. But it does work in the dev labs. We are still fine tuning the GPOs to get them to work like we want them.



  • do you use it, George?


  • Moderator

    @adukes40 Yes. I suspect the 2016 one should be in the works soon. I think 2015 LTSB dropped in Nov of 2015.

    But right now CBB 1607 has issues with WSUS updates not applying, so I suspect they are trying to nail that one down first. (edit: Actually I just found an article that says LTSB 2016 will be released on Oct 1 [today]. Its unclear if that date is still valid or not).



  • Anyone played with the LTSB version of Win10 in their environment?



  • Hi,

    @Scott-Adams said in Recommended guide for Windows 10 image creation (from scratch) ?:

    @x23piracy How did you go about doing this? I’m running into an issue with sysprep anytime I try to remove a Windows 10 app. It sure would be nice to not have those pesky apps in my image.

    Get-AppxPackage -AllUsers | where-object {$_.name –notlike “*store*” -And $_.packagename –notlike “*culator*”} | Remove-AppxPackage
    Get-appxprovisionedpackage –online | where-object {$_.packagename –notlike “*store*” -And $_.packagename –notlike “*culator*”} | Remove-AppxProvisionedPackage -online
    

    I did this based on 1511 and updated later to 1607, i always restore my image to a virtual box to rework on it and then i also do actual windows updates… so i was coming with that script above from 1511 just FYI…

    I would like to keep store and new calculator, if you remove the new calc anyway you need to install windows 7 calculator for windows 10…if you need a calc app, in business you will. ;): http://winaero.com/blog/get-calculator-from-windows-8-and-windows-7-in-windows-10/

    Regards X23


  • Moderator

    @Scott-Adams How are you removing this applications? You have to uninstall them from the current users and then remove them from the system. The last time I built a win10 reference image (on CBB 1511) I was able to do it and sysprep without any issues, but I used a powershell script to extract the unwanted applications.


Log in to reply
 

460
Online

38710
Users

10539
Topics

99781
Posts

Looks like your connection to FOG Project was lost, please wait while we try to reconnect.