I've seen where it is possible to pause a "Lite Touch" task sequence in MDT 2010 (LTISuspend.wsf), but when I try the same type of thing in a ConfigMgr Task Sequence the TS just blows right through this step and continues on...Is is possible to Pause and Resume a ConfigMgr TS? If so how do I do that...if not what are my options if I want to make some post install configuration changes to a Windows 7 image before I sysprep and capture the image?I realize the preferred method is to script everything thereby eliminating the need for a pause...but that's not always possible.Should I just BUILD my WIM files using MDT 2010 and then use ConfigMgr to deploy them?Any insight would be appreciated.Thanks.Mike N.

You could split your Build/Capture TS into two separate TSes...run the "Build" half, then do your tweaks, then run the "Capture" half. Personally, I would just script everything - even if you can't accomplish something from the command line, there's always automation tools like AutoIT that let you script out actions like clicking through an installation wizard. I use a Build/Capture task sequence for my images and have it 100% scripted. Keep in mind that lots of software installation packages have silent install modes, even if they're undocumented. Some great resources for automating app deployment are: http://www.appdeploy.com/ - A database of common applications and the procedure to automatically install them http://unattended.sourceforge.net/installers.php - A list of common packaging products that most software vendors use and tricks for coaxing each one into installing silently.

You could split your Build/Capture TS into two separate TSes...run the "Build" half, then do your tweaks, then run the "Capture" half. Personally, I would just script everything - even if you can't accomplish something from the command line, there's always automation tools like AutoIT that let you script out actions like clicking through an installation wizard. I use a Build/Capture task sequence for my images and have it 100% scripted. Keep in mind that lots of software installation packages have silent install modes, even if they're undocumented. Some great resources for automating app deployment are: http://www.appdeploy.com/ - A database of common applications and the procedure to automatically install them http://unattended.sourceforge.net/installers.php - A list of common packaging products that most software vendors use and tricks for coaxing each one into installing silently.

The reality is that I don't yet have a script to do everything I want to do to the default profile before I send the image out the door...and it's not really an option to halt everything until I get that completed either.However, what I'm noticing in the TS that I get is that the apps don't appear to install while the OS is running (meaning I don't see the desktop or any GUI while the TS says that an app is installing).Is this how it works? I'm new at ConfigMgr OSD and MDT 2010... I'm moving up from WinXP and have not had any experience with how all these new tools work and let's just say that there is a TON to learn...Anyway, let's just say I do split things up into one TS to Build the Image and one to Capture it... If I do that I can get the base image to boot to the desktop and Auto-Logon w/o issues, however, when I try to capture up the image using the Capture media, well, I have not been able to find out a way to tell it so use the Unattend file that I made which will tell sysprep to copy over the Admin profile to be the default one...Without that I've lost all my settings I'm trying to ensure I keep.Or let's say I want to just run Sysprep manually and tell it which file to use and then make the WIM file on my own too...I can do that...(a ton of extra steps though), but now I have an issue with the ConfigMgr client not being "prepared" to be in an image.Still the best solution (for me at least) would be to pause the full TS and then resume it when I'm ready... However, as I've said before, that does not appear to work in ConfigMgr, unless I'm doing something wrong...and there's been alot of that happening lately...Mike N.

The reality is that I don't yet have a script to do everything I want to do to the default profile before I send the image out the door...and it's not really an option to halt everything until I get that completed either.However, what I'm noticing in the TS that I get is that the apps don't appear to install while the OS is running (meaning I don't see the desktop or any GUI while the TS says that an app is installing).Is this how it works? I'm new at ConfigMgr OSD and MDT 2010... I'm moving up from WinXP and have not had any experience with how all these new tools work and let's just say that there is a TON to learn...Anyway, let's just say I do split things up into one TS to Build the Image and one to Capture it... If I do that I can get the base image to boot to the desktop and Auto-Logon w/o issues, however, when I try to capture up the image using the Capture media, well, I have not been able to find out a way to tell it so use the Unattend file that I made which will tell sysprep to copy over the Admin profile to be the default one...Without that I've lost all my settings I'm trying to ensure I keep.Or let's say I want to just run Sysprep manually and tell it which file to use and then make the WIM file on my own too...I can do that...(a ton of extra steps though), but now I have an issue with the ConfigMgr client not being "prepared" to be in an image.Still the best solution (for me at least) would be to pause the full TS and then resume it when I'm ready... However, as I've said before, that does not appear to work in ConfigMgr, unless I'm doing something wrong...and there's been alot of that happening lately...Mike N.

i've just done a very quick test on a working ts and pointed it to ltisuspend.wsf and it did do something, it placed the shortcut on the desktop and then initiated a reboot, i'll play with it some more... My step by step SCCM Guides windows-noob on Twitter

That's correct, you can't use the "Install Software" step and have user interaction enabled, for some reason in OSD the two are mutually exclusive, however there is a workaround. Use the "Run Command Line" step (under "General"), check the "Package" option and select the package you're installing, then copy the install command line from the program into the "Command Line" box. The "Run Command Line" step always runs with user interaction enabled (you just need to drag the "always on top" task sequence progress window out of the way), so that should allow you to click through any setups that you can't automate. Regarding the unattend file, you need to get away from using sysprep to automate stuff for you. OSD completely takes over the functionality of sysprep - it rewrites sysprep.inf and completely overwrites unattend.txt. If you want to execute a command (such as to copy over the profile from another user to the default user profile), you need to do it using the "Run Command Line" step. If you really want to run sysprep manually (I don't see a reason to do this, since the rewriting of sysprep.inf/replacement of unattend.txt takes place during the application of the image rather than during the capture - specifically in the "Setup Windows and Configmgr" step), just drop that step, and make sure the "Prepare Configmgr Client" step is included.

That's correct, you can't use the "Install Software" step and have user interaction enabled, for some reason in OSD the two are mutually exclusive, however there is a workaround. Use the "Run Command Line" step (under "General"), check the "Package" option and select the package you're installing, then copy the install command line from the program into the "Command Line" box. The "Run Command Line" step always runs with user interaction enabled (you just need to drag the "always on top" task sequence progress window out of the way), so that should allow you to click through any setups that you can't automate. Regarding the unattend file, you need to get away from using sysprep to automate stuff for you. OSD completely takes over the functionality of sysprep - it rewrites sysprep.inf and completely overwrites unattend.txt. If you want to execute a command (such as to copy over the profile from another user to the default user profile), you need to do it using the "Run Command Line" step. If you really want to run sysprep manually (I don't see a reason to do this, since the rewriting of sysprep.inf/replacement of unattend.txt takes place during the application of the image rather than during the capture - specifically in the "Setup Windows and Configmgr" step), just drop that step, and make sure the "Prepare Configmgr Client" step is included.

Ok, well, using the command line works and at the same time does not work...By that I mean that if I had an install that was not silent I could start it and click-thru the prompts to get it to complete.However, I'm still not "at the desktop" when the application is installing. It actually looks like I'm in WinPE at that point (based on the background image being shown).Perhaps I should have asked or addressed the bigger question in all of this and that is how do I get the Image that I build to start out with the default profile that I want it to have...?I would like certain icons already on the desktop, I want some changes made to the Start Menu, I want to select a Screen Saver and desktop background...that sort of stuff.In the old XP days I would use a script to modify the HKCU hive of the registry and then I would copy that profile to make it the default and life was good.However, with ConfigMgr, when an app is installing it does not appear that any user is logged on (I'm guessing that the app is installing in the System Context) and therefore I cannot modfiy HKCU since there is no user logged in.So, since this is all new...(at least to me)...what is the NEW way or the Best Practice way to build and capture a machine using ConfigMgr that will allow me to configure the desktop and such that a user sees when they login to the system for the first time?If I get the answer to that, then perhaps I don't need to worry about pausing a TS at all...Mike N.

Ok, well, using the command line works and at the same time does not work...By that I mean that if I had an install that was not silent I could start it and click-thru the prompts to get it to complete.However, I'm still not "at the desktop" when the application is installing. It actually looks like I'm in WinPE at that point (based on the background image being shown).Perhaps I should have asked or addressed the bigger question in all of this and that is how do I get the Image that I build to start out with the default profile that I want it to have...?I would like certain icons already on the desktop, I want some changes made to the Start Menu, I want to select a Screen Saver and desktop background...that sort of stuff.In the old XP days I would use a script to modify the HKCU hive of the registry and then I would copy that profile to make it the default and life was good.However, with ConfigMgr, when an app is installing it does not appear that any user is logged on (I'm guessing that the app is installing in the System Context) and therefore I cannot modfiy HKCU since there is no user logged in.So, since this is all new...(at least to me)...what is the NEW way or the Best Practice way to build and capture a machine using ConfigMgr that will allow me to configure the desktop and such that a user sees when they login to the system for the first time?If I get the answer to that, then perhaps I don't need to worry about pausing a TS at all...Mike N.

windows SIM can be used to customise the unattend.xml file which basically makes the changes you want, you can separate the capture part of a build and capture task sequence by disabling the capture section, here's a Capture Windows 7 task sequence , which can be used to capture your 'final' Windows 7 image, then once you are happy you can create a new Task Sequence to deploy the captured one... it might sound complicated but in reality it isn't as regards best practise, the best practise way is build and capture , where you go through the whole process in one task sequence, and customise it to your hearts content during that process, remember a task sequence can be as complex or simple as you want cheers niall My step by step SCCM Guides windows-noob on Twitter

windows SIM can be used to customise the unattend.xml file which basically makes the changes you want, you can separate the capture part of a build and capture task sequence by disabling the capture section, here's a Capture Windows 7 task sequence , which can be used to capture your 'final' Windows 7 image, then once you are happy you can create a new Task Sequence to deploy the captured one... it might sound complicated but in reality it isn't as regards best practise, the best practise way is build and capture , where you go through the whole process in one task sequence, and customise it to your hearts content during that process, remember a task sequence can be as complex or simple as you want cheers niall My step by step SCCM Guides windows-noob on Twitter

ConfigMgr doesn't force you to use Build/Capture task sequences. If you want to build images the old fashioned way like you would with Ghost (i.e. manually install the OS and apps and configure it the way you want to, then capture the image), an alternative to look at might be to use capture media instead of a build/capture TS. You can generate capture media by going to Operating System Deployment > Task Sequences > Create Task Sequence Media, select capture media and follow the wizard, it should produce an ISO that you can use to capture WIM files. Build your reference machine and set it up the way you want it, then run your capture CD on it, it should capture a WIM file, then you can import that WIM file into ConfigMgr as an OS image to use within a task sequence. As an aside, yes, it does look like winPE at that point, but you're actually running the host OS. The task sequence engine pauses software distribution in the SCCM client and swaps the GINA (the library that presents the "press ctrl-alt-del" screen) with it's own custom GINA that overrides the login screen to prevent users from being able to log in while the task sequence is running. Once the task sequence is complete, the TS engine restores the original GINA and un-pauses software distribution so you're able to login or run advertisements. While it's in this state, you won't have access to the window manager (explorer.exe, the start menu & taskbar), but you can run any application (command prompt, regedit, control panel) that exists on the system from the "Run Command Line" step and it will run under the context of the local system account, once the application is closed, the task sequence will continue to the next step. As far as best practices go, if you're in a domain environment (not going to make assumptions here, because there are ways of making ConfigMgr work in a workgroup environment) generally you should avoid customizing the default user profile and instead use group policy to handle that for you - it's much more flexible, and you can make changes on the fly instead of being stuck with whatever you captured on your image. Definitely would stick with build/capture if you can though, like Niall said. If you rebuild your images on a regular basis to include patches/updates, build/capture ensures consistency, you know that the image you build this month will be exactly the same as the image you build next month (with the exception of your patches). As far as scripting your customizations goes, it's all about using the right tool for the job...vbscript/WSH is powerful, but too complex for some people, if you're strong with batch files, but find that they won't do everything you need them to do, you can look at alternate offerings that are almost as powerful in some respects such as AutoIT, KIXtart, or Microsoft's PowerShell, all of which have similar syntax to Batch. Personally, I use a combination of Batch Files, VBScripts, and AutoIT scripts to accomplish all my automation in my TSes.

ConfigMgr doesn't force you to use Build/Capture task sequences. If you want to build images the old fashioned way like you would with Ghost (i.e. manually install the OS and apps and configure it the way you want to, then capture the image), an alternative to look at might be to use capture media instead of a build/capture TS. You can generate capture media by going to Operating System Deployment > Task Sequences > Create Task Sequence Media, select capture media and follow the wizard, it should produce an ISO that you can use to capture WIM files. Build your reference machine and set it up the way you want it, then run your capture CD on it, it should capture a WIM file, then you can import that WIM file into ConfigMgr as an OS image to use within a task sequence. As an aside, yes, it does look like winPE at that point, but you're actually running the host OS. The task sequence engine pauses software distribution in the SCCM client and swaps the GINA (the library that presents the "press ctrl-alt-del" screen) with it's own custom GINA that overrides the login screen to prevent users from being able to log in while the task sequence is running. Once the task sequence is complete, the TS engine restores the original GINA and un-pauses software distribution so you're able to login or run advertisements. While it's in this state, you won't have access to the window manager (explorer.exe, the start menu & taskbar), but you can run any application (command prompt, regedit, control panel) that exists on the system from the "Run Command Line" step and it will run under the context of the local system account, once the application is closed, the task sequence will continue to the next step. As far as best practices go, if you're in a domain environment (not going to make assumptions here, because there are ways of making ConfigMgr work in a workgroup environment) generally you should avoid customizing the default user profile and instead use group policy to handle that for you - it's much more flexible, and you can make changes on the fly instead of being stuck with whatever you captured on your image. Definitely would stick with build/capture if you can though, like Niall said. If you rebuild your images on a regular basis to include patches/updates, build/capture ensures consistency, you know that the image you build this month will be exactly the same as the image you build next month (with the exception of your patches). As far as scripting your customizations goes, it's all about using the right tool for the job...vbscript/WSH is powerful, but too complex for some people, if you're strong with batch files, but find that they won't do everything you need them to do, you can look at alternate offerings that are almost as powerful in some respects such as AutoIT, KIXtart, or Microsoft's PowerShell, all of which have similar syntax to Batch. Personally, I use a combination of Batch Files, VBScripts, and AutoIT scripts to accomplish all my automation in my TSes.

Jamie, I appreciate your insight into all of this, it certainly looks like you have a vast amount of knowledge on this topic.I'm certainly coming from the "old school" way of doing things. For the past several years I've been building Windows XP images and then deploying them using Ghost. I know that process like the back of my hand and I have the entire thing scripted (vbscript and bat files mostly). Trying to convert over to Windows 7 and use ConfgMgr to do things is still very foreign to me...and it's a steep hill as I may have said before, there's a TON to learn.I'll also got a GPO background and perhaps it's time to give GPO Preferences a good look as that may be the best way to do this in the long run.If I can get all the settings that I want a profile to have configured using GPOs then I guess I can pretty much use ConfigMgr for both the Build and Capture part as well as the Deployment part...However, like you've said, if I want to build the Reference computer on my own step-by-step, I can still do it that way and then just use ConfigMgr to deploy the WIM that I get at the end.For the record though, I guess we should say that there is officially no way to really Pause a TS using ConfigMgr (at least not one that gives you access to the desktop). Mike N.

Definitely is no official way to do it, there may be a way to hack it to make it work via a script by launching the window manager under the local system account, but I've never seen anything like that being done, and such a method would be dodgy at best - honestly you're better off either doing a build & capture with everything automated (or semi-automated), or a complete manual build and running capture media.

Definitely is no official way to do it, there may be a way to hack it to make it work via a script by launching the window manager under the local system account, but I've never seen anything like that being done, and such a method would be dodgy at best - honestly you're better off either doing a build & capture with everything automated (or semi-automated), or a complete manual build and running capture media.

I agree with that. I don't ever like going off into un-supported territory just to get something done, and this does not seem to be one of those times where that is necessary anyway.Right now I'm working on automating a Build from a USB key that I made which uses an AutoUnattend.xml file to build Windows 7 completely hands free (I'm sure this is what the Build part of ConfigMgr does but this seems to work much faster).When the build is done I'm in left in Sysprep Audit mode...from there I can configure whatever I want (since as I said earlier, I don't want to stop everything just to write all the scripts I'll need...not yet anyway) and then I simply run Sysprep and set it for oobe, generalize, shutdown (also supplying an XML file). This works fine...I then have a 2nd USB key that I made which simply boots into WinPE and runs a batch file to capture the Image using Imagex. I realize this is all pretty much the same as what MS offers with ConfigMgr (without the pause part in the middel), but for me, I like the pared down and stream-lined effect that I get from doing it this way rather than the "full-featured" ConfigMgr method.Since I know what I want to get done, I don't need all the fancy GUIs and the weight that comes along with them.I'm sure that in time I'll create more and more scripts which will allow me to fully utilize a ConfigMgr B&C TS, but until then what I've got will work. Right now I'm just in the testing phase...and testing OS deployments takes forever as it is, so I'm trying to speed things up any way that I can.Mike N.

Mike, I just stumbled across this by accident and I thought of you, if you're still looking to pause and resume the TS, try this. Keep in mind that this is a bit of a hack, definitely not microsoft supported, so you're on your own if this breaks something in your image... To pause the TS, add a batch file to your TS to change the value of HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL to msgina.dll, and immediately following that should be a reboot to host OS step. Windows should present the windows logon prompt. Make your manual changes, then revert HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL back to osdgina.dll and reboot, the TS engine should start back up and resume where it left off. Found this completely by accident because one of my packages which loads a custom GINA overwrote the OSD gina value in the registry, which caused the TS engine to halt after the system was rebooted, and when I restored the value back to it's original, the TS engine continued on and completed the TS.

Mike, I just stumbled across this by accident and I thought of you, if you're still looking to pause and resume the TS, try this. Keep in mind that this is a bit of a hack, definitely not microsoft supported, so you're on your own if this breaks something in your image... To pause the TS, add a batch file to your TS to change the value of HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL to msgina.dll, and immediately following that should be a reboot to host OS step. Windows should present the windows logon prompt. Make your manual changes, then revert HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GinaDLL back to osdgina.dll and reboot, the TS engine should start back up and resume where it left off. Found this completely by accident because one of my packages which loads a custom GINA overwrote the OSD gina value in the registry, which caused the TS engine to halt after the system was rebooted, and when I restored the value back to it's original, the TS engine continued on and completed the TS.

I'm not sure if this will work for you or not. In our environment, we imaged a machine (XP Pro) and then modified the desktop for a typical user. After all was customized, we copied it to the default user profile on the machine. Then copy the default user folder under Documents and Settings into a package. During the OS image task after network settings, etc, we have a command line run to copy the folder in the package to the appropriate folder on the drive of the image build. This is done while still booted into windows PE. We actually have an old style SMS package that does this command after deleting the current default user profile. Hope that helps!Marjorie

Any resolution on this? Other recommendations are using Command line task to launch something, like HTA with a continue item. John RolsteadJohn Rolstead

Any resolution on this? Other recommendations are using Command line task to launch something, like HTA with a continue item. John RolsteadJohn Rolstead

Here is how I customize my Windows 7 Image thru SCCM. 1.) Build a folder for all the registry keys, files, images, etc. Then build a simple batch file to call them or copy it over or what not. Here is mine (use it to your delight): ------------------------------ Build_Script.bat --------------------------------------------------------- @ECHO OFF if /i "%PROCESSOR_ARCHITECTURE%" == "X86" SET location=%programfiles% if /i not "%PROCESSOR_ARCHITECTURE%" == "X86" SET location=%programfiles(x86)% REM ===================================================================================== REM | Customize Branding | REM ===================================================================================== REm Create Directories MKDIR "%windir%\Web\Custom\" MKDIR "%windir%\system32\oobe\info\backgrounds\" REM Copy Background images copy /Y "images\WKSTN7_Wallpaper.jpg" "%windir%\Web\Custom\WKSTN7_Wallpaper.jpg" copy /Y "images\backgroundDefault.jpg" "%windir%\system32\oobe\info\backgrounds\backgroundDefault.jpg" REM Overwrite and set User account Pictures copy /Y "images\guest.bmp" "%AllUsersProfile%\Microsoft\User Account Pictures\guest.bmp" copy /Y "images\user.bmp" "%AllUsersProfile%\Microsoft\User Account Pictures\user.bmp" reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v UseDefaultTile /t REG_DWORD /d 1 /f REM Copy Marquee Screen saver and settings copy /Y "files\ssmarque.scr" "%windir%\system32\ssmarque.scr" copy /Y "files\control.ini" "%windir%\control.ini" REM Takeownership and replace Aero theme with modified version takeown /F "%windir%\Resources\Themes" /R /D Y icacls "%windir%\Resources\Themes\*.theme" /grant Administrators:f /T del /Q /F "%windir%\Resources\Themes\*.theme" copy /Y "files\aero.theme" "%windir%\Resources\Themes\aero.theme" REM Take ownership and replace Basic Aero themes with modified version takeown /F "%windir%\Resources\Ease of Access Themes" /R /D Y icacls "%windir%\Resources\Ease of Access Themes\*.theme" /grant Administrators:f /T del /Q /F "%windir%\Resources\Ease of Access Themes\*.theme" copy /Y "files\basic.theme" "%windir%\Resources\Ease of Access Themes\basic.theme" copy /Y "files\classic.theme" "%windir%\Resources\Ease of Access Themes\classic.theme" REM ===================================================================================== REM | Copy and register dll | REM ===================================================================================== MKDIR "%windir%\Setup\Scripts\" copy /Y "files\Microsoft.BDD.Utility.dll" "%windir%\system32\Microsoft.BDD.Utility.dll" copy /Y "files\SetupComplete.cmd" "%windir%\Setup\Scripts\SetupComplete.cmd" regsvr32 /s "%windir%\system32\Microsoft.BDD.Utility.dll" REM ===================================================================================== REM | Globization Themes | REM ===================================================================================== REM remove Globalization Packages for Windows 7 SP1 if exists DISM /online /Remove-Package /PackageName:"Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /Quiet /Norestart REM remove Globalization Packages for Windows 7 if exists DISM /online /Remove-Package /PackageName:"Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /Quiet /Norestart REM Remove directories just in case takeown /F "%windir%\Globalization\MCT" /R /D Y icacls "%windir%\Globalization\MCT" /grant Administrators:f rmdir /S /Q "%windir%\Globalization\MCT\MCT-AU" rmdir /S /Q "%windir%\Globalization\MCT\MCT-CA" rmdir /S /Q "%windir%\Globalization\MCT\MCT-GB" rmdir /S /Q "%windir%\Globalization\MCT\MCT-US" rmdir /S /Q "%windir%\Globalization\MCT\MCT-ZA" regedit /s "reg\USGlobalThemes - Remove.reg" REM ===================================================================================== REM | Add Plug and Play drivers (testing) | REM ===================================================================================== REM Add Drivers to database ::xcopy /E /R /Y "\\SCCMSERVER\Repository\Drivers\PNP" "%systemdrive%\PNP" ::DISM /online /Add-Driver /driver:C:\PNP /recurse /ForceUnsigned ::rmdir /S /Q "%systemdrive%\PNP" REM ===================================================================================== REM | Add remove Windows Features | REM ===================================================================================== DISM /online /Enable-Feature /FeatureName:TelnetClient /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:ServicesForNFS-ClientOnly /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:ClientForNFS-Infrastructure /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:NFS-Administration /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:MediaCenter /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:WindowsGadgetPlatform /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:InboxGames /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:TabletPCOC /Quiet /NoRestart REM ===================================================================================== REM | Registry Branding to Defualt User | REM ===================================================================================== REM Load Default user hive reg load "HKU\temp" "%USERPROFILE%\..\Default User\NTUSER.DAT" REM Set Desktop Screensaver and wallpaper reg ADD "HKU\temp\Control Panel\Desktop" /v SCRNSAVE.EXE /d "%windir%\system32\ssmarque.scr" /f reg ADD "HKU\temp\Control Panel\Desktop" /v TileWallpaper /d "0" /f reg ADD "HKU\temp\Control Panel\Desktop" /v Wallpaper /d "%windir%\Web\Custom\WKSTN7_Wallpaper.jpg" /f REM set Internet Explorer Search Engine reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v DisplayName /d "Companies Search System" /f reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v URL /d "http://mysearch?app=search" /f reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v SuggestionsURLFallback /d "http://mysearch?app=search" /f reg ADD "HKU\Software\Microsoft\Internet Explorer\Main" /v RunOnceHasShown /t REG_DWORD /d 1 /f reg ADD "HKU\Software\Microsoft\Internet Explorer\Main" /v RunOnceComplete /t REG_DWORD /d 1 /f REM Change taskbar to Small Icons reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v AlwaysShowMenus /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarSmallIcons /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarGlomLevel /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /t REG_DWORD /d 0 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideIcons /t REG_DWORD /d 0 /f REM Force enable Aero but does NOT work in virtual machines reg ADD "HKU\Software\Microsoft\Windows\DWM" /v UseMachineCheck /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\DWM" /v Blur /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\DWM" /v Animations /t REG_DWORD /d 0 /f REM Add My Documents and Computer to Desktop reg ADD "HKU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v {59031a47-3f72-44a7-89c5-5595fe6b30ee} /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v {20D04FE0-3AEA-1069-A2D8-08002B30309D} /t REG_DWORD /d 0 /f REM unload default user hive reg unload "HKU\temp" REM Add Internet Explorer and Outlook to Desktop regedit /s "reg\IE8-desktop_icon_restore.reg" regedit /s "reg\Office2010_on7desktop.reg" REM ===================================================================================== REM | Registered Owner | REM ===================================================================================== reg ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v RegisteredOwner /d "Directorate" /f reg ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v RegisteredOrganization /d "Company" /f REM ===================================================================================== REM | Windows Registry Settings | REM ===================================================================================== reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Background" /v OEMBackground /t REG_DWORD /d 1 /f reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI" /v ButtonSet /t REG_DWORD /d 1 /f reg ADD "HKLM\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters" /v DisabledComponents /t REG_DWORD /d 255 /f reg ADD "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f regedit /s "reg\BriefcaseOption - Remove.reg" regedit /s "reg\Disable AutoRun All Features.reg" REM ===================================================================================== REM | Change Computer and Network Display name (testing) | REM ===================================================================================== tools\SetACL.exe -on "HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" -ot reg -actn setowner -ownr "n:Administrators" tools\SetACL.exe -on "HKLM\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" -ot reg -actn setowner -ownr "n:Administrators" regedit /s "reg\Desktop - Computer_Name.reg" regedit /s "reg\Desktop - Network_Name.reg" REM ===================================================================================== REM | Change Windows Services state | REM ===================================================================================== REM Disable Homegroup Powershell Set-Service 'HomeGroupListener' -startuptype "disabled" Powershell Set-Service 'HomeGroupProvider' -startuptype "disabled" REM Disable Windows Defender Powershell Set-Service 'WinDefend' -startuptype "disabled" REM Disable Windows Mediaplayer Sharing Service; required for SYSPREP Powershell Set-Service 'WMPNetworkSvc' -startuptype "disabled" REM Disable Wireless Services Powershell Set-Service 'wcncsvc' -startuptype "disabled" REM Start Remote registry services Powershell Set-Service 'RemoteRegistry' -startuptype "Automatic" REM Windows Other Settings Powershell disable-computerrestore -drive c:\ netsh advfirewall set allprofiles state off powercfg -H OFF REM ===================================================================================== REM | Task Scheduler | REM ===================================================================================== schtasks /change /TN "\Microsoft\Windows\SystemRestore\SR" /Disable schtasks /change /TN "\Microsoft\Windows Defender\MP Scheduled Scan" /Disable schtasks /change /TN "\Microsoft\Windows\Maintenance\WinSAT" /Disable REM ===================================================================================== REM | Local Administrator Accounts | REM ===================================================================================== net user guest /PASSWORDREQ:YES net user 1stacct password /add net user 2ndacct password /add net localgroup administrators 1stacct /add net localgroup administrators 2ndacct /add ------------------------------------ End of script ----------------------------------------------------------- :As you can see I load the default user hive and add registry tweaks to customize the profile, that way when an new users logs in, they get those settings. I also script it to tweak services, roles and features and other items. 2.) Copy it to your repository and make it a package 3.) Add it as a Install Software Task Sequence. Scripting items I am still working on are: - pinning items to the startmenu/taskbar - turning off Action Center notifications - set permissions on registry keys for modification - post script to license software or apply additional settings Hope this helps... ...If you want the registry keys I can post them too.

Here is how I customize my Windwos 7 Image thru SCCM. 1.) Build a folder for all the registry keys, files, images, etc. Then build a simple cmd file to call them or copy it over or what not. Here is mine (use it to your delight): ------------------------------ Build_Script.bat --------------------------------------------------------- @ECHO OFF if /i "%PROCESSOR_ARCHITECTURE%" == "X86" SET location=%programfiles% if /i not "%PROCESSOR_ARCHITECTURE%" == "X86" SET location=%programfiles(x86)% REM ===================================================================================== REM | Customize Branding | REM ===================================================================================== REm Create Directories MKDIR "%windir%\Web\SOISnet\" MKDIR "%windir%\system32\oobe\info\backgrounds\" REM Copy Background images copy /Y "images\WKSTN7_Wallpaper.jpg" "%windir%\Web\Custom\WKSTN7_Wallpaper.jpg" copy /Y "images\backgroundDefault.jpg" "%windir%\system32\oobe\info\backgrounds\backgroundDefault.jpg" REM Overwrite and set User account Pictures copy /Y "images\guest.bmp" "%AllUsersProfile%\Microsoft\User Account Pictures\guest.bmp" copy /Y "images\user.bmp" "%AllUsersProfile%\Microsoft\User Account Pictures\user.bmp" reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v UseDefaultTile /t REG_DWORD /d 1 /f REM Copy Marquee Screen saver and settings copy /Y "files\ssmarque.scr" "%windir%\system32\ssmarque.scr" copy /Y "files\control.ini" "%windir%\control.ini" REM Takeownership and replace Aero theme with modified version takeown /F "%windir%\Resources\Themes" /R /D Y icacls "%windir%\Resources\Themes\*.theme" /grant Administrators:f /T del /Q /F "%windir%\Resources\Themes\*.theme" copy /Y "files\aero.theme" "%windir%\Resources\Themes\aero.theme" REM Take ownership and replace Basic Aero themes with modified version takeown /F "%windir%\Resources\Ease of Access Themes" /R /D Y icacls "%windir%\Resources\Ease of Access Themes\*.theme" /grant Administrators:f /T del /Q /F "%windir%\Resources\Ease of Access Themes\*.theme" copy /Y "files\basic.theme" "%windir%\Resources\Ease of Access Themes\basic.theme" copy /Y "files\classic.theme" "%windir%\Resources\Ease of Access Themes\classic.theme" REM ===================================================================================== REM | Copy and register dll | REM ===================================================================================== MKDIR "%windir%\Setup\Scripts\" copy /Y "files\Microsoft.BDD.Utility.dll" "%windir%\system32\Microsoft.BDD.Utility.dll" copy /Y "files\SetupComplete.cmd" "%windir%\Setup\Scripts\SetupComplete.cmd" regsvr32 /s "%windir%\system32\Microsoft.BDD.Utility.dll" REM ===================================================================================== REM | Globization Themes | REM ===================================================================================== REM remove Globalization Packages for Windows 7 SP1 if exists DISM /online /Remove-Package /PackageName:"Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /PackageName:"Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7601.17514" /Quiet /Norestart REM remove Globalization Packages for Windows 7 if exists DISM /online /Remove-Package /PackageName:"Microsoft-Windows-LocalPack-AU-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-CA-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-GB-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-US-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /PackageName:"Microsoft-Windows-LocalPack-ZA-Package~31bf3856ad364e35~amd64~~6.1.7600.16385" /Quiet /Norestart REM Remove directories just in case takeown /F "%windir%\Globalization\MCT" /R /D Y icacls "%windir%\Globalization\MCT" /grant Administrators:f rmdir /S /Q "%windir%\Globalization\MCT\MCT-AU" rmdir /S /Q "%windir%\Globalization\MCT\MCT-CA" rmdir /S /Q "%windir%\Globalization\MCT\MCT-GB" rmdir /S /Q "%windir%\Globalization\MCT\MCT-US" rmdir /S /Q "%windir%\Globalization\MCT\MCT-ZA" regedit /s "reg\USGlobalThemes - Remove.reg" REM ===================================================================================== REM | Add Plug and Play drivers (testing) | REM ===================================================================================== REM Add Drivers to database ::xcopy /E /R /Y "\\SCCMSERVER\Repository\Drivers\PNP" "%systemdrive%\PNP" ::DISM /online /Add-Driver /driver:C:\PNP /recurse /ForceUnsigned ::rmdir /S /Q "%systemdrive%\PNP" REM ===================================================================================== REM | Add remove Windows Features | REM ===================================================================================== DISM /online /Enable-Feature /FeatureName:TelnetClient /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:ServicesForNFS-ClientOnly /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:ClientForNFS-Infrastructure /Quiet /NoRestart DISM /online /Enable-Feature /FeatureName:NFS-Administration /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:MediaCenter /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:WindowsGadgetPlatform /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:InboxGames /Quiet /NoRestart DISM /online /Disable-Feature /FeatureName:TabletPCOC /Quiet /NoRestart REM ===================================================================================== REM | Registry Branding to Defualt User | REM ===================================================================================== REM Load Default user hive reg load "HKU\temp" "%USERPROFILE%\..\Default User\NTUSER.DAT" REM Set Desktop Screensaver and wallpaper reg ADD "HKU\temp\Control Panel\Desktop" /v SCRNSAVE.EXE /d "%windir%\system32\ssmarque.scr" /f reg ADD "HKU\temp\Control Panel\Desktop" /v TileWallpaper /d "0" /f reg ADD "HKU\temp\Control Panel\Desktop" /v Wallpaper /d "%windir%\Web\Custom\WKSTN7_Wallpaper.jpg" /f REM set Internet Explorer Search Engine reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v DisplayName /d "Companies Search System" /f reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v URL /d "http://mysearch?app=search" /f reg ADD "HKU\temp\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" /v SuggestionsURLFallback /d "http://mysearch?app=search" /f reg ADD "HKU\Software\Microsoft\Internet Explorer\Main" /v RunOnceHasShown /t REG_DWORD /d 1 /f reg ADD "HKU\Software\Microsoft\Internet Explorer\Main" /v RunOnceComplete /t REG_DWORD /d 1 /f REM Change taskbar to Small Icons reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v AlwaysShowMenus /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarSmallIcons /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarGlomLevel /t REG_DWORD /d 1 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideFileExt /t REG_DWORD /d 0 /f reg ADD "HKU\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v HideIcons /t REG_DWORD /d 0 /f REM Force enable Aero but does NOT work in virtual machines reg ADD "HKU\Software\Microsoft\Windows\DWM" /v UseMachineCheck /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\DWM" /v Blur /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\DWM" /v Animations /t REG_DWORD /d 0 /f REM Add My Documents and Computer to Desktop reg ADD "HKU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v {59031a47-3f72-44a7-89c5-5595fe6b30ee} /t REG_DWORD /d 0 /f reg ADD "HKU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v {20D04FE0-3AEA-1069-A2D8-08002B30309D} /t REG_DWORD /d 0 /f REM unload default user hive reg unload "HKU\temp" REM Add Internet Explorer and Outlook to Desktop regedit /s "reg\IE8-desktop_icon_restore.reg" regedit /s "reg\Office2010_on7desktop.reg" REM ===================================================================================== REM | Registered Owner | REM ===================================================================================== reg ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v RegisteredOwner /d "Directorate" /f reg ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v RegisteredOrganization /d "Company" /f REM ===================================================================================== REM | Windows Registry Settings | REM ===================================================================================== reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Background" /v OEMBackground /t REG_DWORD /d 1 /f reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI" /v ButtonSet /t REG_DWORD /d 1 /f reg ADD "HKLM\SYSTEM\CurrentControlSet\services\TCPIP6\Parameters" /v DisabledComponents /t REG_DWORD /d 255 /f reg ADD "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f regedit /s "reg\BriefcaseOption - Remove.reg" regedit /s "reg\Disable AutoRun All Features.reg" REM ===================================================================================== REM | Change Computer and Network Display name (testing) | REM ===================================================================================== tools\SetACL.exe -on "HKLM\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}" -ot reg -actn setowner -ownr "n:Administrators" tools\SetACL.exe -on "HKLM\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" -ot reg -actn setowner -ownr "n:Administrators" regedit /s "reg\Desktop - Computer_Name.reg" regedit /s "reg\Desktop - Network_Name.reg" REM ===================================================================================== REM | Change Windows Services state | REM ===================================================================================== REM Disable Homegroup Powershell Set-Service 'HomeGroupListener' -startuptype "disabled" Powershell Set-Service 'HomeGroupProvider' -startuptype "disabled" REM Disable Windows Defender Powershell Set-Service 'WinDefend' -startuptype "disabled" REM Disable Windows Mediaplayer Sharing Service; required for SYSPREP Powershell Set-Service 'WMPNetworkSvc' -startuptype "disabled" REM Disable Wireless Services Powershell Set-Service 'wcncsvc' -startuptype "disabled" REM Start Remote registry services Powershell Set-Service 'RemoteRegistry' -startuptype "Automatic" REM Windows Other Settings Powershell disable-computerrestore -drive c:\ netsh advfirewall set allprofiles state off powercfg -H OFF REM ===================================================================================== REM | Task Scheduler | REM ===================================================================================== schtasks /change /TN "\Microsoft\Windows\SystemRestore\SR" /Disable schtasks /change /TN "\Microsoft\Windows Defender\MP Scheduled Scan" /Disable schtasks /change /TN "\Microsoft\Windows\Maintenance\WinSAT" /Disable REM ===================================================================================== REM | Local Administrator Accounts | REM ===================================================================================== net user guest /PASSWORDREQ:YES net user 1stacct password /add net user 2ndacct password! /add net localgroup administrators 1stacct /add net localgroup administrators 2ndacct /add :As you can see I load the default user hive and add registry tweaks to customize the profile, that way when an new suer logs on they get those settings. I also script it to tweak services, roles and features and other items. 2.) Copy it to your repoistyr and make it a package 3.) Add it as a Install Software Task Sequence. Items I am still working on are: - pinning items to the startmenu/taskbar - turning off Action Center notifications - set permissions on registry keys for modification Hope this helps...

Ok just found that this won't work directly thru SCCM as a Build Sequence.Richard J Tracy II