How To Create A Windows 10 Image For Deployment

With Windows Organization Grooming Tool (Sysprep) tool, yous tin can create customized Windows ten or 11 reference images. Y'all can install apps, drivers, and slipstream updates to a Windows installation prototype. After that, you lot can deploy Windows image to users' computers inside your company.

In this article, nosotros'll show how to use Sysprep to create the reference epitome of Windows ten 21H1 (19043.1320) and Windows 11 21H2 (22000.258) builds. Use this guide to create a Windows image that is set and you tin deploy it on a physical or virtual motorcar (VDI solutions).

What is SysPrep?

Earlier deploying a Windows image on users' computers, you need to configure a reference image. Install the necessary drivers, applications, and configure other Windows settings. The resulting image must exist generalized by deleting estimator-specific information (SID, GUID, etc.). Yous can generalize the Windows epitome with the Sysprep utility.

Sysprep allows you to delete all the information related to a specific operating organisation case. This includes unique identifiers (SID, GUID, etc.), the Windows activation reset, and installing apps and drivers in the Audit mode.

All the configuration of the operating system before you run Sysprep remains untouched. This includes the installed software, personalization and network settings, installed and pinned Metro apps on the start screen, File Explorer, and other parameters.

In Windows ten/eleven and Windows Server 2019/2022, the Sysprep.exe utility is located in folder C:\Windows\System32\sysprep.

After y'all installed a prepared reference Windows ten prototype and configured in the correct way (with certain installed software, with the operating system settings, with the specified permissions and restrictions), you can deploy it to all computers of the company using MDT, WDS, SCCM or manually (take a wait at Deploying Windows 10 with MDT and WDS).

Benefits and Disadvantages of Using Sysprep

Syprep'due south benefits:

The customized reference Windows ten/11 image allows you to quickly deploy a ready-to-work environment on a user's computer. You lot do not need to install drivers, programs, security updates. Also no need to configure custom Windows Settings on each computer;
You lot can deploy the Windows prototype using the answer (unattended) file. After the installation, you do non need to select the various options on the initial Windows ten setup screen;
At whatsoever time, you can excerpt the image, make changes to information technology, and update it with the deployment tool.

Disadvantages of Sysprep:

The size of the Windows reference image tin can be significantly larger than the clean Windows 10 or xi installation ISO prototype;
Periodically you have to update the versions of programs and drivers injected into the reference paradigm, and install the latest security updates;
You cannot employ the Sysprep tool on domain-joined computers. Sysprep will remove the estimator from the Advertisement domain;
You lot tin can run Sysprep upwardly to 1001 times on a single Windows image. Subsequently reaching this limit, you should recreate your Windows image.

How to Create a Windows x or 11 Reference Prototype?

You tin create your reference WIM epitome of Windows 11 or 10 through the following steps:

Perform clean Windows 10/eleven install from the ISO image, and then enter the Audit Way;
Install apps, drivers, and configure the arrangement settings;
Prepare the operating organization environment using the Sysprep utility;
Boot into Windows PE and capture an image using the DISM tool.

Then, the resulting paradigm WIM can be added to the installation disk or deployed using different tools such as MDT, WDS, DISM, or ImageX.

Customizing Windows 11 and ten in Audit Mode with Sysprep

You demand to customize your reference Windows Prototype in the Audit Mode. On the installed Windows ten/11 Bone, you can kick Windows to Audit Fashion or OOBE by pressing Shift + Ctrl + F3 on the OOBE (out-of-box experience user experience), or the Windows Welcome screen. Yous can also enter Audit Style using Sysprep. To do this, open the Sysprep binder with File Explorer, agree down Shift, right-click on an empty infinite and select the Open up PowerShell windows hither or Open up in Windows Terminal pick.

So run the command:

C:\windows\system32\sysprep\sysprep.exe

In the Organisation Grooming Tool window, select the options:

Arrangement Cleanup Action: Enter System Inspect mode;
Shutdown Options: Reboot;
Press the OK button.

In our case, Sysprep is returning the post-obit error:

System Training Tool 3.14

Sysprep was not able to validate your Windows installation. Review the log file at %WINDIR%\System32\Sysprep\Panther\setupact.log for details. After resolving the effect, use Sysprep to validate your installation over again.

To detect out the reason why Sysprep cannot offset on your computer, press Win + R and run the command:

%WINDIR%\System32\Sysprep\Panther\setupact.log

Look for the Error lines in the setupact.log file. In our case, the error looks like this:

2021-eleven-19 06:12:56, Error SYSPRP Sysprep_Clean_Validate_Opk: Audit style cannot be turned on if reserved storage is in use. An update or servicing operation may be using reserved storage.; 60 minutes = 0x800F0975

2021-eleven-19 06:12:56, Error SYSPRP ActionPlatform::LaunchModule: Failure occurred while executing 'Sysprep_Clean_Validate_Opk' from C:\Windows\System32\spopk.dll; dwRet = 0x975

2021-11-19 06:12:56, Fault SYSPRP SysprepSession::Validate: Error in validating actions from C:\Windows\System32\Sysprep\ActionFiles\Cleanup.xml; dwRet = 0x975

2021-eleven-nineteen 06:12:56, Mistake SYSPRP RunPlatformActions:Failed while validating Sysprep session actions; dwRet = 0x975

2021-eleven-19 06:12:56, Error [0x0f0070] SYSPRP RunDlls:An error occurred while running registry sysprep DLLs, halting sysprep execution. dwRet = 0x975

2021-xi-19 06:12:56, Error [0x0f00d8] SYSPRP WinMain:Striking failure while pre-validate sysprep cleanup internal providers; hr = 0x80070975

In our instance, the reason for the Sysprep error is specified here: "An update or servicing operation may be using reserved storage". This means you cannot use Sysprep at this time, because your Windows image is locked by some changes. This tin can exist installed updates, installation of Windows features, system programs, antiviruses, etc.

Go to Settings > Windows Updates. Equally you can see, in that location are several Awaiting Updates. Finish installing security updates, restart your calculator, and run Sysprep again.

Tip. Another error "Sysprep was not able to validate your Windows installation" was covered in this guide.

The reckoner volition automatically restart and boot to the Audit Mode. Windows automatically boots and logs in with the congenital-in administrator account when in the Audit Manner. Farther, this account will be disabled.

Windows xi/ten volition boot in this mode no matter how many times you reboot your figurer until the Sysprep is running.

At that place is simply 1 visible sign to empathise that you've entered the Windows Inspect Mode desktop — the Sysprep dialog in the middle of the display. Do not close the Sysprep utility window — you will demand it at the finish of the configuration step. Minimize it.

In Audit Mode, you can configure your Windows reference image. Nosotros will take a look at several popular steps that sysops configure most often in their reference image.

Step i: Install OEM Information and Logo

You lot tin can set your company branded info in the estimator properties windows. In this example, we volition configure OEMLogo, Visitor proper noun, tech support website, and working hours. The easiest mode to configure these settings is through the registry. Create a text file oem.reg, and copy the following code into information technology:

Windows Registry Editor Version five.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation]

"Logo"="C:\\WINDOWS\\oem\\OEMlogo.bmp"

"Manufacturer"="TheITBros, LLC"

"Model"="Windows 10 Pro 21H1"

"SupportHours"="9am to 5pm ET Chiliad-F"

"SupportURL"="https://theitbros.com"

                Note. First, create the graphic file C:\WINDOWS\oem\OEMlogo.bmp with your visitor logo.

To apply the reg file, double-click on it, and accept registry changes. As a result, these settings will be imported into the registry.

After rebooting in the System Properties, you lot can see the following branded info:

Step ii: Install the Drivers and Apps

You can install drivers and third-party programs you would like to see in your Windows ten/11 image.
You can install programs manually, or using the Windows 10 package manager — Chocolatey.

Now install the Chocolatey. To practise this, run the PowerShell console with administrator privileges. Enter the following commands:

Gear up-ExecutionPolicy Featherbed -Telescopic Procedure -Strength; `  iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))

Restart the PowerShell panel. Now you lot tin can install more programs with a single command.

Let's say, we want to install Opera, Google Chrome, VLC media actor, Adobe Acrobat Reader DC, 7Zip, K-Lite Codec Pack Full, and Zoomit using choco. Run the command:

choco install 7zip, Opera, googlechrome, vlc, adobereader, k-litecodecpackfull,zoom

Tip. You can find packages by their names with the command choco search opera.

On Windows 11, y'all tin use the new congenital-in WinGet Packet Manager to install the required software (nigh 3000 programs bachelor in WinGet repo). To install the aforementioned set of programs, run the command:

winget install --id=7zip.7zip -e && winget install --id=Opera.Opera -e && winget install --id=Google.Chrome -east && winget install --id=VideoLAN.VLC -e && winget install --id=Adobe.Acrobat.Reader.32-flake -e && winget install --id=CodecGuide.K-LiteCodecPack.Full -e && winget install --id=Zoom.Zoom –e

Tip. You tin apply the WinGet online repository browser (https://winstall.app/) to select the programs you want to install and generate the WinGet installation script.

You tin can also install drivers for all computers and laptops models on which you lot desire to deploy this reference Windows 10/11 image. Download and excerpt the driver packages to a specific directory. Then search for all *.inf files, and inject all the drivers described there to the Windows paradigm with the control:

for /f %i in ('dir /b /s *.inf') do pnputil.exe -i -a %i

If you demand to reboot Windows to install the application or update, you tin do it. After reboot, the organisation will return to inspect mode.

Note. You can clean up your driver repository from driver duplicates using our script.

Step 3: Disable Telemetry and Data Collection in Windows x/11

Windows 10 and 11 collect information near the operation of users on the reckoner. Examples of handwriting and phonation samples, location information, mistake reports, calendar contents — all of these can be sent to Microsoft servers.

If you do non desire the Os sending data to Microsoft's telemetry servers, you can disable the Telemetry and Information Collection services. Run the elevated Control prompt, and execute the following commands:

sc delete DiagTrack  sc delete dmwappushservice  repeat "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-DiagTrack-Listener.etl  REG Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f

Besides, y'all can disable tracking in Windows 10 and 11 using the DisableWinTracking tool from GitHub.

Step four: Install Windows Security Update in Audit Mode

Starting with Windows 8.one, y'all cannot install updates using the Windows Update Center in the Settings console in the auditing mode. The Windows Update Center checks if the arrangement has completed the OOBE stage. If not, the update won't be performed.

To update the system from the console, yous can take the PSWindowsUpdate Module from TechNet Gallery.

Relieve the PSWindowsUpdate.zip annal to a USB drive, and (this is important!) right-click on it > Properties > Unblock.

Excerpt the PSWindowsUpdate.zip to both folders:

%USERPROFILE%\Documents\Windows\PowerShell\Modules;
%WINDIR%\System32\Windows\PowerShell\v1.0\Modules.

To download and install all available Windows updates, run the commands:

PowerShell -ExecutionPolicy RemoteSigned -Command Import-Module PSWindowsUpdate;  Get-WUInstall -AcceptAll -IgnoreReboot

That'south all! Available updates will be downloaded from the Windows Update servers and installed automatically.

Footstep 5: Uninstall Built-in Microsoft Store Apps

Also, you can uninstall built-in UWM apps, only it's actually up to you. So, if you don't want to uninstall born apps, just skip this step.

Here is a list of the pre-installed Microsoft apps in Windows ten 21H1.

Get-AppxPackage *3dbuilder* | Remove-AppxPackage  Go-AppxPackage *windowsalarms* | Remove-AppxPackage  Go-AppxPackage *windowscalculator* | Remove-AppxPackage  Get-AppxPackage *windowscommunicationsapps* | Remove-AppxPackage  Become-AppxPackage *windowscamera* | Remove-AppxPackage  Get-AppxPackage *officehub* | Remove-AppxPackage  Get-AppxPackage *skypeapp* | Remove-AppxPackage  Get-AppxPackage *getstarted* | Remove-AppxPackage  Get-AppxPackage *zunemusic* | Remove-AppxPackage  Get-AppxPackage *windowsmaps* | Remove-AppxPackage  Become-AppxPackage *solitairecollection* | Remove-AppxPackage  Get-AppxPackage *bingfinance* | Remove-AppxPackage  Get-AppxPackage *zunevideo* | Remove-AppxPackage  Get-AppxPackage *bingnews* | Remove-AppxPackage  Get-AppxPackage *onenote* | Remove-AppxPackage  Get-AppxPackage *people* | Remove-AppxPackage  Get-AppxPackage *windowsphone* | Remove-AppxPackage  Go-AppxPackage *photos* | Remove-AppxPackage  Get-AppxPackage *bingsports* | Remove-AppxPackage  Get-AppxPackage *soundrecorder* | Remove-AppxPackage  Become-AppxPackage *bingweather* | Remove-AppxPackage  Get-AppxPackage *xboxapp* | Remove-AppxPackage

The list of born MS Store Apps on Windows 11 21H2 has changed. Use the following PowerShell script to remove the preinstalled Windows eleven apps:

Remove built-in MS Store Apps on Windows eleven 21H2:

#AV1 Codec  Go-AppxPackage *AV1VideoExtension* | Remove-AppxPackage  #News app  Get-AppxPackage *BingNews* | Remove-AppxPackage  #Weather  Become-AppxPackage *BingWeather* | Remove-AppxPackage  #PowerShell  Get-AppxPackage *PowerShell* | Remove-AppxPackage  #WebP image back up  Get-AppxPackage *WebpImageExtension* | Remove-AppxPackage  #HEIF image support  Get-AppxPackage *HEIFImageExtension* | Remove-AppxPackage  #Windows Terminal  Get-AppxPackage *WindowsTerminal* | Remove-AppxPackage  #Music app  Become-AppxPackage *ZuneMusic* | Remove-AppxPackage  #Movies and Television  Go-AppxPackage *ZuneVideo* | Remove-AppxPackage  #MS Function  Get-AppxPackage *MicrosoftOfficeHub* | Remove-AppxPackage  #People app  Go-AppxPackage *People* | Remove-AppxPackage  #Maps  Get-AppxPackage *WindowsMaps* | Remove-AppxPackage  #Help and tips  Get-AppxPackage *GetHelp* | Remove-AppxPackage  #Voice Recorder  Get-AppxPackage *WindowsSoundRecorder* | Remove-AppxPackage  #Notepad  Get-AppxPackage *WindowsNotepad* | Remove-AppxPackage  #MS Paint  Become-AppxPackage *Paint* | Remove-AppxPackage  #Sticky Notes  Get-AppxPackage *MicrosoftStickyNotes* | Remove-AppxPackage  #PowerAutomate  Go-AppxPackage *PowerAutomateDesktop* | Remove-AppxPackage  #Xbox and related apps  Go-AppxPackage *Xbox* | Remove-AppxPackage  #Feedback Hub  Get-AppxPackage *WindowsFeedbackHub* | Remove-AppxPackage  #Microsoft To-Do  Get-AppxPackage *Todos* | Remove-AppxPackage  #Calculator  Get-AppxPackage *WindowsCalculator* | Remove-AppxPackage  #Alarms and Clocks  Get-AppxPackage *WindowsAlarms* | Remove-AppxPackage  #Teams/Chat  Become-AppxPackage *Teams* | Remove-AppxPackage  #Microsoft Edge  Get-AppxPackage *MicrosoftEdge* | Remove-AppxPackage  #Your Phone  Get-AppxPackage *YourPhone* | Remove-AppxPackage  #Spotify  Get-AppxPackage *SpotifyAB.SpotifyMusic* | Remove-AppxPackage  #Screen & Sketch/Snipping tool  Get-AppxPackage *ScreenSketch* | Remove-AppxPackage  #Solitaire Collection  Go-AppxPackage *MicrosoftSolitaireCollection* | Remove-AppxPackage  #Photos  Get-AppxPackage *Windows.Photos* | Remove-AppxPackage  #OneDrive  Become-AppxPackage *OneDriveSync* | Remove-AppxPackage  #Skype  Get-AppxPackage *SkypeApp* | Remove-AppxPackage  #Xbox Console Companion  Get-AppxPackage *GamingApp* | Remove-AppxPackage

Copy the listing of commands for your Windows build, paste them into the PowerShell console, and press Enter:

Generalizing Windows x/11 Paradigm Using Sysprep

If your computer has a static IP address configured, specify that the address should be obtained automatically (from a DHCP server). You tin can practise that in the network adapter settings.

Or, you tin can use the following PowerShell script to automatically become an IP address from a DHCP server:

$IPType = "IPv4" $adapter = Get-NetAdapter | ? {$_.Condition -eq "up"} $interface = $adapter | Get-NetIPInterface -AddressFamily $IPType If ($interface.Dhcp -eq "Disabled") { If (($interface | Get-NetIPConfiguration).Ipv4DefaultGateway) { $interface | Remove-NetRoute -Confirm:$imitation } $interface | Set-NetIPInterface -DHCP Enabled $interface | Set-DnsClientServerAddress -ResetServerAddresses }

After everything is configured, you can run the Sysprep and select the options:

Arrangement Cleanup Activity: Enter System Out-of-Box Experience (OOBE);
Shutdown Options: Shutdown;
Check the Generalize option.

After generalizing the Windows image, it will start from Out-of-Box Feel (OOBE) mode and reassign unique SIDs during the first kick.

Using Answer Files with Sysprep for Unattended Windows x/11 Installation

You tin utilise an answer file together with the System Preparation (Sysprep) tool. It allows configuring unattended Windows Setup settings. This step is optional (used to automatically specify various parameters that must be configured when the image is at first run). You can skip this step, and go directly to the step of capturing a Windows image.

The answer file may contain the respond to each question. This must be selected when installing Windows and choosing the initial settings (region, language, product key, keyboard, business relationship, and privacy setting, etc.). Follow the steps during the out-of-box experience (OOBE).

Due to the answer file, the number of installer screens is significantly reduced.

How to Create Windows 10 Answer File Using Windows System Prototype Director?

You tin create an answer file manually (this is simple XML). But it'due south more user-friendly to generate the right answer file using the Windows Organization Image Manager (SIM) tool. You can do it from the Windows Assessment and Deployment Kit (ADK).

Download the Windows Assessment and Deployment Kit (ADK) for Windows 10 or ADK for Windows 11. Utilise the ADK version for the Windows version you desire to deploy.

Run the adksetup.exe file with ambassador privileges. And so select Deployment Tools to install (it includes the latest version of DISM and Windows System Image Director).

You volition need install.wim file with the Windows 10 or prototype you want to deploy. You lot can copy the install.wim file from the sources directory on the installation Windows 10 ISO image. If only the install.esd file is available in the sources directory, you can convert information technology to the install.wim.

Let'south create an respond unattended file for Windows 10 21H1.

Run the Windows System Epitome Managing director with administrator privileges (C:\Program Files (x86)\Windows Kits\x\Assessment and Deployment Kit\Deployment Tools\WSIM\imgmgr.exe). Select File > New Answer File.

SIM will prompt you to specify a Windows image file for which yous want to create an answer file. Specify the path to the before installed install.wim file.

Wait for the SIM to mount the Windows installation image and create the catalog file (.clg). This volition take some time, after which the install_Windows 10 Pro.clg file will appear in the directory with the install.wim file.

Note. If yous effort to open up the install.wim file of your Windows 10 build using WSIM from an older version of the ADK, you may receive an error message:

Windows SIM was unable to generate a catalog

In guild to fix this error, you need to install the latest ADK and WSIM available for your Windows build.

Select your Windows 10 edition. If at that place is only one edition of Windows in your install.wim file, it will be selected automatically.

Using WSIM, you lot can configure various parameters for the answer file. For example, you lot can configure the Windows product cardinal (if you are using KMS or MAK keys), time zone, system and owner info, default linguistic communication and region settings, input locales, etc.

Start of all, we demand to practice the almost of import thing: to tell Sysprep to copy all our customizations to the default user profile.

To do this, in the Windows Image section, detect the amd64_Microsoft-Windows-Shell-Setup__neutral section. Right-click on information technology and select Add Setting to Pass 4 specialize.

Then, in the Answer File console, expand section 4 Specialize > amd64_Microsoft-Windows-Vanquish-Setup__neutral. Prepare the CopyProfile value to True.

Additionally, you can configure the following options in the Reply file.

Laissez passer i Windows PE

Choosing an installation language in WinPE:

Microsoft-Windows-International-Core-WinPE  InputLocale: en-Us;  SystemLocale: en-US  UILanguage: en-U.s.a.  UserLocale: en-US

The Windows ten Production cardinal:

Microsoft-Windows-Setup -> UserData -> ProductKey -> Key = {specify your MAK or GVLK primal}

To automatically take user understanding:

Microsoft-Windows-Setup -> UserData -> AccepptEula = True

Laissez passer 7 oobeSystem

Skip Microsoft account creation screen (MSA):

Microsoft-Windows-Shell-Setup –> OOBE -> HideOnlineAccountScreens = Truthful

Do non ask 3 security questions for your local account:

Microsoft-Windows-Beat-Setup –> OOBE -> ProtectYourPC= 3

Create a local administrator account and set a countersign for it:

Microsoft-Windows-Trounce-Setup –> UserAccounts –> LocalAccounts -> Insert New Local Business relationship  Proper noun: admin  Group: Administrators

All empty (bare) answer file parameters must exist removed.

To bank check the settings in respond files, select in Tools > Validate Respond File option. If you configured everything correctly, a message should appear in the Messages console: No warning or errors.

Salve the answer file by choosing File > Relieve Answer File Every bit > autounattend.xml.

Now you lot can close WSIM.

Generalize Windows Image Using Answer File

Now you tin use your autounattend file to Sysprep your Windows 10 image. Run the elevated command prompt, and execute the following control (supersede the path to autounattend.xml with yours):

c:\windows\System32\Sysprep\sysprep.exe /generalize /oobe /generalize /shutdown /unattend:C:\ps\autounattend.xml

With the /generalize pick the Sysprep volition remove unique calculator data. This allows you to safely deploy this reference Windows 10 epitome on another workstation or laptop. Subsequently executing the control, the computer volition shut downward.

Capture Reference Windows x/xi Using DISM after Generalize

After shutting downwards your computer, yous tin capture a customized Windows ten image using MDT. Y'all can also use other special tools for capturing a Windows image or using DISM. Below we will consider the DISM option.

Notation. In previous versions of Windows, the ImageX tool could be used to capture and deploy an image. In the latest Windows 10 and 11 builds, you lot can do all this with DISM.

Boot the computer with the Windows reference image into Windows PE. You can do this by booting the computer from the Windows 10/11 installation disc, or recovery disc.

On the language pick screen, press Shift + F10.

In the command window that opens, type Diskpart command. Utilise the listing vol command to identify the drive letters. In our example, the installed Windows image is located on drive D.

To capture the image, run the command:

dism /capture-image /imagefile:D:\win10referenceimg.wim /capturedir:d:\ /name:"Win10 Pro reference image"

/imagefile — the wim image file that nosotros demand to create;
/Capturedir — the reference Windows install folder.

Re-create the wim Image file from a local disk. Import it into your deployment software (MDT, SCCM), or put information technology on the installation bulldoze (rename the file to install.wim).

Author
Recent Posts

Cyril Kardashevsky

I relish technology and developing websites. Since 2012 I'm running a few of my ain websites, and share useful content on gadgets, PC administration and website promotion.

Cyril Kardashevsky