Update Windows 10 in audit mode. Creating a configured operating system image. Deploy a configured image with WDS

Creating a fully configured operating system image with installed applications is often needed in a corporate environment, and home users will not refuse the installation disk to which the favorite set of programs and tweaks is introduced. In the modern Windows OS, create such an image is much easier than in Windows XP, while you can do the means of the automatic installation package.

This article describes how to prepare a fully configured system image and deploy it, as well as address the backup of the operating system to the WIM image.

On this page

You need

  • Deployment Tools From Windows Assessment and Deployment Kit (ADK)

Of course, you will need a computer to install and set the OS, as well as a place to save the system image. A virtual machine (for example, Hyper-V from Windows or VirtualBox) can be installed as a computer for installation (for example, Hyper-V from Windows or VirtualBox). You can save the configured image on the unwatching section of this computer.

For example, during the installation of the system, you can create two partitions - to one install the OS, and on the second subsequently save the image. Also, in the virtual machine you can always connect another virtual disk. Finally, the configured image can be saved on a network resource or USB disk. As you can see, there are many options - there is from what to choose.

Advantages and disadvantages of using a configured image

In my opinion, the advantages of a fully configured image look preferably shortcomings.

Benefits

  • Fast installation of a system with a set of applications, because it does not spend time on their installation. However, compared with the standard disparation of the configured image takes a little longer.
  • It is possible to further configure the operating system using the response file used in combination with the configured manner.
  • The ability to deploy an image using the utility Imagex. Standard image can only be used in conjunction with the installation program, since not all parameters are configured (for example, linguistic).

disadvantages

  • The size of the image is increasing. The final size depends on the number and scope of the applications installed. If further installation from a DVD disk is planned, it is necessary to take into account the limit of 32-bit versions to the size of the WIM file in 4 GB (2 ^ 32 bytes).
  • Can enduring versions of applications included in the image. To maintain topical versions of applications, you will have to collect the image again. Regularly updated applications, most likely, does not make sense to include in the image. They can be installed separately by automating this process.

Stages of creating a configured image

Creating your own WIM image can be divided into the following steps:

  1. Installing applications and system setup
  2. Preparation of the system with the help of the utility sysprep.
  3. Loading in Windows PE and save the image using the utility Imagex

Then the resulting image can be enabled in the installation disk, install from a network resource or deployed with Imagex.

Note on setting up custom parameters

In addition to installing applications, you can configure custom parameters in the audit mode. To apply settings to the image there are two ways.

You can:

  • Configure only system parameters, and custom imported using reg files to a configured WIM image (or to the original image before the installation described here).
  • Configure both user and system parameters, and then secure the response file to copy the built-in account profile Administrator In the standard user profile.

Import registry parameters

The principle itself is considered in detail the use of the registry tweaks. I believe that you have read it and accounted for a complete picture of the import of custom and system parameters.

Copy profile using the response file

To copy a profile of a configured account to a standard user profile, you can use the answer file containing the parameter

Microsoft-Windows-Shell-Setup | CopyProfile.

If this parameter is set to value true.Profile copying is performed.

Use this feature you need when installing a configured imageBy turning on the answer file this parameter. In this case, profile copying will occur on the passage 4 Specialize.

Example of a universal response file for 32-bit and 64-bit OS

true. true.

Why is it recommended to copy a profile when installing instead of pointing to the response file SYSPREP using the image to summarize the image?

Copying the profile in any case occurs during installation at the Specialize stage. If you use the / Unattend parameter SYSPREP, the answer file is cached and then activated during installation. At the time of writing the first version of the article, it did not work, despite the documentation.

If you use MDT or SCCM, described in the article Method is required for reasons set out in KB973289:

Now everything is in order.

Start the installation of the operating system from the installation disk and input to the audit mode

The first step of preparing the configured image is the launch of the OS from the installation disk. Installation can be done manually, or automate this process using the responses file.

Manual installation

Manual installation does not charge any tricks. If you are planning to save the configured image on a non-system disc section, use the Windows installation program to create partitions.

Council. When installing the system on a virtual machine, you can connect the second virtual disk and subsequently use it to save the image. It will simplify copying the image to your working environment, since VHD (X) can always be connected on a physical machine.

Continue the installation up to the Oobe step. It is easy to find out on the suggestion to select the account name and drawing for it.

At this stage, not Choosing an account name, click Ctrl + SHIFT + F3. This key combination will transfer the system to an audit mode with the integrated account rights. Administrator.

Automatic installation

Using the answer file, you can automate all stages of installing Windows, including controlling the hard disk partitions, input to audit mode and even installing applications in it, as described in the article. You can follow the instructions in it down to the section "Transfer of the system to Oobe mode" (the article discusses the full installation automation).

Installing updates, applications and system settings

By logging into an audit mode, you can start installing, updates, applications and setting the parameters of the operating system. Do not close the utility window sysprep. - It will be needed at the end of the setting step.

If you need to restart the system to install or update, you can do it. After rebooting, the system will return to the audit mode. As mentioned above, the process of installing applications can be automated using the response file. You can configure any system and user parameters in the Windows graphical interface. You can also import the registry settings from pre-prepared REG files.

In Windows 8 and the newer, do not update applications from the Windows Store, as this will lead to problems when generalizing the image. Delete modern applications are also needed by science. See Warning in the TechNet and KB2769827 library.

After completing the installation of applications and setting up the system, you must prepare it for further use.

Preparation of the system using the SYSPREP utility

At the end of the installation of applications and system settings, preparation is prepared using the utility. sysprep.. Depending on what kind of installation method you have chosen, the actions will differ slightly.

Manual installation

With manual installation of the utility system sysprep. It starts when entering the audit mode. To prepare the system to further use (in this case, to create a configured image), you must specify the parameters utility, as shown in the figure below.

The specified parameters are made (in parentheses equivalent parameters of the SYSPREP command line):

  1. System Preparation (/ Generalize) - Deleting unique system parameters, cleaning event logs, resetting security identifier (SID), etc. This parameter is absolutely necessary to create a configured image.
  2. Translation of the system to Oobe mode (/ Oobe) - This mode will be activated by the next system start.
  3. Turning off the system (/ shutdown).

Example of a universal response file to save 32-64-bit drivers

true. true.

Automatic installation

If you automate the entry into the audit mode and installing applications using the responses file, as described in the article Setting applications in audit mode, you need to add the following synchronous command with the highest sequence number. This command can also be used when manually installed, pre-closing the Utility window sysperp..

% Systemroot% \\ System32 \\ sysprep \\ sysprep.exe / Generalize / Oobe / Shutdown / Quiet

The first three command line parameters are indicated in the same order as the parameters described above the utility graphical interface parameters. Parameter / Quiet. - Provides work in a quiet mode and is necessary for automation.

After sysprep. Complete work, the system will be turned off. Now it is fully configured, and you can create its image using the utility. Imagex.

Loading in Windows PE and save the image using the ImageX utility

Note. Image size install.wim.included in the installation disk of the 32-bit operating system should not exceed 4 GB (2 ^ 32 bytes). Otherwise, the installation will be completed with an error. This restriction does not apply to the deployment of the image using the utility Imagex.

If Windows installation files are posted on a network resource, you can copy the configured image image and the answer file, and then downloading it in Windows PE and connecting to the network resource, start the installation from the command line.

NET USE: \\\\ Network_Share \\ Distrib Y: \\ setup.exe /unattend:unattend.xml

Deploy a configured image using the IMAGEX utility

Using Windows PE and utility Imagex, You can deploy a configured image on your computer.

The sequence of actions is this:

  • Tom formatting using utility Diskpart.
  • Apply a configured image to the utility Imagex
  • Note. Deploy an image with Imagex It is possible only on that having the same letter of the disk, which was saved in the image. In addition, with Imagex You can not deploy the standard (source) image Install.wim..

    Let's consider an example of deploying a configured image. It is assumed that the hard disk of the computer is not formatted. Uploaded to Windows PE, you need using the utility Diskpart. Create a partition on your hard disk and format it. I will demonstrate the creation of one partition on the disk.

    Diskpart Select Disk 0 Create Partition Primary Select Partition 1 Active Format FS \u003d NTFS Label \u003d "System" Quick Assign Letter \u003d C EXIT

    Additional information about the commands of the utility Diskpart. You can get by running it with the key /? or from the article Description of the DiskPart program with the command line interface. If desired, the process of creating a section can be automated.

    It remains only to apply the image.

    ImageX / Apply E: \\ Custom.wim 1 C:

    In this team:

    • / Apply - Application of the image
    • E: \\ Custom.wim - The path to the image. When placed on the network disk, you must first connect it to the command net Use E: \\\\ Network_Share \\ Images.
    • 1 - The image index saved in the WIM file.
    • c: - The letter of the volume to which the image is applied.

    Applying an image, you can make sure (team dir.) that on the section C. There are files unpacked from the image. Now this section contains an operating system in the state in which it was at the time of creating an image. If the image has been saved after executing the settings in the audit mode, the next time the computer is turned on, the system will enter the Oobe mode, giving the user the ability to complete the initial setting of the parameters.

    If you prepare a configured account profile, all new accounts will have exactly the same parameters.

    Deploy a configured image with WDS

    As in the case of a standard manner, Windows Deployment Services (WDS) can be used to deploy a configured image. A detailed story about this method goes beyond the articles, so I will limit the link to the WDS Guide, placed on Microsoft TechNet.

    Backup operating system in WIM-image

    The article focuses on installing applications and setting up the system in audit mode and preserve the image at this installation stage. The advantage of this approach is that the saved image is neutral - it does not contain any accounts (except for embedded), personal files and confidential data.

    You may be interested in the question whether it is possible to save the image of the system at the end of the full installation, i.e. after the Oobe stage, the first login and subsequent setting. Such a question is relevant if you want to install the system, to work in it for a while - install applications, configure various parameters, etc., and then create an image.

    The reference to the fact that ImageX does not know how to use hard links (I checked - knows how).

    So, after applying the image:

    • Extended file attributes are lost. These are NTFS attributes that are needed only for reverse compatibility with applications ... OS / 2.
    • Sparse files are captured, but after use is no longer any.
    • Symbolic references and consensions are automatically updated. In some scenarios (for example, SIS), this leads to the fact that the links do not do there.

    In my opinion, in typical scenarios of using the client OS at home, these restrictions can be neglected. But the restoration of such an image on another PC (even with the same hardware configuration) can lead to serious equipment conflicts.

    At the same time there are several moments that I would like to draw your attention.

    • The installed programs and personal files can occupy a lot of disk space, which will affect the size of the backup WIM image. To store the image you may need a two-layer DVD or a large-capacity USB disk.
    • You can reduce the size of the WIM image, eliminating files and folders from its composition when capturing the volume utility Imagex. To do this, use the file Wimscript.ini.which is briefly discussed in the article on the creation of a Windows PE boot disk. Its detailed description is in the Windows PE User Manual Guide, which is included in the ADK.

    Restoration

    Recovery from the backup WIM image is executed as described in the section Articles section. However, the utility command sequence Diskpart. need to adjust.

    For example, if several partitions are installed on the disk, and the system is set to the first, the sequence of commands to prepare this section to restore will be like this:

    Diskpart Select Disk 0 SELECT Partition 1 Active Format FS \u003d NTFS Label \u003d "System" Quick Assign Letter \u003d C EXIT

    You can enable a configured WIM image into the boot disk with Windows PE, thereby creating a universal system for restoring the system to restore the system and standby image.

    Conclusion

    Creating and deploying a fully configured Windows system image with the means included in ADK is a fairly simple task. Such an image can be made neutral (i.e. not containing personal files and personal data) by installing applications and setting parameters in audit mode.

    This approach allows you to further configure the image during installation using the response file, and also saves the ability to set personal parameters for the end user at the Oobe stage when you first start the system. In addition, you can use WIM image technology to create a backup of the operating system.

    This section describes how to download in audit mode, configure a computer and prepare a computer for users.

    There are two ways to download in audit mode:

    • With manual installation during the Windows® greeting screen display, press the SHIFT + CTRL + F3 key combination.
    • To configure a computer to start in audit mode, run the command Sysprep. with parameter / Audit..
    • audit.

    If the computer is configured to download in audit mode, it will be loaded in audit mode until you configure to start using Windows Welcome Screen.

    Work in audit mode

    Audit mode allows you to add additional device drivers, install applications and check the installation correctly. Manufacturers of equipment (OEM) and organizations should use the audit mode to perform manual configuration before the user is supplied to the user.

    Attention!
    • If when working in audit mode, a password-protected saver is turned on, re-log in will be impossible. This is due to the fact that the built-in administrator account used to enter the audit mode is disconnected immediately after exiting the system.

      To turn off the screen saver, you need to change the power management scheme in the Windows control panel or configure and deploy the custom power management scheme. For more information, see Configuring Power Management Systems.

    • Parameters specified in the automatic installation responses file for the setup stage oobeSystem.In audit mode are not displayed.

    Changing automatic installation parameters in audit mode

    To change the system parameters in audit mode, create a new automatic installation file.

    Exit audit mode and preparing computers for users

    After completing the configuration and testing of computer availability, you can perform a system setting for users.

    For more information about pre-configuring Windows welcome screen, see Automating Windows Welcome Screen.

    You can pre-set Windows Welcome Screen Settings using the contents of the Oobe.xml content. For more information, see the Oobe.xml Technical Manual.

    To transfer an image to another computer, you must first delete information relating only to this computer, from a configured computer. For more information, see Preparing to create an image for deployment (Generalize).

    Computer preparation for deployment

    Configuring a computer to download the Windows Welcome Screen

    • In audit mode, execute the command Sysprep. with parameter / Oobe..
    • With automatic installation, specify for the Microsoft Windows-Deployment \\ Reseal \\ Mode parameter value oobe.. For more information about these parameters, see the Windows® Automatic Installation Handbook.

    The computer will be rebooted, and the Windows Welcome Screen will start.

    During the first launch of Windows on the new PC, the system is mainly loaded in greeting or audit mode. The first or "OUT OF BOX Experience" is the user interaction mode with the operating system. Here the user can complete the installation of the OS by making a license agreement, creating a personal account, etc. To perform such actions, Windows starts in greeting mode.

    The second mode or audit mode is used to add or change the settings in the system image. When using it, the system should not apply the welcome mode settings. However, PC manufacturers use it to perform adjustments to the settings before sending the computer to the user.

    In some cases, Windows continues to operate in audit mode and the user may not guesses it until it decides to upgrade to Windows 10. At the same time, the following message will appear on the monitor screen: "Unable to install Windows while working in audit mode"

    How to solve the problem of Windows?

    Method First - Using the Command Line

    Click "Start", click "Run" and enter "CMD" (for Windows 7). Or in the search bar, specify the "Command Line" query (for Windows 8 / 8.1). Run the service on behalf of the administrator and enter the Sysprep / Oobe / Generalize command.

    IMPORTANT! Launching "Sysprep / Oobe / Generalize" leads to a Windows license dropping. Therefore, after solving the problem, the system will need to be activated again.

    After performing the process, you need to restart the PC, activate the system and start upgrading to Windows 10. The audit mode will be deactivated.

    The second method is to use the registry editor

    Press "Win + R" and enter the "Rededit" command.

    Go on the branch: "HKEY_LOCAL_MACHINE", "Software", "Microsoft", "Windows", "CurrentVersion", "SETUP", "STATE". Find the "ImageState" parameter and delete it.

    Restart the PC and update to Windows 10.

    When you first start Windows, the system can be downloaded in greeting mode or audit mode. The greeting mode (otherwise Out of Box Experience) is called the first user interaction with the operating system. In greeting mode, the user is invited to complete the installation of Windows by familiarizing and accepting the license agreement, creating an account, etc. By default, immediately after installing Windows, it starts in greeting mode.

    In turn, the audit mode is used to add settings to Windows images. When using the audit mode, the system should not apply the welcome mode settings. Computer Manufacturers (OEM) use audit mode to execute manual configuration before sending a computer to the end user.

    In some cases, Windows continues to work in audit mode, and the user may not suspect this until, for example, it will not solve go to Windows 10, because when you try to install the update, the installer will issue this message:

    Unable to install Windows 10

    Unable to install Windows while working in audit mode.

    Obviously, to continue the installation of 10-ki, you must first get out of the audit mode. To do this, you can use any of the methods below.

    Method 1 - using the command line

    1. Open the command prompt on the administrator.

    2. Enter the following command and press ENTER:

    ATTENTION: Running the Sysprep command recesses Windows licensing status. That is, if your copy of Windows is activated, and you will run this command, after you need to activate the operating system again.

    sYSPREP / OOBE / GENERALIZE

    In theory, the system will now not work in audit mode. Activate the operating system and try updating to Windows 10.

    Method 2 - using the registry editor

    1. Press + R, enter Regedit and press OK or ENTER.

    2. In the registry window, follow here:

    HKEY_LOCAL_MACHINE \\ SOFTWARE \\ Microsoft \\ Windows \\ Currentversion \\ Setup \\ State

    3. In the State section, locate the string parameter Imagstate. And remove it. After that, close the registry and restart the computer.

    Now the audit mode does not prevent the update process.

    Excellent day!

    Hello everyone today will tell you what is a SYSPREP utility. System Preparation Program (Sysprep) prepares Windows installation for duplication of discs, audit and supplies to the customer. Duplication, also called image creation, allows you to save the configured Windows image, which can then be reused in the organization. Audit mode allows you to add additional device drivers to the Windows installation. After installing additional drivers and applications, you can check the installation integrity of the Windows. The SYSPREP program also allows you to prepare the delivery to the customer. When the customer launches Windows, the welcome screen appears.

    The SYSPREP program should be used only to configure new Windows settings. It can be launched as many times as needed to build and set up the installation of Windows. However, you can reset Windows activation for no more than three times. You can not use the SYSPREP program to restart the existing already deployed Windows installation. Use the SYSPREP program only to configure new Windows settings.

    Benefits of the Sysprep program

    • Delete system data from Windows. SYSPREP can delete all information related to the operating system from the installed Windows image of the computer (SID) security identifier. Then the Windows installation can be recorded in the image and install all the organization.
    • Setting up Windows to download in audit mode. Audit mode allows you to install third-party applications and device drivers, as well as check the computer performance.
    • Setting up Windows Welcome Screen Loading. The SYSPREP program configures the installation of Windows to boot with the greeting screen when the computer starts next. As a rule, the system should be configured to download the greeting screen before delivery of the computer to the Customer.
    • Reset Windows activation. The SYSPREP program can reset Windows activation to three times.

    Audit mode allows equipment manufacturers, system builders and corporations to quickly customize the installation of Windows. In the audit mode, you can install applications, add device drivers, execute scripts, as well as check the installation of Windows. In audit mode, you do not need to apply the Windows Welcome Program options.

    Usually, Windows starts the welcome screen immediately after installation. However, when downloading in audit mode, you can skip Windows Welcome Screen and immediately load the computer desktop. This will start the process of setting as soon as possible.

    Also, the audit mode allows you to check the computer's performance before its delivery to the client. You can check the correctness of the first system launch, as well as the availability of all the equipment manufacturer or the collector of the system settings and support information systems.

    You can download in audit mode in several ways:
    With manual installation, press while the screen welcome screen is running. Ctrl + SHIFT + F3.

    When installing in automatic mode, add the Microsoft Windows-Deployment component to the OobeSystem setting step. In RESEAL | MODE Specify the "Audit". When Windows finishes the installation, the computer will reboot in audit mode. For more information about this parameter, see the Windows Installation Directory in automatic mode.

    Run the sysprep / audit in the command line window.

    Syntax

    sysprep.exe.

    Parameters

    • / Audit.
      Runs a computer in audit mode. Audit mode allows you to add additional device drivers and applications. You can also check the Windows installation before shipping it to the end user. If the Windows automatic installation was specified, the audit mode starts the AuditSystem and Audituser setting step.
    • / Generalize
      Prepares Windows installation before creating an image. If this parameter is specified, all unique system information is removed from the Windows installation. The security identifier (SID) is reset, the system recovery points are reset, event logs are deleted. During the next launch of the computer, a specialized setting step is started. A new security identifier (SID) is created and the Windows Activation Clock is reset if they have not yet been reset three times.
    • / Oobe.
      Runs a computer in a welcome screen mode. Windows Welcome Screen allows end users to customize the Windows operating system, create new accounts, rename your computer and perform other tasks. Any tasks of the OBESYSTEM setting in the response file are processed immediately, even before launching the welcome screen.
    • / Reboot
      Reboots the computer. Use this option to audit a computer and test the performance of the first system launch.
    • / Shutdown.
      Completes the computer after the completion of the SYSPREP program
      / Quiet.
      Disables the display of confirmation requests while the SYSPREP program is running. Use this option when you automatically work SYSPREP
    • / Quit.
      Closes SysPrep after performing the specified commands.
    • / unattend: File_Incomb
      Applies the settings of the answer file to Windows during the automatic installation
      File_Ships
      Specifies the name and path to the response file used.