-->

• Microsoft Oem Windows Server 2016
• Microsoft Windows Oem Downgrade Rights
• Microsoft Oem Windows 7 Download

Getting ready to build and test Windows 10 desktop PCs? This lab shows you the steps to make and deploy Windows images. We'll show you how to use the tools and commands to setup an end-to-end deployment. The commands can be scripted, helping you quickly customize new images for specific markets to meet your customers' needs.

Hi RocketZ That download is the full version, which contains the Home and Pro version If you run that from inside Windows, then you will just upgrade your PC, if you boot form the installation media, you will clean install Windows 10, which will remove everything from your PC and just clean install Windows.

Original equipment manufacturers (OEMs) and system builders use the Microsoft OEM Preinstall Kit (OPK) to preinstall Windows operating systems. This article describes the process of extracting the tools from the OEM CD-ROM. I was able to reinstall to my original factory settings (Windows 8.1 Pro), but was advised that I must now buy a complete install of Windows 10.0 Pro, after being on hold for nearly an hour. I would heartily recommend Windows 10.0 Pro if I could ever get it reinstalled-but do not recommend Microsoft's farmed- out poor technical support!

We'll walk you through the process of building a customized Windows deployment. Here's what we'll cover:

We'll start by preparing your environment, then we'll cover the steps for:

• Preparing and mounting a WinPE image
• Adding packages
• Adding drivers
• Creating WinPE media

Next we'll move onto customizing your Windows image. We'll start with offline customizations to a mounted Windows image, where we'll cover:

• Adding Drivers
• Adding Languages
• Adding Updates
• Reinstalling inbox apps
• Preinstalling Microsoft Office
• Adding tiles to the Start Layout
• Setup OOBE to display a custom EULA
• Configuring and using answer files to customize Windows Setup

We'll finish customizing the Windows image by deploying your image to a PC and then booting into Audit mode and finish making changes, including:

• Making changes in Audit mode
• Preparing Push Button Reset

Finally, we'll Finalize and Capture your image, verify everything works, and prepare your image for deployment.

• Finalizing the image

Let's get started!

Prepare your lab environment

Note

If you haven't gathered the files you need to go through this lab, see Get the tools you need for OEM deployment of Windows 10 for desktop editions.

At this point, you should have your tools ready to go. At this point, you should have:

A USB drive, formatted with two partitions, with the following on the NTFS, partition (O:):

• The extracted folder structure and files from USB-B

A technician PC that has:

• A folder called C:templab with the following media downloaded:
  • Windows installation media
  • The most recent version of the Microsoft Office OPK
  • Windows Features on Demand ISOs
  • Windows Language pack ISO
  • OPK App Update or Inbox Apps ISO
  • Windows ADK installer
  • WinPE ADK Add-on (if using the ADK for Windows 10 version 1809, or later)
  • Drivers for your image (if needed)

Let's setup your lab.

Install the Windows ADK for Windows 10

The Windows ADK is a collection of tools that enables you to manage and deploy custom Windows installations to new computers.

Important

Use the matching version of ADK for the images being customized. For example, if you're working with Windows 10, version 1809, use the ADK for Windows 10, version 1809.

On your technician PC:

1. If you have a previous version of the Windows Assessment and Deployment Kit (ADK), uninstall it.

2. Download the version of the Windows ADK that matches the version of Windows that you’re installing.

3. Run the ADK installer to install the ADK with the following options. If you're using the ADK for Windows 10. version 1809, WinPE isn't part of the ADK installer and is a separate add-on package that you have to install after you install the ADK:

   • Deployment Tools
   • User State Migration Tool (USMT)
   • Windows Preinstallation Environment (Windows PE)

4. When installation finishes, close the installer window.

Create a bootable Windows PE (WinPE) partition

WinPE is a small, command-line based operating system that you can use to capture, update, and optimize Windows images. In this section, we'll show you how to prepare a basic WinPE image on a bootable USB flash drive and try it out.

Prepare WinPE files

1. On your technician PC, start the Deployment and Imaging Tools Environment as an administrator:

   • Click Start, type Deployment and Imaging Tools Environment. Right-click Deployment and Imaging Tools Environment and select Run as administrator.

2. Use copype to create a working directory that has the base WinPE files:

   Tip

   If this doesn't work, make sure you're in the Deployment and Imaging Tools Environment, and not the standard command prompt.

Customize WinPE

You can customize a WinPE image (boot.wim) in several ways by adding files and components to a mounted WinPE image.

Here are some examples of how you can modify your WinPE image:

• Add an optional component. WinPE Optional components ship in the ADK. These are packages that you can add to your WinPE image to add functionality to WinPE.

• Add a graphics or network driver. (WinPE includes generic video and network drivers, but in some cases, additional drivers are needed to show the screen or connect to the network.). To learn more, see WinPE: Add drivers.

• Set the power scheme to high-performance. Speeds deployment. Note, our sample deployment scripts already set this scheme automatically. See WinPE: Mount and Customize: High Performance.

• Optimize WinPE: Recommended for devices with limited RAM and storage (for example, 1GB RAM/16GB storage). After you add drivers or other customizations to Windows PE, see WinPE: Optimize and shrink the image to help reduce the boot time.

When you add packages to WinPE, performance will be reduced and boot time will increase. Only add packages that you need to complete a successful deployment.

Mount your WinPE image

To customize a Windows image, you have to mount it before you can work with it. This is true for WinPE images as well. Mounting an image extracts the contents of an image file to a location where it can be viewed and modified. Throughout this lab we'll use DISM to mount and modify images. DISM comes with Windows, but we'll be using the version that is installed by the ADK, which we'll access through the Deployment and imaging tools environment.

Boot.wim is the WinPE image file. You can find it in the files that you copies with copype.cmd.

Mount the image:

• From the Deployment and imaging tools environment, mount the image:

Add packages, optional components, dependencies, and language packs to WinPE (optional)

Use Dism /Add-Package to add packages to your mounted WinPE image. The ADK has WinPE Optional Components you can add for additional WinPE functionality. Some packages have dependencies and require other packages to be installed. For these packages, you'll have to install the dependencies before you add the a package. For example, if you want to use Powershell in WinPE, you have to install the NetFx as well as the language-specific OCs. You can find OC CABs in C:Program Files (x86)Windows Kits10Assessment and Deployment KitWindows Preinstallation Environment<arch>WinPE_OCs. Here's how to add Powershell support for en-us:

Note

Only add additional packages when necessary. The more packages you add, the greater the impact to boot time and performance.

Add drivers to WinPE (If needed)

If you need to add drivers to WinPE, you'll use Dism /Add-Driver. You'll only need to do this if WinPE doesn't already include the drivers for your hardware.

Here's how to add drivers to WinPE:

Note

This method requires .inf-based drivers. Get .inf-based drivers from your hardware vendor.

Where C:Out-of-Box Driversmydriver.inf is the path of the driver you're adding.

To install all of the drivers in a folder and all its subfolders use the /recurse option. For example:

Where C:drivers is the drivers folder that you're adding.

Set the power scheme to high-performance

Setting WinPE to use high-performance mode will speed deployment. The sample scripts set WinPE to high-performance mode when they run, but if you want to make sure that WinPE always runs in high-performance mode, you can modify startnet.cmd in the WinPE image.

1. Use notepad to open C:Winpe_amd64mountwindowssystem32startnet.cmd

2. Add the following line to startnet.cmd:

3. Save the file and close Notepad.

Cleanup your WinPE image

Run dism /cleanup-image to reduce the disk and memory footprint of WinPE and increase compatibility with a wide range of devices:

See WinPE: Optimize and shrink the image for more details.

Commit your changes and unmount your image

If you've added extra files in your WinPE image, you can delete them to reduce your image size and improve performance. When you're done working with your image, you can commit your changes and unmount your image. Then export your customized WinPE image into your WinPE folder:

Create a bootable WinPE drive

Now that you've updated your WinPE image to include everything it needs, you can make a bootable WinPE drive. From the Deployment and Imaging Tools Environment:

1. Connect your USB key to your technician PC.

2. Copy WinPE to the WinPE partition:

   Where P: is the letter of the WinPE drive.

   When prompted, press Y to format the drive and install WinPE.

Boot your reference PC to WinPE

1. Connect the USB drive to your reference device.

2. Turn off the reference device, and then boot to the USB drive. You usually do this by powering on the device and quickly pressing a key (for example, the Esc key or the Volume up key).

   Note

   On some devices, you might need to go into the boot menus to choose the USB drive. If you're given a choice between booting in UEFI mode or BIOS mode, choose UEFI mode. To learn more, see Boot to UEFI Mode or Legacy BIOS mode.If the device does not boot from the USB drive, see the troubleshooting tips in WinPE: Create USB Bootable drive.

   WinPE starts at a command line, and runs wpeinit to set up the system. This can take a few minutes.

Leave this PC booted to Windows PE for now. You can remove the bootable USB drive.

Customize your Windows image

Now that you have your WinPE image customized for your deployment, we'll get into how to get your Windows image ready for deployment. The process is similar to how we changed our WinPE image, but Windows has many additional customization options.

You can make either offline or online or online customizations to a Windows image. Offline customizations are done to the windows image (install.wim) from either the Technician PC or from the destination PC while booted into WinPE. In most scenarios, offline customizations are customizations you perform from the Technician PC. Online customizations are done on the Reference PC after it’s been booted into audit mode.

The table below shows which customizations can be made online and offline. In a manufacturing environment, it’s recommended to do as many customizations as possible offline.

Scenario	Offline	Online
Adding device drivers	X	X
Adding Microsoft Store apps	X	X
Adding Desktop (win32) apps	-	X
Adding language packs	X	X
Remove default language pack	X	-
Adding features-on-demand	X	X
Adding the latest cumulative update	X	X
Image optimization	X	X
Microsoft Store apps duplicate files cleanup	X	-
Microsoft Office	X	X

Prepare and mount a Windows image

In this section we'll cover how to mount Windows images on your technician PC. Mounting a Windows image is the same process that we used to mount the WinPE image earlier. When we mount our Windows image (install.wim), we'll be able to access a second image, WinRe.wim, which is the image that supports recovery scenarios. Updating install.wim and WinRE.wim at the same time helps you keep the two images in sync, which ensures that recovery goes as expected.

Before we continue, make sure that you've created your USB-B drive. We showed you how to set it up in the Get the tools you need section.

Backup your Windows image file

Before working on your Windows image, you want to make sure you have a backup copy in case something goes wrong. Make a copy of the original image:

First copy the install.wim from your Windows installation media to USB-B. Install.wim includes both Home and Professional images. We'll export the Home image from install.wim, and then work with that image during this lab.

1. Insert USB-B into your technician computer.

2. Mount the Windows 10 Home .img from the Win Home 10 32-BIT/X64 English OPK.

3. From the mounted image, copy D:sourcesinstall.wim to C:templabimages. (Where D: is the drive letter of the mounted image.)

4. From the Start menu, open Windows Kits, open the Deployment and Imaging Tools Environment as administrator.

5. Make a copy of your image in case something goes wrong.

6. Export the Home edition (index 2) from install.wim as basicimage.wim and delete the original C:templabimagesinstall.wim:

   Now that you have your image exported, you can mount it.

Mount your Windows image

Create a mount directory and mount basicimage.wim:

(where E: is the drive letter of USB-B)

Mount your WinRE image

If a system can't successfully boot into Windows, it will fail over to the Windows Recovery Environment (WinRE). WinRE can repair common causes of unbootable operating systems. WinRE is based on WinPE, and to make it work for your customers, you can add drivers, languages, Windows PE Optional Components, and other troubleshooting and diagnostic tools.

The WinRE image is included inside the Windows 10 image, and is eventually copied to the Windows RE tools partition on the destination PC or device. To modify the WinRE image, you'll mount the Windows image, then mount the WinRE image inside it. Make your changes, unmount the WinRE image, then unmount the Windows image.

You should update your recovery image to ensure a consistent recovery experience whenever you:

• Add boot-critical .inf-style drivers, such as the graphics and storage drivers.
• Add major updates to Windows, like LCUs.
• Add new languages, though this isn’t always possible, as not all languages have Windows RE equivalents.)

Note

This lab assumes you’d rather keep winre.wim inside of install.wim to keep your languages and drivers in sync. If you’d like to save a bit of time on the factory floor, and if you’re okay managing these images separately, you may prefer to remove winre.wim from the image and apply it separately.

• Mount the Windows RE Image file from your mounted image.

  Tip

  If winre.wim cannot be seen under the specified directory, use the following command to set the file visible:

  Troubleshoot: If the mounting operation fails, make sure you're using DISM from the Deployment and Imaging Tools Environment. Do not mount images to protected folders, such as the UserDocuments folder. If DISM processes are interrupted, consider temporarily disconnecting from the network and disabling virus protection.

Offline customizations

With your images mounted, you can start customizing. We'll show you how to make offline customizations to your Windows image. Offline customizations are changes that you can make to a mounted image without having to boot into the Windows installation. First, we'll walk through adding (and removing) languages from your Windows image.

About Languages

In this section, we'll show you how to add languages to a Windows installation. If you want to add a language, you'll need a language pack from the Language Pack ISO, as well as an internet connection or access to the Feature on Demand ISO.

Notes

• Add languages before major updates. Major updates include hotfixes, general distribution releases, or service packs. If you add a language later, you'll need to reinstall the updates.
• Add major updates before apps. These apps include universal Windows apps and desktop applications. If you add an update later, you'll need to reinstall the apps. We'll show you how to add these later in Lab 6: Add universal Windows apps
• Add your languages to your recovery image, too: Many common languages can be added to your recovery image. We'll show you how to add these later in Lab 12: Update the recovery image.

Always use language packs and Features-On-Demand (FOD) packages that match the language and platform of the Windows image.

Features on demand (FODs) are Windows feature packages that can be added at any time. When a user needs a new feature, they can request the feature package from Windows Update. OEMs can preinstall these features to enable them on their devices out of the box.

Common features include language resources like handwriting recognition. Some of these features are required to enable full Cortana functionality.

The following table shows the types of language packages and components available for Windows 10:

Component	Sample file name	Dependencies	Description
Language pack	Microsoft-Windows-Client-Language-Pack_x64_de-de.cab	None	UI text, including basic Cortana capabilities.
Language interface pack	LanguageExperiencePack.am-et.neutral.appx	Requires a specific fully-localized or partially-localized language pack. Example: ca-ES requires es-ES.	UI text, including basic Cortana capabilities. To learn more, see Available Language Packs for Windows.
Basic	Microsoft-Windows-LanguageFeatures-Basic-de-de-Package	None	Spell checking, text prediction, word breaking, and hyphenation if available for the language. You must add this component before adding any of the following components.
Fonts	Microsoft-Windows-LanguageFeatures-Fonts-Thai-Package	None	Fonts required for some regions. Example, th-TH requires the Thai font pack.
Optical character recognition	Microsoft-Windows-LanguageFeatures-OCR-de-de-Package	Basic	Recognizes and outputs text in an image.
Handwriting recognition	Microsoft-Windows-LanguageFeatures-Handwriting-de-de-Package	Basic	Enables handwriting recognition for devices with pen input.
Text-to-speech	Microsoft-Windows-LanguageFeatures-TextToSpeech-de-de-Package	Basic	Enables text to speech, used by Cortana and Narrator.
Speech recognition	Microsoft-Windows-LanguageFeatures-Speech-de-de-Package	Basic, Text-To-Speech recognition	Recognizes voice input, used by Cortana and Windows Speech
Retail Demo experience	Microsoft-Windows-RetailDemo-OfflineContent-Content-de-de-Package	Basic, plus the language-neutral Retail Demo package: Microsoft-Windows-RetailDemo-OfflineContent-Content-Package	Retail Demo experience.

Add or change languages

In this section, we'll add languages and Features On Demand to your Windows image. We'll add the German (de-de) language pack, then we'll add the Japanese (ja-jp) language. Japanese is an example of a language that requires additional font support.

Important

If you install an update that contains language-dependent resources prior to installing a language pack, the language-specific changes in the update won't be applied when you add the language pack. You need to reinstall the update to apply language-specific changes. To avoid reinstalling updates, install language packs before installing updates.

Language updates have a specific order they need to be installed in. For example, to enable Cortana, install, in order: Microsoft-Windows-Client-Language-Pack, then –Basic, then –Fonts, then –TextToSpeech, and then –Speech. If you’re not sure of the dependencies, it’s OK to put them all in the same folder, and then add them all using DISM /Add-Package.

Make sure that you are using language packs and features on demand that match the architecture of the image you are working with. Below are examples for building 64-bit systems.

Copy language files

1. Mount the Language pack ISO, and copy the language pack .cab files for the languages you're adding to C:templabLanguagePacks. The examples below will use the German and Japanese languages.

2. Mount the Feature on Demand ISO, and copy the LanguageFeatures .cab files for the languages you're adding to C:templabLanguagePacks. The examples below will use the German and Japanese languages.

3. Add German language pack and Feature on Demand language packages.

   Use the language packs and Features on Demand from the 64-bit ISOs:

4. (Optional) Add Japanese language packs and features on demand.

   In Windows 10, some language-specific fonts were separated out into different language .cab files. In this section, we'll add the ja-JP language along with support for Japanese fonts.

   Use the language packs and Features on Demand from the 64-bit ISOs:

5. Verify that the language packs are now part of the mounted images:

   Make sure that the added languages are on the list.

6. Verify that the Features on Demand are in your image:

   Make sure that the language FODs are in the list:

Configure language settings

This section covers how to change the default language and timezone of your mounted Windows image.

1. Use DISM to set the default language of the image. We'll set the default language to German, since we added it into our image in the previous steps.:

2. Verify your changes

Set the default timezone

Microsoft Oem Windows Server 2016

You can use DISM to set the default timezone for a PC. Here we'll set the time zone. See Default time zones for a list of available time zones.

Remove the base language from the image

This section covers removing a language from the Windows image. This is an optional step.

Now that our image has been set to use German as the default language, we can remove the English language features from it and make it a non-English image. To remove en-US completely from the image, you'll have to remove several components.

Warning

Don't remove the English base language if you're shipping a PC in English.

For removing the language components from a 64-bit image:

Tip

Troubleshooting: If an error occurs when running these commands, try the command again on the package that failed.Example:

If the command completes with errors, check the DISM log file. at C:windowsLogsDISMdism.log.

Add languages to Windows RE

Here we'll show you how to add languages to WinRE. Adding languages to WinRE ensures that the language that a customer expects is available in recovery scenarios. Follow these steps if you added languages to your Windows image.

WinRE uses the same language packs as WinPE. You can find these language packs on the language pack ISO, and you can find language-specific WinPE OCs in the ADK installation folder at C:Program Files (x86)Windows Kits10Assessment and Deployment KitWindows Preinstallation Environmentamd64WinPE_OCs<lang>

To complete this section, copy the language packs from the Language pack ISO and the WinPE OCs from C:Program Files (x86)Windows Kits10Assessment and Deployment KitWindows Preinstallation Environmentamd64WinPE_OCs to C:TempLabLanguagePacksRE<language>.

1. Add German language packages

   Use the 64-bit versions of language packs and WinPE optional components:

2. (Optional) Add Japanese language packs and font support to WinRE. Note that for Japanese, we will add an additional cab that is for font support.

   Use the language packs and WinPE optional components from the 64-bit ISOs:

3. Set the default language for WinRE to match the default Windows language.

Remove the base languages from WinRE (Optional)

Similar to removing the base language in install.wim, we can remove the base language from WinRE as well.

For removing language components from a 64-bit image:

Drivers

You can add drivers to ensure Windows can successfully boot for the first time. Make sure that you add your driver to the right image:

• DCHU drivers: Many drivers include an information file (with an .inf extension) to help install the driver. These can be installed using tools described in this section.
• Boot-critical drivers: Graphics and storage drivers may sometimes need to be added to the Windows image (as shown in this lab), Windows PE image, and in the WindowsRE image.

The following shows how to add drivers in various ways. If your hardware doesn't require any additional drivers, you don't have to add any.

Tip

If you're creating several devices with identical hardware configurations, you can speed up installation time and first boot-up time by maintaining driver configurations when capturing a Windows image.

Add drivers to your Windows image

1. Add a single driver that includes an .inf file. In this example, we're using a driver named media1.inf:

   Where 'C:DriversPnP.Media.V1media1.inf' is the base .inf file in your driver package.

2. If you want to add an entire folder of drivers, you can use the /Recurse option. This adds all .inf drivers in the folder and all its subfolders.

   Warning

   While /Recurse can be handy, it's easy to bloat your image with it. Some driver packages include multiple .inf driver packages, which often share payload files from the same folder. During installation, each .inf driver package is expanded into a separate folder, each with a copy of the payload files. We've seen cases where a popular driver in a 900MB folder added 10GB to images when added with the /Recurse option.

3. Verify that the drivers are part of the image:

   Check the list of packages and verify that the list contains the drivers you added.

Add drivers to your WinRE image

If you added drivers to your Windows image, you should also add them to your WinRE image. Adding drivers to your recovery image ensures they are available during recovery scenarios. Adding drivers to a WinRE image is the same process as adding drivers to a regular Windows image.

Note

You can use the /recurse option to add an entire folder of drivers

Updates

While your image is mounted, you can add Windows updates. The process is similar to the one we used to add drivers earlier.

Reminder:

• Add languages before major updates. Major updates include hotfixes, general distribution releases, or service packs. If you add a language later, you'll need to re-add the updates.
• Add major updates before apps. These apps include universal Windows apps and desktop applications. If you add an update later, you'll need to re-add the apps.
• For major updates, update the recovery image too: These may include hotfixes, general distribution releases, service packs, or other pre-release updates. We'll show you how to update these later in Lab 12: Update the recovery image.
• If a Servicing Stack Update (SSU) is required, you'll have to apply it before applying the most recent General Distribution Release or any future GDRs.

Add Windows updates to your image

Use DISM to apply the latest servicing stack update (SSU) and general distribution release (GDR) as well as any prerequisite KB updates. You can find KB updates in the following locations:

GDR: https://aka.ms/win10releaseinfo

SSU: https://msdn.microsoft.com/en-us/windows/hardware/commercialize/manufacture/whats-new-in-windows-manufacturing

KB Files: https://catalog.update.microsoft.com

Important

If you install an update (hotfix, general distribution release [GDR], or service pack [SP]) that contains language-dependent resources prior to installing a language pack, the language-specific changes in the update won't be applied when you add the language pack. You need to reinstall the update to apply language-specific changes. To avoid reinstalling updates, install language packs before installing updates.

1. Get a Windows update package. For example, grab the latest cumulative update listed in Windows 10 update history from the Microsoft Update catalog. Extract the .msu file update to a folder, for example, E:updateswindows10.0-kb4016240-x64_0e60aebeb151d4b3598e4cfa9b4ccb1fc80e6e4d.msu. Make sure that your update matches the architecture of the image you are working with.

   To learn more, see https://myoem.microsoft.com/oem/myoem/en/product/winemb/pages/comm-ms-updt-ctlg-trnstn.aspx.

2. Mac ibook laptop. Add the msu to your mounted image using dism /add-package.

   You can also add multiple updates in the same command:

   Note

   Each package is typically a new KB that increases the build revision number of Windows. You can find the revision number of windows in the following registry key:HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionUBR

3. Lock in the update to ensure it get restored during recovery.

4. Verify that the updates are in the image.

   Review the resulting list of packages and verify that the list contains the package. For example:

Add Update packages to WinRE

In this section, we cover how to add updates to the WinRE image.

Important

You have to apply cumulative updates to your WinRE image in addition to your Windows image. Because updates are cumulative, when a new update is installed, old updates can be removed. The WinRE optimization that we cover later in the lab will remove unnecessary updates which will keep the WinRE image from growing in size.

To apply the update that you downloaded in the previous section to your WinRE image, you have to run dism /add-package to apply the update to the mounted WinRE image.

Features and Apps

Features on Demand

Add a Feature on Demand (FOD) to your Windows image. Features on Demand are features that you can choose to preinstall. You can see a list of available FODs, and recommendations for preinstallation here.

Here we'll show you how to preinstall the .Net Framework Feature on Demand.

Note: While it’s possible to add FODs using the /add-package command, we recommend using DISM with the /Add-Capability option.

1. Mount the Features on Demand ISO

2. On your technician PC, use DISM to get a list of available FODs in an image:

   This will show a list of available capabilities.

3. Add the .NET framework.

   Where E: is the mounted FOD ISO.

.NET framework is now added to your image.

Apps

This section covers working with Apps, including reinstalling inbox apps after updates, how to add Microsoft Store apps, and how to add Microsoft Office.

This section continues to use your mounted Windows image. If your image isn't still mounted, mount it.

Reminder: Install apps only after you have installed languages and updates, in that order.

Microsoft Windows Oem Downgrade Rights

Reinstall inbox apps

Now that you've added languages and updates to your image, you have to reinstall the apps that come with Windows. This makes sure that the apps will work and include the languages you have added to your image. To reinstall these apps, you'll need the App update OPK or the inbox Apps ISO.

1. Extract the inbox apps ISO to c:templabappsinboxamd64
2. Run the E:appsReinstallInboxApps-x64.bat script.

Your apps are now ready to work with your image.

Add a Microsoft Store app

To complete this section, you'll need to have the App update OPK or the inbox apps ISO. Whichever you are using, we'll refer to it as the App update OPK in the following steps.

1. Use DISM to add the HEVC codec .appx from the files you extracted in Step 1:

2. Install the HEVC .appx:

   Note

   Include both the x86 and x64 versions of the dependency packages.

3. Use DISM /Add-ProvisionedAppxPackage to add any additional apps to your image.

4. Verify that the apps are installed:

Install a Microsoft Store app that won't be pinned to the Start Menu

For this section, you'll need to have at least two apps to add to your image. If you don't have any signed apps you can skip to the next section.

New in Windows 10, version 1803: A Microsoft Store app can now be installed without being pinned to the Start Menu. To install an app without also pinning it, use DISM /Add-ProvisionedAppxPackage with the /region switch when installing the app. When you create a custom Start Menu later in the lab, you'll be able to exclude an installed app from the Start Menu.

1. Gather your apps for installation

2. Install your apps, specifying a region with the /region option for each app. You can specify multiple regions by separating the regions with a ;. We'll show you how you can use LayoutModification.xml with /region later in the lab:

   Note: If your apps have dependencies, include them in the command using the /DependencyPackagePath. Like the examples in the previous section, it's common for apps to have dependencies on .NET.CoreRuntime and .VCLibs, but If your apps do not share those dependencies, then do not include them in your command.

Optimize your installed apps

New in Windows 10, version 1803: You can reduce app disk usage by running DISM /Optimize-ProvisionedAppxPackages after you install apps. This command will only work when run against an offline image:

Preinstall Microsoft Office

Related sets

The Office apps are delivered as a set of apps that are installed and serviced together. The main package for Office is a set of shared code and each Office app (for example, Word, Excel, and PowerPoint) is installed as an optional package. These packages are delivered as appxbundles that support all Store languages.

App	Package ID	Files
Shared code & required app (not visible to user)	Microsoft.Office.Desktop_8wekyb3d8bbwe	shared.appxbundle shared_License1.xml
Access	Microsoft.Office.Desktop.Access_8wekyb3d8bbwe	access.appxbundle access_License1.xml
Excel	Microsoft.Office.Desktop.Excel_8wekyb3d8bbwe	excel.appxbundle excel_License1.xml
Outlook	Microsoft.Office.Desktop.Outlook_8wekyb3d8bbwe	outlook.appxbundle outlook_License1.xml
PowerPoint	Microsoft.Office.Desktop.PowerPoint_8wekyb3d8bbwe	powerpoint.appxbundle powerpoint_License1.xml
Publisher	Microsoft.Office.Desktop.Publisher_8wekyb3d8bbwe	publisher.appxbundle publisher_License1.xml
Word	Microsoft.Office.Desktop.Word_8wekyb3d8bbwe	word.appxbundle word_License1.xml

Add Office apps to your image

To add the Office apps to an image, use DISM with the /Add-ProvisionedAppxPackage option. This option also requires the following information for each app you add:

• /PackagePath: This is only used to specify the path to the .appxbundle file for the shared code package.
• /OptionalPackagePath: This is used to specify the path to the .appxbundle file for an individual app, such as Word or Excel.
• /LicensePath: This is used to specify the path to the _License1.xml file for an individual app. This is needed for both the shared package and each of the optional app packages.

1. Extract the Office OPK to C:templabapps.

2. Use DISM to add all the Office apps to an offline image. The following example assumes the appxbundle and license xml files are in subdirectories on USB-B (D:). The example also excludes the /region switch because we want Office to appear in both the All Apps list, and as a Start Menu tile.

   Tip

   You need to specify both an appxbundle and a license package for the shared package, as well as for each individual app that you want to install.

   Note

   The command for adding the Office apps in audit mode (online instead of offline) would be the same, but replace /Image:C:mountwindows with /online.

   Notes on Language Support

   When install Office with DISM, Office language files are automatically added that match the languages that are in the Windows image.

   • By default, Office will use the UI language of Windows. To configure Windows UI language, see DISM Languages and International Servicing Command-Line Options.
   • There isn't a way to add additional Office languages that aren't part of the Windows image.
   • Both display and proofing resources for Office will be installed for each Windows language.
   • Some languages supported by Windows are not supported by Office – for these cases, Office will use the closest available language (for example, es-mx will attempt to use es-es instead).
   • You can find installed Windows languages in Windows Settings > Time & language > Language.

3. Verify Office was installed:

   where C is the drive letter of the drive that contains the image.

   Review the resulting list of packages and verify that the list contains the Office apps, such as:

   To have the apps appear on the Start screen, follow the steps in the next section: Configuring Start tiles and taskbar pins.

   To complete the Office install, you’ll need to unmount the image and commit your changes, which we'll do this after we’ve completed all customizations at the end of this lab.

Modify the Start layout

New in Windows 10, version 1803

Apps can now be pinned to the All Apps list without also having to be pinned as a Start tile. This is done through the new 'region' switch (as described in the previous section). In the previous section, we added three apps to our image: App1, App2, and Office. In this lab, we will omit App1 from LayoutModification.xml to ensure that App1 only appears in the All Apps list, and not also as a Start menu tile. We will also include App2 in LayoutModification.xml to demonstrate that even if the 'region' switch was used when adding the app to the image, the app will still appear in the Start Menu if included in the LayoutModification.xml file. In other words, the LayoutModification.xml file takes precedence.

Start menu

If you don’t create a LayoutModification.xml file and you use the Start Unattend settings, Windows will take the first 12 SquareTiles or DesktoporSquareTiles settings specified in the Unattend file. The system then places these tiles automatically within the newly-created groups at the end of Start. The first six tiles are placed in the first OEM group and the second set of six tiles are placed in the second OEM group. If OEMName is specified in the Unattend file, the value for this element is used to name the OEM groups that get created.

Note

The Start layout and taskbar pins can be lost if the user resets their PC with the built-in recovery tools. To make sure these settings stay on the device, update the recovery image along with the Windows image.

The Start tile layout in Windows 10 provides OEMs the ability to append tiles to the default Start layout to include Web links, secondary tiles, classic Windows applications, and universal Windows apps. OEMs can use this layout to make it applicable to multiple regions or markets without duplicating a lot of the work. In addition, OEMs can add up to three default apps to the frequently used apps section in the system area, which delivers system-driven lists, including important or frequently accessed system locations and recently installed apps.

To take advantage of the new features, and to have the most robust and complete Start customization experience for Windows 10, consider creating a LayoutModification.xml file. This file specifies how the OEM tiles should be laid out in Start. For more information about how to customize the new Start layout, see Customize the Windows 10 Start Layout.

Get started: Use the sample layoutmodification.xml we've included in the USB-B files. Start with this file for this section of this lab. You can find it in USB-BStartLayoutlayoutmodification.xml.

To learn more about layoutmodification.xml, see LayoutModification XML.

About the Start Menu layout

1. Use the optional Region attribute in the RequiredStartGroups element to use different layouts for different regions. The Region value must be equal to two-letter country/region codes, and separated by a pipe ' ' delimiter if you're specifying multiple regions. The regions listed in the group are related to the regions you specified when you added apps to your image using the /region option. If the country/region setting for the Windows device matches a RequiredStartGroups, then the tiles laid out within the RequiredStartGroups is applied to Start.If you specify a region-agnostic RequiredStartGroups (or one without the optional Region attribute) then the region-agnostic RequiredStartGroups is applied to Start.

   In your layoutmodification.xml, add regions to RequiredStartGroups:

2. Specify the tiles you want to add within an AppendGroup. OEMs can add a maximum of two AppendGroups. The following example shows two groups called 'Fabrikam Group 1' and 'Fabrikam Group 2', which contains tiles that will be applied if the device country/region matches what’s specified in Region (in this case, the regions are Germany, Spain, France, United Kingdom, Italy, and United States). Each group contains three tiles and the various elements you need to use depending on the tile that you want to pin to Start.

3. In the Add Microsoft Store Apps section above, we asked you to install two apps using the /region switch: App1 and App2. Since we included a /region switch for both, both will be installed and appear in the All Apps list. However, to get just App2 to also appear as a Start menu tile, add the following line inside your second in the LayoutModification.xml file, such as:

   Since we set the region to 'US' for App2 when provisioning it, we should set the region to 'US' here in our LayoutModification.xml to ensure App2 only appears as a Start menu tile in US images. So, ensure your region parameter looks like this:

   Or at least includes the US, such as this:

4. Add Microsoft Office Start Menu tiles. This is a requirement for OEMs that participate in the Jumpstart program.

   You can have tiles appear on the Windows 10 Start menu for Word, PowerPoint and Excel. The tiles appear in a designated area for Microsoft apps (upper left in the following diagram). All additional apps will be accessible in the Apps list on the left.

   Add the following to the LayoutModification.xml file to add the tiles:

Note

To Add a desktop app, use the start:DesktopApplicationTile tag. If you know the application user model ID for the app, use that to identify it. Otherwise, if you pinned tiles that require .url or .lnk files, add the files to the following legacy Start Menu directories:

• %APPDATA%MicrosoftWindowsStart MenuPrograms
• %ALLUSERSPROFILE%MicrosoftWindowsStart MenuPrograms

Example:

6. Save the Start Layout file as layoutmodification.xml.
7. Copy the saved file to your mounted image, to the C:MountWindowsUsersDefaultAppdataLocalMicrosoftWindowsShell folder. If a layoutmodification.xml file already exists in the folder, replace the existing file with the new one.

Add a license agreement and info file

Add an OEM-specific license

In this section, we'll cover how an OEM can add their own license terms during OOBE.

Note

If the license terms are included, the OEM must include a version of the license terms in each language that is preinstalled onto the PC. A license term text must be an .rtf file, and have an .html file with a matching name in the same folder. See OEM license terms for more information on license files.

To begin adding license terms, you'll have to create folders for your license files, and then configure OOBE to show the license on first boot.

1. Create folders for your system languages under the following directory: C:mountwindowsWindowsSystem32oobeinfodefault

2. Name each folder under the C:mountwindowsWindowsSystem32oobeinfodefault directory as the Language Decimal Identifier that corresponds to the language. Do this step for each language pack that's in the Windows image.

   Note: Please see this link to see complete list of language decimal identifiers of corresponding languages.

   For example, if en-us and de-de language packs are added to the Windows image, add a folder named '1033' (representing en-us language) in C:mountwindowsWindowsSystem32oobeinfodefault. Then add a folder named '1031' (de-de language) under the same C:mountwindowsWindowsSystem32oobeinfodefault directory.

3. Create a license terms .rtf file for each language you have in your image, and copy them to the language-specific oobe folder.

   For example: Move the English agreement.rtf file to C:mountwindowsWindowsSystem32oobeinfodefault1033 directory and move the German agreement.rtf to C:mountwindowsWindowsSystem32oobeinfodefault1031.

4. Open a text editor and create .html versions of your license terms. Save the terms to the same folders as the .rtf versions. You can use the EULA example from OEM license terms to create sample files. The names of the EULA files should be identical, except for the extension.

5. Create an oobe.xml file to specify the license agreement.rtf file path. Windows will automatically find the accompanying .html file. Below is a sample oobe.xml which is located at USB-BConfigSetoobe.xml

6. Copy oobe.xml file to `C:mountwindowswindowssystem32oobeinfo

7. Copy oobe.xml to the laguage-specific folders you created earlier.For example: Copy oobe.xml to C:mountwindowsWindowsSystem32oobeinfodefault1033, which has a file called agreement.rtf in English. To add the German agreement, copy oobe.xml to C:mountwindowsWindowsSystem32oobeinfodefault1031 directory, which has the German agreement.rtf file.

8. Now each language folder has an oobe.xml, agreement.rtf, and agreement.thml file in that corresponding language.

When the image first boots into OOBE, it will display the license agreement.

Create an image info file and add it to your image

• Create an csup.txt file to specify when the Windows image was created. This file must include the date that the image was created, in the form of 'MM-DD-YYYY', with no other characters, on a single line at the top of the file. This command will create the file:

Customize Windows with an answer file

Answer files (or Unattend files) can be used to modify Windows settings in your images during Setup. You can also create settings that trigger scripts in your images that run after the first user creates his/her account and picks the default language. Answer files allow you specify various setup options, including how to partition disks, the location of the Windows image to install, and the product key to apply. Values that apply to the Windows installation, such as the names of user accounts, display settings, and Internet Explorer Favorites can also be specified. The answer file for Setup is typically called Unattend.xml.

Unattend files include several sections, each of which are processed at different times throughout the Windows installation process. These phases are called configuration passes. Here are the most often-used passes:

You can specify which configuration pass to add new settings to:

• 1 - windowsPE: These settings are used by the Windows Setup installation program. If you’re modifying existing images, you can usually ignore these settings.
• 2 - offlineServicing: Settings in offlineServicing are processed when DISM is used to apply an unattend file to an offline image.
• 4 - specialize: Most settings should be added here. These settings are triggered both at the beginning of audit mode and at the beginning of OOBE. If you need to make multiple updates or test settings, generalize the device again and add another batch of settings in the Specialize Configuration pass.
• 6 - auditUser: Runs as soon as you start audit mode.AuditUser is a good place to run a system test script. We'll add Microsoft-Windows-DeploymentRunAsynchronousCommand as our example. To learn more, see Add a Custom Script to Windows Setup.
• 7 - oobeSystem: Use sparingly. Most of these settings run after the user completes OOBE. The exception is the Microsoft-Windows-DeploymentResealMode = Audit setting, which we’ll use to bypass OOBE and boot the PC into audit mode.If your script relies on knowing which language the user selects during OOBE, you’d add it to the oobeSystem pass.

While you can set many Windows settings in audit mode, some settings can only be set by using an answer file or Windows Configuration Designer, such as adding manufacturer’s support information. A full list of answer file settings (also known as Unattend settings) is in the Unattended Windows Setup reference.

Microsoft Oem Windows 7 Download

Make an answer file

Use Windows System Image Manager (SIM) to create and modify unattend files. SIM is installed as part of the ADK. We have included some answer files in USB-B that will get you started. Make sure that your answer settings include the required settings as outlined in the OEM Policy Document:

• For OA 3.0 systems:

  (where E: is USB-B)

• For non-OA 3.0 systems:

  (where E: is USB-B)

Create a catalog file in Windows SIM

Catalog files (.clg) are files with information about settings that are applicable to a particular Windows image. When working with a Windows image in SIM, you have to first create a catalog file for the Windows WIM you're working with.

1. Start Windows System Image Manager (WSIM).
2. Click File > Select Windows Image.
3. In Select a Windows Image, browse to and select the image file (D:install.wim).
4. Select the Home edition of Windows 10 and click OK.
5. Click Yes to create the catalog file. Windows SIM creates the file based on the image file, and saves it to the same folder as the image file. This process can take several minutes.

The catalog file appears in the Windows Image pane. Windows SIM lists the configurable components and packages in that image.

Create an answer file

If you're not working with the existing unattend file, you can create a new one in Windows SIM:

• Click file > New Answer File

The new answer file will appear in the right-pane.

Add answer file settings

In this section, we'll show you how to create an answer file that can configure settings when you deploy your Windows image.

Before you start, create a folder called Panther in your mounted Windows image. Windows will automatically look in this folder for an answer file.

Add OEM info (optional)

1. In the Windows Image pane, expand Components, right-click amd64_Microsoft-Windows-Shell-Setup_(version), and then select Add Setting to Pass 4 specialize.
2. In the Answer File pane, select Components4 specializeamd64_Microsoft-Windows-Shell-Setup_neutralOEMInformation.
3. In the OEMInformation Properties pane, in the Settings section, set:
4. Save the answer file in the Panther folder as USB-BAnswerFilesunattend.xml.

Next you'll have to make sure that the logo you specified above is in your Windows image.

1. Create a 32-bit color image with a maximum size of 120x120 pixels. Save it as D:AnswerFilesFabrikam.bmp file on your Technician PC. We've included a sample on USB-B, which you can use for this lab: D:LogosFabrikam.bmp.

2. Create a folder in your mounted Windows image called Fabrikam.

3. Copy Fabrikam.bmp to the Fabrikam folder you just created:

Set the device to automatically boot to audit mode

Using the same unattend.xml file, set the PC to automatically boot into Audit mode.

1. In the Windows Image pane, expand Components, right-click amd64_Microsoft-Windows-Deployment_(version), and then select Add Setting to Pass 7 oobeSystem.
2. In the Answer File pane, select Components7 oobeSystemamd64_Microsoft-Windows-Deployment_neutralReseal.
3. In the Reseal Properties pane, in the Settings section, select Mode=Audit.
4. Save the answer file in the Panther folder as unattend.xml.

Enable S-Mode

Note

If you don't want to enable S-Mode, you can skip to the next section.

New in Windows 10, version 1803: Windows 10 S is no longer a separate SKU from other versions of Windows. S-mode is now a mode that can be activated on Home and Pro SKUs.

Set S ModeIn this section, we'll show you how to enable S mode in a Windows image. We'll use an Unattend file that has a setting in Pass 2 - offlineServicing, and use DISM to apply it to our mounted Windows image.

1. Use Windows SIM to modify unattend.xml.

2. Add the amd64_Microsoft_Windows_CodeIntegrity component to Pass 2 offline Servicing.

3. Set amd64_Microsoft_Windows_CodeIntegritySkuPolicyRequired to 1.

4. Save the answer file in the Panther folder as unattend.xml.

5. Use DISM to apply the unattend file and enable S Mode:

   Note: Only Pass 2 - offline Servicing is processed when an unattend file is applied with DISM.

S mode is now applied to the Windows image. When the PC boots, the same Code Integrity policy that is enforced in Windows 10 S will be enforced on your Windows installation.

Enable Manufacturing mode

If you plan to make additional changes to your image in audit mode, such as editing the registry, running a script, or running a command from the command-prompt, you have to temporarily enable Manufacturing Mode, which allows unsigned code that is normally blocked in S Mode to run in Audit mode. This allows you to run scripts, installers and diagnostic tools (i.e., unsigned code) during the manufacturing process. Manufacturing Mode is enabled by adding a registry key to the offline image, and it’s disabled by removing the key when booted into audit mode.

1. On your mounted image, load the SYSTEM registry hive from your mounted image into regedit on your Technician PC. We'll use a temporary hive called HKLMWindows10S.

2. Add the manufacturing registry key.

3. Unload the registry hive from your Technician PC.

After you unmount your image and commit your changes (below), your Windows 10 in S Mode image will have the manufacturing key that will allow you to run unsigned code in audit mode.

Important

Make sure to remove the manufacturing registry key before shipping your Windows 10 in S mode device. We show you how to do that later in the lab, or you can learn how at Manufacturing mode

Set the Windows edition

In this section, we will upgrade the Windows OS edition from Home to Pro.

Notes:- You cannot set a Windows image to a lower edition.- Note: You should not use this procedure on an image that has already been changed to a higher edition.- Since S-mode is not enabled until this image is booted on the Reference device, it doesn’t matter if you run the /Set-Edition command before or after applying the unattend settings (which includes the S-mode <SkuPolicyRequired> element).- You wouldn't normally switch editions offline like we'll show you here. Instead of upgrading editions, you would've mounted a Windows Professional wim to begin with. This step is included here for instructional purposes; just to show you the use of the /Set-Edition command.

1. Determine available editions by running the following command to determine what images you can upgrade the image to:

   Note the edition IDs available.

2. Upgrade the edition to the Professional edition.

Keep Windows settings through a recovery

In recovery scenarios, Windows doesn't automatically save settings created through with answer files, Windows Start Menu customizations created with LayoutModification.xml, or first-login info from oobe.xml.

To make sure Windows saves your customizations:

• Save copies of unattend.xml, LayoutModification.xml, plus your C:mountwindowsWindowsSystem32OOBE folder, in C:RecoveryOEM.

• Add scripts ResetConfig.xml and EnableCustomizations.cmd to C:RecoveryOEM. Get these from Sample scripts: Keeping Windows settings through a recovery.

Optimize WinRE (part 1)

1. Increase the scratchspace size of the WinRE image.

2. Cleanup unused files and reduce the size of winre.wim

Unmount your images

1. Close all applications that might be accessing files from the image, including File Explorer.

2. Commit the changes and unmount the Windows RE image:

   where C is the drive letter of the drive that contains the image.

   This process can take a few minutes.

3. Make a backup copy of the updated Windows RE image and replace the old WinRE image with the newly exported one:

   If prompted, specify F for file

   Troubleshoot: If you cannot see winre.wim under the specified directory, use the following command to set the file visible:

4. Check the new size of the Windows RE image:

5. Based on the size of the new winre.wim, adjust the partition sizes in the deployment scripts so they include enough room for winre.wim, as well as some additional free space.

   Follow the below partition layout size chart to determine the size of your recovery partition in the createpartitions-<firmware>-<imageformat>.txt files. The amount of free space left is after you copy winre.wim to the hidden partition.See the below disk partition rules for more information.

   Partition Size	Free space
   Less than 500 MB	Minimum 50 MB free
   450 MB - 680 MB	Minimum 320 MB free
   More than 680 MB	1024 MB free

   Example of the recovery partition size from the createpartitions diskpart scripts.:

6. Optimize the Windows image the same way you did with the WinRE image:

7. Commit the changes and unmount the Windows image:

   Where C is the drive letter of the drive that contains the image. This process may take several minutes.

8. Finish optimizing your image by exporting the image. During the export process, DISM removes files that were superseded and the image will have a reduced file size. Export the Windows image into a new image file:

You now have a customized Windows image that you can deploy to other PCs. In the next section, we'll show you how to deploy the image to your reference PC, make online changes, and then finalize the Windows image to get it ready for final deployment.

Deploy your images to a new PC

In this section we'll deploy an image to a PC so that it can be customized in Audit mode. Before you start this section:

• Copy your customized images to USB-BImages

• Make sure the deployment scripts in USB-BDeployment. These should have been copied when you extracted the USB-B download to USB-B.

Boot to WinPE

If you're not already booted into WinPE on the device you're deploying your image to, boot into WinPE:

1. Connect the USB key with the WinPE partition boot the reference computer.
2. If you're using two separate USB drives, after WinPE has been booted connect USB-B.
3. At the X:Windowssystem32> command line, type diskpart and press Enter.
4. At the DISKPART> command line type list volume.
5. In the 'Label' column, note the letter of the volume under the 'Ltr' column. This is the drive letter of your USB key. (example E)
6. Type exit to quit Diskpart

Use a deployment script to apply your image

Run a script to create partitions and apply your image. We'll use applyimage.bat in USB-Bdeployment to do this for us.

ApplyImage.bat uses diskpart scripts to create the partitions and define the partition layout. This script and the subscripts it calls must be placed in the same subfolder. You can update these scripts to change the partition sizes as you desire.

Note

If you're going to be capturing and deploying your final image as an FFU, choose the options to not configure recovery. This allows you to expand the Windows partition, if needed, after you apply your FFU. You can configure recovery after you expand the Windows partition.

1. Run applyimage.bat and specify the image to apply:

   Where D: is the drive letter of your script and image on your USB Storage drive.

   When prompted by the script:

   1. Choose whether or not to configure the recovery partition

      • Y: Configures the Windows recovery partition
      • N: Does not configure the recovery partition. The recovery partition can be configured later. Choose this option if you're going to be capturing and deploying your image as an FFU.

   2. Press Y to format the drive

   3. Choose N to not to deploy as Compact OS.

   4. Press N to indicate the image does not include extended attributes (EA)

      Note

      Only use compact OS on Flash drive based devices as compact OS performance is heavily dependent on the storage device capabilities. Compact OS is NOT recommended on rotational devices. Please reference Compact OS for more information.

2. Remove the USB drive and reboot the reference PC.

   The PC should boot into Windows Audit mode based on the settings of the unattend file we created earlier. If you're not using an unattend.xml file that sets the PC to boot into Audit Mode, you can press Ctrl+Shift+F3 during OOBE to boot into Audit mode.

Make online customizations (audit mode)

You can use audit mode to customize Windows using the familiar Windows environment. In audit mode, you can add Windows desktop applications, change system settings, add data, and run scripts.

To make sure your audit mode changes are included in the recovery image, you'll need to capture these changes into a provisioning package using ScanState. This package gets used by the system recovery tools to restore your changes if things go wrong. You can optionally save drive space by running the applications directly from the compressed recovery files; this is known as single-instancing.

If you want to capture the changes in an image and apply it to other devices, you'll need to use Sysprep to generalize the image.

Verify Customizations in Audit Mode

We don't recommend connecting your PC to the internet during manufacturing, and also don't recommend isntalling updates from Windows Update in audit mode because it will likely generate an error during sysprep.

1. After setup has finished, the computer logs into Windows in Audit mode automatically as an Administrator.
2. Verify the changes from the answer file (see manufacturer name, support phone number and other customizations) are present.

Verify the edition

Earlier in the lab, we upgraded the edition from Windows Home to Windows Professional. Verify this change:

1. Open Command Prompt as administrator

2. Run:

3. Make sure it's the right edition. It should look like this:

   Note: If you are working with a device that has S Mode enabled, the edition will still just say 'Professional.' This is because S Mode is a mode, not an edition.

Verify S Mode

If you enabled S Mode earlier in the lab, verify that S Mode is enabled.

1. From Start, open Settings.
2. In Settings, open Update & Security
3. Choose Activation from the left pane

If your device has S Mode enabled, it will show here.

Apps and Store opportunities

Through Windows 10 and the Microsoft Store, you have tremendous opportunities for brand and device differentiation, revenue creation, and customer access.

Microsoft Store apps are at the center of the Windows 10 experience. They are Windows universal apps, so you can build apps for desktops, tablets, or phones that run Windows 10. As an OEM, you can provide an engaging customer experience and increase brand loyalty by providing a great set of value-added software and services along with the high-quality hardware that you build.

Important: The key below must be set in Audit mode.

You have to change a registry setting to add your OEM ID. If you're an OEM Microsoft Store Program participant, contact PartnerOps@microsoft.com to get your OEM ID.

Item	Location in Registry
OEMID	HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionStore, (REG_SZ) OEMID
SCM ID	HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionStore, (REG_SZ) StoreContentModifier

OEMID

1. Run regedit.exe from Command Prompt
2. Navigate to HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionStore
3. Right click under (Defalut) -> click new
4. Click String Value
5. Type OEMID
6. Double click OEMID and enter OEM name in Value data: text field

SCMID

1. Run regedit.exe from Command Prompt
2. Navigate to HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionStore
3. Right click under (Defalut) -> click new
4. Click String Value
5. Type StoreContentModifier
6. Double click StoreContentModifier and enter OEM name in Value data: text field

Important

The OEMID registry key is not restored automatically during PBR in Windows 10. Please refer to the scanstate section of this guide on how to restore the OEMID registry key during PBR operation.

Prepare your image for Push Button Reset

This section provides guidance for setting up the recovery environment for Push Button Reset (PBR) scenarios.

Please reference Push-button reset and Windows Recovery Environment (Windows RE) and Hard Drives and Partitions for more information.

Push-button reset, is a built-in recovery tool which allows users to recover the OS while preserving their data and important customizations, without having to back-up their data in advance. It reduces the need for custom recovery applications by providing users with more recovery options and the ability to fix their own PCs with confidence.

I

Prepare ScanState

To start working with Push Button Reset, you'll need to copy ScanState to USB-B.

Use scanstate to capture Classic Windows applications and settings on your image.

Note: You'll use your technician PC to prepare ScanState.

1. On Technician PC Insert USB-B

2. Open Deployment and Imaging tools command prompt as administrator

3. Run copydandi.cmd to copy necessary files to USB-Bscanstate:

   Where E: is the letter of USB-B drive.

Create a Scanstate migration file

In this section, you'll create a configuration file that will restore files and registry keys during Push-button reset.

Create a migration XML file used to restore registry values manually entered during manufacturing process. The sample below restores the OEMID registry value set earlier in this document.

Note:USB-Brecoveryrecoveryimageregrecover.xml already contains the registry values. You can use this file instead of creating a new file.

1. Open notepad

2. Copy and paste the following xml into Notepad. This tells ScanState to migrate the OEMID registry key:

3. If you enabled S mode, make sure that the manufacturing registry key doesn't get migrated by telling ScanState to exlcude it. Add the following rule to exclude the registry key:

4. Save the file as regerecover.xml.

Create recovery package using Scanstate

On your reference PC:

Use ScanState to capture installed customizations into a provisioning package, and then save it to c:Recoverycustomizations. We'll use samples from USB-BRecoveryRecoveryImage to create the provisioning package.

Important: For Push Button Reset to work properly, packages have to be .ppkg files that are stored in C:RecoveryCustomizations.

1. Create the recovery OEM folder and copy contents of USB-BRecoveryRecoveryImage

   Important: To retain the customized start layout menu during recovery the layoutmodification.xml needs to be copied again during recovery process. We'll copy it here and then use EnableCustomizations.cmd to copy it during recovery.

2. Run ScanState to gather app and customizations

   For x64 Windows 10 PCs:

   Where E: is the drive letter of USB-B

3. When ScanState completes successfully, delete scanstate.log and miglog.xml files:

Create Extensibility scripts to restore additional settings

You can customize the Push-button reset experience by configuring extensibility points. This enables you to run custom scripts, install additional applications, or preserve additional user, application, or registry data.

During recovery, PBR calls EnableCustomizations.cmd which we'll configure to do 2 things:

1. Copy the unattend.xml file used for initial deployment to the windowspanther.
2. Copy the layoutmodification.xml to the system.

This will restore the additional layout settings from these 2 answer files during PBR.

[!ImportantRecovery scripts and unattend.xml must be copied to c:RecoveryOEM for PBR to pickup and restore settings defined in the unattend.xml.

Copy unattend.xml files for restoring settings

For OA 3.0 systems:

For non-OA 3.0 systems:

Copy winre.wim backup

During the deployment winre.wim file is moved. Before capturing a final image, the backup winre.wim we created must be copied back, or the recovery environment will not work in the final image deployment.

Reseal the image

In this section, we'll use sysprep.exe to reseal our image and get it ready for factory deployment.

1. Delete installation folders and files that have been created of the preloaded applications. These folders can increase the size of a captured .wim file.
2. If the SysPrep Tool is open, close it and open Command Prompt in Administrator mode.
3. Generalize the image by using answer file with additional settings:

Remove the Windows 10 in S mode manufacturing key

If you have manufacturing mode enabled, remove the manufacturing registry key:

1. Open Command Prompt.
2. Remove the registry key:

   Important

   Don't ship a Windows 10 in S mode device with the registry key in place.

Finalize and Capture your image

We'll show you how to finalize and capture a factory image for mass deployment. To start this section, make sure your reference machine is shutdown after running sysprep in the previous section.

1. Boot the Reference computer into WinPE.

2. After WinPE has booted connect USB-B.

   Troubleshooting:

   • If the reference PC boots from its internal HDD, Windows will enter the specialize and OOBE passes. You won't be able to capture a stable and generalized image if any of the configuration passes have completed. If either of those passes have completed, you'll need To generalize the image again. You can do with in Audit Mode (<Ctrl>+<Shift>+<F3> during OOBE). In Audit mode, run the Sysprep command from above. Make sure the PC boots to WinPE on the next restart.

   • If the system still boots to the internal HDD, check the PC's boot priority. Make sure that the USB has a higher boot priority than the internal hard drive.

3. Identify Windows Partition Drive letter using diskpart.

   1. At the X:windowssystem32> prompt, type diskpart and press the key to start Diskpart.

   2. At the DISKPART> prompt type list volume.

   3. Under the 'Label' column, locate the volume that is labeled 'Windows'.

   4. Note what letter it is has been assigned under the 'Ltr' column (Example: C). This is the USB key's drive letter.

   5. Type exit to quit Diskpart.

(CompactOS Only) Convert installed customizations

This section shows how to reduce the size of ScanState packages.

Important

Only do this step if you are deploying to a device with limited storage. Single instancing impacts the launch performance of some desktop applications.

See Compact OS for more information.

To reduce the size of your ScanState recovery packages, run the following command from WinPE on your reference device:

Capture your image

In this section, we'll tell you how to capture your sysprepped image. You can capture either a WIM or an FFU.

Capture a WIM

On your reference PC:

1. Identify Windows Partition Drive letter.

   1. At the X:windowssystem32> prompt, type diskpart and press the key to start Diskpart.

   2. At the DISKPART> prompt type list volume

   3. Under the 'Label' column, locate the volume that is labeled 'Windows'

   4. Note what letter it is has been assigned under the 'Ltr' column (Example: C). This is the drive letter that needs to be used

   5. Type exit to quit Diskpart

2. Capture the image of the windows partition to USB-B. This process takes several minutes.

   Note: We recommend using a cache directory when running DISM. In this step we'll create scratchdir on the USB-B key for temporary files, but you can choose any hard drive with available space for your scratch directory.

   This captures an image called CustomImage.wim to E:Images. When the image capture is complete, you can shut down your reference PC.

With your image captured, you can skip to Verify your final image.

Capture an FFU

On your reference PC:

1. Identify Windows Partition Drive letter.

   1. At the X:windowssystem32> prompt, type diskpart and press the key to start Diskpart.

   2. At the DISKPART> prompt type list disk

   3. Under the 'Disk ###' column, identify the the disk that has the Windows installation, and note the assigned disk number. This will look something like Disk 0.

   4. Type exit to quit Diskpart

2. Capture an image of the windows disk to USB-B. This process takes several minutes.

   This captures an image called CustomImage.wim to E:Images. When the image capture is complete, you can shut down your reference PC.

Verify your final image

In this section, we'll cover how to deploy your captured image for testing and verification.

Deploy your image to the reference device

1. Boot the PC you want to test your image on into WinPE.

2. Run applyimage.bat to deploy the image.

   If you captured a WIM called customimage.wim:

   or

   If you captured an FFU called CustomImage.FFU:

3. Follow the script's prompts to apply the image.

4. Type exit to close WinPE and restart the PC.

Validate the configuration

Your PC will restart and boot into Windows for the first time.

1. In OOBE, create a dummy user which will be deleted later.

2. Verify that any applications and offline customizations are still in your image and working properly.

   Some things to check are:

   • Taskbar
   • Pinned Apps
   • Desktop Wallpaper is set to display the right image
   • OEM Information displays correctly
   • OEM App ID registry key is set
   • Default Theme is the one you chose
   • Store apps start properly
   • Desktop applications start ok
   • Desktop applications applied via SPP start ok
   • If you enabled S mode, make sure the manufacturing registry key is removed

Verify Recovery

1. Verify that your customizations are restored after recovery, and that they continue to function by running the Keep my files and Remove everything features from the following entry points:

   • Settingsa. From the Start Menu, click Settings,b. In the Settings app, click Update & security, and then click Recovery.c. Click the Get Started button under Reset this PC and follow the on-screen instructions.

   • Windows REa. From the Choose an option screen in Windows RE, click Troubleshootb. Click Reset this PC and then follow the on-screen instructions

2. Verify that recovery media can be created, and verify its functionality by running the bare metal recovery feature:a. Launch Create a recovery drive from Control Panelb. Follow the on-screen instructions to create the USB recovery drivec. Boot the PC from the USB recovery drived. From the Choose an option screen, click Troubleshoote. Click Recover from a drive and then follow the on-screen instructions

Note: The Push-button reset UI has been redesigned in Windows 10. The Keep my files option in the UI now corresponds to the Keep my files feature. Remove everything corresponds to the Remove everything feature.

Optimize final image

At this point, you have a Windows image that is almost ready for deployment. In this section, we'll show you how to put the finishing touches on your image so you're ready for deployment.

• Remove unused packages from your image, by exporting a copy of it.

Final shipment

You have to boot a PC at least once to allow the specialize configuration pass of Windows Setup to complete before shipping a PC.

The specialize configuration pass adds hardware-specific information to the PC and is complete when Windows OOBE appears.

Reference the OEM Policy Documentation for more details.

Reducing Disk Footprints

Throughout this guide, we have shown a few places where you can reduce the disk footprint:

• Using Dism /export-image
• Using Compact OS
• Using Compact OS with Single Instancing

This section shows a few more ways you can gain additional free space.

Reducing and turning off Hiberfile

Reducing and turning off hiberfile can return between 400MB to 1.5GB OS space on the deployed OS.

Reducing Hiberfile by 30%

When you run sysprep.exe with unattend.xml, you can add a FirstLogonCommand that will reduce hiberfile:

Turn Off Hiberfile

When you run sysprep.exe with unattend.xml, you can add a FirstLogonCommand that will turn off hiberfile:

Capture your image with the unattend.xml file that contains these settings.

Disk footprint with optimizations

The table below shows additional space saved by using compact OS, Single instancing, and reducing or turning Off Hiberfile on 2GB (x86) and 4GB (x64).

FootPrint type	Windows 10 Home x86 2GB memory	Windows 10 Home x64 4GB Memory
Base Footprint	11.68GB (Additional Space)	15.06GB (Additional Space)
Compact, no single instancing	8.85GB (>2.75GB)	11.3GB (>3.7GB)
Compact, single instanced	7.66GB (>4GB)	10.09GB (>4.75GB)
Hiberfile off, no compact	10.87GB (>825MB)	13.48GB (>1.5GB)
Hiberfile reduced, no compact	11.27GB (>400MB)	14.15GB (>930MB)

This is a full version of Windows 10. We recommend you back up your files before installing. Updates are automatically enabled during support period; additional storage and/or hardware requirements apply for updates and over time. Apps and features may vary by market. Windows Media Center is not supported. To check for compatibility, support period, and other important information, visit your device manufacturer’s website and windows.com/windows10specs.

* Cortana available in select markets; experience may vary by region and device.
[1] Office 365 subscription sold separately.
[2] Users must link their mobile phone to their PC in PC settings or through Your Phone app from the Microsoft Store. Users will receive an app from Microsoft which they must download to their mobile phone and follow the setup prompts. Requires Android 7.0+.
[3] Pen capable tablet or PC required. Pen accessory may be sold separately. Office 365 subscription required and sold separately.
[4] For the supported lifetime of the device. Internet access fees may apply.
[5] Files are restored to the state they were in before the attack occurred. Files Restore requires an Office 365 subscription. File versions created up to 30 days in the past
[6] BitLocker requires either Trusted Platform Module (TPM) 1.2, TPM 2.0 or a USB flash drive. Client Hyper-V requires a 64-bit system with second level address translation (SLAT) capabilities and additional 2 GB of RAM.
[7] Based on average times of selected devices; battery life varies significantly with settings, usage and other factors.
[8] Based on average time comparison between typing a password and detecting a face or fingerprint in order to successfully authenticate. Requires specialized hardware, including fingerprint reader, illuminated IR sensor or other biometric sensors and capable devices.