Deploying Windows 8.1 with System Center 2012 R2 Configuration Manager

1. Deploying Windows 8.1 with System Center 2012 R2 Configuration Manager

3. Module 1: The New Hardware:BIOS, UEFI, and You Module Overview: What is UEFI New challenges faced with imaging systems with UEFI

4. Brief History of BIOS The Basic Input/Output System (BIOS) What does the BIOS do? BIOS is now considered legacy BIOS

5. Reasons to Replace the BIOS 16-bit Real Mode Lack of networking support (IPv6) 2.2 TB drive limit Limited option ROM space Aging GUI OEM x64 standardization

6. BIOS Partitions Single Windows Partition Recommended BIOS configuration

7. BIOS Partitions Single Windows Partition Recommended BIOS configuration

8. Configuring UEFI Partitions Default configuration Recommended configuration

9. Configuring UEFI Partitions

10. Support for PXE Booting UEFI ONLY System System Center 2012 SP1 Configuration Manager introduced support for UEFI systems. x86/IA32 UEFI Only systems require WDS on Windows Server 2012 (i.e. Intel ATOM based tablets) (http://support.microsoft.com/kb/2845997) x86/IA32 UEFI Only systems require System Center 2012 R2 Configuration Manager (http://technet.microsoft.com/en-us/library/dn236351.aspx)

11. Module 2: Deploying Windows 8.1 Module Overview

12. Deploying Windows 8.1 • Similar to Windows 7 Deployment • Deployment Image Servicing and Management (DISM) • Windows System Image Manager (WSIM) • Unattended.xml • USMT • New Challenges • UEFI • Tablets • Appx Packages • Start Screen Customization • Disabling access to the store • Lock Screen and Desktop images • LocalGPO tool

13. Appx Packages • Mount WIM to a temp directory • Dism/Image:C:\test\offline /Get-ProvisionedAppxPackages • Dism /Image:C:\test\offline /Remove-ProvisionedAppxPackage /PackageName: • Microsoft.BingFinance_2013.809.632.3676_neutral_~_8wekyb3d8bbwe • Microsoft.BingFoodAndDrink_2013.820.258.2561_neutral_~_8wekyb3d8bbwe • Microsoft.BingHealthAndFitness_2013.813.243.3760_neutral_~_8wekyb3d8bbwe • Microsoft.BingMaps_2013.809.2206.5385_neutral_~_8wekyb3d8bbwe • Microsoft.BingNews_2013.809.636.2800_neutral_~_8wekyb3d8bbwe • Microsoft.BingSports_2013.809.637.2803_neutral_~_8wekyb3d8bbwe • Microsoft.BingTravel_2013.809.639.25_neutral_~_8wekyb3d8bbwe • Microsoft.BingWeather_2013.809.641.3233_neutral_~_8wekyb3d8bbwe • Microsoft.SkypeApp_2013.805.1159.2246_neutral_~_kzf8qxf38zg5c • Microsoft.WindowsReadingList_2013.822.1837.5741_neutral_~_8wekyb3d8bbwe • Microsoft.XboxLIVEGames_2013.808.1749.4769_neutral_~_8wekyb3d8bbwe • Microsoft.ZuneMusic_2013.809.1658.2765_neutral_~_8wekyb3d8bbwe • Microsoft.ZuneVideo_2013.809.1659.3015_neutral_~_8wekyb3d8bbwe • Microsoft.windowscommunicationsapps_2013.822.1740.2836_neutral_~_8wekyb3d8bbwe • http://technet.microsoft.com/en-us/library/hh824882.aspx

14. Start Screen Customizations • Log into the reference system and make your start screen customizations • Manual Method • CopyProfile = True in Unattended.xml • StartTiles setting in Unattended.xml - Note: (CopyProfile wins) • Copy the AppsFolderLayout.bin (obtain from Sysprep Audit Mode) • http://technet.microsoft.com/en-us/library/jj134269.aspx#BKMK_AppFolder • Using Powershell and GPO • Export-StartLayout • User Configuration\Administrative Templates\Start Menu and Taskbar\Start Screen Layout • http://technet.microsoft.com/en-us/library/dn467928.aspx

15. Sample Script

16. Disable Store Access • GPO - Computer Configuration\Administrative Templates\Windows Components\Store • Turn off the Store Application • Turn off Automatic Download and Install of updates • Turn off Automatic Download of updates on Win8 machines • Turn off the offer to update to the latest version of Windows • http://support.microsoft.com/kb/2826659/en-us • http://technet.microsoft.com/en-us/library/hh832040.aspx

17. Set Lock Screen and Background • Lock Screen Custom Image • GPO - Computer Configuration\Policies\Administrative Templates\Control Panel\Personalization\Force a specific default lock screen image • Set path to the customized Lock Screen Image • Windows must be Activated! • http://support.microsoft.com/kb/2787100/EN-US • Background Wallpaper Customization • GPO - User Configuration\Policies\Administrative Templates\Desktop\Desktop\Desktop Wallpaper • Set path to the customized wallpaper image

18. Using the LocalGPO Tool • Security Compliance Manager 3.0 • Install SCM on Admin Workstation • Install Local GPO on a Test/Reference System • C:\Program Files\Microsoft Security Compliance Manager\LGPO\LocalGPO.msi • Set desired GPO on a Test/Reference System (gpedit.mscto edit local policy) • Use LocalGPO to backup the settings • cscriptLocalGPO.wsf /Path:c:\Images\Win8.1Build /Export • Use LocalGPO to create a GPOPack • cscriptLocalGPO.wsf /path:C:\images\Win8.1Build /export /gpopack • Make the folder name “friendly” (rename {8C7CF2F2-1541-4D19-AE7F-EEA4F9510868} to Win8.1_GPOPACK) • Apply GPOPack during Task Sequence • cscriptGPOPack.wsf /silent • Note: • For Windows 8.1, LocalGPO.wsf and GPOPack.wsf need to be modified to support Windows 8.1 (version 6.3)

19. Fixing LocalGPO.wsf and GPOPack.wsf for Windows 8.1 (At Your Own Risk) Sub ChkOSVersion

20. Module 3: Upgrading from Windows 8 to Windows 8.1 Module Overview The upgrade process Preparation for the upgrade Upgrading machines via SCCM 2012

21. Upgrade Process • The windows upgrade process can upgrade a Windows 8 machine to Windows 8.1 in place • The upgrade can carry over data from the previous OS as well as applications • This upgrade can be run manually on a single machine or can be run through SCCM across an entire enterprise • NOTE: The automated upgrade process can ONLY be run on Windows Enterprise machines with volume licenses

22. Preparation for the upgrade • Windows 8.1 Upgrade Assistant • Upgrade Assistant FAQ • http://windows.microsoft.com/en-us/windows-8/upgrade-assistant-download-online-faq

23. Upgrading via SCCM 2012 Options for upgrade deployment /auto:upgrade– Upgrades and preserves Applications and Data /auto:data – Upgrades and preserves only Data /performdu – Performs Dynamic Updates during the upgrade /noautoexit – Causes the installer to always exit verbosly Sample Command Line for SCCM 2012 Setup.exe /auto:upgrade /performdu Windows Installer Reference http://technet.microsoft.com/en-us/library/hh824834.aspx

24. Module 4: Applying Windows 8.1 Update 1 Module Overview Prerequisites for Windows 8.1 Update 1 Preparations to deploy update in SCCM 2012 Deploying the Update via SCCM Applying the Update to an existing SCCM OSD image

25. Prerequisites for Windows 8.1 Update 1 • http://support.microsoft.com/kb/2919442/en-us - Prerequisite for Update • http://support.microsoft.com/kb/2939087/en-us - Fix for crashing issues

26. Preparations to deploy update in SCCM 2012 • Software Update point installed • Security and Critical Update Classifications syncing

27. Applying the Update to an existing SCCM OSD image • "C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\dism.exe" /mount-wim /wimfile:install.wim /index:1 /mountdir:e:\images • "C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\dism.exe" /image:e:\images /add-package /packagepath:e:\demo\Windows8.1-KB2939087-x64.msu • "C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\dism.exe" /image:e:\images /add-package /packagepath:e:\demo\Windows8.1-KB2919355-x64.msu • "C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\dism.exe" /unmount-wim /mountdir:c:\images\mount /commit • Note: you must use the DISM version that is installed with the ADK that is at least as new as the OS version you are manipulating • DISM Reference • http://technet.microsoft.com/en-us/library/hh824821.aspx