Professional Documents
Culture Documents
Here is a step-by-step quick guide on building the perfect Windows 10 21H2 reference image using Microsoft
Deployment Toolkit (MDT) 8456.
Real World Note: Since Windows Vista, there is no technical requirement to create reference images in order to
deploy Windows. After all, the ISO that you download from Microsoft contains WIM images that are in a deployable
state. The main reason for creating reference images, meaning images with one or more applications in them, is often
just deployment speed, and to some extent network efficiency (WIM images are highly compressed). However, in a
world with better and better peer to peer solutions, better networking, better hardware, you can make deployments go
quite fast even without a reference image. While more and more organizations are moving to use a thin image, and
deploy settings and applications at deployment time instead, if you still need a reference image. Here is how to create
one.
Tip: Daniel Barras (thank you), commented about a solution I was not aware of, removing the need for blocking
[State]
ImageState=IMAGE_STATE_SPECIALIZE_RESEAL_TO_OOBE
Software Requirements
MDT can be installed either on a file server, or on your own laptop, but in this scenario, I use a file server named
MDT01. Windows 10 21H2 requires Windows ADK 10 2004 or later, but since you likely want to evaluate Windows 11
as well, I recommend using Windows ADK for Windows 11 21H2 that supports both Windows 10 21H2 and Windows
11 21H2.
Note: Please don't use the newly released (May 2022) Windows ADK for Windows 11 22H2. It's not fully compatible
with MDT 8456 since it no longer contains the x86 version of WinPE which MDT expects to find.
Step-by-Step Guide
The entire process for creating a Windows 10 image using MDT takes about 20 – 30 minutes, fully automated. This
Step 1 – Install Windows ADK for Windows 11, and MDT 8456
Step 2 – Create the MDT Build Lab Deployment Share
Step 3 – Import the Windows 10 operating system
Step 4 – Add applications
Step 5 – Create the MDT Task Sequence
Step 6 – Configure the deployment share
Step 7 – Create Windows Reference Images
Step 1 – Install Windows ADK for Windows 11, and MDT 8456
In this example I have a virtual machine named MDT01, running Windows Server 2022 LTSC (Windows Server 2016
LTSC or Windows Server 2019 LTSC is fine too). The VM has 2 vCPUs and 4 GB RAM.
1. On MDT01, install Windows ADK for Windows 11, and select the following components:
Deployment Tools
Imaging and Configuration Designer (ICD)
Configuration Designer
User State Migration Tool (USMT
2. Install WinPE Addon for Windows ADK for Windows 11, and select the following component:
Installing MDT.
2. Once the deployment share is created you also want to relax the security a bit. MDT locks it down to hard by default.
Use the following PowerShell script (named Set-MDTBuildLabPermissions.ps1) to set some better permissions (modify
#Requires -RunAsAdministrator
# Configure NTFS Permissions for the MDT Build Lab deployment share
$DeploymentShareNTFS = "E:\MDTBuildLab"
# Configure Sharing Permissions for the MDT Build Lab deployment share
$DeploymentShare = "MDTBuildLab$"
Note: In my environment the MDT01 server is joined to a domain, and my service account used for the deployments
is VIAMONSTRA\MDT_BA. If using a different domain, or if using a workgroup server for your build and capture
modify the Set-MDTBuildLabPermissions.ps1 script to reflect that.
Running the Set-MDTBuildLabPermissions.ps1 script
On MDT01, mount the Windows 10 Enterprise x64 21H2.iso media (or whatever you named it). On my server it was
mounted to the D: drive.
1. Using the Deployment Workbench, expand the Deployment Shares node, expand MDT Build Lab, select
the Operating Systems node and create a folder
named Windows 10.
2. Right-click the Windows 10 node, and select Import Operating System. Use the following settings for the Import
Operating System Wizard.
Note: The Windows 10 media comes with many Windows version, in the below example I simply removed all but the
Enterprise version, and gave it a better name.
The Windows 10 Enterprise x64 operating system imported to deployment workbench.
these steps.
1. On MDT01, download the Office Deployment Toolkit (ODT), and extract it to E:\Setup\ODT.
2. Using an elevated Command prompt, download the installers by running the following command:
Microsoft 365 Apps for enterprise (well, Office) downloaded via setup.exe from ODT.
3. Using the Deployment Workbench, expand Deployment Shares / MDT Build Lab / Applications and create a
folder named Microsoft.
4. Right-click the Microsoft folder, and select New Application. Use the following settings for the New Application
Wizard:
3. Edit the task sequence by navigating to the Task Sequences / Windows 10 folder, right-click the Windows 10
Enterprise x64 21H2 task sequence, and select Properties.
4. On the Task Sequence tab, configure the Windows 10 Enterprise x64 21H2 task sequence with the following
settings:
1. In the State Restore / Custom Tasks group, add a new Install Application action with the following settings:
Task Sequence configured for the reference image build and capture.
E:\MDTBuildLab\Control folder. Below you find the configurations I used in this guide.
Bootstrap.ini
[Settings]
Priority=Default
[Default]
DeployRoot=\\MDT01\MDTBuildLab$
UserDomain=VIAMONSTRA
UserID=MDT_BA
UserPassword=P@ssw0rd
SkipBDDWelcome=YES
CustomSettings.ini
[Settings]
Priority=Default
[Default]
_SMSTSORGNAME=ViaMonstra
UserDataLocation=NONE
ComputerBackupLocation=NETWORK
DoCapture=YES
OSInstall=Y
AdminPassword=P@ssw0rd
JoinWorkgroup=WORKGROUP
HideShell=NO
FinishAction=SHUTDOWN
ApplyGPOPack=NO
BackupShare=\\MDT01\MDTBuildLab$
BackupDir=Captures
SkipAdminPassword=YES
SkipProductKey=YES
SkipComputerName=YES
SkipDomainMembership=YES
SkipUserData=YES
SkipLocaleSelection=YES
SkipTaskSequence=NO
SkipTimeZone=YES
SkipApplications=YES
SkipBitLocker=YES
SkipSummary=YES
SkipRoles=YES
SkipCapture=NO
SkipFinalSummary=YES
1. In the Windows PE tab, in the Platform dropdown list, make sure x86 is selected. Then in the Lite Touch
Boot Image Settings area, configure the following settings:
2. Still in the Windows PE tab, select the Drivers and Patches tab, and configure the following:
Configuring the deployment share not to add the Windows 10 CU into the boot image.
3. In the Windows PE tab, in the Platform dropdown list, make sure x64 is selected. Then in the Lite Touch
Boot Image Settings area, configure the following settings:
1. Image description: MDT Build Lab x64
2. ISO file name: MDT Build Lab x64.iso
4. Still in the Windows PE tab, select the Drivers and Patches tab, and configure the following:
1. Selection profile: Nothing
2. Select the Include all drivers from selection profile option
5. Click OK.
6. Update the deployment share, by right-clicking the MDT Build Lab deployment share and select Update
Deployment Share. Use the default Options for the Update Deployment Share wizard.
The contents of the E:\MDTBuildLab\Boot folder after updating the deployment share.
Note: To make sure Sysprep does not fail during the build and capture process, make sure the virtual machine you are
using does not have Internet access during the entire process.
1. On MDT01, copy the E:\MDTBuildLab\Boot\MDT Build Lab x64.iso file to your VMware or Hyper-V machine.
2. Create a virtual machine named REF001, assign it 2 vCPUs and 4 GB RAM. Then mount MDT Build Lab
x64.iso on the virtual machine.
3. Start the REF001 virtual machine, and allow it to boot. Then complete the Deployment Wizard using the below
settings:
1. Location:
2. File name:
Resources
Note: Please also check these posts:
Image Factory
Automate this process even further (you still need to do the step in this guide first), check out the Image Factory for
http://github.com/DeploymentBunny/ImageFactoryV3ForHyper-V