KACE Product Support

I wanted to have a scripted install that was up to date as soon as it was deployed from the k2000 without the need to patch with the k1000. The K1000 patching is still utilized to maintain the device however it is nice to have a device that is just “good to go” out of the K2000.
In conjunction with this method use your post-installation tasks for applications and KACE agents. This way as newer versions are released you just change them over in your scripted install.

1. Deploy a plain scripted install with your chosen OS. I used windows 7 Enterprise with SP1. There were no post/preinstall tasks except for a single partition and format. Have a very basic answer file with just language settings and enough information to allow the windows setup to not prompt you for any information also remove any entries for autologon and local user etc. Don’t install an agent or anything else. This is an example of the unattend file that I used.

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<UseConfigurationSet>true</UseConfigurationSet>
<UserData>
<AcceptEula>true</AcceptEula>
<FullName>your fullname</FullName>
<Organization>your organisation</Organization>
</UserData>
<ImageInstall>
<OSImage>
<InstallToAvailablePartition>true</InstallToAvailablePartition>
<InstallFrom>
<MetaData>
<Key>/IMAGE/Name</Key>
<Value>windows 7 enterprise</Value>
</MetaData>
</InstallFrom>
</OSImage>
</ImageInstall>
</component>
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<UILanguage>en-US</UILanguage>
<SetupUILanguage>
<UILanguage>en-US</UILanguage>
</SetupUILanguage>
<InputLocale>en-au</InputLocale>
<SystemLocale>en-au</SystemLocale>
<UserLocale>en-au</UserLocale>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<RegisteredOwner>Owner name</RegisteredOwner>
<RegisteredOrganization>Organisation name</RegisteredOrganization>
<TimeZone>E. Australia Standard Time</TimeZone>
<ComputerName>*</ComputerName>
</component>
<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<Identification>
<JoinWorkgroup>workgroup</JoinWorkgroup>
</Identification>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Path>reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 00000000 /f</Path>
<Description>Setting Network Location</Description>
<Order>1</Order>
<WillReboot>OnRequest</WillReboot>
</RunSynchronousCommand>
</RunSynchronous>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<SkipMachineOOBE>false</SkipMachineOOBE>
<SkipUserOOBE>false</SkipUserOOBE>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
</component>
</settings>
</unattend>

2. Once the OS is deployed you will be presented with prompt to enter a name. Simply press SHIFT+CTRL+F3 to enter audit mode.
3. Run windows update on that device and let it patch.
4. Once you have completed patching windows 7 you can sysprep it. Use the following command without an unattend file. Run CMD as an administrator C:\windows\system32\sysprep\sysprep /oobe /generalize /shutdown. Or simply use the prompt that is shown on the screen and select the OOBE option and tick generalize then choose reboot or shutdown.
5. Once this has completed load into your KBE and insert a USB drive with sufficient free space of about 3-5GB.
6. Select Recovery then Command prompt.
7. Your USB device with most probably map as E: but check this.
8. Enter the following command (for windows 7 enterprise)
Imagex /capture C: E:\install.wim “Windows 7 Enterprise” “Custom Updated image” /Flags “Enterprise”
9. Ensure that you use the correct flag for your version otherwise you will be prompted during the setup and it will not recognize the version of setup that you have. For more information on using imagex and flags refer to the following guides http://technet.microsoft.com/en-us/library/cc722053(WS.10).aspx and http://social.technet.microsoft.com/Forums/en-HK/winserversetup/thread/dfc0bcc1-b0a4-4120-9b8c-acce6e28163b.
10. Now that you have captured the install.wim it is time to replace the install.wim in the source media and re upload to the k2000 using the media manager.
11. If you have an ISO mount it and copy the contents of the Windows 7 Enterprise ISO to a folder.
12. Navigate to the Windows 7 Enterprise folder that you have just copied the contents of the ISO to and click on the sources folder then copy the install.wim that you have captured and replace the one in the “sources” folder.
13. Open the K2000 media manager and select upload windows media tab. Point the source location to the folder you created and copied the ISO contents to and enter the k2000 ip or hostname. Select Start upload.
14. On completion of uploading the content you will see the source media in the K2000.
15. You will now have to rebuild the scripted install with this media as there is no way to simply change the source on a scripted install.
16. You can repeat this after Microsoft releases their updates.