Create media for automated unattended install of Windows 10  

Hi Karl,

in step 7.12 when I try login as Administrator I have a message that 'Your account has been blocked'

Thanks for help

Code:

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="oobeSystem">
        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <UserLocale>en-GB</UserLocale>
            <UILanguage>en-GB</UILanguage>
            <SystemLocale>en-GB</SystemLocale>
            <UILanguageFallback>en-US</UILanguageFallback>
            <InputLocale>0409:00000409</InputLocale>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OOBE>
                <HideEULAPage>true</HideEULAPage>
                <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
                <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
                <UnattendEnableRetailDemo>false</UnattendEnableRetailDemo>
                <ProtectYourPC>1</ProtectYourPC>
            </OOBE>
            <UserAccounts>
                <LocalAccounts>
                    <LocalAccount wcm:action="add">
                        <Password>
                            <Value>YQBkAHMAbABwAHcAMAAyACoAMQBQAGEAcwBzAHcAbwByAGQA</Value>
                            <PlainText>false</PlainText>
                        </Password>
                        <Group>Administrators</Group>
                        <Name>Administrator</Name>
                        <DisplayName>Administrator</DisplayName>
                        <Description>Local Admin Account</Description>
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
            <TimeZone>GMT Standard Time</TimeZone>
            <RegisteredOrganization>Actavo</RegisteredOrganization>
        </component>
    </settings>
    <settings pass="specialize">
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OEMInformation>
                <Manufacturer>Dell</Manufacturer>
                <SupportURL>itsupport.networks@actavo.com</SupportURL>
            </OEMInformation>
            <CopyProfile>true</CopyProfile>
            <RegisteredOrganization>Actavo</RegisteredOrganization>
            <TimeZone>GMT Standard Time</TimeZone>
        </component>
    </settings>
    <cpi:offlineImage cpi:source="wim:c:/iso_files/sources/install.wim#Windows 10 Pro" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

migland said:

Hi Karl,

in step 7.12 when I try login as Administrator I have a message that 'Your account has been blocked'

Thanks for help

Code:

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="oobeSystem">
        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <UserLocale>en-GB</UserLocale>
            <UILanguage>en-GB</UILanguage>
            <SystemLocale>en-GB</SystemLocale>
            <UILanguageFallback>en-US</UILanguageFallback>
            <InputLocale>0409:00000409</InputLocale>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OOBE>
                <HideEULAPage>true</HideEULAPage>
                <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
                <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
                <UnattendEnableRetailDemo>false</UnattendEnableRetailDemo>
                <ProtectYourPC>1</ProtectYourPC>
            </OOBE>
            <UserAccounts>
                <LocalAccounts>
                    <LocalAccount wcm:action="add">
                        <Password>
                            <Value>YQBkAHMAbABwAHcAMAAyACoAMQBQAGEAcwBzAHcAbwByAGQA</Value>
                            <PlainText>false</PlainText>
                        </Password>
                        <Group>Administrators</Group>
                        <Name>Administrator</Name>
                        <DisplayName>Administrator</DisplayName>
                        <Description>Local Admin Account</Description>
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
            <TimeZone>GMT Standard Time</TimeZone>
            <RegisteredOrganization>Actavo</RegisteredOrganization>
        </component>
    </settings>
    <settings pass="specialize">
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <OEMInformation>
                <Manufacturer>Dell</Manufacturer>
                <SupportURL>itsupport.networks@actavo.com</SupportURL>
            </OEMInformation>
            <CopyProfile>true</CopyProfile>
            <RegisteredOrganization>Actavo</RegisteredOrganization>
            <TimeZone>GMT Standard Time</TimeZone>
        </component>
    </settings>
    <cpi:offlineImage cpi:source="wim:c:/iso_files/sources/install.wim#Windows 10 Pro" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

I have managed to resolve the issue!

Great write up thanks - couple of questions/issues I am trying to do everything in the guide but leave me the ability to partition the disks manually. However if i skip that section - it does not automate OOBE - is this not possible? Also I would like to run a powershell script on each pc as part of the install whats the best method to do this?

Sir,
i have been using this answer file for quiet some time,
all in one file, no need for syrup or anything. all works perfectly.
autounattend.rar

but recently i updated my windows 10 pro setup wityh the latest built, 1809,
and trying to update the file accordingly. but facing some issues...

neede to know, can the setup run by this was as well?

Hello Kari,

First, let me say how much I appreciate your comprehensive post on the subject. However, I noticed a minor terminology error you made on matter of step 4.8 that could lead to some significant security issues. Granted, in most cases making local accounts in such a manner is a security issue all on it's own; however, you mistakenly write that the password is "encrypted" which it is not. It is encoded, and apparently very easy to decode.

Kari said:

I think that you might have misunderstood something. In the process told in this tutorial, CopyProfile is an essential setting.

The purpose of this tutorial is not to show how to automate Windows installation. The purpose is to show how to customize Windows and capture it to a custom image, a WIM file, automating then the complete Windows setup. For this, the method with two answer files is the easiest one. First one helps to get all customizations to custom image, second one then takes care of partitioning and Windows setup.

Kari

yes. copy profile=true is the main point of this tutorial. Also, the two answer files are better.I get a customized image and I have to deal with only two components once I know that my customized image is installing right normally.

- - - Updated - - -

First of all thanks for this detailed tutorial. You make best tutorials, one can ever find. I also had this problem. Could not find any error in answer file. Just created disk configuration again and it works - strange. Just one minor issue. When I split the wim file. Activation window pops up where I have to select " I don't have keys". May be it is because swm files are read slowly. Otherwise it is wiping and installing on both mbr and gpt disk - no problems.

I have a question that I cannot seem to find a clear answer to.

Let's say that I follow the steps in this tutorial. When Windows System Image Manager is first run, it creates a catalog file for me. I can save this file and reuse it again in the future, saving the time needed to create a new catalog file.

However, let's say that I update my Windows ISO image by injecting the latest Windows updates into it. Will that same catalog file still be valid, so long as it is still the same Windows feature release, or is simply adding Windows updates enough of a change that the catalog file needs to be regenerated?