locked
MDT unattend.xml trumps captured image answer file! RRS feed

  • Question

  • Hi! Been using MDT for awhile and have no issues until I wanted to try something new.

    I have built my reference image on a VM, did my customizations and sysprepped the machine. I placed my unattend.xml file in

    c:\windows\system32\sysprep

    My command line (run as admin): sysprep /generalize /oobe /reboot /unattend:unattend.xml

    I see sysprep processes the unattend, cleans up plugins, etc..

    I reboot into WinPe and capture my image using ImageX... I then have my install.wim file.

    I then open up MDT workbench, import my apps, drivers, and import my OS. I select no sysprep files are needed of course.

    I then go to advanced, Media and create a media for my iso file... The iso is created. 

    BUT!!! I notice that under deployshare\control\TS number\there is an unattend.xml THAT IS WAY DIFFERENT from my original one that I used for sysprep.

    I need to know why MDT generates ANOTHER unattend.xml which is then used to trump the one I used when I sysprepped? Is this by design? I know a way around it which I have been doing for years is to open up my ISO, delete the unattend.xml and copy MY unattend.xml to the control\TS number directory...Save my ISO and im good to go. I'm trying to see why my unattend.xml is being trumped. 

    HELP!!

    Monday, February 24, 2014 9:20 PM

Answers

  • This is by design.

    The default unattend.xml file that's used with MDT when you create a new task sequence to deploy an operating system contains all the necessary settings for the installation.

    You should be careful by simply dismissing the default unattend.xml file and replacing it with your own. Unless you made your own based off the mdt default one. Instead of editing your ISO, you could simply replace the unattend.xml file inside the deployment share\control\tsid\ folder. If you create full install media, then you wont need to edit the media to change the unattend.xml file this way since it's already copied down from the DS.

    You should take a close look at the default one provided by MDT, it's also possible that with your own unattend.xml file, MDT won't be able to populate certain value's based on variables into it because the sections are missing from the unattend.xml.

    What is so special about your own unattend.xml file that you need to replace it with the default one?


    Kind regards,

    Stephan Schwarz.


    If one of these posts answered your question or issue, please click on "Mark as answer".

    My Blog | Twitter: @Schwarz_Stephan | MCTS, MCITP, MCSA, MCSE (Charter Member), MCC-2011.
    Automatically determine target OU from ComputerName with PS for MDT2012 U1/ConfigMgr
    How to configure Windows RE/OEM Recovery Partition with MDT 2012 Update 1

    Monday, February 24, 2014 10:19 PM

All replies

  • This is by design.

    The default unattend.xml file that's used with MDT when you create a new task sequence to deploy an operating system contains all the necessary settings for the installation.

    You should be careful by simply dismissing the default unattend.xml file and replacing it with your own. Unless you made your own based off the mdt default one. Instead of editing your ISO, you could simply replace the unattend.xml file inside the deployment share\control\tsid\ folder. If you create full install media, then you wont need to edit the media to change the unattend.xml file this way since it's already copied down from the DS.

    You should take a close look at the default one provided by MDT, it's also possible that with your own unattend.xml file, MDT won't be able to populate certain value's based on variables into it because the sections are missing from the unattend.xml.

    What is so special about your own unattend.xml file that you need to replace it with the default one?


    Kind regards,

    Stephan Schwarz.


    If one of these posts answered your question or issue, please click on "Mark as answer".

    My Blog | Twitter: @Schwarz_Stephan | MCTS, MCITP, MCSA, MCSE (Charter Member), MCC-2011.
    Automatically determine target OU from ComputerName with PS for MDT2012 U1/ConfigMgr
    How to configure Windows RE/OEM Recovery Partition with MDT 2012 Update 1

    Monday, February 24, 2014 10:19 PM
  • Hey Stephan! I appreciate your response as you helped me a year ago on this same forum! Thank you!

    Yes the default MDT unattend.xml is sufficient and I am aware of altering it to the point of parsing numerous erros. I started with the default and built in more options using Windows System Imaging Manager. However we have company policies that I needed to alter such as...

    AcceptEula

    We are still on IE 8, so disabling welcoming page, ooba accelerators, disable dev tools, suggest sites

    Enabling Admin account and setting passwords

    Protect your PC from 1 to 3

    Setting network location =WORK

    Skip OOBE as well. Below is my unattend!

    <?xml version="1.0" encoding="utf-8"?>

    <unattend xmlns="urn:schemas-microsoft-com:unattend">
        <settings pass="windowsPE">
            <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
                <ImageInstall>
                    <OSImage>
                        <WillShowUI>OnError</WillShowUI>
                        <InstallTo>
                            <DiskID>0</DiskID>
                            <PartitionID>1</PartitionID>
                        </InstallTo>
                        <InstallFrom>
                            <Path>.\Operating Systems\Windows 7 x86\Sources\install.wim</Path>
                            <MetaData>
                                <Key>/image/index</Key>
                                <Value>1</Value>
                            </MetaData>
                        </InstallFrom>
                    </OSImage>
                </ImageInstall>
                <UpgradeData>
                    <Upgrade>false</Upgrade>
                </UpgradeData>
                <ComplianceCheck>
                    <DisplayReport>OnError</DisplayReport>
                </ComplianceCheck>
                <UserData>
                    <AcceptEula>true</AcceptEula>
                    <ProductKey>
                        <Key></Key>
                    </ProductKey>
                </UserData>
            </component>
            <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <SetupUILanguage>
                    <UILanguage>en-US</UILanguage>
                </SetupUILanguage>
                <InputLocale>0409:00000409</InputLocale>
                <SystemLocale>en-US</SystemLocale>
                <UILanguage>en-US</UILanguage>
                <UserLocale>en-US</UserLocale>
            </component>
        </settings>
        <settings pass="generalize">
            <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <DoNotCleanTaskBar>true</DoNotCleanTaskBar>
            </component>
        </settings>
        <settings pass="specialize">
            <component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
                <Identification>
                    <Credentials>
                        <Username></Username>
                        <Domain></Domain>
                        <Password></Password>
                    </Credentials>
                    <JoinDomain></JoinDomain>
                    <JoinWorkgroup></JoinWorkgroup>
                    <MachineObjectOU></MachineObjectOU>
                </Identification>
            </component>
            <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
                <CopyProfile>true</CopyProfile>
       <ComputerName></ComputerName>
                <ProductKey></ProductKey>
                <RegisteredOrganization>SECRET</RegisteredOrganization>
                <RegisteredOwner>SECRET</RegisteredOwner>
                <TimeZone></TimeZone>
                <DoNotCleanTaskBar>true</DoNotCleanTaskBar>
                
            </component>
            <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <Home_Page>http://esa</Home_Page>
                <IEWelcomeMsg>false</IEWelcomeMsg>
                <DisableFirstRunWizard>true</DisableFirstRunWizard>
                <DisableOOBAccelerators>true</DisableOOBAccelerators>
                <ShowInformationBar>false</ShowInformationBar>
                <DisableDevTools>true</DisableDevTools>
                <SuggestedSitesEnabled>false</SuggestedSitesEnabled>
            </component>
            <component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <RunSynchronous>
                    <RunSynchronousCommand wcm:action="add">
                        <Description>EnableAdmin</Description>
                        <Order>1</Order>
                        <Path>cmd /c net user Administrator /active:yes</Path>
                    </RunSynchronousCommand>
                    <RunSynchronousCommand wcm:action="add">
                        <Description>UnfilterAdministratorToken</Description>
                        <Order>2</Order>
                        <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f</Path>
                    </RunSynchronousCommand>
                </RunSynchronous>
            </component>
            <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <InputLocale>0409:00000409</InputLocale>
                <SystemLocale>en-US</SystemLocale>
                <UILanguage>en-US</UILanguage>
                <UserLocale>en-US</UserLocale>
            </component>
            <component name="Microsoft-Windows-TapiSetup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <TapiConfigured>0</TapiConfigured>
                <TapiUnattendLocation>
                    <AreaCode>""</AreaCode>
                    <CountryOrRegion>1</CountryOrRegion>
                    <LongDistanceAccess>9</LongDistanceAccess>
                    <OutsideAccess>9</OutsideAccess>
                    <PulseOrToneDialing>1</PulseOrToneDialing>
                    <DisableCallWaiting>""</DisableCallWaiting>
                    <InternationalCarrierCode>""</InternationalCarrierCode>
                    <LongDistanceCarrierCode>""</LongDistanceCarrierCode>
                    <Name>Default</Name>
                </TapiUnattendLocation>
            </component>
            <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <DisableSR>0</DisableSR>
            </component>
        </settings>
        <settings pass="oobeSystem">
            <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
                <UserAccounts>
                    <AdministratorPassword>
                        <Value>SECRET</Value>
                        <PlainText>false</PlainText>
                    </AdministratorPassword>
                    <LocalAccounts>
                        <LocalAccount wcm:action="add">
                            <Description>Temp account</Description>
                            <DisplayName>Temp account</DisplayName>
                            <Group>Users</Group>
                            <Name>TempAccount</Name>
                        </LocalAccount>
                    </LocalAccounts>
                </UserAccounts>
                <AutoLogon>
                    <Enabled>true</Enabled>
                    <Username>Administrator</Username>
                    <Domain>.</Domain>
                    <Password>
                        <Value>SECRET</Value>
                        <PlainText>false</PlainText>
                    </Password>
                    <LogonCount>999</LogonCount>
                </AutoLogon>
                <FirstLogonCommands>
                    <SynchronousCommand wcm:action="add">
                        <CommandLine>cscript.exe C:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
                        <Description>Lite Touch new OS</Description>
                        <Order>1</Order>
                    </SynchronousCommand>
                    <SynchronousCommand wcm:action="add">
                        <CommandLine>cscript.exe D:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
                        <Description>Lite Touch new OS</Description>
                        <Order>2</Order>
                    </SynchronousCommand>
                    <SynchronousCommand wcm:action="add">
                        <CommandLine>cscript.exe E:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
                        <Description>Lite Touch new OS</Description>
                        <Order>3</Order>
                    </SynchronousCommand>
                    <SynchronousCommand wcm:action="add">
                        <CommandLine>cscript.exe F:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
                        <Description>Lite Touch new OS</Description>
                        <Order>4</Order>
                    </SynchronousCommand>
                </FirstLogonCommands>
                <OOBE>
                    <HideEULAPage>true</HideEULAPage>
                    <NetworkLocation>Work</NetworkLocation>
                    <ProtectYourPC>3</ProtectYourPC>
                    <SkipUserOOBE>true</SkipUserOOBE>
                </OOBE>
                <RegisteredOrganization>SECRET</RegisteredOrganization>
                <RegisteredOwner>SECRET</RegisteredOwner>
                <TimeZone></TimeZone>
            </component>
            <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <InputLocale>0409:00000409</InputLocale>
                <SystemLocale>en-US</SystemLocale>
                <UILanguage>en-US</UILanguage>
                <UserLocale>en-US</UserLocale>
            </component>
        </settings>
        <settings pass="offlineServicing">
            <component name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                <DriverPaths>
                    <PathAndCredentials wcm:keyValue="1" wcm:action="add">
                        <Path>\Drivers</Path>
                    </PathAndCredentials>
                </DriverPaths>
            </component>
        </settings>
        <cpi:offlineImage cpi:source="catalog:c:/users/administrator/desktop/master windows 7 for mdt/sources/install_windows 7 enterprise.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
    </unattend>

    Monday, February 24, 2014 10:59 PM