How to create a Windows Provisioning Profile

Author: Evan Smith 11/29/2019

This tutorial covers step by step how to easily make a Windows provisioning profile using Windows Imaging and Configuration Designer.

The purpose of using a provisioning profile is to be able to set up multiple computers with a flash drive and a few minutes. Doing this avoids using Cortana, needing to go through the initial setup prompts, as well as a bunch of other automatic configurations that we will soon look at.

What can Windows Provisioning do?

You can have the provisioning service automatically set up your device with a name, a product key, a network, a set local admin account, Azure AD account, or Active Directory account. You can auto install applications and add necessary certificates to get your machine going.

Initial Requirements:

1. 8 GB+ Flash Drive
2. Windows 10 Machine with at least 6 Gigabytes of free space
3. The Fresh Windows 10 installation waiting to be configured.

How to use Windows Imaging and Configuration Designer

First, go to the following link and install Windows ADK for Windows 10. This kit installs a variety of tools including the one we will be using. The Microsoft Installation Page is Here.

1.2 Opening the Installer

Once you save the installer, let it download, then go to the download location. Double click the installer adksetup.exe and follow the prompts to install it on your machine. Make sure you choose Windows Imaging and Configuration Designer as a product to download.

2.1 Working with Windows Imaging and Configuration Designer

With Windows ADK successfully installed, we can now move forward to making our first provisioning profile. Go to your home menu and locate “Windows Kits”. From there select “Windows Imaging and Configuration Designer”.

2.2 Creating your Project

Since we will be working with a desktop device, select “Provision desktop devices” under “Create”.

2.3 New Project

In the New Project pop up, enter the name of your project, confirm the folder where this project will be saved for future access, and enter a description if you wish. Once finished, press “Finish.”

2.4          Setting Up a Device

You have now begun your first project. We start this small journey in the “Set up device” Tab. In this menu, you must give your device a name.

You can give the computer a set name, but if your are deploying to multiple PC’s, to avoid naming conflicts you should add a variable. Anything looking like %Name% is a system variable. For the naming scheme, I like to go with “Company-%SERIAL%” so the owner of the device will be clear, and the serial will make it unique.

If you want to enter a product key, this will authenticate windows for you if it isn’t already.

You have the option to configure the device for shared use. Unless you are set up for this in your domain, you should not need this.

Removing pre-installed software is a God-Send (if you believe in that). I like to remove any software on the device so we do not need to deal with it later.

Note: There are two modes for creating a Windows Configuration: Simple Editor, and Advanced Editor. In this case we will be using the Simple Editor for ease of use, but I highly recommend seeing what other features you may be able to take advantage of in the Advanced Editor.

When that is completed, you will see a green check mark icon next to the “Set up device” button. This means the step is all set.

2.5 Set up your Network

Here you can set up your network settings. Turn this on and off as needed, and set up your network. You may insert your Network SSID or name and use the necessary network type.

2.6          Account Management

Here you create the initial account that you will use to access the computer. You have three options: Enroll into Active Directory, Enroll in Azure AD, and local admin. For the sake of this I will create a local admin that I will use across my computers, but if your network is set up with Active Directory, your accounts will be much more versatile when connected to the domain.

Note: If your domain contains a number, adding your domain will fail. The provisioning profile has an unpassable error on this.

2.7          Add Applications

One of the best features (in my opinion) is the ability to auto install applications onto the device. You can skip this option, but if you want to install something, you can. For this example, we will use Google Chrome.

Note: .MSI’s is the best way to deploy software. If you can help it, you have a better chance of a successful installation when you have the right command and switches with a .MSI package.

2.7.1      Adding your application

To add your application, choose “Add an Application”.

From there click “Browse” and navigate to the application in which you want to auto install.

Confirm that the command to execute the exe is correct.

The return codes are standard, but you may change them if needed.

You have the option to continue installations after failure. You may change this if needed.

If your application requires a computer restart, you can Force a restart after the application installs.

Finally, if your application requires a windows 32 app dependency, you have the option to add them here.

Finish by clicking “Add” and redo the process with each other application until you have everything you want.

Note: The more you install, the longer the provisioning takes. Use a test machine to test all applications before Production. Some applications may install partially or not at all. Make sure you test all applications before production (can’t emphasize that enough…).

2.8          Add Certificates

Similar to adding applications, you can add certificates to your device. If you wish to add it, press “Add Certificate”, give it a name, and browse for the cert. Once completed, press “Add” and repeat as needed.

2.9          Completing your package

At the Finish menu, you will be able to review all of the information that you previously input. Make sure this information is correct.

You have the ability to “Protect your package.” I highly recommend you do this since you have put sensitive information in this package. When you password protect it, the installation cannot start unless you provide the given password.

Once your are satisfied with your package, press “Create”.

3.0          Setting up your Flash Drive

Go to your project and copy all of the contents into your new flash drive. You must put all provisioning information in your root folder. Windows will not look through your flash drive for this. If it does not find the package, it will not run.

4.0          Deploying your Provisioning package.

With Windows Ready for installation, insert the flash drive into the PC. Windows will automatically ask if you want to install a provisioning package. Confirm that you want to install the provisioning package, and then insert your password as needed.

The installer will automatically copy over everything it needs. A few seconds later (when it says), you can pull out the flash drive.

Conclusion

Windows Provisioning Profile is built to save you time. Once you have your one provision stick done, all you have to do is plug and play.

At this point Windows will restart multiple times as if it were installing a major update. Once it is finished, the main screen will say “Installation is completed.” With that, you have completed your provisioning goals!

Thank you for taking advantage of this guide to help you out. Is you have any more questions about Windows Provisioning Designer, you can reference Microsoft’s Documentations for more details.

Have a good one!