How best to make these mods during C&B

[chiners_68]

Hi Guys,

Ive got my C&B working which is great but what is the best way to apply these mods during the C&B TS.

 

1. Set name & Company

2. keyboard & regional settings to UK

3. Add corperate desktop & background to default users

4. Enable RDP

5. Disable Windows Defender

6. Enable Remote Registry

7. Add domain security group to local admin group.

 

ones ive got in green ive scripted for now but not sure if its the best way to apply these changes. The others im still lost on.

 

cheers

[anyweb]

using windows SIM you can customise your unattend.xml file to do most of what you want above in your list

 

read this guide for some pointers

 

then when you have things customised, you'll end up with an unattend.xml file, create a package of that file and add it in the Apply Operating System step in the task sequence,

 

select the Use an unattended or sysprep answer file for a custom installation option

 

[chiners_68]

The guide will help..Thanks

 

Ive got good experience with Xp answer files but unattended.xml looks a bit weird as you can add bits to different stages. Almost need a crystal ball to know what bit is right a which stage?

[anyweb]

Almost need a crystal ball to know what bit is right a which stage?

 

that helps, best way to figure it out is via google and trial and error as the official documentation doesn't seem to always co-relate to real experience

 

oh and after re-reading your original post, you can do alot of those things via Group Policy,

 

cheers

niall

[chiners_68]

ive got these 3 bits in an unattended.xml but ive not tried it yet. have been searching for ways to complete the rest. Adding corp background & screensaver can be done in unattended.xml acording to documentation but from what people hve written it dosent alaways work.

 

Im not sure on what stages of the unattended to run the below options as there is a couple of options when adding to the unattended.xml

 

2. keyboard & regional settings to UK

4. Enable RDP

5. Disable Windows Defender

[jhkappert]

you can activate RDP with the sccm client. That is what i do in my network.

[jamitupya]

We use scripts for all of these during the build phase as well as using GPO to enforce the changes.

 

we use scripts because off the bat some of our machines are never connected to the corp network and our vpn firewalls do not allow GPO through to clients... stoopid but very common here

 

id personally go with gpo