How to Automate Out of Box Experience - Windows 10 PPKG File

hello youtube takes cake tech here uh today i'm going to be showing you how to bypass the audit box experience with the provisioning package or ppkg file so with windows 10 it's fairly easy to get configuration designer install we'll go here we go sorry move to the other screen go to the microsoft store once we're in the microsoft store we're going to search configuration des if i can spell configuration designer here it is windows configuration designer and then uh normally it would be installed but in this case i'll just launch it so as you can see i already have some provisioning packages created so in this case i'm going to create a new provisioning package for provision desktop devices so we'll go here and we'll just name it youtube project we'll let it set up so this is where if you read this it's kind of saying so you can do random five serial number i usually like to do it uh like this cm dash serial number which means to me change me uh in the dash serial so that'll be the serial number to the device so it's pretty easy to install where i would use this is if you're going to install like a remote management software like kaseya or connectwisemanage that way when the computer gets installed you'll be able to sort by cm we're going to we're not going to configure this device for shared use if you check this box right here remove pre-installed software what actually happens is the the device will re-image itself before it sets it up and goes through the out-of-box experience we'll hit next here set up the network i don't know why bypass that but uh this is where you could join wireless so if you if you didn't have a network card in your device you could say the net the network id would be like you know your wi-fi your wi-fi name and then you know wpa2 personals and you'd enter the wi-fi password but i'm not going to set up a network here because it is going to be an ethernet device account management this is kind of cool here you can enroll in active directory so if you have a domain controller on site you can enroll in azure ad or you can just use a local account which is what i'm going to use here i'm just going to create youtube and i'll make the password youtube as well so that's what the username of the device will be i'm just going to check one more time here okay that's off you can add applications in here add certificates things like that but this is what i always do when i start my first provisioning package is i get it about this far and then if you see down here in the lower left you can see switch to advanced editor so i'm going to go ahead and switch to the advanced editor now and then this is if you read this you can view and configure all possible settings in the advanced editor but once you switch you can't open this project in a simple editor again so i like to do this part because i know it will always get past the out of box if if at least that is checked so we're going to switch to the advanced editor now so in the left pane here you'll see all of these i don't know why it's telling me that the wireless lan here is not configured correctly let me just uh let's see why it's yelling at me we'll just put test in there it shouldn't i think it's because i i was showing you the wireless you don't need to do that though wireless lan um oh here's why because not configured there we go and then um auto connect oh here we go there we go so i just deleted the wireless there so now it's not going to yell at us so you can see everything that's configured on the right-hand side and all the settings you can configure on the left-hand side so some stuff that is very helpful here is so you can see microsoft has all these all the documentation is down here just basically like it would be on their web page country code extended capabilities there's a whole bunch of stuff in here i really don't use it too much for anything else let's see if we can set the time here no doesn't so some as you can see some of the settings aren't really that helpful which is why i don't really use this too much i'll show you what i would use it for every time and that's under provisioning commands here like you see so provisioning commands and then uh we'll do primary context and then we're gonna name on so this is where you can install software so i'm gonna install two piece software we're install google chrome and then we're also going to enable ansible in this as well because that's the tool that i like to use to configure windows devices so now we'll bring this up here and we'll do uh google chrome uh msi download download browser for your business so google chrome download 64-bit will download this accept and download this will be a zip file too so we're going to go into this zip file once it gets downloaded so open it when done here i'll bring it over here to show you everyone so installers and we just want the google chrome standalone enterprise installer so i'm just going to move that to uh a spot here we'll move it to c temp where i have a whole bunch of files i'm going to delete all these though we'll paste it there so we have one file that we're going to use to install and then i'm also going to search your ansible setup for windows setup windows host i think this is what we need we'll see here winrm listener here we go keep looking where is it where is it where is it we'll find it oh right here okay so as you can see here it's actually downloading this file so what i'm going to do is go to this url you can tell here just if i can explain this powershell if anyone's curious but we're going to go to this webpage here this the raw file of it because if you try to download this uh it will not work very well because it's trying to reach out to the internet so now i'm gonna move i'm gonna save this into my c temp as well configure remote remoting for ansible fairly easy and then we're going to also copy we'll leave this page open because we're going to use the same command there so now we have our two our two programs i guess you could say that we want to install you could you could put a whole bunch of stuff in here like i said i like to keep it fairly simple because when i'm provisioning computers i like to use ansible for other reasons which i will describe in my next videos just as easier to configure files that way so now we'll open up google chrome here and we're going to say command file this is where we need to find our msi file which is right here so now we have our msi file loaded with that we're going to go to command line so we it's a msi ex uh we'll do it like this cmd.exe forward slash c for close when completed we're going to msi ex ec forward slash i for install then we're going to take the name of that file which is kind of cool here because see all we need is to do that we just need to say the file name and we'll explain that here in a little bit too but kind of why that's the case so but it it basically puts it in there and then um makes it so that it doesn't have to be you don't have to have that file anywhere other than the provisioning package so it's pretty pretty nifty so now we're gonna do this msi commands i'll open up command prompt here to show you so we'll go to cdc temp and we're gonna do google chrome we're gonna hit it with a backslash question mark so we can see the commands i'll bring those over here so msi excc forward slash i forward slash i right here forward slash i for product msi and then we're going to do quiet because we're not going to have any user interaction and then we're also going to do no restart just in case it won't it this package shouldn't prompt for restart but it's very possible that it might so just i always like to do that so and this is continue install what this will do is if it fails it'll just continue the install um we're not going to worry about that one either and then now we're going to go grab our powershell file so this is where i was talking about we need to remember that web page we were at so we'll take this back over here and we'll copy this the execution policy bypass is important that's uh it runs as com as an administrator so the bypass will make it so it runs no matter what whereas if for example the computer's execution policy is set to restricted it would not run this file so just make sure you do this and then we're going to use our configure ansible file so that's it because instead of using the file name variable we're just calling the file by name so fairly easy then we'll just do the last part here we'll export my youtube project provisioning package we'll say we're an oem or it admin we're an i.t admin sure and this is version one and uh we'll hit next if you encrypt the package it just basically makes you use a password when you when you set up the provisioning package and it also encrypts the stuff in there because it actually loads all the files as you'll see the size of it once i'm done here so we'll hit next we're not going to put it there we're going to put it in the c temp directory and then we'll name it just the youtube ppkg and then we'll hit next and we'll build our provisioning package so we'll open that c temp directory and here's our ppkg file as you can see it's pretty much the same size as this right here which is what i was talking about how it puts all the files into the ppkg file so that's all you need when you set up a computer now i'm going to switch over to hyper-v here and um we'll continue with what it actually does the power of the ppkg file okay i'm back here and i'm actually going to show something else this is a powershell command this isn't needed for anything other than hyper-v what it's going to allow me to do is take that ppkg file and put it in an iso file i'll upload this to github later to where you can create the iso file but with the ppkg file you just have to have the file accessible from the out of box experience so normally when you set this up and you're sending it up on a new computer this file here this ppkg file would go on a would go on a uh flash drive so you just plug the flash drive in and away you go but in this case oh where'd it all go okay in this case we're going to use powershell here to do it for us okay and i'll explain this as i go with with uh with hyper-v so i'm going to bring everything up here let's get the hyper-v menu as well as uh the virtual machine so here we go so we have the virtual machine we have hyper-v this is kind of confusing i'm going to explain it like it would be a normal computer instead of with hyper-v so i'm going to the settings i already have a dvd drive so i'm going to change from my windows iso to c isos and we're going to use our ppkg so this is like this is me plugging the flash drive into the computer so instead of instead of me mounting the iso on hyper-v this would be you physically plugging in the flash drive with that ppkg file on it so we're going to do that we're going to hit apply weird it didn't show up right away so let me explain now so when it's like this i'm going to hit the windows key five times normally when you plug the flash drive and it'll come up sometimes it doesn't but if you hit the windows key five times when you're at this screen one two three four five maybe not one two three four five i might have to go to the next screen here there we go we did we had to go to the next screen so you have to get past that first screen and then we're going to do install provisioning package continue and it it found the provisioning package that we put on the flash drive here's the two scripts that we set up so it's applying pending pending here give it just a moment now we'll get to see the power so basically what just happened there is it ran all the stuff that we did it should reboot and run the commands you could take the flash drive out at this time but in this case since it's hyper-v it's just mounted with an iso so here we go i'll run the scripts here the first one was installing chrome so we'll let it install chrome this shouldn't take very long the files you know about 60 megs i believe so this one will take just a few seconds to do we'll stop the video here while it while it runs all right so that finished up now we're on the second script here zero and one good old computer knowledge so we'll uh let this one run this one's the ansible powershell script that's running as a bypass so here we go oh weird setup complete so now we open it up youtube is the password remember that's what we created in the ppkg file hit enter we'll log in let's see if it all worked let's make it large so we can full screen and make it look good come on oh [Applause] see if we did it this might take several minutes so like i said you can put a whole bunch of stuff in the commands of the provisioning package for example i've used in the past power settings firefox install ninite pro i'm trying to think the list goes on and on but i've i've sort of shifted away from creating provisioning packages for every single computer deployment i do and started using a configuration tool afterwards because like you saw the provisioning package can't be edited in real time you can't use github you can't use source control so you're basically just holding these files that could have very important stuff on there and if you don't have the file you're kind of sol right so it's easier to use github with ansible or cassaya scripting or remote management scripting or you know just getting the computer passed out of the box it as you could tell it only took like five minutes just you know go through the basic setup so you could just do that not install any applications and save yourself some time here we are look we have chrome it's working woohoo it's all up and running so we did it fairly simple basic if this helped you at all if you have any questions feel free to comment like and subscribe thanks have a good day youtube

Channel: Takescake Technology

Views: 5,108

Keywords: PPKG, Tutorial, Automation, Windows 10, Out of Box Expierience

Id: 9stSXeKMyyU

Length: 16min 17sec (977 seconds)

Published: Fri Oct 16 2020