Installing & Configuring Microsoft Deployment Toolkit (MDT)

all right everybody welcome back to another part of the lab series in this series we're going to be deploying computers again but we're going to be deploying them with another tool called Microsoft deployment toolkit otherwise known as MDT we learned about WDS in a previous video and OBS was great because it allowed us to easily deploy computer images over the network then in the following video we learned how to customize those images and now we're going to go one step further and know how to customize images while they're getting deployed so looking back on spore deploy server we're gonna pull up a web browser and go we're going to download Microsoft MDT and the windows ATK so you're just gonna search for Microsoft energy download and you can see one of these first links as of this date the most recent version is eight four four three if you have a newer version go ahead feel free to use that but we're gonna stick with eight four four three and then while that's downloading we're gonna download the Windows 10 ATK okay we could see that the current latest version for Windows 10 version 1709 is available there's versions for 1703 and 16:07 I've been using the most recent version with older versions of Windows for example I've tried a TK 1709 while the planck 1703 now haven't had any problems if you're going to be deploying 1709 you want to make sure you're using the latest toolkit if you're using an older toolkit you're probably going to run into problems so I'm just going to go ahead and download the latest version of that and we can close out of chrome here and then we'll pull up our downloads and begin the setup so the first thing that you need to do is install the ATK you're not going to be able to install MDT until the ATK is set up so we're just going to double click the file and we're gonna pretty much select for me in this lab we're going to do the defaults we're not going to participate in any kind of information and then here we're going to check the deployment tools windows PE you can keep the ICD checked in this particular yeah let's go actually go ahead and keep this checked for now this will probably come in handy for a different video and I don't mean the windows performance toolkit it's not much space saving to to not install it but it's okay so now I'm gonna go ahead and hit install and pause the video while that's downloading and installing alright as you can see the ADK has completed the installation so now what we're gonna do is we're going to begin the installation of MDT MDT can technically be installed on any client operating system it doesn't necessarily have to be Windows Server because all it is is just it's not like a server role or anything but you'll see I like to install it on my deployment servers just because that's the server doing the deployment again I'm gonna leave the defaults here for now and I'm not going to join the experience improvement programs and there you go so now it's installed so now what we're gonna do is we're going to open up the deployment workbench that is MDT ok and then the next step that we're gonna do is we're gonna create a deployment here I already had one on this computer so I'm just gonna go ahead and pretend like we did it so I'm gonna go ahead and select new deployment chair and we're gonna do whoops probably because I didn't delete the previous folder yeah it's okay we'll just do deployment share - whatever ok we're going to choose the default sharing which is deployment share we're gonna call it empty t deployment share that here's a couple generic questions that you could check or uncheck we're going to be using a custom rule set so none of these things really matter so I'm gonna hit next and there we go this is now our deployment share so now what we need to do is we need to import an operating system in order to import the operating system you can either give it your custom bloom file or the stock web file or you can attach them like an ISO to the computer and your important that all is oh I already have a wind file for Windows 10 enterprise and that's what we're going to use so I'm going to go under operating systems and I'm going to right click and select import operating system here you can see that there are options that you can use in fact you can even use a image from WDS since I have WDS setup we could probably just use that server and as you can see it's kind of had it imported all of the operating systems that I have in WDS this is great because it looks like it doesn't copy william's you don't have like duplicated whims on your computer so that's the first step now the next step and what makes MDT really cool is that after it installs the operating system we're gonna give it a set of tasks to do and in this particular case we're going to have it installed applications so we're gonna go under applications and we could see that by default there are none so let's go ahead and download an application so I like to do let's do for example Chrome Google Chrome so let's find the we're gonna find the chrome enterprise installer this is the chrome MSI file which we can use to install silently we could see that there's the Chronos I 64-bit so we're gonna go ahead and download that okay then let's go ahead and download notepad plus plus I like notepad plus plus on all of my computers so I'm gonna go ahead and find that which is the 64-bit installer right here and then the last thing we're gonna do is we're gonna install 7-zip and again we're gonna look for the MSI file if your installer does not have an MSI file it's usually it's ok you just need to do some research and figure out if you could install that exe silently because the key here is having this all be automated if you're Exe file is launched and it does not launch silently you're gonna have to click manually and if you're deploying many computers this could be become a frustration so anyways now that we have these files we're going to go ahead and delete the two that we already have installed now we're just going to create folders for these programs so we're going to pick chrome 7-zip and notepad plus plus and I'm just gonna go ahead and drag the appropriate files there and I'm gonna give these a easier name okay now we're going to go into MBT back into complications we're going to right-click on applications and select new we're gonna select applications with source files because what this is gonna do is it's going to take those files them they're gonna import into MDT copy copy into empty tea if you select application will source files somewhere else on the network it's just gonna do like a link in my case I don't have like a installer chair so we're just gonna do you know a copy now it's gonna copy everything that's in that Google Chrome folder that I specified into MTT your now I'm going to give you the command line that needs to run to install Chrome and I noticed since it's another side file I know we need to use MSI exec okay and we're going to do the same thing for the other two programs and as you may notice the last application which is notepad plus plus is not in an MSI for me it's an exe format but just by reading their website and seeing how to install that software we can see that it supports a flag for this and we'll do n p p WF c /s for segments ok so as you can see now we have operating systems and now we have applications so the next thing to put this all together we need to create a task sequence a task sequence is like it says it's a sequence of tasks that are run to install your operating system it could inject drivers applications and do any other kind of custom tasks like run command line scripts or powershell scripts right now I'm not going to be adding any drivers because we're deploying in a virtual environment but if you're deploying onto real computer is real hardware you can go into a deluxe drivers and import your drivers so now we're gonna go under task sequences and create the new task sequence I'm just gonna call the IDs your alot of all this windows 10 Enterprise we're gonna create a standard client task sequence we're gonna create the we're gonna select the appropriate operating system and we're not gonna specify a product key at this time we're just going to give it some organization name and we're gonna specify that administrator password now everything that you specified here it can be changed later so don't worry if you made a mistake you don't have to delete and start over you can you can change it later okay cool so now that we have the task sequence we're almost ready to begin now I'm gonna make a couple changes that I like to make into the rule sets by right-clicking on MTT deployment share and selecting properties now I'm going to uncheck x86 because I don't want it to generate any 32-bit in any packages so then I'm going to go under Windows PE and under x64 I'm going to uncheck the generate ISO image I'm going to be taking the file that MDT generates and importing it into WDS so we're going to be working hand-in-hand WDS and MDT MDT is gonna generate a whip file we're going to import the wim file into WDS and then we're gonna network boot our computers and that's how it all works together if you check this box for generate an ISO you can you know you can copy that I saw it's like a flash drive and take your computer and as long as an internet connection boots that flash drive and it will still load MDT so the next step that I'm gonna change is I'm gonna take a look at these default rules I'm gonna pause the video here make changes to the rules and we'll continue so you could see what I did okay as you can see I've gone ahead and added a lot of different rules into here and what essentially these rules do they're pretty self-explanatory I'm gonna post these into the description of the YouTube video and Microsoft provides quite a bit of documentation on what each of these do but essentially I'm telling it to skip certain prompts so I don't have to answer a bunch of questions the end up providing an information on how to domain join the computer so I'm giving it the lab domain name I'm giving it the domain join user the domain the password and the oh you structure and so when we look at the oh you structure if I pull up the domain controller I could see that in the root of my dome no you called WDS this is where I'm gonna want all new deployed machines to go okay and then under the bootstrap denying I file again we're just adding the deployer user name and the password so that it can access that share and this is extremely important because by default when I play these changes by default the share permissions are pretty restrictive and you have to be launching this as like a domain app and I don't really like doing that so what we're gonna do is we're gonna find our deployment share and we're gonna change the permissions a little bit I always change my permissions to be everyone under share and then I restrict it later in the NTFS permissions so everyone is gonna have full access for the share permissions and then under the security permissions we're gonna go ahead and change this so we're gonna give ourselves full access to this folder and now we're gonna go ahead and give that deployer user we're gonna give it full control or at least modify and read/write all that stuff to this share because what's gonna happen MDT basically works by launching that pre-boot environment it then tries to access this share and tries to run scripts from that share so if you ever run MDT and you just get stuck i don't like a screen that says Microsoft deployment toolkit and nothing happens it's likely that you just don't have permission for that user that we specified in the rules to access the share so I'm giving this user access to that share I'm gonna go ahead and apply these settings and of course we have some issues when do you never not have issues applying permissions it's likely because of the ownership double check and I'm gonna replace okay looks like it didn't like it because I didn't have domain admin or I didn't find myself in the permissions in any case we could see that the permissions now are appropriate they have me so I have access to the chair and the deployer user that's going to be used to install okay so now that that's done we need to now generate these images so I'm gonna right click onto MDT deployment share I'm gonna select update deployment share and since the first time that it's running it's essentially going to completely regenerate the boot images every time you make a change to your bootstrap file or any of these settings you're going to want to regenerate those images because these settings are baked into that wing file if you make changes to your tasks sequence or your applications or whatever you do not need to regenerate those files because those are run live essentially but if you like add new drivers and you want your boot wim to have those new drivers you need to update your deployment share so now I'm gonna go ahead and do this I'm gonna hit next next you know we're just gonna wait for it to finish update ok we can see that the wim files have finished generating so we're gonna select finish and now here's the neat trick we're gonna go back to WDS we're gonna open up the boot images and we're going to add a new boot image and the boot image is going to be the one that we just generated out of MDT which is by default it's stored into your deployment share under the boot folder and there we can see the light touch PD so we're just going to next and wait for it to add it just looks like it's going pretty fast ok looks like that was added so now we're going to go back to our client machine and this virtual machine is set to network boot so I'm gonna go ahead and turn it on oh it's likely I making some changes have probably deleted some it's some stuff so okay yeah there we go my mistake I just made some changes to that virtual machine at some point now we're going to go ahead and just network boot it and you can see that light touch is now showing up as an option so we're gonna press that and we're going to wait for it to load and you can see after it loaded we get brought into this MDT page and as you can see as soon as we got here this blue box came up if your deployment share permissions are not correct you might be just stuck at this logo and you can you can do some basic troubleshooting by hitting I can't remember yeah I'm sorry I can't remember there's that command key you can press to open a command line window and essentially do some like network troubleshooting to make sure that you're getting an IP address and stuff like that but generally I've noticed that's because of the shares and now as you can see we get instantly brought into this window where we could select our task sequence we have one task sequence which is to install Windows 10 Enterprise so we're gonna select next it's gonna ask us which what we want to do do we want to join a domain or join a workgroup and as you can see if I join a domain all of these things were pre-populated like the öyou in the user name okay I'm gonna leave these all by the defaults and now we're going to be brought to the application installation screen I'm gonna go ahead and check all of these and press next and as you can see we're now getting this installed so I'm gonna go ahead and pause the video and come back so after Windows is done getting installed all right it looks like Windows is almost done luckily since the image is pretty small and it's a pretty quick Network it's just essentially copying like a three big file or a four gig file onto here so it should be pretty fast and I'm unpause the video here so you could see how it works next and how it's essentially automated you can see that it goes ahead and restarts the computer and it's going to create the local admin user for us and sometimes the hyper-v has a problem where I have to close the console and reopen it just kind of exit out of those network services and you can see we're booting into Windows and basically yeah when you install Windows you get brought into like a screen where you have to put in a bunch of information about your local user accounts and stuff like that MDT takes care of all of that in the rules that we specified okay we're gonna let that do its thing I'm gonna show you an interesting thing in your MDT when you expand your task sequence and you go under properties under operating system info there's a Punnett end that XML file ok that's strange that we got that error I'm not really sure what that means but generally you press that button and you're you're able to see your XML file and you're able to make all the changes necessary like change the admin password and stuff like that I'm sure this file lives the sunna 10 file live somewhere manually so you can open it like a notepad or something but essentially that's what's going on and again we need to close and reopen my console and as you can see it's going through the out-of-the-box experience automatically and hopefully I typed all of the programs which is correctly because if I didn't one of the programs can fail two installs like if I misspelled something but I'm gonna go ahead and pause the video until we're actually at the desktop alright and as you could see we are now on the desktop and in just a few seconds here the MDT screen will come back up and it will continue working and as you can see we are logged in as the local administrator sorry it's just kind of slow I probably should have signed a couple more course to this virtual machine but as you could see the MU T is going through its thing as installing applications and yeah there were like notes to local administrator that we specified I'm gonna keep this thing going just so you could see that it works and as you could see in the background this Google Chrome icon appeared and it looks like we're all we're all set and it looks like it blasted through the other two applications pretty quickly which is great sometimes some programs take slower pretty normal stuff so if we open up the Start menu we could see that seven-zip is installed and the Windows 10 menu is just pretty horrible but it's all there and probably a reboot so I'm gonna go ahead and finish because you could see that if completed with no errors oh and the system seems to be domain joined if we go back to our domain controller and refresh that WDS oh you there is that's the new computer all right so the computer is domain joined and they just want to make sure that those three applications that we selected are there I'm confident that they are there but I just want to show you that everything is working as expected all right finally through that nice little video that I have to see every time and you can see no pentacles plus and 7-zip and chrome are all there and they're all working ok so in this video we essentially took WDS and we expanded it by installing MDT with MBT we were able to install an operating system image and applications on top of that image automatically you can keep expanding that by creating the more custom tasks sequences like activating Windows 10 automatically injecting drivers and stuff like that so that's where MDT comes in and is useful and I hope this video helped you

Channel: George Babichev

Views: 73,087

Keywords: 70-410, 70-411, Microsoft, MDT, Deployment Toolkit, Microsoft Deployment Toolkit, WDS, Windows Deployment Services, George Babichev

Id: zkS4LHXbyMA

Length: 24min 11sec (1451 seconds)

Published: Tue Nov 07 2017