Created
March 21, 2024 22:59
-
-
Save LukeCAutomate/afc23bf7713677f35ae9444616ce1df1 to your computer and use it in GitHub Desktop.
Example autounattend file which can be used with Windows Server 2025 preview.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<?xml version="1.0" encoding="utf-8"?> | |
<unattend xmlns="urn:schemas-microsoft-com:unattend"> | |
<settings pass="windowsPE"> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-international-core-winpe --> | |
<SetupUILanguage> | |
<UILanguage>en-US</UILanguage> | |
</SetupUILanguage> | |
<InputLocale>en-US</InputLocale> | |
<SystemLocale>en-US</SystemLocale> | |
<UILanguage>en-US</UILanguage> | |
<UILanguageFallback>en-US</UILanguageFallback> | |
<UserLocale>en-US</UserLocale> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-setup --> | |
<DiskConfiguration> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-setup-diskconfiguration --> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-setup-diskconfiguration-disk-modifypartitions-modifypartition-typeid --> | |
<Disk wcm:action="add"> | |
<CreatePartitions> | |
<!-- Windows RE Tools partition --> | |
<CreatePartition wcm:action="add"> | |
<Order>1</Order> | |
<Type>Primary</Type> | |
<Size>499</Size> | |
</CreatePartition> | |
<!-- System partition (ESP) --> | |
<CreatePartition wcm:action="add"> | |
<Order>2</Order> | |
<Type>EFI</Type> | |
<Size>280</Size> | |
</CreatePartition> | |
<!-- Microsoft reserved partition (MSR) --> | |
<CreatePartition wcm:action="add"> | |
<Order>3</Order> | |
<Type>MSR</Type> | |
<Size>128</Size> | |
</CreatePartition> | |
<!-- Windows partition --> | |
<CreatePartition wcm:action="add"> | |
<Order>4</Order> | |
<Type>Primary</Type> | |
<Extend>true</Extend> | |
</CreatePartition> | |
</CreatePartitions> | |
<ModifyPartitions> | |
<!-- Windows RE Tools partition --> | |
<ModifyPartition wcm:action="add"> | |
<Order>1</Order> | |
<PartitionID>1</PartitionID> | |
<Label>Recovery</Label> | |
<Format>NTFS</Format> | |
<TypeID>de94bba4-06d1-4d40-a16a-bfd50179d6ac</TypeID> | |
</ModifyPartition> | |
<!-- System partition (ESP) --> | |
<ModifyPartition wcm:action="add"> | |
<Order>2</Order> | |
<PartitionID>2</PartitionID> | |
<Label>System</Label> | |
<Format>FAT32</Format> | |
</ModifyPartition> | |
<!-- MSR partition does not need to be modified --> | |
<ModifyPartition wcm:action="add"> | |
<Order>3</Order> | |
<PartitionID>3</PartitionID> | |
</ModifyPartition> | |
<!-- Windows partition --> | |
<ModifyPartition wcm:action="add"> | |
<Order>4</Order> | |
<PartitionID>4</PartitionID> | |
<Label>Windows</Label> | |
<Format>NTFS</Format> | |
<Letter>C</Letter> | |
</ModifyPartition> | |
</ModifyPartitions> | |
<DiskID>0</DiskID> | |
<WillWipeDisk>true</WillWipeDisk> | |
</Disk> | |
</DiskConfiguration> | |
<ImageInstall> | |
<OSImage> | |
<InstallFrom> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-setup-imageinstall-dataimage-installfrom-metadata-key --> | |
<!-- Get-WindowsImage -ImagePath D:\sources\install.wim --> | |
<MetaData wcm:action="add"> | |
<Key>/IMAGE/INDEX </Key> | |
<Value>2</Value> | |
</MetaData> | |
</InstallFrom> | |
<InstallTo> | |
<DiskID>0</DiskID> | |
<PartitionID>4</PartitionID> | |
</InstallTo> | |
</OSImage> | |
</ImageInstall> | |
<UserData> | |
<!-- Product Key from http://technet.microsoft.com/en-us/library/jj612867.aspx --> | |
<ProductKey> | |
<!-- Do not uncomment the Key element if you are using trial ISOs --> | |
<!-- You must uncomment the Key element (and optionally insert your own key) if you are using retail or volume license ISOs --> | |
<Key>MFY9F-XBN2F-TYFMP-CCV49-RMYVH</Key> | |
<WillShowUI>OnError</WillShowUI> | |
</ProductKey> | |
<AcceptEula>true</AcceptEula> | |
<FullName>Packer</FullName> | |
<Organization>Packer</Organization> | |
</UserData> | |
</component> | |
</settings> | |
<settings pass="generalize"> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<SkipRearm>1</SkipRearm> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" > | |
<PersistAllDeviceInstalls>false</PersistAllDeviceInstalls> | |
<DoNotCleanUpNonPresentDevices>false</DoNotCleanUpNonPresentDevices> | |
</component> | |
</settings> | |
<settings pass="specialize"> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-international-core --> | |
<InputLocale>en-US</InputLocale> | |
<SystemLocale>en-US</SystemLocale> | |
<UILanguage>en-US</UILanguage> | |
<UILanguageFallback>en-US</UILanguageFallback> | |
<UserLocale>en-US</UserLocale> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup --> | |
<ComputerName>packer-win2025</ComputerName> | |
<TimeZone>Central Standard Time</TimeZone> | |
<ProductKey>MFY9F-XBN2F-TYFMP-CCV49-RMYVH</ProductKey> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-servermanager-svrmgrnc --> | |
<DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-IE-ESC" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-ie-esc --> | |
<IEHardenAdmin>false</IEHardenAdmin> | |
<IEHardenUser>true</IEHardenUser> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-outofboxexperience --> | |
<DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-security-spp-ux --> | |
<SkipAutoActivation>true</SkipAutoActivation> | |
</component> | |
</settings> | |
<settings pass="oobeSystem"> | |
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> | |
<InputLocale>en-US</InputLocale> | |
<SystemLocale>en-US</SystemLocale> | |
<UILanguage>en-US</UILanguage> | |
<UILanguageFallback>en-US</UILanguageFallback> | |
<UserLocale>en-US</UserLocale> | |
</component> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup --> | |
<AutoLogon> | |
<Password> | |
<Value>packer</Value> | |
<PlainText>true</PlainText> | |
</Password> | |
<Enabled>true</Enabled> | |
<Username>Administrator</Username> | |
</AutoLogon> | |
<FirstLogonCommands> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command IF (!(get-childitem Cert:\LocalMachine\My\)) { New-SelfSignedCertificate -CertstoreLocation Cert:\LocalMachine\My -DnsName "WinRMCertificate"}</CommandLine> | |
<Description>Certificate for WinRM</Description> | |
<Order>1</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command Enable-PSRemoting -SkipNetworkProfileCheck -Force</CommandLine> | |
<Description>Enable WinRM</Description> | |
<Order>2</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command ($cert = gci Cert:\LocalMachine\My\) -and (New-Item -Path WSMan:\LocalHost\Listener -Transport HTTPS -Address * -CertificateThumbPrint $cert.Thumbprint -Force)</CommandLine> | |
<Description>Add HTTPS WinRM listener with previously generated certificate</Description> | |
<Order>3</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command IF (!(Get-NetFirewallRule | Where Name -eq 'Windows Remote Management (HTTPS-In)')) {New-NetFirewallRule -DisplayName 'Windows Remote Management (HTTPS-In)' -Name 'Windows Remote Management (HTTPS-In)' -Profile Any -LocalPort 5986 -Protocol TCP}</CommandLine> | |
<Description>Add firewall exception to TCP port 5986 for WinRM over HTTPS</Description> | |
<Order>4</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command Set-Item WSMan:\localhost\Service\Auth\Basic -Value $true</CommandLine> | |
<Description>Enable Basic authentication</Description> | |
<Order>5</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command Stop-Service WinRM</CommandLine> | |
<Description>Stop the WinRM service to allow the dism process to finish before packer executes scripts</Description> | |
<Order>6</Order> | |
<RequiresUserInput>true</RequiresUserInput> | |
</SynchronousCommand> | |
<SynchronousCommand wcm:action="add"> | |
<CommandLine>%SystemRoot%\system32\WindowsPowerShell\v1.0\powershell.exe -Command Restart-Computer -Force</CommandLine> | |
<Order>7</Order> | |
<Description>Restart computer to apply changes</Description> | |
</SynchronousCommand> | |
</FirstLogonCommands> | |
<OOBE> | |
<HideEULAPage>true</HideEULAPage> | |
<HideLocalAccountScreen>true</HideLocalAccountScreen> | |
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen> | |
<HideOnlineAccountScreens>true</HideOnlineAccountScreens> | |
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE> | |
<NetworkLocation>Home</NetworkLocation> | |
<ProtectYourPC>1</ProtectYourPC> | |
</OOBE> | |
<UserAccounts> | |
<AdministratorPassword> | |
<Value>packer</Value> | |
<PlainText>true</PlainText> | |
</AdministratorPassword> | |
</UserAccounts> | |
<RegisteredOwner/> | |
</component> | |
</settings> | |
<settings pass="offlineServicing"> | |
<component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> | |
<!-- https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-lua-settings --> | |
<EnableLUA>false</EnableLUA> | |
</component> | |
</settings> | |
<cpi:offlineImage xmlns:cpi="urn:schemas-microsoft-com:cpi" cpi:source=""/> | |
</unattend> |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment