Chat now with support
Chat with Support

KACE Systems Deployment Appliance 9.0 Common Documents - Administrator Guide

About the KACE Systems Deployment Appliance Getting started Using the Dashboard Configuring the appliance Setting up user accounts and user authentication Configuring security settings Preparing for deployment Managing device inventory Using labels Creating a Windows or Linux Boot Environment Managing drivers Capturing images Capturing user states Creating scripted installations Creating a task sequence Automating deployments Performing manual deployments Managing custom deployments Managing offline deployments Imaging Mac devices About the Remote Site Appliance Importing and exporting appliance components Managing disk space Troubleshooting appliance issues Updating appliance software Glossary About us Legal notices

Best practices for creating Windows system images

Best practices for creating Windows system images

This topic provides information about KACE-recommended best practices for creating a Windows Golden System Image.

Audit the appliance before beginning

•
Keep 20 percent of available space (or more) on the appliance.
•
Back up and remove un-used images, then copy and remove those images from the restore share directory.
•
Remove test images, or images that have been updated. (Updated or outdated.)
* 
CAUTION: Never run a "Delete Unused System Images Files" or delete an image while capturing an image.

Start fresh

•
Create the golden image in a virtual machine to keep it clean of extra drivers. This also is helpful in updating the image on a regular basis.
•
Do not image or create a golden master image of a machine that comes directly from the manufacturer. Only use volume license media. Avoid using OEM Media. For more information see https://support.quest.com/kb/135252.
•
If applying updates that occurred after capturing the image, only deploy a non-sysprepped image back to original machine.
•
Update images every couple of months and run a cleanup on the images.

Configure the workstation

The following KB articles are recommended best practice methods for creating the base OS installation for System Image capture. If using a Legacy enabled BIOS, use the Single Partition Golden Image KB. If the BIOS is in UEFI mode, use the UEFI KB. Kace highly recommends minimal partitions on your base OS.

•
UEFI vs. Legacy BIOS Imaging: https://support.quest.com/kb/190265
•
Single Partition Golden Image: https://support.quest.com/kb/187971
•
UEFI Imaging: https://support.quest.com/kb/186950
•
Understanding Imaging, KKE Videos: https://support.quest.com/kb/video-articles?k=understanding%20imaging

If not following the above KB articles, use the following guidelines:

•
If working from a machine that was deployed with the appliance (Scripted Install or Image), make sure to delete the KACE directory on the root of the drive and delete %allusersprofile%\quest\kace.
•
If working with a machine that had previously been sysprepped, make sure to delete sysprep_succeeded.tag from windows\system32\sysprep.
•
Install all patches and updates.
•
Create an administrator profile and customize the profile that is to be set up as default.
•
KACE recommends creating a base image, and using post-installation tasks to deploy your software at a later time. This will make your images more flexible when having to deploy to numerous departments, or different types of users.
•
If creating a "full" image, avoid installing software that is updated regularly (flash, reader, and so on), make these into post-install tasks and leverage the KACE Systems Management Appliance for updates.
* 
CAUTION: It is NOT recommended to install applications such as anti-virus, encryption (such as Dell™ Data Protection), security, virtual CD software, any software that emulates hardware, or the KACE Agent in the image. These can often interfere with the image deployment process.

If the image is captured in WIM format, keep at least 60% of the drive space on each partition as free/available.

Sysprep, capture and deployment guidelines

•
Capture the image without sysprepping OR if using a virtual machine (VM): use the snapshot feature to have a copy of the non-sysprepped OS and customizations. If capturing a non-sysprepped image, remember this must be deployed back to the exact same hardware.
* 
NOTE: Creating a golden master on a virtual machine leverages creating snapshots at different stages, such as prior to sysprepping. This allows a restore to a previous snapshot much quicker than re-deploying a system. This also allows for easy testing of deployments to another virtual machine. Testing driver injection would require deployment to specific models.
•
If there is an issue with sysprep, and these happen often, it is best to restore a non-sysprepped image to the original machine, which will also avoid rearm issues. With the VM option, reverting back to a snapshot will allow updates to the system.
•
If capturing the non-sysprepped image to the appliance, be descriptive in your naming of captured images; include whether the machine is sysprepped, and include the version or date of the capture.
•
Descriptive names enable system administrators to choose the correct image to deploy from the drop-down list in KBE.
•
Use the notes field in the appliance Administrator Interface as a change and audit log.

Sysprep

•
Sysprep is a Microsoft tool that they require for capturing an OS image to deploy to a different system. You can either use the Microsoft Sysprep tools and command line or use the KACE Sysprep Creator Wizard if you do not have an unattend.xml file.
•
If you configured a "default" account, ensure to set it to True in the unattend.xml file. The sysprep creator wizard has an option to copy the current profile to the default profile.
•
When running sysprep by command line and not the Sysprep Creator/Executor, use the /generalize, /oobe, /shutdown, and the /unattend switches.
•
Shutdown is preferred so that the PXE boot isn't missed on a reboot. If using the option, sysprep must be run from the customized account.

Capture

•
Verify that enough space is available on the appliance and then capture the sysprepped image.
•
After the capture, reboot the sysprepped machine to verify that mini setup runs correctly.
•
Test to make sure everything in the image works as desired.
•
Capturing an image across the WAN is not recommended. Please limit image capturing to only the local LAN where the appliance is physically located.

Deploy

•
Add Pre/Mid/Post Installation tasks to your image on the appliance.
•
Test your deployment on a different workstation for verification.
•
If deploying an image to a remote location, please consider using a Remote Site Appliance (RSA) for best performance. Deploying an image across the WAN is not recommended.

Post-installation tasks

•
Be consistent with naming tasks. Adding prefixes such as "App-" or "Script-", "OSConfig-" "Mid-" helps to keep tasks organized.
•
Consider the ordering of your post-installation tasks in terms of placing prerequisites before the applications that require them.
•
Use cscript with VB scripts. For example: cscript myscript.vbs
•
When creating a ZIP file for an application task, select the contents to archive so that the file you call is in the root of the ZIP file.
•
For .msi deployments, use the install switch last. For example: msiexec /qn /norestart /i agent.msi
•
Use CLONEPREP=1 on the .msi Agent install if it is not intended to have the Agent to -check in, and create a KUID until the next reboot. For example: msiexec /i agent.msi HOST=blah CLONEPREP=1
•
If using 3.5 SP1 or earlier:
◦
Use the start /wait command when deploying software through appliance post-installation tasks.
◦
Use call when using .bat scripts in application tasks. For example: call myscript.bat

Capturing user states

Upload USMT software from the appliance
Upload USMT software from Media Manager
Create USMT Scan Template
Scan user states
Scan user states offline
Deploy user states to target devices automatically
Deploy user states to target devices manually

The appliance uses the Windows User State Migration Tool (USMT) to migrate user profiles by running the USMT Scan State and Load State utilities. Before scanning devices for user states, you can configure the USMT Scan Templates that set the Scan State utility parameters and enable you to specify which data to migrate and which data to exclude from the capture. You can upload and install the USMT from the appliance or from the KACE Media Manager.

The USMT Scan State utility (Scanstate.exe) scans a device for data, and captures the information in a .mig file. The USMT Load State utility (Loadstate.exe) installs the data and settings from the .mig file on to a destination or target device. The Load State utility also enables you to migrate users states to devices manually.

Scan User States Offline: You can use the Scan User State Offline pre-installation task to scan user states from any device and upload the user state to the appliance.

Deploy User States: You can use the Deploy User States post-installation task to deploy the user states to target devices.

Upload USMT software from the appliance

Upload USMT software from the appliance

Scanning user states requires the Windows User State Migration Tool software (USMT) included in the Windows ADK (Automated Deployment Kit). You can upload the USMT software version 5.0 directly from the appliance. The appliance captures the user states by running the USMT Scan State utility on a device.

You can also upload USMT version 3.0.1 from the appliance.

1.
On the left navigation pane, click Library to expand the section, then click User States to display the User States page.
2.
Select Choose Action > Upload.
3.
Select the appropriate OS to which you plan to deploy the user states, and click Show me instructions.

Upload USMT software from Media Manager

Upload USMT software from Media Manager

You can upload and install the USMT software version 5.0 from the latest version of the Media Manager.

1.
On the device where the KACE Media Manager is installed, run the Media Manager from Start > All Programs > Quest > KACE Media Manager.
2.
In Media Manager, in the left pane, click General Settings.
* 
NOTE: This page appears by default if this is the first time you run the Media Manager.
3.
In SDA Hostname, enter the IP address of the appliance.
4.
In SDA IP address, enter the IP address segments of the appliance.
5.
In Samba Share Password, enter the password you used to log in.
6.
Click Upload USMT.
7.
Click Browse and confirm that the path to the appropriate Windows ADK is correct.
For example:
◦
WinPE 10 Win10 x86 ADK C:\Program Files\Windows Kits\10
◦
WinPE 10 Win8 x64 ADK C:\Program Files(x86)\Windows Kits\10
8.
Click Start Upload.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating