- Managing shared mailboxes in Office 365 with PowerShell - Thu, May 5 2016
- Managing shared mailboxes in Office 365 with the GUI - Wed, May 4 2016
- Installing and configuring the Enhanced Mitigation Experience Toolkit (EMET) - Wed, Mar 16 2016
With the release of Windows 10, Microsoft has made a new tool, the Windows Imaging and Configuration Designer (WICD), available as part of the Windows 10 Assessment and Deployment Kit (ADK). WICD (which a number of us have noticed looks a lot like it should be pronounced “wicked”) can build provisioning packages that can be used to automate manual configuration of devices. This can really come in handy in Bring Your Own Device (BYOD) and new PC scenarios.
WICD is available as part of the Windows 10 ADK. The ADK setup file, adksetup.exe, is a stub file that you use to download only the parts of the ADK that you need. If you uncheck every option and then select Imaging and Configuration Designer (ICD), the ADK setup will add Deployment Tools, Windows Preinstallation Environment (Windows PE), and User State Migration Tool (USMT). After you click Install, the components will download and install on your computer.
Installing Windows Imaging and Configuration Designer from the Assessment and Deployment Kit
Running WICD for the first time
After you install WICD from the Windows 10 ADK, you can find the WICD icon in Start, All Apps, Windows Kits, Windows Imaging, and Configuration Designer.
Windows Imaging and Configuration Designer on the Windows 10 Start Menu
Run WICD for the first time and select New provisioning package.
Running Windows Imaging and Configuration Designer for the first time
Next, you’ll need to select a project name (I used “Demo Project”) and a save location. Ensure that you give each project a unique folder to save files. This will become important later when you export the provisioning packages. If errors occur during the export process, the logs will be stored in this folder.
Project details in Windows Imaging and Configuration Designer
Determine which editions you’ll be configuring with this provisioning package. WICD can configure Windows desktop editions (such as Home, Professional, Enterprise, and Education), Windows mobile editions (typically phones), and Windows 10 IoT Core. In most scenarios, I’m guessing most people will be using the Common to all Windows desktop editions option unless you’ve made an investment in Windows mobile devices.
Selecting the Windows edition in Windows Imaging and Configuration Designer
We won’t be importing any settings from an existing package. So, we’ll skip the last screen by clicking Finish.
The number of available settings is, quite frankly, staggering. The UI will occasionally offer tips and/or an embedded web page in the lower middle area. Save yourself some time and go check out the Windows Provisioning settings reference instead of thumbing through all the settings by hand. The UI also has a search box and the ability to change the view to All settings (the default), Common OEM settings, or Common IT Pro settings. I will warn you that some useful settings get hidden if you change the view from All settings to Common IT Pro settings, so be aware of that if you’re looking for a setting that you can’t find.
Runtime settings in Windows Imaging and Configuration Designer
Exporting the provisioning package
After you’ve chosen all your settings and configuration, you’ll need to export the provisioning package to distribute. To create the provisioning package, click the Export button and choose Provisioning package.
Exporting the provisioning package in Windows Imaging and Configuration Designer
Change the Owner field to IT Admin. The Owner field determines the order of precedence of WICD provisioning packages. Packages that an IT Admin creates have the highest precedence, and packages that Microsoft creates have the lowest precedence. You can configure the Rank to determine the precedence of packages your IT department creates.
Describing the provisioning package in Windows Imaging and Configuration Designer
Packages created in WICD can be encrypted with a password and/or signed with a certificate. Without the password, the package can’t be used on a system. If you don’t digitally sign the .ppkg file, users attempting to use the provisioning package will receive an error that the package isn’t signed.
Selecting security details in Windows Imaging and Configuration Designer
Choose the location where you’ll save the .ppkg file and then click Build on the last screen.
Installing a .ppkg file on Windows desktop edition
Three ways exist to install a .ppkg file that was generated in WICD. If you have a file that was distributed via a website or sent via email, you’ll have to browse to the file and double-click it. If you have the file on removable media, you can install the package by going to Start, Settings, Accounts, Work access, Add or remove a package for work or school.
Adding or removing a package for work or school in Accounts Settings
If you’re working with a new computer, you can press the Windows key five times during the Out of Box Experience (OOBE). Ensure that a USB drive is attached to the computer with the .ppkg file and then click Set up to select your provisioning package.
Prompt for WICD provisioning package in Windows 10 OOBE
Regardless of which way you get to the install, you’ll have to accept a UAC prompt. The WICD .ppkg packages typically have to edit settings that only an Administrator can modify. The assumption with the .ppkg package is that either the owner of the system (in a BYOD scenario) or someone from IT is installing the package and would have the required Admin rights on the system.
UAC prompt when installing a .ppkg file
Next, you’ll be presented with a warning about the changes that will be made on the system. Click the Yes, add it button and Windows will make the required changes. If the changes require a reboot, the system will reboot at this point in the process.
WICD package install warning
Viewing and removing a WICD .ppkg provisioning package
To view the WICD provisioning packages that have been installed on your system, go to Start, Settings, Accounts, Work access, Add or remove a package for work or school. Here you can view all of the provisioning packages that are installed on the computer, view their details, and remove them.
Removing the package is as simple as clicking the Remove button and accepting the UAC prompt. Some packages may require a reboot. Also, not all settings from a provisioning package can be removed, so some changes to a system may be permanent.
Viewing provisioning packages on your computer
Subscribe to 4sysops newsletter!
In the next installment of our series on Windows Imaging and Configuration Designer, we’ll cover how to configure BYOD devices with WICD provisioning packages.
Want to write for 4sysops? We are looking for new authors.
is there a logfile? I am trying to do a domain join and the only thing I see is that my test computer is not joining my domain, but I don’t receive any feedback?
Unfortunately, the available documentation is lacking right now. In the part on configuring corporate devices, I have the settings that I used for adding devices to AD. The two biggest places I had problems were the Account and AccountOU fields. Both are addressed in that article.
thanks for the link. My AD join is now working fine 🙂
Great! That was a massive hassle to figure out! I’m glad I was able to help.
I’m trying to create an installation disk for windows 10.
The image install correctly when I boot frolm the usb on a pc witch only have one partition or no partition.
Is there any possibility to use unattended file with a wim image and to wipe disk?
thx a lot
That isn’t the purpose of the WICD tool.
There is no log file, per se, but events are logged under ‘Microsoft-Windows-Provisioning-Diagnostics-Provider/Admin’ in Windows Event Viewer, and you can also find MDM enrollment specific info under ‘Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider/Admin’.