- Configuration Items in Configuration Manager (SCCM, MECM) - Mon, Aug 22 2022
- Create and read SCVMM custom properties with PowerShell and the VMM Console - Mon, Apr 18 2022
- Prevent ransomware attacks on network shares with File Server Resource Manager (FSRM) - Mon, Mar 7 2022
This guide assumes that your environment meets the prerequisites outlined below:
- ConfigMgr Version 2107: You can download the latest version of MECM from the Updates and Servicing component of MECM.
- Windows ADK for Windows 11 and Windows PE add-on for the Windows ADK: You can download the latest ADK and Windows PE add-on from Microsoft's website. Remember, you will need to uninstall the current version of the Windows ADK and Windows PE add-on first.
- Minimum hardware requirements: You can find more information about the system requirements, as well as the feature-specific requirements for Windows 11 on Microsoft's website.
- Windows 11 ISO: You can download the Windows 11 ISO from Microsoft Development Network (MSDN) or Volume Licensing Service Center (VLSC). For this guide, I will use the Windows 11 Enterprise ISO from VLSC.
Once you download the Windows 11 ISO, mount the ISO file, and copy the contents to a file repository that is accessible by MECM. To perform an in-place upgrade, MECM requires two sets of files:
- Install.wim—for the operating system image.
- All ISO source files, including install.wim—for the operating system upgrade package.
I recommend that you create two separate directories for each. For this guide, I've copied both sets of files to the following locations:
- \\...\Operating Systems\Windows_11_Enterprise_21H2_x64 (install.wim)
- \\...\Upgrade Packages\Windows_11_Enterprise_21H2_x64 (All ISO source files, including install.wim)
Launch the MECM Administrator Console. Navigate to Software Library > Operating Systems > Operating System Images. Right-click the applet Operating System Images and select the option Add Operating System Image.
Browse to the path of the operating system image file and check the box to agree with the stated terms of use. Optionally, you may also choose to extract a specific image (i.e., Windows 11 Education, Windows 11 Pro) from the install.wim. For this guide, I will import all images. Note that MECM will read out the image names as Windows 10 editions.
Click Next. Select x64 for the Architecture and English (United States) for the language. Click Next.
Enter a Name, Version, and optionally, a Comment for the operating system image. Click Next.
Click Next and then Next again to import the operating system image. Click Close.
Next, navigate to Software Library > Operating Systems > Operating System Upgrade Packages. Right-click the applet Operating System Upgrade Packages and select the option Add Operating System Upgrade Package.
Browse to the path of the folder that contains the operating system upgrade package (ISO source files) and check the box to agree with the stated terms of use. Optionally, you may also choose to extract a specific image (i.e., Windows 11 Education, Windows 11 Pro) from the WIM. For this guide, I will import all images. Note that MECM will read out the image names as Windows 10 editions.
Click Next. Select x64 for the Architecture and English (United States) for the language. Click Next.
Click Next. Select x64 for the Architecture and English (United States) for the language. Click Next.
Click Next and then Next again to import the operating system upgrade package. Click Close.
Next, navigate to Software Library > Operating Systems > Task Sequences. Right-click the applet Task Sequences and select the option Create Task Sequence.
Select the option Upgrade an operating system from an upgrade package.
Click Next. Enter a name for the task sequence, and click Next.
Select the upgrade package and edition to install. For this guide, I will install Windows 11 Enterprise. Optionally, you may also choose to enter a product key. For this guide, I am going to leave the product key blank, as my organization uses Active Directory-Based Activation (ADBA). Click Next.
Optionally, you may choose to include additional software updates. For this guide, I will not include any software updates. Click Next.
Optionally, you may choose to install additional applications. For this guide, I am not going to install any applications. Click Next.
Click Next and then Next again to create the task sequence. Click Close.
Right-click your newly created task sequence and select Properties.
Under Software Center Properties, check the box next to Restart required.
Click the tab Advanced. Select Run only on the specified client platforms and check the box next to All Windows 10 (64-bit).
Click the tab User Notification. Check the box next to This is a high impact task sequence.
Click Apply and then OK.
Next, right-click your newly created task sequence and select Edit.
Click the task Check Readiness for Upgrade. Check the boxes next to:
- Language of current OS: Select English (United States)
- AC power plugged in
- Computer is in UEFI mode
Under the task group Remove/suspend third-party security, add a task to Disable BitLocker.
Set the number Windows restarts prior to resuming BitLocker protection to 5.
Under the task group Upgrade the Operating System, add a task to Set Task Sequence Variable.
Change the name of the task to Accept EULA and set the Task Sequence Variable to OSDSetupAdditionalUpgradeOptions. For the value, enter /eula accept. This is very important, as the task sequence will fail if this variable is not defined, as stated by Microsoft:
This option is new starting with Windows 11. Specifying /EULA accept instructs Windows Setup that the end user license agreement has been accepted. Starting with Windows 11, acceptance of the Windows EULA is required before Windows Setup installation begins. By specifying /EULA accept you are agreeing that when applying this operating system either (1) the applicable Windows license was purchased though volume licensing, or (2) that you are accepting the relevant Microsoft Software License Terms. Windows Setup will return error MOSETUPEEULAACCEPTREQUIRED (0xC190010E) if /EULA accept is not specified and (1) /Quiet is specified, or (2) if Windows Setup is started where user interaction is not supported.
Click the task Upgrade Operating System.
Check the box next to Dynamically update Windows Setup with Windows Update, and the box next to Override policy and use default Microsoft Update. This will ensure that the setup files are kept up to date.
Finally, under the task group Install/suspend third-party security, add a task to Enable BitLocker.
Leave all the default settings as they are.
Click Apply and then click Close.
Finally, right-click your newly created task sequence and select Distribute Content.
Click Next and then Next again. Select the distribution point(s) to distribute the content to and click Next.
Click Next and then Next again to distribute the content. Click Close.
Now, it is time to deploy the task sequence. Right-click your newly created task sequence and select Deploy.
Select a collection to deploy the task sequence to. Click Next.
Leave all the default settings as they are and click Next.
Leave all the default settings as they are and click Next.
Leave all the default settings as they are and click Next.
Leave all the default settings as they are and click Next.
Click Next one last time to deploy your newly created task sequence. Click Close.
Shortly after, you should see the task sequence show up in the Software Center.
Some important things to keep in mind:
Subscribe to 4sysops newsletter!
- A Windows in-place upgrade can take anywhere from 2–4 hours.
- End users should be advised to back up their documents and other files prior to running this upgrade.
- Disconnect all peripherals and other hardware prior to running this upgrade.