This page details the fundamental answer file settings you will need for a “zero touch” deployment of Windows 11 Enterprise, but also includes settings for custom logos, wallpapers, OEM support information, running commands, creating accounts, etc. You should substitute your own information for values encapsulated in [SQUARE BRACKETS]. Settings that reference PNG files in %windir%\System32\OEM presume you have mounted the WIM and added icon.png, logo.png, and wallpaper.png files as described in Customizing the Windows Installer Media.
Use these suggestions and Microsoft’s guidance on Answer Files and see How Configuration Passes Work to determine the best settings for your use case.
1 windowsPE
In this phase, we set the language and disk configuration. For more information, please see windowsPE. Add Components > amd64_Microsoft-Windows-International-Core-WinPE_neutral to 1 windowsPE:
| Element | Value |
|---|---|
| InputLocale | en-US |
| SystemLocale | en-US |
| UI Language | en-US |
| UILanguageFallback | en-US |
| USerLocale | en-US |
| SetupUILanguage > UILanguage | en-US |
| SetupUILanguage > WillShowUI | OnError |
Add Components > amd64_Microsoft-Windows-Setup_neutral > DiskConfiguration to 1 windowsPE:
| Element | Value |
|---|---|
| WillShowUI | OnError |
| Disk > ID | 0 |
| Disk > WillWipeDisk | true |
Right-click CreatePartitions and click CreatePartition:
| Element | Value |
|---|---|
| Order | 1 |
| Size | 300 |
| Type | Primary |
Right-click CreatePartitions and click CreatePartition:
| Element | Value |
|---|---|
| Order | 2 |
| Size | 100 |
| Type | EFI |
Right-click CreatePartitions and click CreatePartition:
| Element | Value |
|---|---|
| Order | 3 |
| Size | 128 |
| Type | MSR |
Right-click CreatePartitions and click CreatePartition:
| Element | Value |
|---|---|
| Order | 4 |
| Extend | true |
| Type | Primary |
Right-click DiskConfiguration and click ModifyPartition:
| Element | Value |
|---|---|
| Order | 1 |
| PartitionID | 1 |
| Format | NTFS |
| Label | WINRE |
| TypeID | DE94BBA4-06D1-4D40-A16A-BFD50179D6AC |
Right-click DiskConfiguration and click ModifyPartition:
| Element | Value |
|---|---|
| Order | 2 |
| PartitionID | 2 |
| Format | FAT32 |
| Label | System |
Right-click DiskConfiguration and click ModifyPartition:
| Element | Value |
|---|---|
| Order | 3 |
| PartitionID | 3 |
Right-click DiskConfiguration and click ModifyPartition:
| Element | Value |
|---|---|
| Order | 4 |
| PartitionID | 4 |
| Format | NTFS |
| Label | Windows |
| Letter | C |
Add Components > amd64_Microsoft-Windows-Setup_neutral > ImageInstall > OSImage > InstallTo to 1 windowsPE:
| Element | Value |
|---|---|
| DiskID | 0 |
| PartitionID | 4 |
Add Components > amd64_Microsoft-Windows-Setup_neutral > UserData to 1 windowsPE:
| Element | Value |
|---|---|
| AcceptEula | true |
| FullName | [DEPARTMENT] |
| Organization | [COMPANY] |
| UserData > ProductKey | [PRODUCT KEY] |
| UserData > WillShowUI | OnError |
2 offlineServicing
In this phase, we set the computer name. If you leave this out, the installer will generate a random computer name. For more information, please see offlineServicing. Add Components > amd64_Microsoft-Windows-Shell-Setup_neutral > ComputerName to 2 offlineServicing:
| Element | Value |
|---|---|
| ComputerName | [COMPUTER NAME] |
4 specialize
In this phase, we can set OEM information, run commands, etc. within the running environment of the new installation. At this point, the local Administrator account password has not been set. For more information, please see specialize. Add Components > amd64_Microsoft-Windows-International-Core_neutral to 4 specialize:
| Element | Value |
|---|---|
| InputLocale | en-US |
| SystemLocale | en-US |
| UILanguage | en-US |
| UILanguageFallback | en-US |
| UserLocale | en-US |
Add Components > amd64_Microsoft-Windows-MicrosoftEdgeBrowser_neutral > FavoriteBarItems > FavoriteBarItem to 4 specialize:
| Element | Value |
|---|---|
| ItemKey | 1 |
| ItemName | [LINK NAME] |
| ItemUrl | [LINK ADDRESS] |
Add Components > amd64_Microsoft-Windows-Deployment_neutral > RunSynchronousCommand to 4 specialize:
| Element | Value |
|---|---|
| Order | 1 |
| Description | [DESCRIPTION] |
| Path | [COMMAND] |
Add Components > amd64_Microsoft-Windows-Shell-Setup_neutral > OEMInformation to 4 specialize:
| Element | Value |
|---|---|
| OEMName | [COMPANY] |
| ProductKey | [PRODUCT KEY] |
| OEMInformation > Logo | %windir%\system32\OEM\logo.png |
| OEMInformation > Manufacturer | [COMPANY] |
| OEMInformation > Model | [MODEL] |
| OEMInformation > SupportHours | [HOURS] |
| OEMInformation > SupportPhone | [SUPPORT PHONE NUMBER] |
| OEMInformation > SupportProvider | [SUPPORT DEPARTMENT NAME] |
| OEMInformation > SupportURL | [SUPPORT LINK] |
Add Components > amd64_Networking-MPSSVC-Svc to 4 specialize:
| Element | Value |
|---|---|
| DomainProfile_EnableFirewall | false |
| PrivateProfile_EnableFirewall | false |
| PublicProfile_EnableFireWAll | false |
7 oobeSystem
In this phase, we define settings for the first boot and [user] login. For more information, please see oobeSystem. Add Components > amd64_Microsoft-Windows-International-Core_neutral to 7 oobeSystem:
| Element | Value |
|---|---|
| InputLocale | en-US |
| SystemLocale | en-US |
| UILanguage | en-US |
| UILanguageFallback | en-US |
| UserLocale | en-US |
Add Components > amd64_Microsoft-Windows-Shell-Setup_neutral > OOBE to 7 oobeSystem:
| Element | Value |
|---|---|
| HideEULAPage | true |
| ProtectYourPC | 1 |
| HideLocalAccountScreen | true |
| HideOEMRegistrationScreens | true |
| HideOnlineAccountScreens | true |
| HideWirelessSetupInOOBE | true |
Add Components > amd64_Microsoft-Windows-Shell-Setup_neutral > Themes to 7 oobeSystem:
| Element | Value |
|---|---|
| BrandIcon | %windir%\System32\OEM\icon.png |
| DesktopBackground | %windir%\System32\OEM\wallpaper.png |
| ThemeName | [THEME NAME] |
| WindowColor | oxff[COLOR HEX VALUE] |
Add Components > amd64_Microsoft-Windows-Shell-Setup_neutral > UserAccounts > LocalAccounts to 7 oobeSystem. Right-click LocalAccounts and click LocalAccount:
| Element | Value |
|---|---|
| Password > VAlue | [PASSWORD] |
| Description | Built-in account for administering the computer/domain |
| DisplayName | Administrator |
| Group | Administrators |
| Name | Administrator |