This section contains procedures for the tasks that are listed and described in the following table. Note that you cannot manage a Windows Deployment Services server running Windows Server 2008 from a Windows Deployment Services server running Windows Server 2003.
Note | |
To download the Windows Deployment Services documentation (including a getting started guide, deployment guide, and WDSUTIL command-line syntax), see http://go.microsoft.com/fwlink/?LinkId=89381. |
Note | |
Help for WDSUTIL is available by typing WDSUTIL /? at a command prompt or online at http://go.microsoft.com/fwlink/?LinkId=112194. |
Type | Procedure |
---|---|
|
|
|
|
|
|
|
|
|
|
|
General Tasks
To configure Windows Deployment Services
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure does the following:
- Creates the folder tree for RemoteInstall.
- Creates the RemoteInstall folder with the following default
permissions: Authenticated Users = Read and Execute, System = Full
Control, Administrators = Full Control, and WDSServer service =
Full Control
- Installs the server files (boot files) from the
\system32\reminst folder (as placed during component installation)
to the new folder structure.
- Updates the service parameters.
- Sets the Trivial File Transfer Protocol (TFTP) root to point to
the RemoteInstall folder root.
- Sets the WDSServer service startup type to Auto.
- Optionally authorizes the server in Dynamic Host Control
Protocol (DHCP).
- Starts the services.
To start or stop the server
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure starts or stops the WDSServer service.
To enable the server
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure starts or stops the WDSServer service.
To enable logging for the Windows Deployment Services client
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\ClientLogging\Enabled to 1.
The level is stored at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\ClientLogging\LogLevel, where 0 is None; 1 is Errors only; 2 is Errors and Warnings; and 3 is Errors, Warnings, and Information.
To choose the port number for RPCs
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Parameters\RpcPort to the specified value.
Note | |
If this remote procedure call (RPC) port is changed from the default value, you must add a firewall exception for the new RPC port. |
To specify the network interfaces for Windows Deployment Services to listen on
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\BindPolicy to 0 to exclude the list, and sets it to 1 to include the list (and excludes all other interfaces).
The list is stored in the following key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\BindInterfaces (addresses are stored as MAC=XXXXXXXXXXXX or IP=10.10.2.2)
To configure how often the server refreshes its settings
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Parameters\UpdateTime to the specified value.
To force the server to update files in the RemoteInstall folder
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
To configure the network profile for the server
Using the MMC | Using WDSUTIL |
---|---|
|
|
Select Custom if you want to customize the settings yourself by editing the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\Multicast\Profiles\Custom
Important | |
You should not modify the other profiles that are provided. Instead, you should create a custom profile even if you want to change only one setting. |
To back up the server data
To completely back up your server, you must back up the following two sets of data:
- Images stored in the \RemoteInstall
folder. To back up images, you must perform regular backups of
the \RemoteInstall folder. You can restore the content from these
backups without any special qualifications. The exception to this
is if your server contains Remote Installation Services (RIS)
images that have been groveled by Single Instance Storage (SIS).
For more information about how to restore a volume that is managed
by SIS, see article 263027 in the Microsoft Knowledge Base
(http://go.microsoft.com/fwlink/?LinkId=81026).
- Settings generally stored in the server’s
registry. To back up these settings, we recommend that you
perform regular backups by using the Microsoft Volume Shadow Copy
Service (http://go.microsoft.com/fwlink/?LinkId=105509). As an
alternative, you can regularly archive the server's configuration
settings by running the command
WDSUTIL /get-server /show:config
. However, if you must restore the settings, you must manually reconfigure the settings by using WDSUTIL.
DHCP
To configure Windows Deployment Services to run on the same computer as Microsoft DHCP
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure does the following:
- Sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Parameters\UseDhcpPorts
to 0.
- Adds the option 60 PXEClient tag to all of
your DHCP scopes.
To configure Windows Deployment Services to run on the same computer as non-Microsoft DHCP
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Parameters\UseDhcpPorts to 0.
To turn on the DHCP authorization requirement
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\System\CurrentControlSet\WDSServer\Providers\WDSPXE\DisableRogueDetection to 0.
To authorize the server in DHCP
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure creates an entry for DHCP authorization under the CN-NetServices, CN=Services, CN=Configuration, DC=Domain, DC=com object in AD DS.
Client Requests
To configure the server to answer clients
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure does the following:
- When the Respond to all (known and
unknown) client computers check box is selected, the
netbootAnswerRequests DS attribute is set to TRUE and
the netbootAnswerOnlyValidClients DS attribute is set to
FALSE.
- When the Respond only to the known client
computers check box is selected, both attributes are set to
TRUE.
- When the Do not respond to any client
computer check box is selected, both attributes are set to
FALSE.
To set a delay in the server’s answers to PXE requests
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets the value of HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\ResponseDelay to the specified time.
To configure unknown clients to perform PXE boots without requiring F12
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets the value of HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AllowN12ForNewClients to 1.
To configure clients who have booted without F12 to require a key press on subsequent boots
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets the value of HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\ResetBootProgram to 1.
To configure the server to determine the architecture of booting clients
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\DisableArchDisc to 0.
Client Boot Settings
To choose which boot images are displayed on x64-based computers
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\x86x64DefaultImageType to 1 for x86-based computers only, 2 for x64-based computers only, and 0 for both types of computers.
To choose the default network boot program for each architecture
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\BootPrograms\<arch>\Default to the specified path.
To choose the default network boot program that does not require F12 for each architecture
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\BootPrograms\<arch>\N12 to the specified path.
To choose the default boot image for each architecture
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\BootImages\<arch>\BootImagePath to the specified path.
Active Directory Domain Services
To specify a domain controller for Windows Deployment Services
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\DefaultServer to the specified name.
To specify a global catalog server for Windows Deployment Services
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\DefaultGCServer to the specified name.
To choose whether to search for computer accounts in the domain controller before searching the global catalog
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
In the preceding procedure:
- DCFirst sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\ADSearchOrder
to 1
- GCOnly sets it to 0.
To configure the server to prestage clients by using their MAC address instead of their GUID
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\ClientIdUse to 1.
To maintain a list of GUIDs that belong to multiple computers
Using the MMC | Using WDSUTIL | ||||
---|---|---|---|---|---|
N/A |
|
The list of banned GUIDs list will be stored at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE.
To specify how to generate computer names
Using the MMC | Using WDSUTIL |
---|---|
|
|
The policy string works as follows:
- %First: the first name of the user.
- %Last: the last name of the user.
- %Username: the user name of the user.
- %MAC: the MAC address of the computer.
- %n#: an incremental n-digit number. For
example, %2# will add a number to the computer name in the
following order: 1,2,3,…99.
- %0n#: an incremental n-digit number, with
zeros added before the digit. For example, %02# will add a
number to the computer name in the following order:
01,02,03,…99.
These can be combined in any order. A number before a tag string (such as %3First or %5Username) will crop the string to that length. For example:
- %61Username%# equals
JohnSmi12
- %2first.%last equals
Jo.Smith
The preceding procedure sets the netbootNewMachineNamingPolicy DS attribute to the specified policy.
To specify the domain and OU in which to create computer accounts
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure does the following:
- Sets the netbootNewMachineOU attribute
on the Service Control Point (SCP) for the Windows Deployment
Services server to the distinguished name of the server
- Sets the NewMachineOUType registry key
to 1
- Sets the NewMachineOUType registry key
to 0
- Sets the netbootNewMachineOU attribute
on the SCP for the Windows Deployment Services server to the
specified distinguished name
To choose whether to join client computers to the domain
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\NewMachineDomainJoin to 1.
Unattend File
To choose a default unattend file for the Windows Deployment Services client
Using the MMC | Using WDSUTIL |
---|---|
|
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\Unattend\Enabled to 1 and HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\Unattend\<arch>\FilePath to the specified path.
To specify whether an unattend file on the client computer will override a default unattend file
Using the MMC | Using WDSUTIL |
---|---|
N/A |
|
The preceding procedure sets HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WdsImgSrv\Unattend\CommandLineUnattendPrecedence to 1 or 0.