Windows 10 Zero Touch deployment.

jskfan
jskfan used Ask the Experts™
on
Windows 10 Zero Touch deployment.

I would like to know exactly what ZT deployment is. in some articles, they mention MDT needs to be installed and integrated with SCCM. So with SCCM by itself we cannot do ZT deployment ?
I have also seen WDS mentioned in some articles.
Can someone clarify the ZT Deployment concepts and where MDT and WDS fit in SCCM ?

Thank you
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2017

Commented:
Met deals with creating an image you want to deploy to a network booting pxe system that will be directed to boot and install.
You need Windows 10 volume licensed to achieve this.
The image has to include the requisite drivers for the systems into which they will deploy.

Author

Commented:
can you please elaborate on this ?

You need SCCM installed
You need MDT installed ... on the same machine as SCCM ?
You need to integrate MDT with SCCM

---what does Zero Touch means in a technical way ? and why ZT exists just with MDT integration with SCCM ?
Do we also need WDS ?
Distinguished Expert 2017

Commented:
You get the machine network boot UUID or the MAC address of the network
Or you merely boot using network boot, the DHCP server option 66 and 68 advertise the IP of the tftp server from which the image is available and the second option directs the bootup what it needs to retrieve to boot the system and run the install or present the menu to the person in front (MDT/mds) ..
How many systems, what is your timeline?
Storage in the system, ssd's will speed up?
Become a CompTIA Certified Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

Distinguished Expert 2017

Commented:
WDS not mds
Windows deployment service
MDT Microsoft deployment toolkit
https://www.petri.com/deploy-windows-10-using-mdt-wds-part-1-create-mdt-deployment-share
WDS and MDT setup

The DHCP server needs to be running on Windows.
Do you have a test network to avoid getting an existing system that is misconfigured or is erroneously triggered to start from network.
Deals with whether you explicitly define the UUID /MAC address  that is authorized to boot and get the OS deployed.

If it is set to install on any system that network boots, you might wipe/reinstall he OS on he wrong system.
Distinguished Expert 2018

Commented:
ZTD stands for "Zero Touch" meaning you don't have to toucbthe a chine at all.

If you just use MDT and/or WDS then you usually have to "touch" the workstation being deployed. Even if you only touch it to start the PXE boot or to insert a USB key... So those are "light touch" scenarios.

With SCCM, the agent can remotely reboot the machine and can prestage the installation. SCCM can even remotely deploy the agent. Meaning that as long as the machine is on the network, an OS deployment can happen... Even from thousands of miles away. True zero touch.

ZTD only "requires" SCCM.   But configuring OSD in SCCM does install and configure WDS in the background. However you should NOT manually install or change WDS. SCCM will manage it.

MDT is not strictly necessary for ZTD with SCCM but is strongly recommended. SCCMs task sequencing is pretty bare bones and even Microsoft recommends integrating the two... This recommendation is not about ZTD though. Even if you are doing Light Touch Deployments. MDT is just better in so many ways for deployment that layering it on SCCM is a best practice.

Hope that clears up ZTD specifically for you.

Author

Commented:
Cliff,

ZTD only "requires" SCCM.   But configuring OSD in SCCM does install and configure WDS in the background. However you should NOT manually install or change WDS. SCCM will manage it.

I have SCCM installed..the only place where I see WDS mentioned is on the DIstribution Point properties as shown on the screenshot below.
Even if I tick the checkbox , it will not install it.

- regarding your point on MDT with SCCM, I am not sure why you say it is recommended , what does it add to SCCM ? Anything missing in SCCM  that  MDT has ? I know MDT free but SCCM not...you would think SCCM will have everything.
 

s
Distinguished Expert 2018

Commented:
My impression is that because MDT is free, the SCCM team didn't feel it necessary to re-invent the wheel and find ways to do what MDT does within SCCM. So instead they just went the "integrate them" route.  I don't work for Microsoft nor know anyone still with those teams so any comments I'd make about why would just be speculation and honestly off topic.

Instead I will just say that yes, MDT has a lot of functionality that SCCM's native OSD does not have. That's an easy Google search and therefore isn't worth cutting and pasting multiple hours worth of reading here.
Top Expert 2016

Commented:
mdt can do a zero touch. you just edit the customsettings.ini and tell it to install this operating system  https://www.reddit.com/r/MDT/comments/cqi8oo/zero_touch_deployment/ but you also need a way of pxe booting to the litetouch.wim.
You can use WDS or other PXE server to do this.  ServerA is one method https://www.vercot.com/~serva/ 
Can someone clarify the ZT Deployment concepts and where MDT and WDS fit in SCCM
MDT can add functionality to SCCM as explained above
Without using SCCM you can use WDS and MDT together to do a Light Touch or a Zero Touch installation. MDT needs a pxe server.
SCCM has its own pxe server and can do both ZTI and LTI installations and more (updates/application installs, anti-virus, monitoring and so forth. Each section can be a book unto itself.
Distinguished Expert 2018

Commented:
"but you also need a way of pxe booting to the litetouch.wim."

That is why MDT without SCCM will never be truly ZERO touch.  It may be a single boot touch, but requires some sort of touch.  SCCM, with remote agent deployment and the way the agent can pre-provision thebPE environment, can truly be a zero touch 100% remote deployment without getting in a OXE boot loop.

I've seen even experienced deployment folks get confused. Zero touch isn't about the automation. As you said that can be done with MDT.  Zero touch is about literally no on-site adjustments to PXE, pressing F12, or any of that.  The only reliable way to achieve that is an agent which MDT doesn't have. SCCM does.

Author

Commented:
The point I want to get to, is if I have SCCM, I do not have to use another tool which is  MDT  to do Zero Touch OS deployment

SCCM install prerequisites do not require MDT.  

SCCM Check box about PXE, will be enough to implement ZT OSD ? it stated that it will install WDS in the Background. Though I ticked that Checkbox and did not see any WDS services running.
Distinguished Expert 2017

Commented:
MDT might be needed to build the package without actually installing one and then sysprep/image it using wds to create an image.

Check whether the role wds got installed.
Distinguished Expert 2018
Commented:
You do not need to use MDT to achieve a full zero touch experience.  You do not need to manually configure WDS.  SCCM will install, configure, and manage WDS on the distribution points you specify via that check box.

Author

Commented:
All right..
The take away is if you Have SCCM , it is enough to do ZT OSD without MDT tool.

Author

Commented:
Thank you Guys!!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial