1 00:00:01,340 --> 00:00:03,260 Let's take a look at some of the other options that we 2 00:00:03,260 --> 00:00:05,840 have inside Windows Deployment Services. 3 00:00:05,840 --> 00:00:09,170 If I right‑click on the server and go to Properties, 4 00:00:09,170 --> 00:00:13,290 then I can change some of the defaults that were created during installation, 5 00:00:13,290 --> 00:00:16,110 such as the PXE or PXE Response. 6 00:00:16,110 --> 00:00:19,710 That's the pre‑execution environment when you boot up the computer. 7 00:00:19,710 --> 00:00:23,240 And I chose to respond to all client computers, 8 00:00:23,240 --> 00:00:24,360 known and unknown. 9 00:00:24,360 --> 00:00:28,730 If you choose to change that to only‑known client 10 00:00:28,730 --> 00:00:32,660 computers or not to respond to any, in case you're not ready to respond, 11 00:00:32,660 --> 00:00:34,770 then you can certainly make that change here. 12 00:00:34,770 --> 00:00:38,240 You can also change the PXE or PXE Response Delay. 13 00:00:38,240 --> 00:00:40,790 If it shows 0 seconds, 14 00:00:40,790 --> 00:00:44,270 it actually is going to take about a minute before it fails, 15 00:00:44,270 --> 00:00:49,150 and then it will try to boot from one of the other devices in the boot order. 16 00:00:49,150 --> 00:00:52,450 You could change this to a specific amount of time, 17 00:00:52,450 --> 00:00:56,940 such as 15 seconds, or 30 seconds, whatever it is that you'd like. 18 00:00:56,940 --> 00:01:04,440 You could change this to 15 seconds or 25 seconds, anything up to 28 seconds. 19 00:01:04,440 --> 00:01:07,300 We can also go to Active Directory Domain Services, 20 00:01:07,300 --> 00:01:10,540 and here we can see the computer account location. 21 00:01:10,540 --> 00:01:14,330 So when we join this particular computer into the domain, 22 00:01:14,330 --> 00:01:18,330 it's going to create a computer account in the same domain as 23 00:01:18,330 --> 00:01:20,120 the Windows Deployment Services server. 24 00:01:20,120 --> 00:01:23,290 You could change that to the same domain as the user performing the 25 00:01:23,290 --> 00:01:26,930 installation in case they're a part of a different domain or the same 26 00:01:26,930 --> 00:01:29,710 organizational unit or the following location. 27 00:01:29,710 --> 00:01:32,750 So if you have another Active Directory Domain or forest, 28 00:01:32,750 --> 00:01:34,160 then you can choose that here. 29 00:01:34,160 --> 00:01:36,700 I'm going to leave it the same and click on Boot. 30 00:01:36,700 --> 00:01:40,620 Here we have the option to require the user to press F12 to 31 00:01:40,620 --> 00:01:44,970 continue for both known and unknown computers or just to 32 00:01:44,970 --> 00:01:48,240 always continue on with the PXE boot. 33 00:01:48,240 --> 00:01:50,930 You could change that to force them to press the F12 34 00:01:50,930 --> 00:01:54,090 key or choose to continue the boot, 35 00:01:54,090 --> 00:01:58,840 unless the user presses Esc or to never continue the PXE boot. 36 00:01:58,840 --> 00:02:02,190 Then you have the option for putting in default boot images. 37 00:02:02,190 --> 00:02:03,640 This is optional, as you see. 38 00:02:03,640 --> 00:02:06,950 You can do this for other types of images other than just a 39 00:02:06,950 --> 00:02:09,690 standard x86 architecture if you'd like. 40 00:02:09,690 --> 00:02:16,390 When we go over to the Client, we can specify an unattended installation file, 41 00:02:16,390 --> 00:02:19,930 so that way we'll automatically answer all the different things, 42 00:02:19,930 --> 00:02:22,950 such as the computer name, whether or not the firewall's turned on, 43 00:02:22,950 --> 00:02:27,070 and in any one of 100 different things that you can set up 44 00:02:27,070 --> 00:02:31,650 using the Windows automated deployment kit that you can 45 00:02:31,650 --> 00:02:33,640 install on one of the computers. 46 00:02:33,640 --> 00:02:36,840 If you choose to not join the client computer to the domain, 47 00:02:36,840 --> 00:02:38,190 then you can choose that as well. 48 00:02:38,190 --> 00:02:42,440 It will just add the computer in, but not add it into the domain. 49 00:02:42,440 --> 00:02:45,940 And in case you're having any trouble, you may want to enable logging, 50 00:02:45,940 --> 00:02:48,540 which is not enabled by default, but I went ahead and checked. 51 00:02:48,540 --> 00:02:51,670 This will log all the information, errors, 52 00:02:51,670 --> 00:02:53,800 warnings, if you choose this particular option, 53 00:02:53,800 --> 00:02:55,820 or you can choose a lesser version. 54 00:02:55,820 --> 00:03:00,390 When we go into DHCP, this is an area where you want to check the boxes, 55 00:03:00,390 --> 00:03:03,570 but only if a couple of things are going on. 56 00:03:03,570 --> 00:03:06,940 One is if you're not using a Windows DHCP server, 57 00:03:06,940 --> 00:03:09,260 then you can check one of those boxes. 58 00:03:09,260 --> 00:03:10,010 Otherwise, 59 00:03:10,010 --> 00:03:14,770 you can check both boxes if the DHCP server is on the Windows Deployment server, 60 00:03:14,770 --> 00:03:16,340 which mine is not. 61 00:03:16,340 --> 00:03:20,410 When going into Multicast, you can use the Obtain IP address from DHCP, 62 00:03:20,410 --> 00:03:23,180 or you can use specific addresses. 63 00:03:23,180 --> 00:03:25,440 When you choose a multicast option, 64 00:03:25,440 --> 00:03:27,980 the deployment sends one network transmission to 65 00:03:27,980 --> 00:03:30,740 multiple WDS clients all at once, 66 00:03:30,740 --> 00:03:33,690 and this is going to reduce the network bandwidth. 67 00:03:33,690 --> 00:03:38,030 This can be very useful if you're having many different clients all 68 00:03:38,030 --> 00:03:42,410 connecting to the Windows Deployment Services server all at once. 69 00:03:42,410 --> 00:03:45,910 When we go into Advanced under Domain Controller, 70 00:03:45,910 --> 00:03:49,740 we can choose the option for allow Windows Deployment Services 71 00:03:49,740 --> 00:03:53,470 to dynamically discover the valid domains. 72 00:03:53,470 --> 00:03:56,400 If it doesn't work, then you can go in here, 73 00:03:56,400 --> 00:03:58,440 and you can manually select them, 74 00:03:58,440 --> 00:04:02,490 and you also have the option under DHCP Authorization to 75 00:04:02,490 --> 00:04:05,130 either do not authorize this Windows Deployment Services 76 00:04:05,130 --> 00:04:07,540 server in DHCP or to authorize it. 77 00:04:07,540 --> 00:04:09,840 It's a good idea to set that to authorize. 78 00:04:09,840 --> 00:04:13,860 Then under Network, we have Obtain dynamic ports from Winsock. 79 00:04:13,860 --> 00:04:15,640 This is typically the best way to go. 80 00:04:15,640 --> 00:04:18,340 But if you're using ports that are in the upper range, 81 00:04:18,340 --> 00:04:20,340 you can manually set them here. 82 00:04:20,340 --> 00:04:22,890 And lastly, we have TFTP, 83 00:04:22,890 --> 00:04:26,640 and this is used to load and install the operating system. 84 00:04:26,640 --> 00:04:30,790 So the TFTP is already a part of Windows Deployment Services. 85 00:04:30,790 --> 00:04:32,400 If you understand block size, 86 00:04:32,400 --> 00:04:34,790 you can go ahead and play with that and make some changes, 87 00:04:34,790 --> 00:04:37,270 but typically you would leave that just the way it is, 88 00:04:37,270 --> 00:04:39,640 as well as the variable‑window extension. 89 00:04:39,640 --> 00:04:44,040 If you like the changes that you made, you can click Apply and OK, or just OK. 90 00:04:44,040 --> 00:04:48,480 I'm going to go down here also to the Wind10 install 91 00:04:48,480 --> 00:04:52,290 images group, I'm going to right‑click, and I want to show you Security. 92 00:04:52,290 --> 00:04:53,410 Because, by default, 93 00:04:53,410 --> 00:04:58,190 this Security is set up in a way that pretty much anyone can use it. 94 00:04:58,190 --> 00:04:59,440 If that's not what you want, 95 00:04:59,440 --> 00:05:03,340 then you can go in and change Authenticated Users to either not allow 96 00:05:03,340 --> 00:05:07,470 or be denied to go ahead and access these images. 97 00:05:07,470 --> 00:05:11,200 You can also add in specific groups or users and give 98 00:05:11,200 --> 00:05:13,090 them control if you'd like as well. 99 00:05:13,090 --> 00:05:15,410 What I recommend is that you keep your Windows 100 00:05:15,410 --> 00:05:18,390 Deployment Services set up in its own subnet, 101 00:05:18,390 --> 00:05:22,310 and that way, no one else is going to be able to connect to it, 102 00:05:22,310 --> 00:05:25,380 and you won't have to worry about any type of security 103 00:05:25,380 --> 00:05:27,830 issues and having to make any changes here. 104 00:05:27,830 --> 00:05:30,740 I'm going to go down to where it says Drivers, 105 00:05:30,740 --> 00:05:34,370 and we can see there are All Packages and a DriverGroup. 106 00:05:34,370 --> 00:05:37,360 So if I right‑click on the DriverGroup1, 107 00:05:37,360 --> 00:05:41,060 I can go to Properties, and we can see that the status is enabled, 108 00:05:41,060 --> 00:05:44,720 and it's going to have driver packages matching client hardware. 109 00:05:44,720 --> 00:05:48,230 This allows us to have specific drivers for hardware. 110 00:05:48,230 --> 00:05:52,270 It's most commonly used with things that don't automatically come 111 00:05:52,270 --> 00:05:55,520 with Windows Server or Windows 10 operating systems, 112 00:05:55,520 --> 00:05:59,030 such as specific types of printers, RAID controllers, 113 00:05:59,030 --> 00:05:59,940 things like that. 114 00:05:59,940 --> 00:06:01,930 Here you can go ahead and add those in, 115 00:06:01,930 --> 00:06:05,190 just click on Add and locate the driver packages, 116 00:06:05,190 --> 00:06:06,350 and then you can install them, 117 00:06:06,350 --> 00:06:10,510 and then you can add them into the package for the install images. 118 00:06:10,510 --> 00:06:13,590 Here we have Active Directory Prestaged Devices. 119 00:06:13,590 --> 00:06:19,740 I went ahead and ran my pre‑execution environment and added in a computer, 120 00:06:19,740 --> 00:06:24,280 and it automatically added in a computer called administrator1. And it 121 00:06:24,280 --> 00:06:27,070 did that because I was logged in as the administrator. 122 00:06:27,070 --> 00:06:30,390 If you're logged in as another user, then you'll see that name instead. 123 00:06:30,390 --> 00:06:33,880 And then my next computer I add in should be called administrator2. 124 00:06:33,880 --> 00:06:37,340 Understanding additional features and changes to the installation 125 00:06:37,340 --> 00:06:45,000 will allow you to customize how you want Windows Deployment Services to work in your environment.