Mai 2010
M	D	M	D	F	S	S
« Apr		Jun »
	1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31

Archive für Mai 2010

Create a Windows 7 WIM Image / Windows 7 PE

21.5.2010 von Tim Wanierke.

Prerequsites: Installed Windows 7 WAIK
Link : http://www.microsoft.com/downloads/details.aspx?FamilyID=696dd665-9f76-4177-a811-39c26d3b3b34&DisplayLang=de

1. Copy PE Files
“%programfiles%\Windows AIK\Tools\PETools\copype.cmd” x86 c:\winpe_x86

2. Copy WIM File
copy “%programfiles%\Windows AIK\Tools\PETools\x86\winpe.wim” c:\winpe_x86\ISO\sources\boot.wim

3. Mount WIM File
Dism.exe /Mount-Wim /WimFile:c:\winpe_x86\ISO\sources\boot.wim /index:1 /MountDir:c:\winpe_x86\mount”

4. Copy ImageX
copy “%programfiles%\Windows AIK\Tools\x86\imagex.exe” C:\winpe_x86\mount\Windows\System32

5. Copy AddOn’s if wanted
xcopy “C:\AddOns” C:\winpe_x86\mount\Windows\System32 /S /H

6. Add Drivers
Dism /image:c:\winpe_x86\mount /Add-Driver /driver:“C:\Drivers” /recurse /LogLevel:4

7. Add Packages if needed
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-hta.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-legacysetup.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-mdac.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-pppoe.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-scripting.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup-client.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-setup-server.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wds-tools.cab”
Dism /image:C:\winpe_x86\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab”
Dism /image:C:\winpe_x86\mount /Enable-profiling

8. Add Hotfixes
dism /image:C:\winpe_x86\mount /add-package /packagepath:“C:\Hotfixes”

9. Unmount PE
dism /Unmount-Wim /MountDir:C:\winpe_x86\mount\ /Commit

10. Create Boot ISO
“%programfiles%\Windows AIK\Tools\x86\oscdimg” -n -bC:\winpe_x86\etfsboot.com C:\winpe_x86\ISO C:\winpe_x86\winpe_x86.iso

11. Creat Boot USB Stick - USB Stick must be formated as NTFS and the partition on the USB Disk must be active
xcopy “C:\winpe_x86\iso\*.*” /e g:\

Geschrieben in Windows 7 | Drucken | 1 Kommentar »

Define a policy template and apply this template using “secedit”

20.5.2010 von Tim Wanierke.

Create a new policy template

1. Open the MMC SnapIn “Security Templates“.
2. Create a new Template using the context menu “New Template“.
3. Define a name for the template
   e.g. “DenyLogonLocally”
4. Define the policy as you want
    e.g. Add a group name to the setting
    “Local Policies -> User Rights Assignment -> Deny logon locally”
5. Save this policy template using the contect menu “Save as …“
    This will create a .inf file e.g. “DenyLogonLocally.inf”

Apply a policy template using “secedit”

1. To apply the policy template create before for example on a DMZ Server
    where no GPO can be applied just type in the following command.