Creating Customized Windows 10 Version 1703 Media (ISO, WIM, Flash Drive)

It’s April 2017 and Microsoft has just released their fourth update / “version” of Windows 10 – externally referred to as the “Creators Update”. Since I haven’t updated my “How To” on creating customized Windows media since Windows 8.1, I think we’re overdue for a follow up. So let’s get into it!

I’ll preface this article by saying that Microsoft has made this effort much simpler since 2014 (when my original write up went live). Not only do we now (natively) support split wims, we’re not obligated to utilize the MDT (Microsoft Deployment Toolkit) if we choose not to (not that there’s anything wrong with using MDT if you’d rather).

For this walk through, I will be detailing the steps I personally use. Please note that there are multiple ways to achieve the same end goal. I have, however, successfully used this method for the last four years without issue – deploying across thousands of computers within the organization I work for (and of course at home as well).

Acquiring the necessary Tools

  • Download the Windows ISO for which you are creating custom media. In my case, I’m downloading “en_windows_10_enterprise_version_1703_updated_march_2017_x64_dvd_10189290.iso” from MSDN.
  • Download the Windows Assessment and Deployment Kit (ADK) for Windows 10 from here.

Preparing your environment

  • Designate a workstation (physical machine) with Hyper-V capability as the “host” for this project. I’m going to assume your host is running Windows 10 Version 1703 already.
  • Open the Windows ADK for Windows 10 installer.
    • Select and install Deployment Tools and Windows Preinstallation Environment (Windows PE).

  • Enable the Hyper-V Platform and reboot the host.
    To do this, at your desktop type Win+X and click Apps and Features at the top.

  • Select Programs and Features within the settings window

  • Select Turn Windows features on or off

  • Select Hyper-V and Click OK. When prompted, click Restart now.

  • Once rebooted, open the Start Menu and type “Hyper” > Open Hyper-V Manager

  • Select your host (computer name) on the left and then click Virtual Switch Manager… (on the right)

  • Select New virtual network switch on the left and External under the type to create. Click Create Virtual Switch.

  • Name the switch something appropriate (I’m using “Main”).
  • Select External Network > Select your main NIC (wireless or wired).
  • Check Allow management operating system to share this network adapter and click OK.

  • Click Yes on the notice prompt.

Create the Staging VM

  • Now that you’re prepped, within Hyper-V Manager select New > Virtual Machine and then click Next.

  • Type a name for your staging VM (I’m picking stage01) then click Next.

  • Select Generation 2 and then click Next.

  • Enter an appropriate amount of memory (I’m entering 4096 MB), UNselect Dynamic Memory and then click Next.

  • Choose Not Connected for the Connection page (this will prevent Windows 10 from downloading / installing “consumer apps” during initial staging)

  • Designate an adequate amount of storage for your VM (not less than the total GB of all applications you will be installing) and then click Next.

  • Select Install an operating system from a bootable image file > Select Image File (.iso) > Find and select the Windows ISO you downloaded earlier > Click Next > Click Finish.


  • Back at the Hyper-V Manager, right click stage01 and select Connect…
    (This will open the console of the VM.)

  • Navigate to Action and click Start.

  • Press any key to initiate the Windows Setup

  • Install Windows 10 by accepting the EULA and choosing Custom > selecting the entire virtual disk and clicking Next.

Enter Audit Mode and Install Applications

  • Once you’re presented with the Region screen (where you select the country) – STOP.

  • Enter CTRL+SHIFT+F3.
  • Windows will reboot and log you in with the Administrator account.
  • When presented with the System Preparation Tool window, click Cancel.

As I mentioned in my previous articles, Audit Mode is still my favorite method of configuring a customized Windows build before sysprepping. If you are unaware, Audit Mode bypasses OOBE and negates the need of creating a new user account, thus assigning a “Registered Owner” name.  It baffles me how, even in 2017, this feature goes unnoticed and ignored even by Microsoft themselves. Unfortunately it doesn’t work with UWP apps (it never did, to be fair) – however I’ve never found myself needing to customize those applications. In fact, I find myself removing those apps when I can.

Now that we’re in Audit Mode, the first step I do (and recommend!) is disabling the “Consumer Experience” via GPO.

The “Consumer Experience” is the default mode Windows 10 (including Enterprise) is shipped with. This mode, upon initial login of a new user, commences the automatic download of a plethora of (unrequested) UWP apps, thus filling the start menu with games like Candy Crush. I deplore this feature beyond anything Microsoft has done in the past. It cheapens the Windows experience and frankly, I think they should be embarrassed that this is included in their flagship product. Fortunately, this feature can be disabled – but only on Enterprise edition.

To disable this “feature”, open up the Local Group Policy Editor (gpedit.msc) and navigate to Computer Configuration > Administrative Templates > Windows Components > Cloud Content and double click Turn off Microsoft consumer experiences. We will want to Enable this GPO and click OK.

At this point, we can now (safely) enable the Network Interface on this VM.

  • Navigate to File > Settings.. and select Network Adapter on the left. 
  • Change the “Virtual Switch” from Not Connected to (in my case) Main. Click OK to save your changes.

Running Windows Update

If you followed my Windows 8.1 guide, you’ll remember the ridiculous steps that were required to run Windows Update while within Audit Mode. Fortunately, this is no longer the case! Someone at Microsoft must of read this blog ;-). In short, with Windows 10, Microsoft reintroduced the ability to run Windows Update while logged into Audit Mode. This is great news.

So, just as you would do normally, lets jump into the Settings app > Navigate to Update & Security and run Check for updates.

While updates are downloading / installing – I personally like to take this opportunity to tweak a few Windows Update settings. These include:

  • Navigating to advanced options and enabling “Give me updates for other Microsoft products when I update Windows” and also setting my branch to Current Branch for Business.

  • Scrolling down and selecting Choose how updates are delivered
  • Turning ON the feature Updates from more than one place and setting it to PCs on my local network

  • Back at the main Windows Update page, I select Restart Options under Update Settings

  • And within Restart Options I always select On under Show more notifications

At this point of the how-to, I’ve had the opportunity to tweak my Windows Update settings to my liking and Windows was ready to restart.

Upon restart (and installation of the latest Cumulative Update), Windows will automatically log you back into Audit Mode (make sure to click cancel on the sysprep popup again!).

After logging in, double check to confirm that all updates have been installed.


After confirming the OS is fully up to date, now is the time to make any tweaks and install all applications that you want embedded into your custom Windows build.

  • Examples:
    * Remove UWP Apps
    * Enable RDP
    * Install Chrome, VLC, Skype, Office, etc.

As mentioned previously, I’m not the biggest fan of these UWP additions to Windows. Some apps I find useful (like the Weather app), while others I find to be redundant and a waste of space (Mail, Calendar – these are useless if you use Outlook). Additionally, I couldn’t care less about a 3D Builder app. Because of this, I have done the hard work for you and generated two groups of Powershell commands that need to be ran (as admin) – and after doing so, all non-essential UWP apps will be removed. Note: these apps can be redownloaded via the Windows Store if desired, but they will not be included in the base Windows install.
Note: it goes without saying, but running these commands is completely optional.

Cleanup and Sysprep

At this stage you have everything customized just the way you like, all your applications are installed and you’re fully updated. Now’s a good time to run Disk Cleanup.

  • Right Click the C: drive and navigate to Properties
    • Click Disk Cleanup

    • Select all items and click OK

  • Once you’ve ran Disk Cleanup, proceed with shutting down your Staging VM.
  • Create a Checkpoint
    Click Action > Checkpoint.. > Enter "Ready for sysprep" > Click Yes
  • Power your Staging VM back on.
  • When logged in, do not close the System Preparation Tool window.
    • Select Enable System Out-of-Box Experience (OOBE)
    • Checkbox Generalize
    • Select Shutdown
    • Click OK

  • Once your VM is shut down, create another Checkpoint named “Complete”.
    Do NOT power your VM back on.

Creating a WIM file

The hard part is done, next comes the fun part: capturing your customizations into an image file. Given you’ve made it this far, I’m going to presume you already know that an OS WIM file is the compressed OS image in a single file. The original Windows install media includes the vanilla install.wim file (located in the sources folder) – but we’re going to be replacing that file with our own. To do this, we need to “capture” the last Checkpoint.

On your host (physical machine), open up Disk Management.
WIN+X > Disk Management

  • Navigate to Action > Attach VHD

  • Click Browse

  • Navigate to the directory where the virtual disks are stored for stage01.
    By default this directory is: C:\Users\Public\Documents\Hyper-V\Virtual hard disks/
  • In the bottom right, change Virtual Disk files (* .vhd, * .vhdx) to All files (* . *)
    AllFilesVHD
  • Select the file with the most recent Date Modified – this is your Complete Checkpoint! This file is approximately 4 MB.

  • Click Open
  • Check box Read Only and then click OK.

At this point you will see one new read only disk with three partitions. Make note of the third partition drive letter (in my case, the G: Drive).

  • Open the Command Prompt with Administrator Rights.
    • Start > Type "cmd" > Right Click "Command Prompt" > Run as administrator

    • Type dism /capture-image /imagefile:c:\customInstall.wim /capturedir:G:\ /name:"Windows 10 Enterprise" /Description:"Windows 10 Enterprise" /compress:maximum /checkintegrity /verify /bootable – replacing G: with the third partition drive letter you made note of earlier.

Depending on your processing power, this may take a little while. When complete, you will see “This operation completed successfully.” You should now see a file named “customInstall.wim” at the root of your C:\ Drive.

  • Change Directory to C:\
  • Type Dism /Split-Image /ImageFile:customInstall.wim /SWMFile:install.swm /FileSize:3800

And just like that, we’ve now split this large WIM file into two (or possibly more) smaller files – with the largest file being 3800 MB. Why 3800 MB? Because it’s less than 4 GB, the maximum file size for a FAT32 formatted flash drive! This will allow us to use a single flash drive for GPT / UEFI Windows 10 installation. (FAT32 is required for Windows GPT/UEFI media.)

Once you’ve confirmed both “The operation completed successfully” results, head back into Disk Management and right-click the Read-Only VHD disk and click Detach VHD. Click OK when prompted to confirm.

Build the Customized Media

  • Double click the stock ISO you used to install Windows in stage01 to mount it within File Explorer.
  • Open This PC and double click the newly mounted drive.
    (In my case, Drive H: CENA_X64FREV_EN-US_DV5)
  • CTRL+A (to select all) and CTRL+C (to copy)
  • Create a new folder named WinExtract off your C:\ drive
    • (Another location is fine too, but these instructions will be assuming C:\)
  • Navigate to C:\WinExtract\ and CTRL+V (to paste)

  • After the copy completes, navigate to C:\WinExtract\sources\ and delete the install.wim file.

  • Move C:\install.swm and C:\install2.swm to C:\WinExtract\sources\.

At this point, you are ready to create your ISO.

Create UEFI Bootable ISO

  • Open Command Prompt (Admin)
  • Change Directory to: C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\Oscdimg\
  • Run oscdimg -m -o -u2 -lCENA_X64FREV_EN-US_DV5 -udfver102 -bootdata:2#p0,e,bC:\WinExtract\boot\etfsboot.com#pEF,e,bC:\WinExtract\efi\microsoft\boot\efisys.bin C:\WinExtract\ C:\Win10v1703-Custom.iso

Once complete, you now have a UEFI bootable ISO named Win10v1703-Custom.iso located at the root of your C:\ Drive!

You can test to make sure it works by creating another Virtual Machine within Hyper-V and choosing Generation 2 (UEFI bootable).

Make UEFI Bootable USB Disk

If you’ve ever needed to create a UEFI bootable USB disk before, you may be familiar with the (brilliant) product named Rufus. It’s a very straightforward Windows ISO to USB tool which, right off the bat, asks if you want to do a GPT partition (UEFI bootable) or a MBR partition (BIOS bootable) drive.

Technically, the ISO you just created can work with either one of these formats, but since GPT and UEFI (along with Secure Boot) is the industry standard going forward, I would recommend sticking with that.

  • So, go download Rufus and  load up your new ISO:
    • Click the little CD icon and select C:\Win10v1703-Custom.iso
    • Ensure your Target Flash Drive is selected under Device
    • Select the GPT partition scheme for UEFI partition scheme
    • Ensure the File system is set for FAT32
    • Click Start

Congratulations! You’ve just created a universal flash drive with your custom Windows v.1703 build, utilizing UEFI and GPT.

Side note: If you decided to follow my Powershell commands which remove the majority of built-in UWP apps, you may notice something odd when opening the Start Menu after a fresh install. It appears the hard coded link to applications that no longer exist remains and a bunch of “place holders” clutter up the Start Menu. The simplest fix? Reboot! This is silly, but unfortunately I’ve not discovered a better solution at this time. If you find one, please comment below and let me know!


Let me know your experience with following these steps! Hopefully this walk through was helpful and the process didn’t take too long.

And for those who followed the Win 8.1 walk through, hopefully this one’s conclusion was a bit more streamlined. 🙂

Until next time!

  • Noa

    Thanks for the great new guide!

    Will you be adding to this with things like, an answer file for the sysprep so we don’t have to go through OOBE after the image process completes? And if so, could you also add in how to automate installing an application AFTER the sysprep process completes? (installing it before screws it up, it’s a monitoring app and uses a unique identifier that doesn’t change after sysprep)

    • echorelay

      Much appreciated, Noa! I’m currently battling the issue of 1703 servicing updates (via SCCM) reinstalling the built-in UWP apps that I previously removed from our image, so that’s keeping me busy for now, but I will definitely entertain the idea of integrating unattend.xml into my guide, possibly as an “optional configurations” type article. I had to do a mass rollout a few years back that required skipping OOBE and configuring a bunch of items + third party apps, and I believe I still have those scripts laying around, so I’ll see what I can do for ya 🙂

      • Noa

        Sweet, thank you sir! I just found a good youtube vid that shows how to create a couple, but not for windows 10, and doesn’t cover everything I need. Luckily it’s showed for WDS which is what I am using…I will see if I can figure out the rest from here in the meantime.

      • PAXpress

        I’d also be interested in seeing an unattend.xml file added to the setup with basic instruction to do things like add a local admin account with a specified password and skip the oobe.

        • echorelay

          This is on my radar. Sorry for the delay .. just been crazy busy lately!

          • PAXpress

            I was able to do an unattended, however for pro I kept getting errors on the specialize pass for activation. I was wondering if you could explain to me the different portions of the cmd that we ran to create the image from the winextract folder?

          • echorelay

            I just replied to your earlier comment. Sorry I didn’t see it before, it got flagged as spam for some reason.

          • Devanshu Save

            Amazing article and well described as well.
            I am doing something similar and would love some advice here.
            I am setting up systems for my University and have made all the configuration changes, installations, etc. in audit mode.
            I use clonezilla to save my images (I call them noPrep and sysPrep images).
            How do I ensure that a new user from the domain does not have an OOBE on login?
            Also, any advice on when should I add the system into domain?

      • Constitutional Reconvention

        So the Store apps come back? That’s what apparently happened to people using Win 10 Pro who removed Cortana, et al, then ended up with them again with a recent update.

        My hacks for removing Cortana/Store apps has held good on my Pro installs so far, but I am deferring updates and some other tricks. The Enterprise admin surely can disable all that junk just like on LTSB? I don’t know about you, but I don’t want LTSB on mainline PCs, although that appears to be workable. I will have to look at the “upgrade tables” and see what it would be like at a later point to switch to the 2017, 2018, 2019 updates once a year or whatever. As long as the license permits and the user data is preserved, I could maybe do yearly update to new branches. You follow that idea?

        Nobody wants this cruft Cortana/games/3D modeler junk in offices and schools. This should be easier and documented better.

        • echorelay

          Couldn’t agree more. I have successfully found a way to ensure these (obnoxious, in my opinion) inclusions do not come back after upgrading from 1607 to 1703. Hopefully I can write up a how-to before the next Windows version drops. Keep an eye on this site 🙂

  • Mart Peters

    I followed every step and added tweaks so it would work on my system ,but when I loaded the custom1703.iso onto a virtual machine windows still asked for an activation key. Should this happen or did I something wrong? I used Windows 10 Pro btw.

    • echorelay

      My steps assume Enterprise which will activate with KMS or MAK, so I didn’t address anything Activation Related with my article, however if you’re using Pro (which is perfectly fine) – yes, of course it will ask for a key and require activation. Maybe I’m misunderstanding, did I insinuate you wouldn’t need to activate?

      • Mart Peters

        The problem was on my side. I googled around about making a custom windows .iso without activation so that I can roll that .iso on several pc’s and this article showed up. Don’t know why it showed up though.But still a great guide.

  • Damien Prin

    thank you very much,
    Everything works well.
    (sorry for my poor english, i am from belgium ^^)

    Maybe this will help other users who like me will follow the tutorial under windows 7.

    I had trouble to run dism / Capture-image which returned an error 87 under windows 7.

    The command executed the old dism.exe (version 6.1.7600) of the system32 folder of windows.

    I solved the problem by entering the full path to dism :
    “%ProgramFiles(x86)%Windows Kits10Assessment and Deployment ToolDeployment Toolsx86dismdism.exe”

    • echorelay

      Thank you for that great tip, Damien. You’re exactly right. If not on Windows 10, you’ll need that path to ensure you’re using the latest DISM and not the one that came with Windows 7.

      Nice catch!

  • Constitutional Reconvention

    Woah, that was awesome! I’m going to need at least the first part. I only have 4 machines or so to deploy… maybe I skip the creation of the special WIM, but still looks good.

    Is there any difference if you are using a WSUS?

    Also, can I run the Hyper-V from a different OS, like Win10-1607 or RTM? The download for the tool is a bit ambiguous, and so is this somewhat… I assume the ADK has to be installed on the 1703 version (Duh) but I am not sure about the master system running the VM.

    Thanks for the post… and if you want to know what I think, you should have gotten paid to write all of this and post it.

    • PAXpress

      I ran the Hyper-V on win 10 pro 1703, but I’d assume it’d be fine. Perhaps if you’re creating a custom Unattended.xml you would need to run that on the same version? Maybe OP can assist here. I’d think for 4 machines it might just be faster to manually do the setup? But it is nice to have an image that does 90% of the work for you.

    • echorelay

      Hi There – Just to clear a few things up, the ADK isn’t ever installed on the VM that’s being staged – the ADK needs to be installed on the hypervisor (or master system as you called it) that is running the VM. In my steps, I assume you’re using the 1703 ADK. To the best of my knowledge, you CAN install this ADK on Win 10 v1607. Also, using WSUS shouldn’t make any difference with regard to these steps – unless you’re referring to the Current Branch for Business option, which I’d advise reading my latest post for some more insight into that one. Hope this helps!

  • echorelay

    So this convoluted command is what creates an ISO and allows it to be used within Rufus to make the flash drive boot via UEFI.

    “-m” ignores the maximum size limit of the image

    “-o” optimizes for MD5 hashing algorithm to compare files

    “-u2” produces an image that only contains the UDF file system

    The lCENA portion as you referred to is actually the “CENA” portion. The “l” (lowercase L) is for label – however oscdimg doesn’t require a space (thus making for one very confusing command string).

    “CENA_X64FREV_EN-US_DV5” is simply the drive label of the original ISO I downloaded off MSDN. Microsoft used to change these labels with each version, but it appears they’ve stayed the same for the last few releases. You can technically put anything here you want – I just kept it the same as the original ISO.

    “-udfver102” Specifies UDF file system version 1.02

    “-bootdata:2” Specifies a multiboot image

    “p0,e,b” Specifies the boot sector details for a BIOS boot (and also disables floppy disk emulation)

    “pEF,e,b” Specifies the boot sector details for a UEFI boot (and also disables floppy disk emulation)

    “C:WinExtract” is the folder containing all content that will be written to the ISO

    “C:Win10v1703-Custom.iso” is the folder and file name where the ISO will be created

    Hope this helps! Check out https://technet.microsoft.com/en-us/library/dd799243%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396 for more information

    • PAXpress

      Thanks! Now if only I could figure out why the specialize pass fails for my pro image. Same thing works fine for Ent and the only thing happening in this pass is the activation with our pro key…

      • echorelay

        are you trying to activate or are you trying to update the key during this phase?

        • PAXpress

          Activate, however I did the same steps for my custom enterprise image and it works with the key embedded in the image but for pro it fails. I do use the correct files for the win extract folder and the pro key of course. When I turn the staging machine back on it fails for an error about not the correct product for the key I’m trying to use and when I test the image on a new machine it fails during that pass. I’ve double checked the winextract files, the answer file’s catalog and the key multiple times and can’t seem to determine the issue. I’ve tried using the setupcomplete.exe to activate but I think it needs admin privileges to run properly and that fails as well… maybe I’m missing something.

          • echorelay

            What if you just set the product key during these steps and then have unattend.xml run “slmgr.vbs /ato” on first logon? Basically, remove activation from the equation and just activate at the end.

          • echorelay

            Also, is this a Pro MAK key or is it a Pro Retail key? Enterprise is MAK only (other than KMS) – so maybe that explains why your Enterprise solution is working but Pro isn’t

          • PAXpress

            The ent key that worked was MAK and the Pro key that I can only get to work manually (fails during specialize pass) is MAK as well.

          • PAXpress

            So while in audit mode enter the key and in the unattend.xml run that cmd on first login? And I’ll check the key type I dont remember looking at that due to the way we store our vlsc keys locally here.

          • echorelay

            Correct. I would never attempt to activate while in audit mode – you’re wasting activations that way as the machine just get wiped after sysprep runs and needs to reactivate on first boot anyway

          • PAXpress

            To do this you’d put in the key in audit mode how? With networking turned off then run the sysprep with the custom answer .xml containing the cmd slmgr.vbs /ato as a first logon script? Or where do you actually mean to enter the key? sorry to make this confusing!

          • echorelay

            You can specify the key within MDT. Alternatively you can run the command “slmgr.vbs /ipk ENTER-KEY-HERE” before you run “slmgr.vbs /ato

          • PAXpress

            Sorry for a thousand dumb questions… but where in MDT? Am I doing something differently? I used windows system image manager to make the unattended.xml, is it something separate thats part of the MDT? I’ll try the two commands though for my answer file see how that goes.

          • PAXpress

            This worked for me. Thanks!

          • echorelay

            Great to hear! Sorry I didn’t get a chance to reply earlier. Happy you figured it out, though 🙂

  • Christophe

    Amazing!
    I would like to Apply a provisioning package (PPKG) file automatically during the installation process. The idea would be to have the ppkg file saved on the USB key to simplify changes. Any idea?

    • echorelay

      Thanks Christophe! I have tried, and would love to be proven wrong here – but I have not found a way to apply a provisioning package silently. In every attempt I’ve made, you must click “next” manually. I sincerely hope Microsoft provides a workaround for this in the future!

      • Christophe

        All right. So you mean that it’s not possible to run silently this command? DISM.exe /Add-ProvisioningPackage /PackagePath: [/CatalogPath:]

        • echorelay

          I should have been more clear – I’ve never found a way to run a provisioning package silently on a RUNNING version of Windows. In your case, you might be able to follow the instructions here to accomplish what you’re trying to achieve: https://blogs.msdn.microsoft.com/beanexpert/2015/09/10/add-a-provisioning-package-in-an-offline-image-using-dism/

          • Christophe

            Thanks I will have a look. I could create an automated windows 10 1607 image installation (not asking for language and partition…) in the old WICD but Windows ICD 1703 no longer supports image customization. I tried to copy an Autounattend.xml under Sources folder but I could not manage to get it working.

  • Constitutional Reconvention

    I came into some difficulty, apparently related to the disabling of some AppX components. I know that your walk-through talks about a removing a certain set of AppX packages (Skype, 3D builder, etc) using the scripts, I instead chose to leave them in place and disable them using AppLocker, which is configured through Secpol (policy).

    My resulting ISO went into a loop during the final stage of Setup in which I am prompted to allow Windows to update using WiFi, etc. As far as I can tell, it is possibly solved by removing the secpol policies that restrict running certain AppX packages. Here’s a few links:

    https://social.technet.microsoft.com/Forums/windows/en-US/471b0403-8d5b-4c90-b011-6be9c8850f3e/win10-install-restart-loop-help?forum=win10itprosetup

    https://www.reddit.com/r/HyperV/comments/68srwa/does_anyone_else_here_use_a_wimtovhd_solution/

    https://social.technet.microsoft.com/Forums/en-US/b88c21e0-53a9-4f4d-876d-3c0abc3dba8a/windows-10-1703-deployment?forum=ConfigMgrCBOSD

    The error is “Why did my PC restart?” and clicking Next just reboots and shows the screen over and over… no error number or description. I don’t feel like debugging this.

    I am still trying to resolve the issue on a VM right now, so hopefully that second or third link puts me on the right track.

    I also automated the part that is done at the commandline. I had problems with using a D: drive and a folder with spaces. Don’t you love DOS and long filenames? Pulling hairs out for 25 years now.

    • echorelay

      Thanks for reading! Interesting choice in disabling the appX apps using AppLocker! I suspect the failure is happening since the new user login (first time) actually installs the apps for the local user. If you’re blocking this using AppLocker, maybe that’s whats causing the error? I haven’t played with AppLocker much, certainly not within audit mode when creating an image, so this idea is just a guess.

  • Googo

    This is an awesome guide! Thank you for making this. I’ve followed all the steps and I am now the furthest I have ever been with new Win10 image creation.

    I have an issue where some of the applications I installed are not in the image. Maybe 3 of the applications did not get transferred over. I have 3 .swm files and I am wondering if one of them didn’t get applied. Any tips would be much appreciated.

    • echorelay

      That is a very odd issue! May I ask what the applications are? You installed them in Audit mode and sysprepped (with generalization)?

      • Googo

        I posted earlier, but for some reason it’s gone. Anyway, thank you for replying.

        I have the following applications:
        Office 2016
        PDF-xChange
        Winzip 18
        Symantec Antivirus
        Triton Websense AP

        I did install these in audit mode.

  • ThomasK

    i went through this and now when i run the iso on a new machine from a usb and in hyper- v vm iget an error, I have checked and there is an ei.cfg file im lost https://uploads.disquscdn.com/images/252f468459e8a7e815fbf20b145c5ca620fee1f02609fe149a77d92c63b92e8f.png

    • Stênio Oliveira

      same problem, help me!

      • echorelay

        Are you using Enterprise or Pro?

        • Stênio Oliveira

          Pro

  • Chris

    Awesome guide! Have you by chance messed with creating an answer file for Win10 1703?

  • @79

    First of all, hats down for this full tutorial and all work behind it.
    I’ve followed in depth your guide here, but overtime, when I try to upload the .wim file ( I didn’t split .swm files) , the WDS is telling me, the image is not valid.

    • echorelay

      Thank you for the kind words! Are you using the latest version of WDS? What server OS version are you running on? I haven’t tried using split wims on WDS before as it’s never been necessary for me. I can say that I have followed the listed process (excluding the splitting part) and successfully use them with SCCM OS deployment, which the underlying technology of that is WDS. I am, however, using the latest version of SCCM Current Branch (1706)

      • @79

        Hi, thanks for the reply. WDS version 10.0.14393.0 running on Windows Server Standard 2016. No SCCM

  • cypherstream

    Hi, is this possible to do with Windows 10 Professional? Can I take the wim file and import it into a server running Windows Deployment Services and PXE boot it? I don’t want to deal with physical media. I have no problem PXE booting Windows 7 wim, Acronis true image, windows 7 image capture / lite touch windows pe.

  • buchead

    there is no install.swm in my /source folder, only install.esd.

  • jesús “chus” Perez

    Hi,
    I am preparing a Windows 10 1703 model using your procedure but when the reference machine is in audit mode Remote Desktop doesn´t work, and port 3389 is not Listening. ¿it is normal?

    Thanks & BR

  • Hikari Minami

    Can it install as CSM bios rather than UEFI?

    sorry my bad english.