Core 2 · Chapter 3
Windows Administration
Sysprep, ImageX/DISM, WDS, setup passes, updates, BCD, bootrec, 20 SMB connections.
Setup passes (WinPE is not a pass)Often missed
WinPE is the environment you boot into. It is not a Windows setup pass.
- auditSystem — system-wide setup
- generalize — strips hardware-specific drivers and SIDs
- auditUser — user-specific setup
- OOBE — Out-of-Box Experience for the first user
Deployment workflow (correct order)Often missed
1. Configure reference PC 2. sysprep /oobe /generalize /shutdown ← PREPARE first 3. Boot WinPE 4. imagex /capture or DISM /Capture-Image ← CAPTURE 5. Add image to WDS 6. PXE-boot targets 7. WDS deploys image ← DEPLOY 8. Each PC boots to OOBE
sysprep MUST run before capture. /generalize removes hardware bindings so the image works on other PCs.
- sysprep = prepare. ImageX/DISM = capture .wim. WDS = deploy over the network.
- USMT migrates user data. MAP toolkit assesses hardware. Different jobs.
Insider, update branches, 32→64
- Insider Program: not on Home. Supported on Pro, Education, Enterprise.
- Do not pick “General Availability” as the branch name on this material. Semi-Annual Channel = regular public. LTSC = long-term enterprise. Insider = preview.
- Security updates fix vulns (highest priority). Critical = major bugs. Feature updates bump version (21H2 → 22H2). Quality rollups = monthly cumulative. Optional = drivers/extras.
- 32-bit → 64-bit is clean install only. No in-place, no intermediate stepping stone.
BCD, bootrec, concurrent connectionsOften missed
- BCD location: legacy MBR → C:\boot. UEFI → ESP.
- bootrec /rebuildbcd — rebuild BCD. /fixmbr — MBR. /fixboot — boot sector. /scanos — find Windows installs.
- Windows workstation SMB inbound connection limit is 20 — not 25, 30, or 40.