Creating XP Disk Images w/ Company Applications?
-ryan asks: "After a decade as a software engineer, I decided to try my hand at being a System Administrator, to help a friends business. Unfortunately every single computer in this office is on different hardware (all custom built), all running different versions of Windows, and new employees come and go regularly. I'd like to create a single disk image with all of the company software pre-installed and configured to save time setting up new boxes and rebuilding old ones. Problem is, you can't just ghost Windows XP onto different hardware (I remember this working years back). Is there some way that I can (without purchasing hugely expensive 'client-management solutions) slipstream a bunch of company software into a Windows XP install disk?"
"I remember trying to set up a system image for XP a while ago, and some machines will boot the ghosted system image with errors about missing drivers (which is easy to fix) but some won't even boot without a BSOD.
If I can pull off a slipstream of my own custom XP install (with applications), I wouldn't mind having to install system specific drivers. The company leadership is very pro Linux and wants to move all of the desktops over, but this year it's not feasible to do such a migration. So until then.... any ideas?"
If I can pull off a slipstream of my own custom XP install (with applications), I wouldn't mind having to install system specific drivers. The company leadership is very pro Linux and wants to move all of the desktops over, but this year it's not feasible to do such a migration. So until then.... any ideas?"
With your mix of hardware, slamming an image won't cut it for you. You'll have to created an unattended Windows install.
Here's a pretty good guide on the subject.
____
~ |rip/\/\aster /\/\onkey
Ghost can do this. What you want to do is create a "master" computer with all of your applications on it. Then, use SysPrep (Google is your friend) to create an abbreviated install. Once you've run SysPrep, boot into Ghost and make your image.
Bryan J. Casto
bryan.casto(a)gmail.com
i remember seeing a tutorial out there on how to add firefox and a few other programs to autoinstall during a windwos install a year or so ago. sorry to say i do not still have the link saved, but i found it on google. happy surfing.
If a nation expects to be ignorant and free, in a state of civilization, it expects what never was and never will be.-TJ
I have used unattended with great success deploying several hundred XP installations. http://unattended.sourceforge.net/. It won't let you slipstream an install disc, but it will let you do complete, brainless unattended installs over network, hence the creative name. It has the added benefit of easy long-term maintenance and updates, which is a win over the install-disc or ghosting method.
If you pick up the most recent official microsoft acedemic press Windows XP administration textbook, it details how to take advantage of the automated install features.
At least, the NT4 and win2k texts did. I haven't picked up anything newer.
For the machines that will boot off the same install but need different peripheral drivers I think you could still get a common image. Just make an image, install to new h/w, add necessary drivers, make a new image. Continue until you have an image covering a significant subset of the installed base.
Don't forget to use ghostwalk to blow out the SID.
UIU was a pleasant suprise for us. We use it all the time and it actually works pretty well. The short version is that it rips out all your hardware information and uses sysprep and preinstalled drivers to automatically detect and install the new system's hardware on the next boot. So basically, you build one computer, run UIU, image it (with Ghost or something) and then dump it on to all the other computers, regardless of their hardware setup (well, not including SCSI or RAID). There usually isn't even any post-install configuration necessary.
http://blog.hishamrana.com/2006/02/22/how-to-image -windows-xp-with-ghost-and-sysprep/ I'm not sure if you use these directions when making your disk image before. Plus, I think it takes some time to get it right.
-----BEGIN PGP SIGNATURE-----
12345
-----END PGP SIGNATURE-----
This is what we do.
You may want to take a look at nLite (http://www.nliteos.com./ It is essencially a graphical front-end to Unattended, and allows you to create a fully working installer image with imbedded applications in less than 5 minutes (after you figure your way around). Very useful tool.
Thirty four characters live here.
don't have the link to any docs off the top of my head, but this is what we use at our office here, its what you describe except pulled down from a network server when needed via PXE LAN booting. works pretty good.
Just copy the i386 folder from the intall CD into the ghost image and then you can ghost the whole shebang without worry.
When you fire up the restored Windows XP on a computer with different hardware then last used, it will go through its hardware detection and driver installation phase, just point it to the i386 folder you have included in the image, and all should work.
In fact, I think if you specify somewhere in the registry before ghosting the installation, Windows XP will automatically search for the local i386 folder when looking for new drivers before prompting the user asking where it is or to install the CD. This should allow for relatively painless cloning.
Note, however, it isn't technically legal for you to clone Windows XP installation unless you purchased a volume license version of Windows XP. If you ghost retail copies of Windows XP, you might find yourself in deep sh*t if Microsoft finds out as your techincally pirating the OS, even if you have enough retail copies for each computer on the shelf. Each computer must be installed with its own licensed copy of Windows, or use the volume license version.
I haven't thought of anything clever to put here, but then again most of you haven't either.
I remember hearing from a friend about a command which you issue from the recovery console to strip out all of the old drivers. For the life of me I can't remember what it was though.
It would allow you to ghost the drives, then re-install the drivers.
I could be wrong though (friends tend to be a bit unreliable).
You can learn how to everything from here:
/ 1/
http://www.msfn.org/board/
Here:
http://unattended.msfn.org/unattended.xp/view/web
And here:
http://www.driverpacks.net/Projects/DriverPacks/
Applications, Drivers, Updates - all slipstreamed.
If you have an Active Directory PDC, you don't need to slipstream your company software into the install disc. You can instead install it as a "Managed Application," provided the software is in an *.MSI package. The first time a domain member boots up (and each subsequent time), the domain controller will check to see if the package is installed. If not, it installs the software according to a script, so no user intervention is required.
Sorry to say, but unless your business apps are 100k you're going to run out of space on the disk.
I recently did a slipstreamed XP disc w/ SP2 and all the critical updates already integrated, and I found myself having to remove the unessential stuff (demos, extras) from the CD image if I wanted to fit it onto one disc.
My sig is too lon
If you use the 'mini-setup' of Sysprep, the first time you boot the machine after that, it'll go through the regular deal of finding all your devices and installing them, so having different hardware may not be a huge problem.
The problem is with Windows XP reg keys. If you build a ghost image using a 'corporate license' disc or whatever, then all of your machines will have to use that multi-license key. You may not care, but when you work for a state hospital (like me) they do. You won't be able to use the reg key on the case badge, cause its probably a key for an OEM install.
The OEM windows keys on the case badges are sometimes vendor-specific. Meaning the key off a Dell's case won't work on a Gateway 'restore' disc, nor will it work on a store-bought copy of XP from the shelf. We have a contract with Dell, so its not a big deal for us, but it may/may not suck in your situation.
Han shot first.
I second Unattended. It takes some time to setup, but it's worth it.
I also like your origional idea to include installers on the WinXP CD. We have a WinXP cd that installs antivirus and some other apps after windows installs. We also made a DVD that installs Office and a whole sweet of applications when it's done. Look at the documentation on the Unattended website to learn how to generate answer files for almost any installer shield. Repackaging is the devil.
Otherwise, I've found that Norton Ghost and other imaging utilities work great, even across varied hardware provided you use Microsoft's sysprep utility. Most of our images are spread across slightly varied hardware. We just have a c:\drivers folder that contains the *.inf and supporting files for all of the hardware we need. Reference that in the sysprep.inf and you're good to go. You can even specify that a program runs on the reboot after sysprep's mini-installer, allowing you to do last minute cleanup, such as running a script to rename the machine, install printers based on location (subnet) etc.
First of all, you need to build a standard base that contains the drivers for all of your known equipment variations such that all that equipment can be detected and installed on firt boot by plug and play. Basically your going to and of of these drivers to the known driver set that comes with XP. Microsoft has Qarticles/white papers on doing this.
Next install all the apps.
Next your going to need a utility from Microsoft called sys-prep. Once you have this standard image, you will use sysprep. This will strip all the PC specific info away and leave you with an install that is ready to go. After you image a machine it will go through a mini-setup. (Ever bought a DEll/HP/Gateway machine, and booted for the first time thats the mini-setup)...this is basically the hardware detect and setup, and network setup part of the XP install minus all the other stuff you have already done creating the base. Just the PC specific stuff that the sysprep process stripped away.
Power Corrupts,Absolute Power Corrupts Absolutely, leaving one person(group)in charge is absolutely corrupt.
Big corporations usually standardize on hardware deployments. The bigger you are, the more you need to support only a few platforms versus many. The same principle can even help out smaller installations. I love white box, but if I have to support them, then I would begin to transition over to a HP/Dell/? platform with your favorite flavor of OS. Keep Ghost images of what you have currently; Ghost partitions are helpful for quickly getting a PC re-setup for a new user.
ok, ok, don't mod me redundant. The guy above me just beat me to the submit button...
Han shot first.
Well this is the one thing that XP can't do in my experince... but I have been where you are before.
What I did was take an inventory find out how many of each model I had, then I found out which models would take the image I had (even if not compleatly) and cleaned those up to create a new image for that model. on system that where too diffrent I upgraded to XP (to maintain as many settings and apps as I could) and used that with some cleaning as a base for an image for those model.
At first my boss wanted me to use sysprep and maintain one image (like he had done with 2000 before I came) but after about a week of experimenting it became clear that creating an universal image would take way to long if it was even possible.
I know that this isn't the cleanest or shortest process but last I heard they are still using my images so I must have done something right.
Hope that helps.
I don't give a damn for a man that can only spell a word one way.
Mark Twain
How are you going to create a disk image that is applicable to very different systems? The point of a disk image is point, click, restore to the original state. It's... well... a little difficult to do that when the state that the image must restore to is different for each machine.
You might want to try installing a really light-weight Linux distribution and running VMWare Player with a lot of hard drive space and memory for the Windows virtual machine. You could try something like Damn Small Linux or Gentoo that can get pretty low on the requirements if SuSE or something else is too much of a pig to fit well.
If your hardware is that varied, just setup an image disk for each set of hardware. If any two are identical then just use the same image for both. Then just label each image disk with the computer number it is for. I know this has the hassle of several images, but then you have drivers and everything in one step on reinstall. Depends on how many computers you are talking about to determine if this is a feasible solution for you.
Also I have never had the problem you describe with Ghosted copies of XP. Just it complaining to reregister because it detects the hardware changes.
Great post. Very informative how-to. The owner of the blog also answers questions in his comments. Maybe the original Slashdot poster could ask about network deploymen via RIS or Symantec's Corporate version of Ghost? Your post should be modded up.
If you use IBM servers you get IBM director for free (you can also buy it, I dont know the price). This is a network management tool with a lot of surveilance and other nice features.
For a few bucks (I got an offer for approx 100) you can get a remote deployment option for IBM Director that lets you install packages, images and whatnot.
Unlike most other options IBM's RDM also supports linux installs.
Of course for a quick fix http://unattended.sourceforge.net/ is a very clean and appropriate solution.
Use Microsoft's Sysprep tool to make your images hardware-agnostic. If you know all the disparate hardware in your environment, you can pre-cache the drivers on your image template computer, sysprep it, then shut it down and create your image with ghost/trueimage/altiris rdeploy/whatever you've got. You can then deploy the image to any computer.
The easiest way is by using Acronis True Image and Microsoft's Sys-Prep utility.
A lot of people talk about Ghost and I used Ghost for years, but once you try Acronis True Image you will dump ghost and never look back!
http://www.acronis.com/
When we went to sysrep we first had to document which ACPI each system has and we found that there are only two different types, AACPI and ACPI, so we have two basic images. Another problem we had was the different drivers from our different Dell models. There is a way to 'stuff' all the different drivers into the images (after they are made) properly to be found when needed. The PXE boot will select the correct ACPI type image. The wole project was a big PITA, but after a lot of detail work it does work. Sorry I can't remember the links on how to set all this up but its out there. It helped that we had enough 'spare' systems to do all the installs and get driver details to work with.
zenray
you can image windows xp to different hardware.
google for sysprep, Oempnpdriverspath, updateHAL, and so forth.
one you get that done, get some image cloning software. ghost is nice. but you can roll your own with stuff like driveimagexml, gparted, linux ntfstools (ntfsclone especially), g4u, g4l, udpcast, and many other tools.
oh, and i make 9 dollars an hour working part time too. so if i can do it, you better believe you can do it.
The subject says it all. A big comprehensive site that explains how to do exactly what you wish.
Can I get an eye poke?
Dog House Forum
Acronis Universal Restore.
You install everything on one machine, and then prep it for a transfer using MS Sysprep tools. Create a disk image with Acronis, and then, when the time comes to restore it to dissimilar hardware, the restoration program will allow you to replace drivers and even the HAL.
I use a single image that operates on Dell GX110, 150, 260, 270, HP DC 7100c, HP xw8000, Compaq 1830 laptop, Dell C500, C510, C600, C610 and D610 laptops, Dell P650 and P670, and Dell Precision M70 laptop. I think that's it, but it's kinda hard to keep track of them all.
The ACPI isn't the biggest problem. The main problem is, astoundingly, the IDE driver.
Here's what you do.
1. Install Windows on a system and then load all the drivers.
2. Set it for Uniprocessor ACPI.
3. Set the IDE driver to the generic driver.
4. Move the drive image to another system (swap hard drives, clone the drive with Ghost, whatever).
5. Boot up, install drivers for new system.
6. Move image to previous system.
7. Set for system-specific IDE driver.
8. Repeat steps 3-7 for each type of system.
9. Move image to last system and switch to system-specific IDE driver.
10. Sysprep and save a Ghost image.
Also, if you're using a lot of different types of systems with GhostCast Server, PXE booting is the only way to fly. Use pxelinux (part of syslinux) with the keeppxe option along with the 3COM universal NDIS driver, and you'll never have to worry about NIC-specific drivers with Ghost again (unless you have a system that can't boot PXE, like my Compaq 1830s -- they're a pain in the ass!) If you absolutely can't boot PXE, use Bart's tools (BFD and BCD) to make a bootable floppy or CD-ROM with all the drivers.
It's always a long day... 86400 doesn't fit into a short.
Just use the copying the i386 folder trick that someone mentioned above.
Make sure the machine you do it on is the one with the smallest HD.
dd an image of the entire drive to the external hard drive.
dd it back on the next machine, then format the extra space as drive D or whatever.
It's free.
The two major issues seem to be drivers and ACPI. If you've got similiar enough hardware, shouldn't be a big deal for drivers. And for ACPI, they either all need to have it on or off in BIOS, can't have a mix.
After you prep it to your satisfaction, run sysprep and your image tool of choice. Just beware of those applications that do things like hardcode a computer name in there install somewhere, apps like that will need to be done post image and you could use vbs/wise or something similiar to script that portion.If you are running a Windows domain, you may want to look at RIS (Remote Installation Service). Workstations use PXE to boot over the network and a "image" is placed onto the box. The image is a not quite the same as Ghost in that an actual install (with hardware detection) is performed for each machine, applications are then dumped on top of this. Is quite portable across different machines, not to difficult to get running (no more boot floppys!) and is included with Windows Server.
b rary/c62e5951-5eb9-42f1-95ae-490e5d7a55511033.mspx /
Good starting point: http://technet2.microsoft.com/WindowsServer/en/Li
We're a Dell shop, so we don't have a *huge* range of models. But we use Ghost and create a different image for each model. This solves the driver problems and other hardware variances, but it also means more images to maintain.
It is possible to replace the Hal.dll with the correct one for your system, negating the need for multiple images. What I do is have one single image, without any drivers installed. The image is sysprep'd then ghosted. I use Windows PE to restore my ghost images, and change the hal.dll to the correct one for the machine. Then I install drivers (note, if you specify the search path in your sysprep.ini you can have the drivers install automatically.)
It all works pretty well. You'll find you will likely only be using two hal types (ACPI & APIC). Of course, this isn't supported by Microsoft, and I don't think it will work for 64 bit computers.
However, this is Microsofts strategy for Vista... There will be a base image, which extra file sets get laid down on (depending on which OS flavor it is, and the machines HAL.)
It doesn't change the SIDs. Universal restore is only intended as an emergency restore solution. For example, your Windows 2003 server domain controller's motherboard dies. Waiting for replacement parts may take a little bit of time. If your site doesn't have a hot spare, you could move the DC to another machine. However, since your last image wasn't Syspreped, chances of successful restore are usually slim. So, Acronis Universal Restore comes in and updates the HAL, storage drivers and allows a restore to take place. It leaves SIDs intact for this purpose. Universal Restore was never intended as a replacement for Ghost. It is something that comes in additional Acronis True Image (a Ghost competitor) for the disaster situation I outlined.
You can make a bartpe dvd with all the drivers installed to work on most hardware.
There is a DVD floating around on BT sites that have an updated winxp with all patches/drivers and some needed applications. But I recommend making one yourself for security reasons. (rootkit/etc)
Driver packs and Driverpacks.net
Ryan's windows xp updates
nlite to help modify a windows install.
Bart PE - bootable dvd/cd for windows install.
My experience with disk imaging is that Acronis is far better than Symantec Ghost, which is actually the old PowerQuest DeployCenter.
Symantec did something that amazes me. Symantec bought PowerQuest. Symantec abandoned their own product, called Ghost, and substituted a product from another company. The substituted product, PowerQuest DeployCenter, now called "Ghost", had numerous completely different quirks and issues.
The new "Ghost" box, which I just bought about month ago, includes the "new version of Ghost" which is DeployCenter, I'm told, and a second CD that includes the last version of the old, real Ghost, called on the CD "Ghost 2003". This old, real Ghost is a dead product, apparently.
(I just checked the box again. I have the "Norton Ghost" box and CDs in front of me. I bought the new copy for $9.99 after update rebate and another rebate.)
It's a new low in software company abuse: A software company has switched products without telling its users.
My experience of Symantec technical support is that the company is undergoing a social breakdown. Symantec technical support people have found that they can reduce their work load by being hostile to callers.
Our experience with Acronis is that it has its own issues, insufficiencies, unexplained failures, sales people lacking any technical knowledge, and very sloppy technical support. However, many people, including me, are recommending Acronis TrueImage over "Ghost".
Always report computer company abuses to Ed Foster's GripLog.
After that, as others have said, you MUST run Sysprep to change the SID. These are the commands:Install Sysprep into a folder sysprep2 and copy to C:\Sysprep. Sysprep deletes its folder after it is finished.
Sysprep -bmsd rebuilds sysprep.ini, which holds the information that Sysprep uses.
Any tips about this experienced users have would be appreciated. Microsoft's documentation is VERY sloppy.
Windows Server 2003 Service Pack 1 32-bit Deployment Tools work with Windows XP, also. Maybe these are better, since they have been recently updated, and work with all Windows releases.
I have not had good luck with using SysInternal's free utility NewSID. However, other utilities from SysInternals are best in class, and NewSID was updated after I tried it.
Also see PsGetSID.
You might want to give Win PE (Microsoft Windows Preinstallation Environment) a try.
n efits/winpe.mspx
http://www.microsoft.com/licensing/programs/sa/be
If that doesn't work for you, then by all means take a look at BartPE, as the person above recommended.
http://www.nu2.nu/pebuilder/
Good luck!
Ok some tools I use to make my life easier (all free):
Basic usage:
-- I don't buy it, I grow it.
You want n+1 ways to peel an Orange... Ask Slashdot!
Keep it up, Y-all!
Check out VMWare's ACE product.
> Problem is, you can't just ghost Windows XP onto different hardware
In my view there is no way to effeciently manage Windows on widely varying hardware. The installation is the smallest problem, but then certain applications are incompatible with certain drivers etc.
So you should just sell your existing hardware and replace it with a defined hardware platform. Both Intel and AMD have programs for exactly that. Intel calls it the "stable image program", and the goal is that you can buy the same hardware platform for several years, and still use all the same drivers.
In my experience, this is the only way to deploy Windows on a wider scale.
Now if only a virtualisation engine would support the stable image (such as VMware), you could run the same image on legacy machines in the virtual machine... But I am not sure that would be a good solution for the average user.
Whatever solution you come up with, it is going to be pain in the neck and is only going to be the beginning of your problems. Once you get the OS running everywhere, you get the fun task of making sure all the apps perform adequately everywhere on your various hardware and OS configurations. Then you get to do it all over again when the OS has a patch or you need to tweek an application, which in my experience will be about once a day. The common solution to this is to throw all your computers away and move all of your desktops to identical hardware. But why should we fill our landfills with perfectly working computers that will only leak toxic waste once discarded, just because Windows is a pain in the arse to administer? Here's what I would do: Move all of your critical enterprise applications to some web application environment. I don't care which one: .NET, J2EE, Zope, Zend, Ruby on Rails, whatever. Then all you have to worry about is having a functioning web browser on your desktops. Problem is solved. And when you want to do an upgrade or modify an app, just update the web server once and you are done.
Not only does that solve your current problem but it makes your future plan to move to Linux on the desktop a breeze. Your web apps won't care what OS your browser is running in. (Well, at least as long as you don't choose .NET!)
If you want to deliver applications to the desktop, why waste your time playing the MS/Intel perpetual upgrade gauntlet? Just deliver your apps inside a web application environment and be done with it.
Go here and read up... you can make a totally slipstreamed/added installers with batch files http://unattended.msfn.org/unattended.xp/
Sig Hansen?
I'm an old Drive Image user from back at v3. Back before drive imaging caught on, the only players were Ghost and PQ Drive Image. Drive Image was smaller, DOS, and very scriptable; Ghost had the name recognition and wizards. I stuck with DI up to v2002. It had XP-NTFS support before Ghost did. It have no regrets. Symantec's buy out ruined the line, and they sucked up PQ's knowledge base never to let it see the light of day again. The next imaging suite I'll even try is Acronis. Ghost has grown too big, tries to do too much, and sucks a$$ on top. I'm still getting use out of our inital $400 edu lisence od DI after 5yrs.
/. for. I really need to hit this thread with Acrobat for safe keeping so I can reference it later.
After doing disk imaging for 6 yrs, I've begun moving to Unnattend (http://unattended.sourceforge.net/ ), and scripted or prepackaged app installs. Imaging works most times, but the few where it doesn't are a pain, and usually time sensitive.
I will add that there was a utility shipped in DI4 pro called "DeltaNow" that watched app installs and bundled them into an EXE. I still ue it today. I has saved my job many times. The only apps I have not been able to package with it are obviously MS Office ( killed windows install), Photoshop ( blue screen on startup ), and VirusScan ( blue screen ). Now I script those, or use thier own built in installers to install them unattended.
Even using a striped down XP inage, I've been able to bring up a completely usable workstation from blacnk drive in about 25mins using packaged apps. Much faster than the "magnum" DVD-sized image that had EVERY app preinstalled.
This thread is what I keep reading
Heybiff
Even the Sun goes down.
Dell X-Image
IBM ImageUltra Builder or whatever it's called
"This thread is what I keep reading /. for. I really need to hit this thread with Acrobat for safe keeping so I can reference it later."
Your insightful comment is the reason I read Slashdot. I had never heard of Unattended. I've only had time to read a little of the web site, but I agree with what I have read.
You probably know this:
Use AutoHotkey to make keyboard shortcuts to run programs and enter text.
Use AutoIt to simulate keyboard entries and mouse clicks and when you need complicated decision-making. Download AutoIt with the SciTE auto-completion IDE. The SciTE editor makes writing and testing AutoIt programs and compiling the finished results very easy.
Both these programs are very sophisticated, the best available, and FREE. AutoHotKey comes with source code. Both are programmable.
For example, I've written an AutoHotKey program that uses a shortcut to toggle between Windows shortcut keys and WordStar/Brief control-key editing commands. I like to avoid taking the time to touch the mouse.
AutoIt is great for automating installations of software.
Both allow programming your own GUIs.
Is there any way I can get a copy of DeltaNow? The earliest version of DeployCenter I have is 5011b.
Does Unattended allow automation of installation parameters like font choices in Open Office? I read some of the web site, and it looked like the answer was no.
If you use Dell computers, ask your Dell rep about the "Dell Ximage". It starts with you proving them a hard drive of a completely set up machine. Then they remove all of the drivers and put a custom front end on it. They give you a dvd that you can boot that ghosts the image to an HD. When it boots up, the Ximage loader determines what model Dell computer you have and installs all the correct drivers. The install stage takes about an hour. If it doesn't detect your model such as a non-dell computer it dumps you back to the enter your serial number screen. Other than that, it is automated.
We do quarterly updates with it and also Dell pre-loads it on all our new computers, when they boot up, it takes you to the network setup wizard where you name the computer, set the time zone and join it to your domain.
What I do to save time is after a computer is done, I take it off the domain, and set up the RunOnce key in HKLM to launch newsid.exe (from sysinternals). Then I make a ghost image of each model computer we use. When it boots up and you log in as the admin it prompts you to rename the computer. Then you manually join it ot the domain.
I've Googled DeltaNow to see is there are any cached pages with documentation, and no dice. It's as if it never exhisted. Great work Symantec.
I would hit Ebay for DI pro cd's up for sale. It's sure to be on any version before 2003, and after 3.
Heybiff
Even the Sun goes down.