This is a simplified version of the Specops Support pages, optimized for users of Internet Explorer (version 10 and 11). To view the full version, please access this page using another browser, such
as Chrome, Edge or Firefox.
The content below is intended for administrators who are responsible for managing OS deployments in their Microsoft Active Directory environment. Before you perform the tasks in this guide, please ensure you have correctly installed
Specops Deploy/OS.
The
Specops Deploy/OS admin tool is the central management console that can be used to:
Monitor the
Specops Deploy/OS infrastructure
Configure your Active Directory infrastructure for OS deployment
Manage and publish the deployment repository
You can access the
Specops Deploy/OS admin tool via the start menu.
Servers
You can use the Servers tab to perform the following tasks:
Install new Deployment Servers
Export List of Server
You can use the Live View and Grid View pane to perform the following tasks:
Monitor the status of Deployment Server
Monitor the status of Servers
Install new Deployment Servers
In the navigation pane, expand Servers, and click
Install new Deployment Servers.
Enter the name of the server you want to configure as a Deployment Server, or click the browse button to find the server in Active Directory.
Click Next.
NOTE
If the Image Server and Deployment Server are installed in the parent domain, and a GPO is configured in the sub domain, you will need to configure the deployment server explicitly in the GPO.
Click Next. The
Specops Deploy/OS admin tool will verify that the target server meets requirements.
Click Finish when the installation is complete.
Export List of Servers
For a detailed list of your Servers, including server name, description, domain controller, last heartbeat, version, replication state, and state version for inventory purposes you can export the list of your servers.
In the navigation pane, expand Servers, and click
Export List of Servers.
Enter a file name, and click Save.
Monitor the status of Deployment Servers
From the Servers tab you can monitor the status of Deployment Servers. The Live View pane displays icons that represent the servers allowing you to perform administrative tasks remotely. The
Grid View presents the same content in a tabular format.
You can perform the following tasks by right clicking on the Deployment Server in the Live View or Grid View pane.
Restart Windows Deployment Server (WDS)
Restart Distributed File System Replication (DFSR): Restart the DFSR service
Restart Deployment Server
Upgrade Deployment Servers
Uninstall Deployment Service
NOTE
If you have upgraded your Image Server to a new version of Specops Deploy, you will also need to upgrade the existing Deployment Servers. The servers that need to be upgraded will be highlighted in red.
Monitor the status of Servers
From the Servers tab you can monitor the servers for problems such as stopped services, failed replication, or missing heartbeat information. Detected problems will be highlighted in red. For detailed status information you can hover above the server
icon.
You can perform the following tasks by right clicking on the Image Server in the Live View or Grid View pane:
Restart DFS Replication
Restart Image Server
Publish Deployment Repository
NOTE
If you have made changes to the Deployment Repository outside of the
Specops Deploy/OS admin tool you will need to re-publish the repository manually.
Images and packages
You can use the Images and Packages tab to perform the following tasks:
Import Operating System from Original Source
Initiate Operating System Capture
Import Captured Image
Import Language Package
You can use the Images pane to perform the following tasks:
Delete Image
Edit Image Settings
You can use the Language Packs pane to perform the following tasks:
Delete Language Packs
Import Operating System from Original Source
Original images are the operating system images from the operating system installation disk. You need to import at least one original image of each version of Windows that you want to deploy through
Specops Deploy/OS admin tool.
NOTE
It is important to load the DVD / ISO that has been most recently added to the Microsoft download site. If you are importing an image from an ISO, you will need to mount the ISO and browse to the drive it is mounted to.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Images and Packages, and click
Import Operating System from Original Source.
Enter or browse to the location of the device or the folder containing the operating system, and click Next.
Select the operating system you want to import, and click
Next.
Enter an image name and description. Note: If you are using MAK-licensing (volume license keys), you should also add the license key to the image data.
Click Execute to import the selected image to the
Specops Deploy/OS deployment repository.
NOTE
To make the operating system image available on the Deployment Servers, you will need to publish the deployment repository.
Initiate Operating System Capture
You can use the
Specops Deploy/OS admin tool to record or capture an image of an existing Windows installation from a client computer. The captured operating system image can be kept on a virtual machine and used to create the image that will be deployed to client computers.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Images and Packages, and click
Initiate Operating System Capture.
Enter or browse your Active Directory for the computer you want to capture.
Click Execute.
NOTE
During the capture process the operating system will be removed from the domain and uploaded to the captured image repository on the image server.
Import Captured Image
You can import to the system, operating system images uploaded to the Specops Deploy Image Server or .WIM format files created outside of the
Specops Deploy/OS admin tool. .WIM format files are operating system images representing a compressed collection of reference files and folders needed to install and configure an operating system on a computer.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand
Images and Packages and click Import Captured Image.
From the drop-down below select the image source, you can:
Option
Import a capture initiated by Specops Deploy
From the drop-down, select
Pending capture that has been initiated from Specops Deploy.
From the list, select the image you want to import, and click
Next.
Select the Image to base the new Image on, and click
Next.
Enter the Operating System Image information, and click
Next.
NOTE
The Operating System Product Key field is used to provide the installation with a Windows license key. This field should only be populated if your organization uses MAK licenses. If your organization uses KMS licenses, you do not need to enter a license
key.
Click Execute.
Option
Import a capture initiated by Specops Deploy
From the drop-down, select
Browse to a captured image in the file system.
Browse to a WIM-file containing a captured image, and click
Next.
Select the Operating System Image you want to import, and click
Next.
Select the type of import from the drop-down menu.
Enter the Operating System Image information, and click
Next.
NOTE
The Operating System Product Key field is used to provide the installation with a Windows license key. This field should only be populated if your organization uses MAK licenses. If your organization uses KMS licenses, you do not need to enter a license
key.
Click Execute.
Import Language Package
You can use
Specops Deploy/OS to import language packages to support multiple language versions of Windows.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Images and Packages, and click
Import Language Package.
Browse to the location of the operating system language files.
NOTE
The files should have the extension .cab or .msu.
Click Execute.
Delete Language Packs
From the Images and Packages tab in the Language Packs pane you can view the list of Language Packs in the deployment depository and delete any package you no longer need.
Edit Image Settings
From the Images and Packages tab you can view the list of images in the deployment repository.
You can perform the following tasks by selecting an image in the Images pane:
Edit Image Settings
Delete Image
From the Images and Packages tab you can view the list of images in the deployment repository.
You can perform the following tasks by selecting an image in the Images pane:
Delete Image
NOTE
The Operating System Product Key field is used to provide the installation with a Windows license key. This field should only be populated if your organization uses MAK licenses. If your organization uses KMS licenses, you do not need to enter a license
key.
Drivers
Specops Deploy/OS uses MDT to equip the operating system with the necessary drivers. During installation, the hardware IDs in the machine must match against those in the driver repository. The repository must contain valid drivers for all of your hardware
models, and operating systems.
You can use the Drivers tab to perform the following tasks:
Test driver lookup for computer
You can perform the following tasks by right-clicking on Driver Folders:
Add New Child Folder
Add New Child “Make” Folder from Computer
Add New Child “Model” Folder from Computer
You can perform the following tasks by right-clicking on a Child Folder:
Add New Child Folder
Add New Child “Make” Folder from Computer
Add New Child “Model” Folder
Import Drivers
Delete
Properties
Test driver lookup for computer
The
Specops Deploy/OS admin tool includes a test tool which you can use to verify that a given computer can find the correct driver folders in your driver library.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Drivers, and click
Test driver lookup for computer.
Enter the computer name or browse to the source computer.
Click Next.
From the drop-down, select the operating system to run the test against.
Click Execute.
Add New Child Folder
To add a new folder to the driver repository:
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Drivers.
Right click in the tree view and select
Add New Child Folder….
In the text field, enter a new folder name.
Specify the Driver Folder Type:
Make Folder: The Make Folder and its subfolders are matched by looking at the computer manufacturer information. For example, a Dell computer would be Dell Inc. and HP is
Hewlett Packard. If you select the Make folder type you will be given the following options:
Option
Add a new folder manually
Click Add Alias
NOTE
You will need to add at least one Alias.
From the drop-down, select a WMI property.
In the text field, enter the alias value.
Click OK.
Option
Add a new folder manually
Click From Computer.
Enter or browse to the computer, and click Next.
Click Finish.
Note: To ensure that the correct WMI name is specified, it is recommended that you use the Add a new folder from computer option to remotely contact an existing machine and retrieve the relevant information.
Model Folder: The Model Folder and its subfolders are matched by looking at the computer model information on the computer. For example, Dell Latitude E6400 would be Latitude E6400, and the HP EliteBook 2570p would
be EliteBook2570p. If you select the Make folder type you will be given the following options:
Option
Add a new folder manually
Click Add Alias.
NOTE
You will need to add at least one Alias.
From the drop-down, select a WMI property.
In the text field, enter the alias value.
Click OK.
Option
Add a new folder manually
Click From Computer.
Enter or browse to the computer, and click Next.
Click Finish.
Note: To ensure that the correct WMI name is specified, it is recommended that you use the
Add a new folder from computer option to remotely contact an existing machine and retrieve the relevant information.
OS Folder: The OS folder matches the operating system that is deployed to the computer during installation. By adding an OS Folder under the Model Folder, you can organize your drivers by the operating system. This will
allow you to easily manage the drivers in the future. Select the operating system from the drop-down menu, and click OK.
Custom Folder: The Custom folder allows you to set up a folder structure outside of the Make/Model structure. Custom folders only have names meaning that they are matched by all client installations. You can still add Make,
Model, or OS Folder as children of a Custom Folder to prevent matching against all clients. In the text field, enter a name for the folder, and click OK.
Ensure that the Folder is enabled box is checked, and click
OK.
Import drivers
Once you have setup a folder structure that matches your computer, you will need to import the drivers to the target folder.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Drivers.
Right-click the folder where you wish to add your drivers and select
Import Drivers….
Enter or browse to the file path where the drivers can be found.
Click Execute.
Policies
Specops Deploy/OS uses Group Policy to assign the appropriate OS images and other OS settings.
You can use the Policies tab to:
Start Group Policy Management Console
You can use the Default policy pane to:
Edit default policy
You can use the Group Policies pane to:
Edit Group Policy
You can use the Naming Policy Pattern pane to:
Edit Naming Policy
Start Group Policy Management Console
The Group Policy Management Console allows you to access policies in the domain.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Policies.
Right click in the tree view and select
Start Group Policy Management Console.
Default Policy
The default policy is intended as a fallback policy for computers that are not affected by any Group Policy Objects with
Specops Deploy/OS settings. The default policy should be configured with general settings. If all computers are assigned Group Policies with
Specops Deploy/OS settings, you do not need to configure a default policy.
You can use the Default Policy tab to view and edit the default policy.
Group Policies
Policies can be configured from the Group Policy Management Console. To start editing
Specops Deploy/OS settings, you must edit an existing Group Policy Object, or create a new Group Policy Object and link it to the appropriate node in Active Directory.
The settings in a Group Policy Object are tied to a specific Deployment Group. If you change the Deployment Group affinity, all Deployment Group settings will be removed from the Group Policy Object.
You can use the Group Policies tab to view Group Policies in the domain.
Naming Policy
When new computer accounts are pre-staged through the Specops Deploy / OS admin tool, the naming policy is used to create naming standard for accounts.
The following variables can be used:
Variable
Name
Description
%[0][n]#
Incremental number
%# Indicates the next available incremental number
>
[0] adds zero padding
[n] number of digits
%[m]OUn
Retrieve characters from OU structure
%OU retrieves the name of OU, n number counted from the domain root
[m] the number of characters to use from the selected OU.
NOTE
If [m] is not specified the full name of the OU will be used.
For example, the pattern for SPECOPS001, SPECOPS002, etc. is
Specops%03#.
Deployments
Specops Deploy/OS admin tool allows you to monitor and manage your OS deployments.
To automate the deployment process for bare metal installations, the system needs to identify the computer hardware in order to select the correct computer name, operating system image, and retrieve the other configuration settings from Group Policy.
Bare metal installations are performed by PXE booting the computer hardware to the Deployment Servers where they can retrieve the WinPE boot image which will run the installation.
You can use the Deployments tab to perform the following tasks:
Pre-stage Computer
Pre-stage computers from file
Reinstall Computer
Export List of Deployments
You can perform the following tasks from the Live View/Grid View pane:
Monitor the status of OS deployments
Filter the deployment information
Pre-stage Computer
To allow the Deployment Server to identify the computer, you must pre-stage a computer account object in your Active Directory with a hardware ID that matches the network card MAC-address or the GUID of the computer.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Deployments and click
Pre-stage Computer.
In the text field, enter the Computer GUID or MAC-address, and click
Next.
Select where the new computer object should be created in your Active Directory.
Enter a name and WindowsPE information.
Enter a name for the computer. You can use the Generate Name button to generate a name according to your configured Naming Policy.
Here you can choose the WindowsPE version, either
x86 WinPE (BIOS) or x64 WinPE (UEFI).
Click Execute.
NOTE
The new computer account will be created and configured to start the deployment process as soon as the computer PXE boots.
Pre-stage computers from file
When working with multiple computers, you can pre-stage all account by compiling the hardware IDs in a CSV file.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Deployments and click
Pre-stage computers from file.
Browse to your file.
If your file contains the computer name, the
Data file contains computer names box should be checked.
If you want to use the naming scheme, the
Use naming scheme box should be checked.
Click Next.
Select where the new computer object should be created in your Active Directory.
Click Execute.
Reinstall Computer
You can use the
Specops Deploy/OS admin tool to reinstall a computer, or all computers in an organizational unit, and preserve local user data.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Deployments, and click
Reinstall Computer.
Enter or browse to the computer, or computers in an organizational unit, that you want to reinstall.
Click Next.
Select a reinstall option:
NOTE
From version 7.0.19283.1 of
Specops Deploy/OS, the
Default and Default discard user data options also work as in-place upgrades, i.e. upgrades from one version of Windows 10 to another. For example Windows 10 1803 to Windows 10 1903.
Default: This option starts the reinstallation from Windows and instructs the system to preserve user data through USMT. You will need to create a USMT3 folder in DeploymentShare\Tools\X86 and unpack the CAB file into this folder.
Option
Create a folder called USMT3 in Deplyoment Repository\tools\x86
NOTE
There is already a directory called USMT5. Verify that you have created a new directory called USMT3.
Locate the file USMT30_x86.cab. It is located in the \Deployment Repository\tools\x86 directory.
Extract the USMT30_x86.cab in the USMT3 folder you created in step 1 (above).
Publish the deployment repository from the
Specops Deploy/OS admin tool.
NOTE
Make sure that all target computers have the
Specops Deploy Client Side Extension (CSE) installed. For in-place upgrades, the CSE must be at version 7 or later.
Default discard user data: This option starts the reinstallation on the next Group Policy refresh but does not preserve any user data.
NOTE
Make sure that all target computers have the
Specops Deploy Client Side Extension (CSE) installed. For in-place upgrades, the CSE must be at version 7 or later.
Reboot and reformat: This option performs a full PXE-based installation of the OS, including formatting the hard drive. All data on the drive will be lost if this option is selected.
Select a restart option and WindowsPE version: Attempt GpUpdate: This option will start the reinstallation immediately. Otherwise it will be performed on the next Group Policy refresh. Attempt Restart: This
option will restart the computer if it is powered on. This option enables the use of the following end user notification settings:
Close user’s applications
Display message with countdown
WindowsPE version (only available when choosing the
Reboot and reformat option): Here you can choose the WindowsPE version, either x86 WinPE (BIOS) or x64 WinPE (UEFI).
Click Next.
Click Execute.
Export List of Deployments
You can use the
Specops Deploy/OS admin tool to export deployment details to a CSV file.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand Deployments and click
Export List of Deployments.
Enter a file name, and click Save.
Monitor the status of OS Deployments
From the Deployments tab you can monitor, in real-time, the status of OS Deployments. The Live View pane displays icons that represent the status of OS deployments. Pending installations are displayed as greyed out icons. The Grid View presents the same content in a tabular format.
You can perform the following tasks by right clicking on a computer icon in the Live View or Grid View pane:
Show Details
Open Install Log
Open Log Directory
Remove Deployment Information
Filter the deployment information
To reduce the amount of information in the Live View and Grid View, you can filter the deployment information in the following ways:
The Filter by state option allows you to filter by the state of the deployments.
The Filter by Deployment Server options allows you to filter by the Deployment Server being used.
Deployment Group Settings
An associated group of Deployment Servers is known as a Deployment Group. When the
Specops Deploy/OS admin tool is started, it searches for Deployment Groups in the current domain where the admin tool is running. This will allow you to select the Deployment Group the admin tool should operate against.
Edit Deployment Group Settings
The Group Policy settings for
Specops Deploy/OS will be tied to a specific Deployment Group.
Open the
Specops Deploy/OS admin tool.
In the navigation pane, expand
Deployment Group Settings.
You can modify the following settings:
Option
Edit the Domain Join Account
The domain join account is the active directory account that is used to add computers to the domain during Operating System deployments.
Click Edit.
Enter the username and password of the account the service will run as, and click OK.
Option
Manage the domains served by the Deployment Group
All domains where the Deployment Group should be active must be specified here.
To add a domain:
Click Add.
From the drop-down box, select a domain.
Click Browse to identify the management level where the Active Directory permissions are created.
Click OK.
To edit a domain:
Click Edit.
Click Browse to change the management level where the Active Directory permissions are created.
Click OK.
To remove a domain:
Verify that the correct domain is selected, and click
Remove.