Tuesday, October 1, 2013

Step: 1.12: Deploy Corporate branding


Corporate branding is an important part in any SOE or Image. The corporate branding is different from organization to organization. SOE corporate branding includes not only the look and feel of the operating system but also includes the system components re-configuration.

Create a new group called Corporate Branding on same level as Custom hardware Configuration.
Corporate Branding will be executed if following conditions are met;
Add MDT Use Toolkit Package step then point to your MDT package


Normally, I add all the configurations to a batch file or PowerShell script, then add that script to MDT custom scripts then run from command line in the task sequence.
I have created a MasterScript.cmd then add all the command line based customisation to this script.
Sample MasterScript.cmd looks as below; we can expand it as needed.

MasterScript.cmd
*******************************************************************
@echo off
REM Sample Script to add customization with SCCM Task sequence
REM This script explains what all you can add
REM

SET _thisdir=%~dp0

REM Set up the logon background screen (Add your corporate image)

REM Set up Default User Picture (This will be displayed on the start menu and on the logon screen after the first logon)

REM Set Custom Wallpaper for Windows 7:

REM Add OEM information
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Logo" /t REG_MULTI_SZ /d "C:\Windows\System32\OEMLogo.bmp" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportURL" /t REG_MULTI_SZ /d "http://yourcompany.com" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportPhone" /t REG_MULTI_SZ /d "Add your company phone number" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportHours" /t REG_MULTI_SZ /d "working hours" /f
echo.

REM Disable action centre

REM Take ownership of original default Wallpaper file:

TAKEOWN /F %SystemRoot%\System32\ActionCenter.dll
TAKEOWN /F %SystemRoot%\System32\ActionCenterCPL.dll

REM Replace ACLS for original default  file with default inherited ACLS:
ICACLS %SystemRoot%\System32\ActionCenter.dll /reset
ICACLS %SystemRoot%\System32\ActionCenterCPL.dll /reset

REM Rename original  file so it will still be present and usable:
RENAME %SystemRoot%\System32\ActionCenter.dll ActionCenter.dll.bak
RENAME %SystemRoot%\System32\ActionCenterCPL.dll ActionCenterCPL.dll.bak
echo.
echo.
echo.
REM Add local support account
net user /add Accountname password
net localgroup administrators Accountname /add
net user Accountname /expires:never
net user Administrator /Active:no
WMIC USERACCOUNT WHERE "Name='Accountname'" SET PasswordExpires=FALSE
echo.
echo.
echo.
REM Add local guest account to use for support purpose
net user /add Username password
net localgroup Users Username /add
net user Username /expires:never
WMIC USERACCOUNT WHERE "Name='Username'" SET PasswordExpires=FALSE

REM Disable the built-in Administrator account
net user Administrator /Active:no

REM  Applying Applications fixes if required
echo.
echo.
echo.
REM Disabling services which you don't need them. This depends on your organisation requirements
REM below is an example;

echo Disabling Parental Controls Service
sc config WPCSvc start= disabled

REM following steps deletes any folders created during the driver set up or any other ways;
:: Delete Intel Folder

IF EXIST "C:\Intel" (
RMDIR C:\Intel /S /Q
 )

:: Delete PerfLogs folder
IF EXIST "C:\PerfLogs" (
RMDIR C:\PerfLogs /S /Q
 )

REM Cleanup the OEM Folders
IF EXIST "C:\OEMMedia" (
RMDIR C:\OEMMedia /S /Q
 )

IF EXIST "C:\SMS" (
RMDIR C:\SMS /S /Q
 )

IF EXIST "C:\EFI" (
RMDIR C:\EFI /S /Q
 )

IF EXIST "C:\Sources" (
RMDIR C:\Sources /S /Q
 )

IF EXIST "C:\AUTORUN.INF" (
DEL C:\AUTORUN.INF /S /Q
 )

IF EXIST "C:\bootmgr.efi" (
DEL C:\bootmgr.efi /S /Q
 )

IF EXIST "C:\Migration" (
RMDIR C:\Migration /S /Q
 )

IF EXIST "C:\Office2010" (
RMDIR C:\Office2010 /S /Q
 )

IF EXIST "C:\ScrubRetValfile.txt" (
DEL C:\ScrubRetValfile.txt /S /Q
 )

IF EXIST "C:\USMTSource" (
RMDIR C:\USMTSource /S /Q
 )

REM Creat Build flag
MD C:\Windows\System32\Build

echo adding Build info...
reg add "HKLM\software\SOEBuild" /v "Machine built on" /d "%DATE%" /t REG_EXPAND_SZ /f
reg add "HKLM\software\SOEBuild" /v "Machine built at" /d "%TIME%" /t REG_EXPAND_SZ /f
reg add "HKLM\SOFTWARE\SOEBuild" /v "Name" /t REG_MULTI_SZ /d "Your Name" /f
reg add "HKLM\SOFTWARE\SOEBuild" /v "BuildVersion" /t REG_MULTI_SZ /d "Add build version" /f

exit

*******************************************************************
Add Run Command Line step then add
cmd /c  "%DEPLOYROOT%\scripts\customscripts\Win7\DeployV2\MasterScript.cmd"  in command line.
Select Disable 64-bit file system redirection.


If required we can apply more customization in this group.

Click here for complete list of tasks for SCCM OSD All in one task sequence.
Click here for SCCM OSD All in one task sequence Visio diagram.

1 comment:

  1. Excellent piece of information. I am using your code as it is for my OS deployment.
    Do you have information for other (if any) customisation please.?

    ReplyDelete