windows-itpro-docs/windows/deploy/provision-pcs-for-initial-deployment.md

title, description, ms.assetid, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, author, localizationpriority

title	description	ms.assetid	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	author	localizationpriority
Provision PCs with common settings (Windows 10)	Create a provisioning package to apply common settings to a PC running Windows 10.	66D14E97-E116-4218-8924-E2A326C9367E	runtime provisioning provisioning package	W10	manage	library	jdeckerMS	high

Provision PCs with common settings for initial deployment (simple provisioning)

Applies to

• Windows 10

This topic explains how to create and apply a simple provisioning package that contains common enterprise settings to a device running all desktop editions of Windows 10 except Windows 10 Home.

You can apply a provisioning package on a USB drive to off-the-shelf devices during setup, making it fast and easy to configure new devices.

Advantages

• You can configure new devices without reimaging.

• Works on both mobile and desktop devices.

• No network connectivity required.

• Simple to apply.

Learn more about the benefits and uses of provisioning packages.

What does simple provisioning do?

In a simple provisioning package, you can configure:

• Device name
• Upgraded product edition
• Wi-Fi network
• Active Directory enrollment
• Local administrator account

Provisioning packages can include management instructions and policies, installation of specific apps, customization of network connections and policies, and more. To learn about provisioning packages that include more than the settings in a simple provisioning package, see Provision PCs with apps and certificates.

Tip

Use simple provisioning to create a package with the common settings, then switch to the advanced editor to add other settings, apps, policies, etc.

Create the provisioning package

Use the Windows Imaging and Configuration Designer (ICD) tool included in the Windows Assessment and Deployment Kit (ADK) for Windows 10 to create a provisioning package. Install the ADK and select Configuration Designer.

1. Open Windows ICD (by default, %windir%\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Imaging and Configuration Designer\x86\ICD.exe).

2. Click Simple provisioning.

3. Name your project and click Finish. The screens for simple provisioning will walk you through the following steps.

4. In the Set up device step, enter a unique 15-character name for the device. For help generating a unique name, you can use %SERIAL%, which includes a hardware-specific serial number, or you can use %RAND:x%, which generates random characters of x length.

5. (Optional) You can upgrade the following editions of Windows 10 by providing a product key for the edition to upgrade to.

   • Pro to Education
   • Pro to Enterprise
   • Enterprise to Education

6. Click Set up network.

7. Toggle On or Off for wireless network connectivity. If you select On, enter the SSID, type, and (if required) password for the wireless network.

8. Click Enroll into Active Directory.

9. Toggle Yes or No for Active Directory enrollment. If you select Yes, enter the credentials for an account with permissions to enroll the device. (Optional) Enter a user name and password to create a local administrator account.

   Warning

   : If you don't create a local administrator account and the device fails to enroll in Active Directory for any reason, you will have to reimage the device and start over. As a best practice, we recommend:

   • Use a least-privileged domain account to join the device to the domain.
   • Create a temporary administrator account to use for debugging or reprovisioning if the device fails to enroll successfully.
   • Use Group Policy to delete the temporary administrator account after the device is enrolled in Active Directory.

10. Click Finish.

11. Review your settings in the summary. You can return to previous pages to change your selections. Then, under Protect your package, toggle Yes or No to encrypt the provisioning package. If you select Yes, enter a password. This password must be entered to apply the encrypted provisioning package.

12. Click Create.

Important

When you build a provisioning package, you may include sensitive information in the project files and in the provisioning package (.ppkg) file. Although you have the option to encrypt the .ppkg file, project files are not encrypted. You should store the project files in a secure location and delete the project files when they are no longer needed.

Apply package

1. Start with a computer on the first-run setup screen. If the PC has gone past this screen, reset the PC to start over. To reset the PC, go to Settings > Update & security > Recovery > Reset this PC.

   

2. Insert the USB drive. Windows Setup will recognize the drive and ask if you want to set up the device. Select Set up.

   

3. The next screen asks you to select a provisioning source. Select Removable Media and tap Next.

   

4. Select the provisioning package (*.ppkg) that you want to apply, and tap Next.

   

5. Select Yes, add it.

   

Learn more

• Build and apply a provisioning package

• Watch the video: Provisioning Windows 10 Devices with New Tools

• Watch the video: Windows 10 for Mobile Devices: Provisioning Is Not Imaging