Unattended answer file creator
The unattended answer file creator lets you create unattended answer files compatible with Windows 10 and 11 in 2 ways: an easy-to-use wizard, or a text editor
This tool is available in DISMTools 0.5.1 and later
Creator modes
The creator contains 2 modes: an Express mode and an Editor mode. You can easily switch to either mode by clicking the buttons at the left corners of the window.
Express mode
The express mode is useful for those who have never created answer files before or don't want to use text editors. Simply follow the steps of the wizard, and you will have your file in no time.
If you have a project loaded, DISMTools will let you save your unattended answer files to the unattended answer file folder of your project without you having to change directories. You can obviously save these files anywhere.
If you would like to learn more about the steps in this wizard, keep reading.
Wizard Steps
In the Regional Configuration page, you can set the language, system locale, keyboard layout and home location of the target system. Set these to values that suit your needs. Or, you can set them during the configuration of the applied operating system:
In the System Configuration page, you can set the computer name (either manually, by letting Windows set one for you, or by using a script), the architectures that you wish to target with your answer file, and other settings:
Additional options include:
- Using a configuration set or distribution share: a configuration set can be used to preload applications and drivers into the target image. You can create these sets with the Windows System Image Manager. Make sure that there is a configuration set on the ISO file to which you are copying the answer file
- Windows 11 settings: these help you bypass the system requirements and network connection setup. Configure the latter if the target system does not have network capabilities. If you are looking to bypass this to be able to create local accounts, you can create the user accounts from this wizard as well
In the Time Zone page, you can set the time zone of the target system:
In the Disk Configuration page, you can set the disk configuration of the target system. You can let Setup give you the control over the disk configuration, or you can partition the first disk. You can also automate the entire disk configuration process by specifying DiskPart scripts:
In the Product Key page, you can set the product key of the target system. You can choose from a generic product key tailored to the image edition, or you can type a custom product key:
Notes:
- If you want to use a generic product key, choose the one tailored to your edition. Generic product keys are only meant for operating system installation, and will not activate the system
- If you want to use a custom product key, make sure that it is valid and that it is for the edition of the image. DISMTools will only check if the syntax of the product key is correct, but will not check if the product key is valid for installation or activation
In the User Accounts page, you can create the local user accounts of the target system. You can create up to 5 accounts, and you can set the password of each account:
From here, you can also enable auto-logon settings for the target system. But, if you don't want to use local accounts, or want the operating system to ask you, you can skip this step.
You can also configure password expiration settings for the target system, but it is not recommended to do so, according to the National Institute of Standards and Technology (NIST):
Finally, you can configure Account Lockout policies for the target system, or disable them. The latter is not recommended, as it can make the system more vulnerable to brute-force attacks:
Notes:
- At least one account must be part of the Administrators group
In the Virtual Machine Support page, you can specify whether or not you want to install the integration features of your virtual machine provider (eg. VirtualBox Guest Additions or VMware Tools):
In the Network Configuration page, you can specify whether the target system will connect to a wireless network:
Notes:
- The authentication technology must be supported by both the wireless router and the network adapter of the target system. Make sure that the system contains a wireless adapter first
- If you don't want to set up a wireless network connection, or if the target system does not contain a wireless adapter, choose Skip configuration
In the System Telemetry page, you can specify whether or not you want to send information to Microsoft and third-parties:
Notes:
- Choosing Disable telemetry will not disable all sources of data collection. You will have to perform additional modifications to your Windows image in order to further reduce data collection
In the Post-Installation Scripts page, you can configure additional scripts in PowerShell that will be run during Windows installation, or when accounts log on for the first time:
You can work on post-installation scripts in the following ways:
- By writing them from scratch
- By importing existing scripts. You can import Batch, PowerShell, VBScript and JScript files. DISMTools will automatically detect the script language based on the file extension
- By using a starter script from anywhere in your file system or from the Starter Script Browser. Refer to the Starter Script Reference section for more information about available starter scripts and how to create your own
You can add multiple post-installation scripts for each stage by using the plus and minus buttons. Navigate between scripts by using the respective buttons.
Additionally, you can reorder the scripts. To do this, click the following button:
Then, select a script and use the controls to move the script to the desired position. Finally, click OK:
In the Component Settings page, you can specify additional components and settings to be added to your answer file. Use the buttons on the top of this page to add, remove, and navigate between components.
After you add a new entry, you have to specify both the component you want to customize, and its pass. Then, add the XML data that corresponds to the settings you want to configure for that component. Use the link at the bottom of this page to look up a component online.
Notes:
- If you don't want to configure components, simply skip this step
Finally, before creating the answer file, you can review the settings that you have configured in the wizard. If you want to change any settings, you can go back to the respective pages:
After creating the answer file, you can create another one, open the file location, apply it, or edit it with the Editor mode or the Windows System Image Manager.
Editor mode
The editor mode lets you perform advanced customizations to your unattended answer file to add more things, like additional components or rules. You can operate the editor mode using the buttons in the toolbar.
DISMTools 0.6.1 adds the ability to normalize the spacing of the answer file to make it consistent:
Requirements
The unattended answer file creator requires the .NET 10 Runtime for the generator program to function. If DISMTools detects that the runtime hasn't been installed, you will be offered the ability to use the self-contained version, which contains the runtime:
If you decide to use this version, DISMTools will save this preference until the self-contained version is removed, either manually, or due to a program update.
Downloading this version will take some time, depending on your network connection speed and computer performance. After the download is complete, you will see a notification in your system tray, depending on what icons are allowed to appear in the tray:
Finally, like with the Windows Image Explorer, you can use the generator program separately. You can check out its repository here
Active Directory Domain Services domain join
If the unattended answer file and, by extension, the Windows image, will be targeted to a fleet of computers in a domain; you can configure domain join settings using the Domain Services Wizard.
DOMAIN JOIN SETTINGS ARE NOT AVAILABLE ON HOME VERSIONS OF WINDOWS.
You can access the Domain Services Wizard by clicking the Join target device to domain... button that will appear in the following pages:
- System Configuration
- User Accounts
- Component Settings
You will first need to configure target DNS server information: the primary domain suffix, the name of the NIC (Interface Alias), and DNS server addresses.
You can specify the interface alias in one of 2 ways:
- By picking from available NICs in the current system. To choose this, it is recommended that you verify if you are running DISMTools in one of the devices in the domain, unless your current device also has a NIC with the same name as the target devices
- By typing the name of the NIC manually
When you pick the NIC from the list, every other field (PDS, DNS server addresses) will be filled in automatically given the current configuration of the NIC. However, you can still change these fields if you need to use different values.
For DNS server addresses, you need to put one address per line. If you want to check if the syntax of the addresses is correct, click Verify DNS Address Syntax.
You can also perform additional tasks with primary domain suffixes:
- To check if the target devices can reach the domain controller using the provided domain suffix by clicking Test DNS resolution. If you see the IP address of the server, then the target devices should be able to reach the domain controller. Try this on a domain-joined machine so you can verify if its current network adapter settings can be used for other devices:
- To use a domain suffix from a list of DNS zones, click Choose DNS zone... and pick the domain suffix from the list. This option is only available on domain controllers:
One example of filled-in information is shown below:
After configuring DNS server information, you will need to configure information related to the initial user with which the target device will join the domain.
You can pick a user in one of 3 ways:
- By specifying its Security Account Manager (SAM) account name manually, such as
johndoe. This is the only option if the device is either not part of a domain or isn't the domain controller
- By specifying a user from any organizational unit (OU) in the domain using the OU and user drop-down lists
- By specifying a user object from anywhere in the domain using the account object picker. After selecting the object, its SAM account name will be used. Use this method if the account is not in any organizational unit, but is part of a standard container
Finally, specify the password of the user. Since DISMTools will NOT check if the password is correct, make sure that you type it correctly.
You've finished the Domain Services Wizard. When you get to the components screen, you will see that the necessary components and settings have been added to your answer file.
Starter Script Reference
Currently, there are 35 starter scripts available:
| Script Name | Stage |
|---|---|
| Change PowerShell Execution Policy | During System Configuration |
| Close First Logon Animation | During System Configuration |
| Configure current power plan timeout values | During System Configuration |
| Configure Windows Server processor scheduling | During System Configuration |
| Control Remote Desktop parameters | During System Configuration |
| Prevent Automatic BitLocker Drive Encryption | During System Configuration |
| Disable Fast Startup | During System Configuration |
| Disable Shutdown Event Tracker | During System Configuration |
| Disable warnings for unsigned RDP files | During System Configuration |
| Disable Windows Admin Center and Azure Arc banners | During System Configuration |
| Disable Windows Platform Binary Table (WPBT) | During System Configuration |
| Display Bugcheck Parameters | During System Configuration |
| Empty Start Menu Pins for Windows 11 | During System Configuration |
| Enable Batch script file locks | During System Configuration |
| Enable Verbose Status Messages | During System Configuration |
| Prevent Installation of Expedited Device Applications | During System Configuration |
| Remove File System MAX_PATH length limit | During System Configuration |
| Set a custom lock screen background | During System Configuration |
| Set OEM Information | During System Configuration |
| Set Quick Machine Recovery Settings | During System Configuration |
| Configure folders for Git integration | When the first user logs on |
| Configure Start menu appearance | When the first user logs on |
| Invoke WinUtil Configuration | When the first user logs on |
| Refresh Windows Explorer | When the first user logs on |
| Set Personalization Settings | When the first user logs on |
| Set Registered Owner and Organization | When the first user logs on |
| Show and Hide System Desktop Icons | When the first user logs on |
| Set up a custom wallpaper | When the first user logs on |
| Update Microsoft Store apps | When the first user logs on |
| Disable Drag Tray | When users log on for the first time |
| Disable Second Chance OOBE | When users log on for the first time |
| Disable Windows Notification Sources | When users log on for the first time |
| Restore context menu for Windows 11 systems | When users log on for the first time |
| Set File Explorer launch folder | When users log on for the first time |
| Show File Extensions | When users log on for the first time |
In DISMTools 0.7.2, you can view more information about these starter scripts more easily by using the new Starter Script Browser:
You can also create your own starter scripts by using the Starter Script Editor.
Some scripts allow you to configure settings after you import them:
Change PowerShell Execution Policy
Script language: Batch
Configure the execution policy of PowerShell by setting the _PWSHExecutionPolicy variable to one of the following values:
UnrestrictedRemoteSignedRestrictedAllSignedBypassUndefined
Close First Logon Animation
Script language: Batch
No settings available.
Configure current power plan timeout values
Script language: Batch
Options exist for when the computer is running on battery power and when plugged in. The following table groups them in one option ending in (Ac|Dc), depending on the context:
| Option | Description |
|---|---|
_MonitorTimeout(Ac|Dc) |
Sets the number of seconds before the monitor turns off |
_DiskTimeout(Ac|Dc) |
Sets the number of seconds before storage devices stop |
_StandbyTimeout(Ac|Dc) |
Sets the number of seconds before the device enters sleep mode |
_HibernateTimeout(Ac|Dc) |
Sets the number of seconds before the device enters hibernation |
Disable Shutdown Event Tracker
Script language: Batch
No settings available.
Disable warnings for unsigned RDP files
Script language: Batch
No settings available.
Disable Windows Admin Center and Azure Arc banners
Script language: Batch
No settings available.
Display Bugcheck Parameters
Script language: Batch
No settings available.
Enable Batch script file locks
Script language: Batch
No settings available.
Enable Verbose Status Messages
Script language: Batch
No settings available.
Remove File System MAX_PATH length limit
Script language: Batch
No settings available.
Set OEM Information
Script language: Batch
| Option | Required? | Description |
|---|---|---|
OEM_Manufacturer |
Yes | The manufacturer of the system |
OEM_Model |
No | The model of the system |
OEM_SupportURL |
No | The support URL of the system |
OEM_SupportPhone |
No | The support phone number of the system |
OEM_SupportHours |
No | The support hours of the system |
OEM_Logo |
No | The path to the OEM logo of the system. Must be a BMP file |
Set Quick Machine Recovery Settings
Script language: Batch
| Option | Required? | Description |
|---|---|---|
QMR_CloudRemediation |
Yes | Enables (1) or disables (0) cloud remediation for QMR |
QMR_AutoRemediation |
Yes | Enables (1) or disables (0) automatic remediation for QMR |
QMR_NextCheckMinutes |
Yes | Sets the number of minutes before the next QMR check |
QMR_NextRebootHours |
Yes | Sets the number of hours before the next reboot |
QMR_Headless |
Yes | Enables (1) or disables (0) headless mode for QMR |
Notes:
- Options 3 and 4 will only be applied if automatic remediation is enabled
- Cloud Remediation allows the system to scan for solutions on WinRE launch
- Auto Remediation allows the system to continue scanning for solutions if the first attempt fails
Configure folders for Git integration
Script language: PowerShell
To add new entries to the list of folders for which to show VCS information, add them to the following array, like this:
Do note that, in order for the Git view to show, the system needs the Windows Advanced Settings application.
Configure Start menu appearance
Script language: Batch
Configure the _StartMenuView variable with one of the following values to set the Start menu layout:
| Value | Start menu layout |
|---|---|
0 |
Category View |
1 |
Grid View |
2 |
List View |
Invoke WinUtil Configuration
Script language: PowerShell
You need to add your configuration file to the root of the image's mount directory, as winutil-config.json. You can learn more about configuration files here.
Refresh Windows Explorer
Script language: PowerShell
No settings available. Use this script immediately after a script performs changes to the user environment, so the workspace is refreshed without restarting Explorer. However, you may still need to do this if the script does not achieve what you want.
Set Personalization Settings
Script language: PowerShell
| Option | Description |
|---|---|
$lightThemeSystem |
If 0, sets the system theme to dark mode. If 1, sets it to light mode |
$lightThemeApps |
If 0, sets the app theme to dark mode. If 1, sets it to light mode |
$accentColorOnStart |
If 0, disables accent color on Start, taskbar and action center. If 1, enables it |
$enableTransparency |
If 0, disables transparency effects (Acrylic/Mica). If 1, enables it |
$htmlAccentColor |
Sets the accent color of the system. Must be a hex value |
Set Registered Owner and Organization
Script language: Batch
| Option | Required? | Description |
|---|---|---|
AutoUserInfo |
Yes | Determines whether to set registered owner as the name of the currently signed user (0 or 1) |
RegisteredUser |
Yes | The registered owner of the system |
RegisteredOrg |
No | The registered organization of the system |
Notes:
- If
AutoUserInfois set to 1 and a Microsoft account is used, the registered owner will be set to the first 5 letters of the email address - This script should not be used when users log on for the first time because user information will change every time a new user logs on for the first time if the following conditions are met:
AutoUserInfois set to 1- More than one user account is created, either from the answer file or after OOBE
Set up a custom wallpaper
Script language: PowerShell
Place the wallpaper in any path inside the Windows image. Then, replace <path to your wallpaper here> with the actual path to your wallpaper starting from the mount directory of the Windows image. For example:
| Path in mount directory | Actual Path |
|---|---|
C:\mount\wallpaper.jpg |
$env:SYSTEMDRIVE\wallpaper.jpg |
C:\mount\Pictures\wallpaper.png |
$env:SYSTEMDRIVE\Pictures\wallpaper.png |
If the image file does not exist in the target image and continue with the script, you will see a black desktop background.
Show and Hide System Desktop Icons
Script language: Batch
Set one or more of the following variables to 0 or 1 depending on whether you want to show or hide the respective system desktop icons:
| Variable | Desktop icon |
|---|---|
_ComputerIconHidden |
This PC |
_ControlPanelIconHidden |
Control Panel |
_UserFilesIconHidden |
User's Files |
_RecycleBinIconHidden |
Recycle Bin |
_NetworkNeighborhoodIconHidden |
Network |
Set the variable to 0 to show the respective icon, or set it to 1 to hide it. To see the changes, you will need to either refresh the desktop workspace using the respective starter script, or restart Explorer.
Update Microsoft Store apps
Script language: Batch
No settings available.
Disable Drag Tray
Script language: Batch
No settings available.
Disable Second Chance OOBE
Script language: Batch
No settings available.
Disable Windows Notification Sources
Script language: Batch
By default, the script will disable the following notification sources:
- Suggested
- Startup App Notification
- OneDrive
- Microsoft Account Health
- Copilot (AppX package)
These entries will be added to list of notification sources, in Settings -> System -> Notifications. To add more entries to the list, do the following:
FOR %%a IN (Windows.SystemToast.Suggested ... Windows.SystemToast.AccountHealth <your source here>) DO (
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\%%a" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\%%a" /v Enabled /t REG_DWORD /d 0 /f
)
Notes for your source:
- If your source contains spaces, surround it with quotes
Restore context menu for Windows 11 systems
Script language: Batch
No settings available.
Set File Explorer launch folder
Script language: Batch
Set the _LaunchTo variable to one of the following values to set the File Explorer launch folder:
| Value | Launch folder |
|---|---|
0 |
Quick Access (Windows 10) -- Home (Windows 11) |
1 |
This PC |
Show File Extensions
Script language: Batch
No settings available.
Configure Windows Server processor scheduling
Script language: Batch
Set _ApplicationPriority to 0 to prioritize foreground applications, or 1 to prioritize background services.
Control Remote Desktop parameters
Script language: Batch
| Option | Description |
|---|---|
_RdpEnabled |
Enables (1) or disables (0) Remote Desktop |
_RDS_NLA |
Enables (1) or disables (0) Network Level Authentication for Remote Desktop |
Prevent Automatic BitLocker Drive Encryption
Script language: Batch
No settings available.
Disable Fast Startup
Script language: Batch
No settings available.
Disable Windows Platform Binary Table (WPBT)
Script language: Batch
No settings available.
Empty Start Menu Pins for Windows 11
Script language: Batch
No settings available.
Prevent Installation of Expedited Device Applications
Script language: Batch
No settings available.
Set a custom lock screen background
Script language: Batch
Set _LockScreenBackground to the path of the JPG file to use as the lock screen background. PNG files are not supported.
Acknowledgements
Special thanks to Christoph Schneegans for creating the library that makes this creator possible.