ventoy / PXE

The open source part of iVentoy.
491 stars 30 forks source link

Support for Autopilot Intune? #14

Open MiranoVerhoef opened 1 year ago

MiranoVerhoef commented 1 year ago

Hello,

I saw this and thought i'd be the perfect solution if this would be implemented. Autopilot uses a Json file on a formatted USB stick with 2 partitions to install Windows using intune.

Would it be possible to get support that you have a "intune" folder in the iVentoy structure with a intune install .img file?

deshanejd commented 11 months ago

I second this. I use a lot of ISOs and IMGs for work, and having Autopilot on my Ventoy stick would be great.

necrose99 commented 1 month ago

Ntlite you can rebuild the iso to have as a post setup script ...
ninja RMM etc chocolaty winget etc.. any other powershell / post install scripts ... https://learn.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package

https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll

jumpcloud.com provisioning--package ,

can add them into iso as post installation , office 365 google Chome etc , for even offline installs so they will sync up once online ... for offline usb works well , once online they'll join etc.

point is one can tweak you install iso to even include oem drivers or installers etc esp if wifi or other drivers are less common...

Air gapped usb installers also useful with ntlite ... but easily slipping Our-Corp..ppkg Our-Corp.vpn..ppkg Our-intune..ppkg our-Corp.RMM-deploy.ps1..ppkg into iso as ppkg wrapped scrips should be easy enough

[windows also adds PKI sigs to ppkg windows treats as exe... so powershell unsigned gets signed ]

MiranoVerhoef commented 1 month ago

ntlite you can rebuild the iso to have as a post setup script ...

Hey. I have a paid version of NTLite. Do you perhaps have a place to show me how you've done that?

MiranoVerhoef commented 1 month ago

Ntlite you can rebuild the iso to have as a post setup script ... ninja RMM etc chocolaty winget etc.. any other powershell / post install scripts ... https://learn.microsoft.com/en-us/windows/configuration/provisioning-packages/provisioning-create-package

https://learn.microsoft.com/en-us/mem/intune/enrollment/windows-bulk-enroll

jumpcloud.com provisioning--package ,

can add them into iso as post installation , office 365 google Chome etc , for even offline installs so they will sync up once online ... for offline usb works well , once online they'll join etc.

point is one can tweak you install iso to even include oem drivers or installers etc esp if wifi or other drivers are less common...

Air gapped usb installers also useful with ntlite ... but easily slipping Our-Corp..ppkg Our-Corp.vpn..ppkg Our-intune..ppkg our-Corp.RMM-deploy.ps1..ppkg into iso as ppkg wrapped scrips should be easy enough

[windows also adds PKI sigs to ppkg windows treats as exe... so powershell unsigned gets signed ]

Ha thank you!

Im in quite a special occasion, being a MSP having to deploy to multiple companies a day, so i'd keep having to remake a iso or have a special usb per customer. Thinking of ways to automate this.

necrose99 commented 1 month ago

@MiranoVerhoef i have updated above with links ..

for usb this is less a big deal , anyway you can map a drive ie net drive ... z:\mymsp\myclients\ run you ppkgs post install ... slightly manual

anyway you can pkg wifi to ppkg are treated as exe so it;s mounted pick you intune-ppkg and done...

boxstarter gist https://boxstarter.org/weblauncher (vm/devops means ) (cocolatey.org) as secops FlareVM is useful

https://www.elevenforum.com/t/automated-windows-11-installation-with-post-installation-script.28219/

anyway you can pkg wifi to ppkg for Windows Config designer

For Custom iso's SSD/NVME l64 to 256 gigs Low touch powershell scripts etc are fast to add ... or ppkg files as exe they are cryptographically signed ... your basically slipping the unattended xml and your scripts... so mere Kilobytes to images.. so per iso once made its fine...

since were a 100+/- ppl *anking local not big but , once upon a time making for my former msp client gold disks was a thing...

ninjarmm or most rmm can push by policies everything intune sux at... ie "something" Henry for swift n *"anking" /fintek related

as well jumpcloud.com msp vs my SMB instance you can push scripts ... ie intune etc via MDM after the fact... or ninja etc... or etc etc..

# Define variables for your Wi-Fi network
$SSID = "YourNetworkName"
$Key = "YourNetworkPassword"

# Create the Wi-Fi profile
netsh wlan add profile interface=Wi-Fi ssid="$SSID" keyMaterial="$Key"

# Connect to the Wi-Fi network
netsh wlan connect name="$SSID"