3 Beginner Questions:

[UlfMitHand]

Hi, i'm still pretty new to IT in a professional context. Thanks for your work and sorry for my probably silly questions.

I'm trying to setup PSD at my work and deploy my first win11 via PSD on a VM.

I got 3 Questions:

1. How can i change the Keyboard for the Inital Wizard and Pre-PSD in the Konfig? I'm using a german Keyboard. I Tried this in the bootstrap.ini, but it does not change the Keyboard layout for me.

[PSDRoots]
KeyboardLocalePE=0407:00000407
KeyboardLocale=de-De

[Default]
KeyboardLocalePE=0407:00000407
KeyboardLocale=de-De

2. What is the first Log-In "UserID" for? Where does it try to login to?

3. What is the second Log-In "Windows PowerShell credentials request." for?

[Audigy35]

set your credentials in Bootstrap.ini file there is example in psd repo.

[UlfMitHand]

Sadly, I can't do that since everyone got their own credentials for joining to the AD and at this moment it's not in my power to change it.

But well the first Login is a AD login. When filled out the second Login will not appear anymore.

But I'm still stuck with the keyboard layout.

[Audigy35]

in the Bootstrap.ini you set the account that assigned to deploy the images you can also assign a user that will do the domain join
but you dont have to.
if set the credentials of the user that will assigned to deployments in the Bootstrap.ini the window you showed in the screenshot
will not pop up.

[DeploymentBunny]

the login is is to the deploymentshare, if you have multiple users, they all need read permssion to the deplopymentshare via IIS, so, as long as they can access the IIS website using their own name and password, then the do the same in PSD. Login is formed as either a local account on the server, like SERVER1\User1 or if the server is joined to AD, it will be DOMAIN\User and password

[UlfMitHand]

Thanks for the help with the login. Everything makes sense now, and it looks like accessing the DeploymentShare via IIS is working correctly with our AD. I assigned read permissions to the AD group used for domain join.

I’ve been trying to change the WinPE keyboard layout for the initial login screen.

Adding this to Bootstrap.ini did not work:

[Default] KeyboardLocalePE=0407:00000407

I found this issue: #110 (comment), and based on that plus the reply below it, I appended the following to PSDUpdateExit.ps1:

#Added to set German keyboard layout in WinPE
If ($Env:STAGE -eq "WIM") {

    $MountPath = $Env:CONTENT

    # Check if the mount path exists and is valid
    if (-not [string]::IsNullOrEmpty($MountPath) -and (Test-Path -Path $MountPath)) {

        # Use DISM to set the Input Locale to German (Germany)
        # 0407:00000407 = German language : German keyboard layout
        $DismArgs = @(
            "/Image:$MountPath",
            "/Set-InputLocale:0407:00000407"
        )

        $Process = Start-Process -FilePath "dism.exe" -ArgumentList $DismArgs -Wait -PassThru -NoNewWindow

        if ($Process.ExitCode -eq 0) {
            Write-Host "Success: Keyboard layout set to German." -ForegroundColor Green
        }
        else {
            Write-Warning "Error: Failed to set keyboard layout. Exit Code: $($Process.ExitCode)"
        }
    }
    else {
        Write-Warning "PSD-Customization: Mount path not found or invalid. Skipping keyboard layout change."
    }
}

However, now I’m stuck at the login screen after the first boot into Windows 11 on my VM. Secure Boot is disabled.

I can log in using the AdminPassword from CustomSettings.ini. The system creates the MININT and _SMSTaskSequence folders, and there is a marker.PSD file on C:.
The AdminPassword is also stored in MININT\Variables.dat.

I started checking the logs, but I’m honestly not sure what I should be looking for.

I also noticed that MININT\Cache does not contain an application folder, even though I selected an application in the PSD Wizard. I’m not sure whether it’s supposed to appear there, but I can’t find anything related to the selected application inside MININT.

[Audigy35]

its becuase of incorrect defualt gateway address check your dns setting and dhcp.
default address should be for example 192.168.1.1

[UlfMitHand]

Where exactly should i check? In the new VM the GW is correct.

The server i'm setting up is just a test server, the old MDT with WDS is still productive on the same subnet. The Clients are in a seperate subnet for deployment. Sadly it's not in my power to get my my own subnets for testing.
The VM is booted by the PSDlitetouch_x64.iso from the new PSD-Server

[Audigy35]

what ip did you set for default gateway in your dhcp server?

[UlfMitHand]

It looks like DHCP is working correctly. WinPE receives the proper gateway for the subnet. The install subnet and the server’s DMZ are both in production, and I can currently deploy Windows 11 to a notebook (in the install subnet) using the old MDT server with WDS (in the DMZ) without any issues.

For testing, the VM boots using the PSDlitetouch_x64.iso from the new server. It successfully installs the Windows 11 image from the new PSD server, but it never logs in to complete the post‑install steps on the test machine. On the client I can see the MININT and _SMSTaskSequence folders, and there is also a marker.PSD file on C:.

I checked the firewall logs and noticed that the test client is trying to connect to the new server on port 500. I assumed PSD handled everything over port 443, so I’m not sure what port 500 is used for. Any insight into why PSD needs port 500 would be appreciated.

[UlfMitHand]

Found the Issue. I had the wrong ADK Version (10.1.28000.1) switchted to 10.1.26100.2454 and it works perfectly.

[lateefahutton585-code]

Sadly, I can't do that since everyone got their own credentials for joining to the AD and at this moment it's not in my power to change it.

But well the first Login is a AD login. When filled out the second Login will not appear anymore.

But I'm still stuck with the keyboard layout.
Lay the keyboard out and connect it to your Device

[UlfMitHand]

I got another Question and don't want to create a new issue jsut for Questions.

Is there a way to choose which Option, "Join a Domain" or "Join a Workgroup" is preselected based on the choosen Task Sequence?

[PowerShellCrack]

Sort of. You can specify either JoinDomain=<domain> or JoinWorkgroup=<workgroupname> in customsettings.ini. The ui should see that and select one. For domain you can also specify the other domain properties if you want them prefilled in

[UlfMitHand]

@PowerShellCrack Thanks, for you reply. But this won't help me. I got a Task Sequence with a domain join and a Task Sequence without a domain join. I was hoping to be able to pree fill or select the options based on the choosen Task Sequence. But i guess this is not possible?

Also, what is Port 500 used for during WinPE deployment. My Firewall-Logs show me that the clients tries to reach the PSD-server on Port 500 UDP, which is not enabled in our Firewall.