Automate Windows 11 Deployment with Quest SDA

Automate Windows 11 deployment with Quest SDA using scripted installations, PXE boot, Windows ADK, WinPE, driver management and post-installation tasks.

Automate Windows 11 Overview

WinPE

What to do: Create or refresh a WinPE environment compatible with SDA. Build WinPE using the Windows ADK (see next section) and then import it into the SDA appliance with Media Manager.

Samba Password

  • On the appliance, open the Control Panel and set the Samba password in General Settings.
Automate Windows 11 screenshot

Driver Management

What to do: Centralize drivers by model/OS. Add them to the SDA driver library and assign them to the relevant scripted installs. Make sure storage, network, and chipset drivers are available at WinPE stage.

Automate Windows 11 Overview

What to do: Install the Windows ADK (Deployment Tools) and the WinPE Add-ons on the workstation where you run SDA Media Manager. After each major Windows release, reinstall the matching ADK/WinPE version.

SDA Media Manager Installation

Note: Reinstall Media Manager after every new SDA version or patch.

  • From the SDA web UI, download and install Media Manager on your admin workstation (where ADK/WinPE is installed).
Download Media Manager

Automate Windows 11 Overview

To handle Legacy BIOS vs UEFI automatically, use a script that detects the firmware type and calls the appropriate diskpart routine. Use this example:

Diskpart Script (GitHub) – Auto UEFI/Legacy

Two possible executables:

  • Disk_x64.exe for 64-bit ISOs
  • Disk_x86.exe for 32-bit ISOs

These small AutoIt tools detect the BIOS type using wpeutil UpdateBootInfo and read HKLMSystemCurrentControlSetControl. They then run the right diskpart file:

  • BIOS.txt
  • UEFI.txt

You can edit those text files to match your partitioning standard.

Legacy BIOS example (single C partition):

 select disk 0 clean create partition primary select partition 1 active assign exit

UEFI example (single C partition):

 select disk 0 clean convert gpt create partition efi size=100 format quick fs=fat32 label="System" assign letter="S" create partition msr size=128 create partition primary format quick fs=ntfs label="Windows" assign letter="C"
  • Adjust the two diskpart files before zipping, then create the Pre-Install task that calls the executable.
Diskpart setup in SDA

Automate Windows 11 Overview

In KACE SDA Media Manager:

  • Enter the appliance name and the Samba password.
  • In the Download Windows Media tab, specify the Windows version (10 or 11) and the path to your customized media (for example, ISO with NetFx3 added).
Upload the Windows ISO

Automate Windows 11 Overview

Note: Unlike Windows 10, on Windows 11 you must explicitly set the target DiskID and PartitionID. In the UEFI example above, Windows is on DiskID=0 / PartitionID=3.

Replace in this example:

  • Password1 ➜ the local Administrator password you want.
  • <LogonCount>1</LogonCount> ➜ number of automatic sign-ins you want.
  • leblogosd ➜ your organization name.
 &lt;?xml version="1.0" encoding="utf-8"?&gt; &lt;unattend xmlns="urn:schemas-microsoft-com:unattend"&gt; &lt;settings pass="windowsPE"&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;ImageInstall&gt; &lt;OSImage&gt; &lt;WillShowUI&gt;OnError&lt;/WillShowUI&gt; &lt;InstallTo&gt; &lt;DiskID&gt;0&lt;/DiskID&gt; &lt;PartitionID&gt;3&lt;/PartitionID&gt; &lt;/InstallTo&gt; &lt;/OSImage&gt; &lt;/ImageInstall&gt; &lt;ComplianceCheck&gt; &lt;DisplayReport&gt;OnError&lt;/DisplayReport&gt; &lt;/ComplianceCheck&gt; &lt;UserData&gt; &lt;AcceptEula&gt;true&lt;/AcceptEula&gt; &lt;ProductKey&gt; &lt;Key&gt;W269N-WFGWX-YVC9B-4J6C9-T83GX&lt;/Key&gt; &lt;/ProductKey&gt; &lt;/UserData&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;SetupUILanguage&gt; &lt;UILanguage&gt;en-US&lt;/UILanguage&gt; &lt;/SetupUILanguage&gt; &lt;InputLocale&gt;0409:00000409&lt;/InputLocale&gt; &lt;SystemLocale&gt;fr-FR&lt;/SystemLocale&gt; &lt;UILanguage&gt;fr-FR&lt;/UILanguage&gt; &lt;UserLocale&gt;fr-FR&lt;/UserLocale&gt; &lt;/component&gt; &lt;/settings&gt; &lt;settings pass="generalize"&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;DoNotCleanTaskBar&gt;true&lt;/DoNotCleanTaskBar&gt; &lt;/component&gt; &lt;/settings&gt; &lt;settings pass="specialize"&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;Identification&gt; &lt;JoinWorkgroup&gt;WORKGROUP&lt;/JoinWorkgroup&gt; &lt;/Identification&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;ComputerName&gt;*&lt;/ComputerName&gt; &lt;ProductKey&gt;W269N-WFGWX-YVC9B-4J6C9-T83GX&lt;/ProductKey&gt; &lt;RegisteredOrganization&gt;leblogosd&lt;/RegisteredOrganization&gt; &lt;RegisteredOwner&gt;leblogosd&lt;/RegisteredOwner&gt; &lt;DoNotCleanTaskBar&gt;true&lt;/DoNotCleanTaskBar&gt; &lt;TimeZone&gt;Romance Standard Time&lt;/TimeZone&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;Home_Page&gt;about:blank&lt;/Home_Page&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;RunSynchronous&gt; &lt;RunSynchronousCommand wcm:action="add"&gt; &lt;Description&gt;EnableAdmin&lt;/Description&gt; &lt;Order&gt;1&lt;/Order&gt; &lt;Path&gt;cmd /c net user Administrator /active:yes&lt;/Path&gt; &lt;/RunSynchronousCommand&gt; &lt;RunSynchronousCommand wcm:action="add"&gt; &lt;Description&gt;UnfilterAdministratorToken&lt;/Description&gt; &lt;Order&gt;2&lt;/Order&gt; &lt;Path&gt;cmd /c reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem /v FilterAdministratorToken /t REG_DWORD /d 0 /f&lt;/Path&gt; &lt;/RunSynchronousCommand&gt; &lt;RunSynchronousCommand wcm:action="add"&gt; &lt;Description&gt;disable user account page&lt;/Description&gt; &lt;Order&gt;3&lt;/Order&gt; &lt;Path&gt;reg add HKLMSoftwareMicrosoftWindowsCurrentVersionSetupOOBE /v UnattendCreatedUser /t REG_DWORD /d 1 /f&lt;/Path&gt; &lt;/RunSynchronousCommand&gt; &lt;RunSynchronousCommand wcm:action="add"&gt; &lt;Description&gt;disable async RunOnce&lt;/Description&gt; &lt;Order&gt;4&lt;/Order&gt; &lt;Path&gt;reg add HKLMSoftwareMicrosoftWindowsCurrentVersionExplorer /v AsyncRunOnce /t REG_DWORD /d 0 /f&lt;/Path&gt; &lt;/RunSynchronousCommand&gt; &lt;/RunSynchronous&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;InputLocale&gt;040C:0000040C&lt;/InputLocale&gt; &lt;SystemLocale&gt;fr-FR&lt;/SystemLocale&gt; &lt;UILanguage&gt;fr-FR&lt;/UILanguage&gt; &lt;UserLocale&gt;fr-FR&lt;/UserLocale&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-TapiSetup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;TapiConfigured&gt;0&lt;/TapiConfigured&gt; &lt;TapiUnattendLocation&gt; &lt;AreaCode&gt;""&lt;/AreaCode&gt; &lt;CountryOrRegion&gt;1&lt;/CountryOrRegion&gt; &lt;LongDistanceAccess&gt;9&lt;/LongDistanceAccess&gt; &lt;OutsideAccess&gt;9&lt;/OutsideAccess&gt; &lt;PulseOrToneDialing&gt;1&lt;/PulseOrToneDialing&gt; &lt;DisableCallWaiting&gt;""&lt;/DisableCallWaiting&gt; &lt;InternationalCarrierCode&gt;""&lt;/InternationalCarrierCode&gt; &lt;LongDistanceCarrierCode&gt;""&lt;/LongDistanceCarrierCode&gt; &lt;Name&gt;Default&lt;/Name&gt; &lt;/TapiUnattendLocation&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;DisableSR&gt;1&lt;/DisableSR&gt; &lt;/component&gt; &lt;/settings&gt; &lt;settings pass="oobeSystem"&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;UserAccounts&gt; &lt;AdministratorPassword&gt; &lt;Value&gt;Password1&lt;/Value&gt; &lt;PlainText&gt;true&lt;/PlainText&gt; &lt;/AdministratorPassword&gt; &lt;/UserAccounts&gt; &lt;AutoLogon&gt; &lt;Enabled&gt;true&lt;/Enabled&gt; &lt;Username&gt;Administrator&lt;/Username&gt; &lt;Domain&gt;.&lt;/Domain&gt; &lt;Password&gt; &lt;Value&gt;Password1&lt;/Value&gt; &lt;PlainText&gt;true&lt;/PlainText&gt; &lt;/Password&gt; &lt;LogonCount&gt;1&lt;/LogonCount&gt; &lt;/AutoLogon&gt; &lt;OOBE&gt; &lt;HideEULAPage&gt;true&lt;/HideEULAPage&gt; &lt;NetworkLocation&gt;Work&lt;/NetworkLocation&gt; &lt;ProtectYourPC&gt;1&lt;/ProtectYourPC&gt; &lt;HideLocalAccountScreen&gt;true&lt;/HideLocalAccountScreen&gt; &lt;HideOnlineAccountScreens&gt;true&lt;/HideOnlineAccountScreens&gt; &lt;HideWirelessSetupInOOBE&gt;true&lt;/HideWirelessSetupInOOBE&gt; &lt;/OOBE&gt; &lt;RegisteredOrganization&gt;leblogosd&lt;/RegisteredOrganization&gt; &lt;RegisteredOwner&gt;leblogosd&lt;/RegisteredOwner&gt; &lt;TimeZone&gt;Romance Standard Time&lt;/TimeZone&gt; &lt;/component&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;InputLocale&gt;040C:0000040C&lt;/InputLocale&gt; &lt;SystemLocale&gt;fr-FR&lt;/SystemLocale&gt; &lt;UILanguage&gt;fr-FR&lt;/UILanguage&gt; &lt;UserLocale&gt;fr-FR&lt;/UserLocale&gt; &lt;/component&gt; &lt;/settings&gt; &lt;settings pass="offlineServicing"&gt; &lt;component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"&gt; &lt;DriverPaths&gt; &lt;PathAndCredentials wcm:keyValue="1" wcm:action="add"&gt; &lt;Path&gt;Drivers&lt;/Path&gt; &lt;/PathAndCredentials&gt; &lt;/DriverPaths&gt; &lt;/component&gt; &lt;/settings&gt; &lt;/unattend&gt;

Automate Windows 11 Overview

In the Pre-Installation Tasks:

  • Add a naming rule.
Naming rule — step 1
  • Change the command line to: GetComputerName_x64.exe /dialog /log
Naming rule — step 2

Automate Windows 11 Overview

In the Mid-Level Tasks:

  • Add the naming rule that applies the previously captured name.
Apply computer name

Automate Windows 11 Overview

  • In Post-Installation Tasks, create a program to install the SMA agent.
Create SMA agent task
  • Add the MSI found at k1000clientagent_provisioningwindows_platform.
Add agent MSI
  • Change the install command to include the SMA server name and an enrollment token.
Install command with server and token

Automate Windows 11 Overview

Using Adobe Reader as an example (same approach for other apps):

Prepare the app ZIP
  • In Post-Installation Tasks, add an application.
Add a post-install application
  • Add the installation sources (your ZIP).
Attach the app sources
  • Set the install command (e.g., install.bat).
Silent install command

Automate Windows 11 Overview

Creating a New Scripted Installation

  • In Deployments, select Scripted Install.
Create a scripted install
  • Enter the installation name.
  • Specify the Windows ISO name (10/11).
Select the ISO
  • Use a custom answer file.
  • Provide the path to your unattend.xml.
Link the answer file

Adding Tasks

  • Add the Pre-Install tasks (diskpart/naming), Mid-Level tasks (SetComputerName), and Post-Install tasks (agent, apps).
Scripted tasks — 1
Scripted tasks — 2
Scripted tasks — 3
  • Save/validate.

Once the task is ready, you can deploy Windows 10/11.

Automate Windows 11 Overview

  • PXE-boot and choose Scripted Install.
PXE boot menu
  • Select your scripted installation.
Select the install
  • The installation starts.
Deployment progress