Menu
Modern Workplace Blog
  • Home
  • About: Kenneth van Surksum
  • Cookie Policy
Modern Workplace Blog
August 1, 2013August 2, 2013

How to create ConfigMgr 2012 boot images from scratch

Today, after installing a fresh System Center 2012 Configuration Manager Service Pack 1 environment, we experienced that the Boot images for both 32- and 64-bit were not created. The reason for this is already widely known, because it had to do with the virus scanner which was active at time of installation. There are already some articles describing what can go wrong during an upgrade to Service Pack 1 for example, as described in the following article: Updated System Center 2012 Configuration Manager Antivirus Exclusions with more details on OSD and Boot Images, etc… . So lesson one here: Please disable the virus scanner during installation and make sure the correct exclusions are in place after installing the ConfigMgr environment.

So, we ended up with a running ConfigMgr 2012 SP1 environment without Boot images. So I was challenged to come up with a solution. As you may or may not know you can’t simple import the boot.wim from the Windows ADK installation and import it. This was already partially described by Kenny Buntix in the case of where the boot images weren’t updated after the upgrade to Service Pack 1. You can read more about that here: “CM2012 SP1 – No default boot images available / “Only finalized boot images are supported“”. My challenge though was a little bit different, because I had no boot images at all, so updating them wasn’t an option, because there was nothing to update.

Fortunately I found an article by Microsoft on how to create the boot images for use in System Center Configuration Manager 2007, titled: “How to Add a Boot Image to Configuration Manager” and adopted the steps for use with ConfigMgr 2012 Service Pack 1, as described below.

Steps Summary:

  1. Copy for both x86 and x64 the winpe.wim from the ADK to a temporary location
  2. Mount the boot image and apply four optional components to your mounted image using Dism:
    • WinPE-Scripting
    • WinPE-WMI
    • WinPE-SecureStartup
    • WinPE-WDS-Tools

For more information about the optional components which you can add to Windows PE see: Windows PE Optional Components Reference. Keep in mind though that once imported into ConfigMgr, you can add these using the Optional Components tab on the properties of the Boot Image.

  1. Unmount the boot image and commit it
  2. Import the newly created boot image into ConfigMgr 2012

Detailed Steps:

  • Create a temporary folder for storing the winpe.wim from the ADK, mine were in c:\temp\x86 and c:\temp\x64. I also already renamed the winpe.wim to boot.wim, and i created the c:\temp\mount folder to which i mount the wim file later.

Steps for the 32-bit Boot Image are described:

  • Open the Deployment Tools Command Prompt as an Administrator
  • dism.exe /mount-wim /wimFile:c:\temp\x86\boot.wim /index:1 /mountdir:c:\temp\mount

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Mounting image

[==========================100.0%==========================]

The operation completed successfully.

  • Install the necessary components in the boot image. In order to find out which optional components needed to be installed, I checked my private ConfigMgr 2012 installation running on my laptop. Also keep in mind that if you run McAfee AV, you must disable the AV while using this procedure, as acknowledeged by McAfee here: DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled

clip_image001

  • Run: dism.exe /image:c:\temp\mount /add-package /packagepath:”D:\Program Files (x86)\Windows Kits\8.0\Assessment and Deployment Kit\Windows Preinstallation Environment\x86\WinPE_OCs\WinPE-Scripting.cab”

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Image Version: 6.2.9200.16384

Processing 1 of 1 – Adding package WinPE-Scripting-Package~31bf3856ad364e35~x86~

~6.2.9200.16384

[==========================100.0%==========================]

The operation completed successfully.

  • Run: dism.exe /image:c:\temp\mount /add-package /packagepath:”D:\Program Files (x86)\Windows Kits\8.0\Assessment and Deployment Kit\Windows Preinstallation Environment\x86\WinPE_OCs\WinPE-WMI.cab.cab”

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Image Version: 6.2.9200.16384

Processing 1 of 1 – Adding package WinPE-WMI-Package~31bf3856ad364e35~x86~~6.2.9

200.16384

[==========================100.0%==========================]

The operation completed successfully.

  • Run: dism.exe /image:c:\temp\mount /add-package /packagepath:”D:\Program Files (x86)\Windows Kits\8.0\Assessment and Deployment Kit\Windows Preinstallation Environment\x86\WinPE_OCs\WinPE-SecureStartup.cab”

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Image Version: 6.2.9200.16384

Processing 1 of 1 – Adding package WinPE-SecureStartup-Package~31bf3856ad364e35~

x86~~6.2.9200.16384

[==========================100.0%==========================]

The operation completed successfully.

  • Run: dism.exe /image:c:\temp\mount /add-package /packagepath:”D:\Program Files (x86)\Windows Kits\8.0\Assessment and Deployment Kit\Windows Preinstallation Environment\x86\WinPE_OCs\WinPE-WDS-Tools.cab”

Deployment Image Servicing and Management tool

Version: 6.2.9200.16384

Image Version: 6.2.9200.16384

Processing 1 of 1 – Adding package WinPE-WDS-Tools-Package~31bf3856ad364e35~x86~

~6.2.9200.16384

[==========================100.0%==========================]

The operation completed successfully.

Keep in mind that my ADK was installed on the D: drive, you should modify this to C: if you used the default installation path.

  • We now unmount the WIM file and commit the changes: dism.exe /unmount-wim /mountdir:c:\temp\mount /commit
  • Repeat these steps for the 64-bit boot image

Both Images are now ready to be imported into ConfigMgr 2012, add them to the default folder for ConfigMgr <%configmgr install folder>\OSD\boot\%architecture%>and import them from the default \\%siteserver\sms_%sitecode% share.

Note: Since CU2 we can now also import boot images from the WAIK again, for reasons known. Even though the functionality you have on these kind of images is limited, the procedure to import them is similar to what’s described above. See this article for more information: How to Create and Import a WinPE 3.1 Boot image for use in ConfigMgr 2012 SP1 CU2

Tweet
Follow me
Tweet #WPNinjasNL

Continue Reading

← Role Based Access Control in ConfigMgr 2012: Part 4 Outcome
Distributing content to Distribution points and Distribution point groups in ConfigMgr 2012 →

1 thought on “How to create ConfigMgr 2012 boot images from scratch”

  1. Ben Gerberenjamin Geber says:
    November 8, 2019 at 1:05 pm

    Awesome to say the least!!!

    This has helped me 100%

    Thank you for such a thorough explanation. And very well documented,

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Founding member of:

Recent Posts

  • MAM vs. MDM: Choosing the Right Mobile Management Approach
  • Comparing Web Filtering and Security: Microsoft Entra Internet Access (Global Secure Access) vs. Microsoft Defender for Endpoint (MDE)
  • Navigating New Authentication Methods: SMS for Password Reset, Not for MFA
  • From SPF to DANE: Securing Microsoft 365 Email Communications
  • Protecting your Break Glass accounts in Entra now that MFA gets enforced on more and more Admin portals

Books

System Center 2012 Service Manager Unleashed
Amazon
System Center 2012 R2 Configuration Manager Unleashed: Supplement to System Center 2012 Configuration Manager
Amazon
System Center Configuration Manager Current Branch Unleashed
Amazon
Mastering Windows 7 Deployment
Amazon
System Center 2012 Configuration Manager (SCCM) Unleashed
Amazon

Archives

  • February 2025
  • January 2025
  • September 2024
  • February 2024
  • January 2024
  • December 2023
  • November 2023
  • September 2023
  • August 2023
  • February 2023
  • December 2022
  • November 2022
  • October 2022
  • September 2022
  • August 2022
  • May 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • December 2020
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • May 2020
  • April 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • August 2019
  • July 2019
  • November 2016
  • November 2015
  • June 2015
  • May 2015
  • November 2014
  • July 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • November 2013
  • August 2013
  • April 2013
  • March 2013
  • January 2013
  • December 2012
  • November 2012
  • August 2012
  • July 2012
  • June 2012

Meta

  • Log in
  • Entries feed
  • Comments feed
  • WordPress.org

Categories

  • ABM (4)
  • Advanced Threat Protection (4)
  • Announcement (44)
  • Azure (3)
  • AzureAD (73)
  • Certification (2)
  • Cloud App Security (5)
  • Conditional Access (58)
  • Configuration Manager (24)
  • Entra (2)
  • Entra Id (8)
  • Events (14)
  • Exchange Online (9)
  • Identity Protection (5)
  • Intune (27)
  • Licensing (2)
  • Microsoft Defender (1)
  • Microsoft Defender for Endpoint (1)
  • Microsoft Endpoint Manager (35)
  • Mobile Application Management (4)
  • Modern Workplace (74)
  • Office 365 (10)
  • Overview (11)
  • Power Platform (1)
  • PowerShell (2)
  • Presentations (9)
  • Privileged Identity Management (5)
  • Role Based Access Control (2)
  • Security (63)
  • Service Manager (4)
  • Speaking (30)
  • Troubleshooting (4)
  • Uncategorized (11)
  • Windows 10 (15)
  • Windows 11 (5)
  • Windows Update for Business (4)
  • WMUG.nl (16)
  • WPNinjasNL (32)

Tags

#ABM #AzureAD #community #conditionalaccess #ConfigMgr #IAM #Intune #m365 #MEM #MEMCM #microsoft365 #modernworkplace #office365 #security #webinar #wmug_nl ATP authentication strength AzureAD Branding Community Conditional Access ConfigMgr ConfigMgr 2012 Email EXO Identity Intune Licensing M365 MCAS MFA Modern Workplace Office 365 OSD PIM Policy Sets Presentation RBAC roles Security System Center Task Sequence troubleshooting webinar

Recent Comments

  • brc on Protecting your Break Glass accounts in Entra now that MFA gets enforced on more and more Admin portals
  • [m365weekly] #186 – M365 Weekly Newsletter on MAM vs. MDM: Choosing the Right Mobile Management Approach
  • Dean Gross on Comparing Web Filtering and Security: Microsoft Entra Internet Access (Global Secure Access) vs. Microsoft Defender for Endpoint (MDE)
  • nikhil tech on Protecting your Break Glass accounts in Entra now that MFA gets enforced on more and more Admin portals
  • Kenneth on Comparing Web Filtering and Security: Microsoft Entra Internet Access (Global Secure Access) vs. Microsoft Defender for Endpoint (MDE)

This information is provided “AS IS” with no warranties, confers no rights and is not supported by the author.

Copyright © 2021 by Kenneth van Surksum. All rights reserved. No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

Shorthand: Don’t pass off my work as yours, it’s not nice.

©2025 Modern Workplace Blog | Powered by WordPress and Superb Themes!
This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Cookie settingsACCEPT
Privacy & Cookies Policy

Privacy Overview

This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary
Always Enabled
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Non-necessary
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
SAVE & ACCEPT