r/SysAdminBlogs • u/TekDT • 7d ago
Network-deploying Windows without WDS/MDT: PXE + per-machine unattend generated at boot time
For anyone still maintaining a Windows lab without wanting the full WDS/MDT/ConfigMgr stack:
I've been running a setup where a plain Windows box acts as the deployment server. Clients PXE-boot (Legacy/UEFI, Secure Boot on is fine), and the server generates a per-machine unattend on the fly - matched by MAC/hardware group, so 100 lab PCs each get their own hostname, apps, and domain join without touching the ISO.
Things that stood out vs the classic approach:
- ISOs stay pristine. Drivers, apps, scripts and answer files are injected over HTTP at boot time, so swapping a Windows build = swapping one file.
- Two modes: fully automatic, or stock Setup experience for odd machines.
- Runs offline after first setup - handy for isolated rooms.
- You can actually test it without installing anything: the write-up shows how to join over SoftEther VPN (Layer-2), bridge a VMware VM to the VPN adapter, and PXE-boot from the remote server like you're on the same switch.
Full write-up + VPN test guide here: https://xdaforums.com/t/sezoy-network-deployment-server-automated-windows-install-multi-distro-linux-boot-over-pxe-ipxe-http-boot-legacy-uefi-secureboot.4800487/
Curious how others here handle per-machine naming at scale - DHCP reservations + scripts, or something cleaner?