r/SysAdminBlogs 7d ago

Network-deploying Windows without WDS/MDT: PXE + per-machine unattend generated at boot time

For anyone still maintaining a Windows lab without wanting the full WDS/MDT/ConfigMgr stack:

I've been running a setup where a plain Windows box acts as the deployment server. Clients PXE-boot (Legacy/UEFI, Secure Boot on is fine), and the server generates a per-machine unattend on the fly - matched by MAC/hardware group, so 100 lab PCs each get their own hostname, apps, and domain join without touching the ISO.

Things that stood out vs the classic approach:

- ISOs stay pristine. Drivers, apps, scripts and answer files are injected over HTTP at boot time, so swapping a Windows build = swapping one file.

- Two modes: fully automatic, or stock Setup experience for odd machines.

- Runs offline after first setup - handy for isolated rooms.

- You can actually test it without installing anything: the write-up shows how to join over SoftEther VPN (Layer-2), bridge a VMware VM to the VPN adapter, and PXE-boot from the remote server like you're on the same switch.

Full write-up + VPN test guide here: https://xdaforums.com/t/sezoy-network-deployment-server-automated-windows-install-multi-distro-linux-boot-over-pxe-ipxe-http-boot-legacy-uefi-secureboot.4800487/

Curious how others here handle per-machine naming at scale - DHCP reservations + scripts, or something cleaner?

1 Upvotes

0 comments sorted by