// Internal · Active Directory

Deployment - MDT

Deployment - MDT

Microsoft Deployment Toolkit (MDT) is a free tool from Microsoft used to automate the deployment of Windows operating systems and applications.

It lets IT admins create a central deployment share with OS images, drivers, updates, and apps, then use automated scripts (task sequences) to install them on multiple computers, either over the network (Lite Touch) or from media (USB/DVD).

Deployment Share

These files contains credentials used by Microsoft Deployment Toolkit to join a computer to the domain and to access network resources.

  • Bootstrap.ini - Located in DeploymentShare\Control\Bootstrap.ini
  • CustomSettings.ini - Located in DeploymentShare\Control\CustomSettings.ini
NameDescription
DomainAdminAccount used to join the computer to the domain
DomainAdminPasswordPassword used to join the computer to the domain
UserIDAccount used for accessing network resources
UserPasswordPassword used for accessing network resources
AdminPasswordThe local administrator account on the computer
ADDSUserNameAccount used when promoting to DC during deployment
ADDSPasswordPassword used when promoting to DC during deployment
PasswordPassword to use for promoting member server to a domain controller
SafeModeAdminPasswordUsed when deploying DCs, it is the AD restore mode password
TPMOwnerPasswordThe TPM password if not set already
DBIDAccount used to connect to SQL server during deployment
DBPwdPassword used to connect to SQL server during deployment
OSDBitLockerRecoveryPasswordBitLocker recovery password

Other credentials can be found inside the files hosted in the deployment share:

  • DeploymentShare\Control\TASKSEQUENCENAME\ts.xml
  • DeploymentShare\Scripts\ folder
  • DeploymentShare\Applications folder
  • LiteTouchPE_x86|x64.iso, extract files and look for bootstrap.ini
  • LiteTouchPE_x86|x64.wim, extract files and look for bootstrap.ini

References

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.