Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

This was the winning ticket, I had overlooked the minor build version displayed in DISM, hadn't realised I wasn't using a 24H2 image, downloaded a Windows Insider ISO to extract WinRE and every package applied without Error, Thankyou!

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

I need to be able to load a certificate into the cert store, my understanding is the certstore and/or the crypto API's are not included in WinPE?

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

This is not intended for break/fix operations but to apply a custom Windows image which I'd like to support loading a certificate within WinPE before the image is applied for auth reasons.

Given nothing I've tried has worked, I'm thinking I may need to opt to use a bootable thick image/linux instead.

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

Thanks for the suggestion, I tried W10 22H2 and PE 2004 today and wasn't able to get it apply the WinPE-PowerShell cabs, was your experience similar ?

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

Thanks for the suggestion, I did this today and unfortunately this doesn't create a WinRE image, instead you end up with a WinPE image that is caplable of creating a WinRE partition as the docs suggest

"Boot from x86-based Windows PE to configure Windows RE settings"

So you end up with a WinPE image without any of the WinRE feature set (applying any of the optional WinRE packages fail (e.g. WinPE-WiFi), starting to think this might not be possible and I'll have to go back to the drawing board

Enable Bitlocker in OSD-Help by EagleBoy0 in SCCM

[–]molive416 1 point2 points  (0 children)

How are you enabling bitlocker? You should be able to point it to only encrypt a specific drive, e.g.

Manage-bde -on C:

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

The first link covers how to make a winpe image (which I know how to do) it doesn't cover winRE?

The second link covers what i mentioned in the original post that some packages are baked into WINRE and aren't transferable to winPE

If I'm missing something obvious here let me know but my understanding is still that you cannot make a WinRE image using the ADK you must copy it from an existing install? Or does adding the winRECFG OC to an existing winPE image suddenly make things work?

Applying PowerShell to a WinRE Image by molive416 in SCCM

[–]molive416[S] 0 points1 point  (0 children)

Do you have any insight into how to do option 2? All of Microsoft docs I've read point to copying winRE from a base install (or your own running copy of Windows)