- Article
- 6 minutes to read
Applies to
- Windows 10
- Windows 11
You can use Windows Configuration Designer to create a provisioning package (.ppkg) that contains customization settings, and then apply the provisioning package to a device running Windows client.
Learn how to install Windows Configuration Designer.
Tip
We recommend creating a local admin account when you develop and test your provisioning package. We also recommend using a least privileged domain user account to join devices to the Active Directory domain.
Start a new project
Open Windows Configuration Designer: From either the Start menu or Start menu search, type Windows Configuration Designer, and then select the Windows Configuration Designer shortcut.
Select your desired option on the Start page, which offers multiple options for creating a provisioning package, as shown in the following image:
The following wizard options provide a simple interface for configuring common settings for desktop and kiosk devices:
- Instructions for the desktop wizard
- Instructions for the kiosk wizard
- Instructions for HoloLens wizard
- Instructions for Surface Hub wizard
Wizards are also available for creating provisioning packages for Microsoft Surface Hub and Microsoft HoloLens devices. For a summary of the settings available in the desktop and kiosk devices, see What you can configure using Configuration Designer wizards.
Note
To target devices running versions earlier than Windows 10, version 2004, ComputerName customization must be defined from the setting path:
Accounts/ComputerAccount/ComputerNamefrom the advanced editor. The default path from the simple editor uses a new CSP that isn't available on older systems.The Advanced provisioning option opens a new project with all the runtime settings available. (The rest of this procedure uses advanced provisioning.)
Tip
You can start a project in the simple wizard editor and then switch the project to the advanced editor.
Enter a name for your project, and then select Next.
Select the settings you want to configure, based on the type of device, and then select Next. The following table describes the options.
Windows edition Settings available for customization Provisioning package can apply to All Windows editions Common settings All Windows client devices All Windows desktop editions Common settings and settings specific to desktop devices All Windows client desktop editions (Home, Pro, Enterprise, Pro Education, Enterprise Education) Windows 10 IoT Core Common settings and settings specific to Windows 10 IoT Core All Windows 10 IoT Core devices Windows 10 Holographic Common settings and settings specific to Windows 10 Holographic Microsoft HoloLens Common to Windows 10 Team edition Common settings and settings specific to Windows 10 Team Microsoft Surface Hub On the Import a provisioning package (optional) page, you can select Finish to create your project, or browse to and select an existing provisioning package to import to your project, and then select Finish.
Tip
Import a provisioning package can make it easier to create different provisioning packages that all have certain settings in common. For example, you could create a provisioning package that includes the settings for your organization's network. Then, import that package into other packages that you create so you don't have to reconfigure those common settings repeatedly.
In the Available customizations pane, you can now configure settings for the package.
Configure settings
For an advanced provisioning project, Windows Configuration Designer opens the Available customizations pane. The example in the following image is based on All Windows desktop editions settings.
The settings in Windows Configuration Designer are based on Windows client configuration service providers (CSPs). To learn more about CSPs, see Introduction to configuration service providers (CSPs) for IT pros.
The process for configuring settings is similar for all settings. The following table shows an example.
Expand a category:
Select a setting:
Enter a value for the setting. Select Add if the button is displayed:
Some settings, such as this example, require additional information. In Available customizations, select the value you just created, and more settings are displayed:
When the setting is configured, it is displayed in the Selected customizations pane:
For details on each specific setting, see Windows Provisioning settings reference. The reference article for a setting is also displayed in Windows Configuration Designer when you select the setting, as shown in the following image.
Build package
After you're done configuring your customizations, select Export, and then select Provisioning Package.
In the Describe the provisioning package window, enter the following information, and then select Next:
- Name - This field is pre-populated with the project name. You can change this value by entering a different name in the Name field.
- Version (in Major.Minor format - Optional. You can change the default package version by specifying a new value in the Version field.
- Owner - Select IT Admin. For more information, see Precedence for provisioning packages.
- Rank (between 0-99) - Optional. You can select a value between 0 and 99, inclusive. The default package rank is 0.
In the Select security details for the provisioning package window, you can select to encrypt and/or sign a provisioning package with a selected certificate, and then select Next. Both selections are optional:
Encrypt package - If you select this option, an autogenerated password will be shown on the screen.
Sign package - If you select this option, you must select a valid certificate to use for signing the package. You can specify the certificate by selecting Select and choosing the certificate you want to use to sign the package.
Note
You should only configure provisioning package security when the package is used for device provisioning and when the package has content with sensitive security data, such as certificates or credentials that should be prevented from being compromised. When applying an encrypted and/or signed provisioning package, either during OOBE or through the setting UI, the package can be decrypted, and if signed, be trusted without explicit user consent. An IT administrator can set policy on a user device to restrict the removal of required packages from the device, or the provisioning of potentially harmful packages on the device.
If a provisioning package is signed by a trusted provisioner, it can be installed on a device without a prompt for user consent. In order to enable trusted provider certificates, you must set the TrustedProvisioners setting prior to installing the trusted provisioning package. This is the only way to install a package without user consent. To provide additional security, you can also set RequireProvisioningPackageSignature, which prevents users from installing provisioning packages that are not signed by a trusted provisioner.
In the Select where to save the provisioning package window, specify the output location where you want the provisioning package to go once it's built, and then select Next. By default, Windows Configuration Designer uses the project folder as the output location.
In the Build the provisioning package window, select Build. The provisioning package doesn't take long to build. The project information is displayed in the build page and the progress bar indicates the build status.
If you need to cancel the build, select Cancel. This cancels the current build process, closes the wizard, and takes you back to the Customizations page.
If your build fails, an error message will appear that includes a link to the project folder. You can scan the logs to determine what caused the error. Once you fix the issue, try building the package again.
If your build is successful, the name of the provisioning package, output directory, and project directory will be shown.
If you choose, you can build the provisioning package again and pick a different path for the output package. To do this, select Back to change the output package name and path, and then select Next to start another build.
When you are done, select Finish to close the wizard and go back to the Customizations page.
Next step: How to apply a provisioning package
Learn more
- How to bulk-enroll devices with On-premises Mobile Device Management in Microsoft Configuration Manager
Related articles
- Provisioning packages for Windows client
- How provisioning works in Windows client
- Install Windows Configuration Designer
- Apply a provisioning package
- Settings changed when you uninstall a provisioning package
- Provision PCs with common settings for initial deployment (simple provisioning)
- Use a script to install a desktop app in provisioning packages
- PowerShell cmdlets for provisioning Windows client (reference)
- Windows Configuration Designer command-line interface (reference)
- Create a provisioning package with multivariant settings
Feedback
Submit and view feedback for
This product This page
FAQs
How do I create a provisioning package in Windows 11? ›
Insert the USB drive, then navigate to Settings > Accounts > Access work or school > Add or remove a provisioning package > Add a package. Choose the method you want to use, such as Removable Media. Select the provisioning package ( . ppkg ) that you want to apply, and select Add.
What are provisioning packages Windows 11? ›Provisioning packages in Windows client provide IT administrators with a simplified way to apply configuration settings to Windows client devices. Windows Configuration Designer is a tool that makes it easy to create a provisioning package. Windows Configuration Designer can be installed from Microsoft Store.
What methods can be used to create provisioning packages? ›You can use Windows Configuration Designer to create a provisioning package ( . ppkg ) that contains customization settings, and then apply the provisioning package to a device running Windows client. Learn how to install Windows Configuration Designer.
What is Windows provisioned package? ›A provisioning package (. ppkg) is a container for a collection of configuration settings. With Windows client, you can create provisioning packages that let you quickly and efficiently configure a device without having to install a new image.
How do I create a custom power plan in Windows 11? ›- Open the Start menu and type control panel.
- Select Control Panel from the search results.
- In Control Panel, change the View by option to Large icons.
- Next, select Power Options.
- Click the Create a power plan option in the Power Options menu.
- In the search box on the taskbar, search for Create a recovery drive and then select it. ...
- When the tool opens, make sure Back up system files to the recovery drive is selected and then select Next.
- Connect a USB drive to your PC, select it, and then select Next.
- Select Create.
Provisioning: In IT, provisioning is the process of creating infrastructure and making it available to end users. Configuration: It is the process of configuring the provisioned IT infrastructure resources. For example, installing and configuring a database on a server or configuring a firewall device.
What is the difference between deployment and provisioning? ›At a high level, provisioning is the act of getting a device ready for a user. Deployment is the whole process of getting a device to a user.
What is the purpose of provisioning? ›Provisioning is the process of creating and setting up IT infrastructure, and includes the steps required to manage user and system access to various resources. Provisioning is an early stage in the deployment of servers, applications, network components, storage, edge devices, and more.
How do I create a provisioning file? ›- Select the extensions to license, if applicable. Click Next.
- Complete the fields under End User Information. Click Next.
- Review the license files. Select the Delivery Method and click Create File.
What is the tool used for provisioning and configuration? ›
For Provisioning and Configuration Management
Ansible and Terraform are the tools that can perform both provisioning and Configuration management. Ansible and Terraform can work together. We can use Terraform to provision infrastructure, databases, load balancers, network topology, etc.
- Download and Install Windows Configuration Designer on a Windows 10/11 device.
- Open Windows Configuration Designer.
- Click on File and choose New project.
- Provide the project details. ...
- Select project workflow as Provisioning package and click on Next.
- Check your device meets the Windows 10 system requirements. ...
- Create USB installation media. ...
- Run the installer tool. ...
- Use your installation media. ...
- Change your computer's boot order. ...
- Restart your device. ...
- Complete the installation.
Upgrade using a provisioning package
To create a provisioning package for upgrading desktop editions of Windows 10, go to Runtime settings > EditionUpgrade > UpgradeEditionWithProductKey in the Available customizations panel in Windows ICD and enter the product key for the upgraded edition.
The easiest way to make sure you have Windows Package Manager on your PC is to grab the latest version of App Installer from the Microsoft Store. This is usually used to sideload Windows App Packages. But it also contains what you need for the Windows Package Manager.
How do I get to advanced power settings in Windows 11? ›To adjust power and sleep settings in Windows 11, select Start > Settings > System > Power & battery > Screen and sleep.
Why are there no power options available Windows 11? ›Do you get a “There are currently no power options available” message when you click the power icon on your Windows 10 or 11 PC? Chances are you've been revoked access to use the power options on your computer.
How do I create a custom version of Windows? ›- Install Windows and prepare assets. ...
- Update and customize Windows, install software. ...
- Generalize Windows image with Sysprep. ...
- Capture Windows image, create the ISO. ...
- Update or change the ISO.
- Power on or restart the workstation.
- Enter the BIOS by tapping either the right or left bottom of the screen.
- Tap Advanced, and then tap Special Configuration.
- Tap Factory Recovery.
- Select Enabled from drop-down menu.
- Tap Home.
- Tap Save and Exit.
The recovery partition is a section in your computer's disk drive dedicated to storing the computer system image. It keeps system backup files as well as files that guide system restoration. If you have a computer with Windows 11 installed, it may have a recovery partition.
Can I create a Windows 11 recovery USB from another computer? ›
Yes, you can make a recovery disk using a disk (CD/DVD) or USB flash drive in Windows from another working PC. A recovery disk will allow you to troubleshoot and reset your PC.
What are the 3 types of provisioning? ›3) In a traditional telecommunications environment, there are three separate types of provisioning: circuit provisioning, service provisioning, and switch provisioning.
What are examples of provisioning? ›Water, food, wood and other goods are some of the material benefits people obtain from ecosystems called ´provisioning services´.
What are the advantages of automatically provisioning and configuring servers? ›- Speeds up user onboarding processes. Automated account provisioning gives employees and contractors quick and smooth access to the resources they need to complete their work. ...
- Improves organizational security. ...
- Minimizes user onboarding costs. ...
- Reduces provisioning errors.
The three models are advanced provisioning, dynamic provisioning and user self-provisioning. With advanced provisioning, the customer signs a formal contract of service with the cloud provider. The provider then prepares the agreed-upon resources or services for the customer and delivers them.
How does user provisioning work? ›User provisioning and deprovisioning involves the process of creating, updating and deleting user accounts in multiple applications and systems. This access management practice can sometimes include associated information, such as user entitlements, group memberships and even the groups themselves.
What are the 3 deployment models? ›Each deployment model is defined according to where the infrastructure for the environment is located. There are three main cloud service models: Software as a Service, Platform as a Service, and Infrastructure as a Service.
What does IT mean to provision a device? ›The term provisioning for a device means to evolve a device to a state in which it can be handed off to an end-user for their specific use in a functional manner.
Why is user provisioning important? ›User provisioning gives IT teams the control to track and monitor what devices are being accessed, who is accessing them, and from where they are being accessed. This eliminates security risks and helps protect and maintain the security of sensitive data.
What is provisioning and activation? ›Telecom service provisioning is the making available of resources necessary for a service by allocating those resources in a carrier's network. Service activation is the switching on — or “going live” — of the service.
What is a provisioning file? ›
A provisioning file contains the locations and URLs of critical files, such as the system image, configuration information, and necessary licenses, and can also contain DNS server information used to resolve these locations.
How do I create a certificate and provisioning profile? ›- Log in to developer.apple.com.
- In the Provisioning Profile section, click the + button to add a new one.
- Select the type of profile, such asApp Store or Ad Hoc, and click Continue.
- Select your App ID from the drop down list and click Continue.
Profiles is shown in the work space. From the Launch Menu, select File > New > Provisioning Profile. The New Provisioning Profile Wizard opens.
What is the best provisioning software? ›- BetterCloud.
- Rippling.
- Microsoft Azure Active Directory.
- Jamf Connect.
- Lumos.
- Zluri.
- OneLogin.
- CyberArk Identity.
- Scripting systems. ...
- Network configuration management tools. ...
- Intent-based networking configuration management.
- Kubernetes. Kubernetes is one of the best container orchestration tools and is automating deployment, scaling, and management of container applications easily. ...
- Terraform. Terraform is a cloud-agnostic infrastructure provisioning tool. ...
- Ansible. ...
- Chef. ...
- CFEngine. ...
- Puppet. ...
- SaltStack. ...
- Foreman.
Click Computer Configuration, click Administrative Templates, click System, and then double-click the Specify settings for optional component installation and component repair setting. Select the settings that you want to use for Features on Demand.
How do I create a Windows boot USB? ›To create a Windows 10 bootable USB, download the Media Creation Tool. Then run the tool and select Create installation for another PC. Finally, select USB flash drive and wait for the installer to finish. Connect a USB to your Windows 10 PC.
What is provision package 0x800700b7? ›The provisioning error 0x800700b7 indicates that a provisioning package already exists. Hence new file cannot be created. This may happen if you have executed the provisioning package earlier on same machine.
What does preparing to configure Windows mean Windows 10? ›If your computer or laptop is stuck on "Preparing to configure Windows," it may imply that your Windows system is installing the updates. If a long time has passed before you installed your Windows updates, it may take more time to install all the updates than usual.
What does configure Windows mean? ›
If your PC seems to get stuck on the screen of “Preparing to configure Windows”, it may indicate that your Windows system is installing and configuring the updates. If you haven't installed Windows updates for a long time, it may take some time to install all the updates.
How do I install and configure application software? ›- Locate and download an .exe file.
- Locate and double-click the .exe file. (It will usually be in your Downloads folder.)
- A dialog box will appear. Follow the instructions to install the software.
- The software will be installed.
Windows Settings
Insert the USB drive, then navigate to Settings > Accounts > Access work or school > Add or remove a provisioning package > Add a package. Choose the method you want to use, such as Removable Media. Select the provisioning package ( . ppkg ) that you want to apply, and select Add.
If a device is updating from Windows 10, version 1909 or an earlier version, this feature update enablement package cannot be manually installed. Instead, it is bundled and automatically included with the feature update to Windows 10, version 21H2.
How do I change from Windows 11 to Windows 10? ›How to roll back from Windows 11 to Windows 10. Here's how to make the switch back to Windows 10: Start menu > Settings > Windows Update > Advanced options > Recovery > Previous version of Windows (you may see Go back instead). That's it!
How do I manually install a package? ›- Installing Python Packages with Setup.py. To install a package that includes a setup.py file, open a command or terminal window and:
- Setup.py Build Environment. Packages installed with setup.py have build requirements that developers must adhere to. ...
- Sample Project.
Windows Package Manager is a comprehensive package manager solution that consists of a command line tool and set of services for installing applications on Windows 10 and Windows 11.
Where do I find Windows installation packages? ›1 – Press the Windows+R key combination to open a “Run” box. 2 – Type cmd into the Run box, then press the Enter key. 3 – Type wmic and press the Enter key. 4 – Type product get name,version and press the Enter key.
How do I create a Windows installation package? ›- How to create an App Installer file.
- Step 1: Create the *.appinstaller file.
- Step 2: Add the basic template.
- Step 3: Add the main package information.
- Step 4: Add the optional packages.
- Step 5: Add dependencies.
- Step 6: Add Update setting.
- Step 7: Add Auto Update Settings.
Microsoft is introducing Feature Experience Packs, Online Service Experience Packs, and Web Experience Packs to Windows 11.
How do I give a program administrator privileges Windows 11? ›
Right-click the app and choose Properties in the context menu. In the Properties window, switch to the Compatibility tab at the top. Here, toggle the option that says Run this program as an administrator. Click OK to save your changes and close the Properties window.
What file extension does a provisioning package use? ›A provisioning package file (. ppkg) is a container for a collection of configuration settings. It can be created using a Windows 10/11 device, which can later be used for the bulk enrollment of Windows devices without any user intervention.
How do I configure Windows to download manufacturer apps? ›Control Panel
In the System Properties window, switch to the Hardware tab and click Device Installation Settings. You will be asked whether "you want to automatically download manufacturers' apps and custom icons available for your devices." Select No and Save Changes.
- Create a project. Let's assume that we have a simple application executable that only outputs some lines. ...
- Add files to the project. Now that the project is created, let's add the file to it. ...
- Create shortcuts to the MSI Installer. ...
- Build and install the MSI package.
- Right-click This PC and select Manage.
- Open Disk Management.
- Select the disk from which you want to make a partition.
- Right-click the Unpartitioned space in the bottom pane and select New Simple Volume.
- Enter the size and click next, and you are done.
- Windows 11 & 10: Go to Settings > System > About. See the installed update next to the Version line.
- Windows 8 & 7: Go to Control Panel > System & Security > System. Look under the Windows edition section.
- You can download and install the latest Windows patch or service pack via Windows Update.
While DirectStorage comes pre-installed on Windows 11, its usage is only optimal if games were programmed using DirectStorage and gamers own the necessary hardware such as SSDs with NVMe. The prerequisites are: a NVMe SSD with at least 64 GB storage size. a graphics card with support for DirectX 12 and Shader model 6.0 ...
Is Windows 11 stable now? ›The best and short answer is “Yes,” it's OK to upgrade to Windows 11 22H2 since the new version is stable and safe to install on devices that meet the requirements.
Why don't I have admin privileges on my own computer Windows 11? ›To enable the Administrator account on Windows 11, open Computer Management and open the “Administrator Properties” page from the “Users” branch, and clear the “Account is disabled” option.
How to enable administrator account in Windows 11 without admin rights? ›- Press the Win key, and type cmd. ...
- In the Command Prompt window, type the following command and press Enter to execute: Net user Administrator /active: yes.
- Upon successful execution, you will see the command completed successfully message.
How do I unblock a program as administrator in Windows 11? ›
- On the Windows sign-in screen, press and hold the Shift key, then select Power > Restart.
- After your machine reboots, click on "Troubleshoot" under Choose an option.
- Click on "Advanced options" > select "command prompt"
- On the command prompt window, type net user administrator /active:yes and press Enter.