Discovering Windows Embedded Standard 7 – Part 10 – The OOBESystem configuration pass

29 03 2010

Welcome to the computer industries world of strange abbreviations!

OOBE stands for out-of-the-box-experience. If configured, it runs just before anything else is started and is intended to serve as an interactive (!) tool to customize an embedded device before using it in field.
The available tasks looking at OOBE are explained on TechNet.  Here an overview off the available pages to be shown as dialogs, which can be branded to ones needs:

1 – Regional Settings

Microsoft-Windows-International-Core-WinPE | UILanguage

Microsoft-Windows-International-Core-WinPE | InputLocale

Microsoft-Windows-International-Core-WinPE | SystemLocale

Microsoft-Windows-International-Core-WinPE | UILanguageFallback

Microsoft-Windows-International-Core-WinPE | UserLocale

If all four settings are set, this page will be skipped.

If individual settings are set, the fields will not be displayed on this page.

2 – License Terms

Microsoft-Windows-Shell-Setup | OOBE | HideEULAPage

If this is set, the page will be skipped. It is assumed that the corporate administrator is accepting the Microsoft Software License Terms for the users.

3 – Product Key

Microsoft-Windows-Setup | UserData |

ProductKey | Key

Microsoft-Windows-Setup | UserData |

ProductKey | WillShowUI

If Windows detects a retail installation in which the user already entered a key, a volume licensing setup, or a product key in Unattend.xml, this page will not be displayed.

4 – User Name

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | Description

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | DisplayName

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | Group

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | Name

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | Password | PlainText

Microsoft-Windows-Shell-Setup | UserAccounts | LocalAccounts | LocalAccount | Password | Value

If a user account has been created through this setting, this page will not be displayed.

If this page is not displayed, a user tile will be automatically selected for the user. There is no Unattend.xml setting to set a user tile.

5 – Computer Name

Microsoft-Windows-Shell-Setup | ComputerName

If this is set, the Computer Name page will not be displayed to the user during Windows Welcome.

This page also controls the initial wallpaper choice. If this page is not displayed, the first Windows desktop wallpaper will be selected by default.

noteNote

This can be set by specifying a theme in Unattend.xml, but this setting will not influence whether this page is displayed or not.

8 – Protect Your PC

Microsoft-Windows-Shell-Setup | OOBE | ProtectYourPC

If this has been set, the page will not be displayed and the appropriate value will be set. Possible values are:

  • 1 – Recommended
  • 2 – Only installation updates
  • 3 – Enables no protection

9 – Final page

Not applicable

If all other Windows Welcome pages are skipped, this page will not be displayed.

 

As stated before OOBE is designed as an interactive utility and therefore only considered if this interaction fits into the deployment process. It is not suited e.g. in fully unattended scenarios.

But nevertheless, due to the branding capabilities and the flexibility in configuration around user and locale specific settings it can be very good additional value for an OEM to add to his devices.

 

Alexander

Advertisements

Actions

Information

2 responses

19 09 2014
Arun Pillai

Hi Alex,
Great article, can you share some resources from where you found these reference . I am planning for performing ATM OS penetration testing. Can you please suggest some resources.

19 09 2014
alexwech

Hi Arun,
glad You liked it!
A lot of good info can be found in the WES 7 docs:
http://msdn.microsoft.com/en-us/library/dn609843(v=winembedded.60).aspx
and Windows 7 ADK (especially, looking for unattend.xml settings):
http://technet.microsoft.com/en-us/library/hh824947.aspx
A Greta tool to check the Security of an Image is MSBSA:
http://www.microsoft.com/en-us/download/details.aspx?id=7558

Have fun,
Alexander

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s




%d bloggers like this: