# How to Deploy Windows 11 Enterprise using Microsoft Deployment Toolkit (MDT)
Deploying a new operating system across dozens or hundreds of corporate workstations is a logistical challenge. Manual installations via USB drives are inefficient, prone to human error, and completely unscalable.
The Microsoft Deployment Toolkit (MDT) is a free, unified collection of tools, processes, and guidance for automating desktop and server deployments. By utilizing MDT alongside Windows Deployment Services (WDS), IT administrators can execute “Lite-Touch” or “Zero-Touch” deployments of Windows 11 Enterprise over the network.
This guide details the complete workflow for setting up MDT, importing the Windows 11 Enterprise image, injecting drivers, creating a Task Sequence, and initiating a network-based deployment.
## Prerequisites
Before beginning the MDT setup, ensure your infrastructure meets the following requirements:
1. **A Windows Server (2019 or 2022):** This will host the MDT share and WDS.
2. **Active Directory, DHCP, and DNS:** Required for network booting (PXE) and domain joining.
3. **Windows Assessment and Deployment Kit (ADK) for Windows 11:** Must be installed on the server.
4. **Windows PE add-on for the ADK:** Must be installed on the server alongside the ADK.
5. **Windows 11 Enterprise ISO:** Downloaded from the Microsoft Volume Licensing Service Center (VLSC).
6. **MDT Installation File:** Downloaded from the official Microsoft website.
## Step 1: Install MDT and the ADK
The order of installation is critical.
1. Install the **Windows ADK**. During setup, select the following features:
– Deployment Tools
– User State Migration Tool (USMT)
2. Install the **Windows PE add-on** for the ADK.
3. Install the **Microsoft Deployment Toolkit**. This is a straightforward “Next, Next, Finish” installation.
## Step 2: Create the Deployment Share
The Deployment Share is the central repository where your operating system images, applications, drivers, and task sequences are stored.
1. Open the **Deployment Workbench** (installed with MDT).
2. Right-click on **Deployment Shares** in the left pane and select **New Deployment Share**.
3. Choose a path on your server (e.g., `D:\DeploymentShare`). Ensure this drive has sufficient storage space.
4. Set the share name (e.g., `DeploymentShare$`). *Note: Adding the `$` makes it a hidden share on the network, which is a recommended security practice.*
5. Provide a descriptive name and click through the wizard to accept the defaults for the remaining options.
## Step 3: Import the Windows 11 Enterprise Operating System
Next, you must add the Windows 11 installation files to the Workbench.
1. Mount the Windows 11 Enterprise ISO on your server.
2. In the Deployment Workbench, expand your new Deployment Share, right-click **Operating Systems**, and select **Import Operating System**.
3. Select **Full set of source files**.
4. Browse to the drive letter where the ISO is mounted (e.g., `E:\`).
5. Provide a destination directory name (e.g., `Windows 11 Enterprise x64`).
6. Complete the wizard. MDT will copy the entire contents of the ISO into the Deployment Share.
## Step 4: Manage Out-of-Box Drivers
To ensure Windows 11 installs successfully on various hardware models, you must inject drivers (such as network and storage drivers) during deployment.
1. Download the enterprise driver packs (usually in CAB or ZIP format) provided by your hardware manufacturers (Dell, HP, Lenovo).
2. Extract the driver packs on the server.
3. In the Deployment Workbench, right-click **Out-of-Box Drivers** and create a folder for each manufacturer and model (e.g., `Dell \ Latitude 5430`).
4. Right-click the newly created folder and select **Import Drivers**.
5. Browse to the extracted driver files and complete the wizard. MDT will automatically catalog the `.inf` files.
## Step 5: Create a Task Sequence
A Task Sequence dictates the exact steps the deployment process will follow—from formatting the hard drive to injecting drivers and installing the OS.
1. Right-click **Task Sequences** and select **New Task Sequence**.
2. Assign a Task Sequence ID (e.g., `W11-ENT-01`) and a name (e.g., `Deploy Windows 11 Enterprise`).
3. Select the **Standard Client Task Sequence** template.
4. Select the Windows 11 Enterprise operating system you imported in Step 3.
5. Choose **Do not specify a product key at this time** (assuming you use KMS for volume activation).
6. Provide an organization name and a local Administrator password.
7. Finish the wizard.
### Customizing the Task Sequence (Crucial for Windows 11)
Windows 11 requires a TPM 2.0 chip and Secure Boot. If you are deploying to Hyper-V virtual machines for testing, ensure you have enabled a Virtual TPM and Secure Boot in the VM settings. For physical hardware, ensure BIOS settings are correct. The standard MDT task sequence natively supports these requirements without modification.
## Step 6: Configure Deployment Rules (CustomSettings.ini)
To achieve a “Lite-Touch” deployment, you can automate many of the setup prompts by editing the MDT configuration rules.
1. Right-click your Deployment Share and select **Properties**.
2. Navigate to the **Rules** tab.
3. Modify the `CustomSettings.ini` file to automate domain joins and skip unnecessary wizard panes. Example:
“`ini
[Settings]
Priority=Default
Properties=MyCustomProperty
SkipCapture=YES
SkipAdminPassword=YES
SkipProductKey=YES
SkipComputerBackup=YES
SkipBitLocker=YES
JoinDomain=corp.yourdomain.com
DomainAdmin=mdt_join
DomainAdminDomain=corp
DomainAdminPassword=YourSecurePassword
“`
*Note: Ensure the `mdt_join` account has limited privileges, specifically only the right to join machines to the domain.*
## Step 7: Update the Deployment Share and Configure WDS
Finally, generate the boot image that client computers will use to connect to MDT.
1. Right-click the Deployment Share and select **Update Deployment Share**.
2. Choose **Completely regenerate the boot images**. This will generate a Windows PE ISO and WIM file in the `\Boot` folder of your deployment share.
To allow computers to boot over the network (PXE boot):
1. Open the **Windows Deployment Services (WDS)** console on your server.
2. Expand your server, right-click **Boot Images**, and select **Add Boot Image**.
3. Browse to the `LiteTouchPE_x64.wim` file generated by MDT (located in `D:\DeploymentShare\Boot`).
4. Finish the wizard.
## Conclusion
Your MDT environment is now ready. When you power on a client computer connected to the corporate network and press the PXE boot key (usually F12), it will connect to WDS, download the LiteTouch Windows PE image, prompt for any non-automated settings, and seamlessly deploy Windows 11 Enterprise alongside your customized drivers and configurations.