OAL Auth Imaging
This document is going to focus on the current "Production" style task sequence used for OAL devices. It will mainly focus on the stucture of Auth imaging, since it what is currently being used, and the most complex.
Below is a rundown of what each step does in the Task. Some steps will be skipped because they are self explanitory or defaults from MECM.
More detailed descriptions will be in seperate documentation.
Task Sequence (Table Of Contents)
- OAL - Test - Auth Deployment
- Default Variables
- Install Operating System
- In Place Upgrade
- Disable Bitlocker
- PS1 - Uninstall Elastic
- Restart to WinPE
- Partition Disk 0 - UEFI
- Active Directory - Part 1
- OAL - Sub Task - Auth - Production
- Default Varibles
- Install Operating System
- PS1 - Dynamically Download Drivers
- Apply Operating System
- PS1 - Dynamically Apply Drivers
- Apply Windows Settings
- Apply Network Settings
- Offline Customization
- Setup Operating System
- Setup Windows and Configuration Manager
- Active Directory - Part 2
- PS1 - Copy AD PowerShell Module
- PS1 - Edit AD Computer
- PS1 - Remove AD PowerShell Module -Manufacturer Specific
- Dell Inc.
- Install - Dell Command Update
- PS1 - Dell Command Update (Disabled)
- Restart Computer (Disabled)
- VMWare, Inc.
- Install - VMware Tools
- Install Applications
- PS1 - Exit Provisioning Mode
- PS1 - Start Backgroup Stamp
- PS1 - Set Temp Power Plan
- Restart Computer
- OAL - Sub Task - Auth - Dev
- OAL - Sub Task - Wipe
- Default Variables
- PS1 - Remove Dell BIOS Settings
- PS1 - Copy AD PowerShell Module
- PS1 - Remove AD Computer
- Partition Disk 0 - UEFI
- Shutdown
- In Place Upgrade
OAL - Test - Auth Deployment
Dependencies
- Packages
- OSD - .Net Framework 3.5
- OSD - Dell Command Configure
- OSD - Scripts - Prod
- OSD - Temp Power Plan
- Applications
- OAL - Tools and Scripts
In Place Upgrade
PS1 - Uninstall Elastic
Uninstalls Elastic with the uninstall token that is set in Default Variables and the embedded script in the Task.
Active Directory - Part 1
This group gathers, prepares and removes the computer in Active Directory.
PS1 - Copy AD Powershell Module & PS1 - Remove AD PowerShell Module
- Package:
OSD - Scripts - Prod - Script:
Invoke-PSActiveDirectory.ps1
Based on if the Action script parameter is set to Add or Remove, this copies or removes to the Active Directory Powershell Module and its dependencies to the current System drive.
This is not a replacement for RSAT, just the raw components to use the module in scripts.
PS1 - Generate Computer Name
- Package:
OSD - Scripts - Prod - Script:
New-ComputerName.ps1
Generate a computer name. By default this will generate a MAC style computer name. This sets the OSDComputerName OSD Variable.
If needed you set the Type script parameter to Serial and/or set the Unit script parameter to OAL to add it as a prefix.
PS> New-ComputerName.ps1 -Type "Serial"
9FVTV44
PS> New-ComputerName.ps1 -Type "Serial" -Unit "OAL"
OAL-9FVTV44
PS1 - Get AD Information
- Package:
OSD - Scripts - Prod - Script:
Get-ADInformation.ps1
Based on the OSDComputerName value, searches for the computer in Active Directory. If computer is present, sets the COMPUTERDESCRIPTION and DEPARTMENT OSD Variables. DEPARTMENT is calculated by what OU the computer is in. The majority of the time it will be OAL.
If the computer is not found these variables will be empty but present.
PS1 - Invoke OAL Menu
- Package:
OSD - Scripts - Prod - Script:
Invoke-OALMenu.ps1 - Technical Document: Invoke-OALMenu
This is the menu used by admins to set all the values for the rest of the task. Here is the list of values gathered and set, as well as their associated OSD Variables.
- Gathered
- Computer Name:
OSDComputerName - Description:
COMPUTERDESCRIPTION - Department:
DEPARTMENT
- Computer Name:
- Set
- Computer Name:
OSDComputerName - OU Path:
OSDDomainOUName - Description:
COMPUTERDESCRIPTION - Department:
DEPARTMENT - Task:
TASK
- Computer Name:
Basic Rundown
COMPUTERDESCRIPTION is split into Building, Room, Computer Number, Release, and Role(s). The split values then prefill the menu options and roles. If the COMPUTERDESCRIPTION is not empty, all the values are prefilled, all options are locked, and the auto-continue timer is started. Users can then click the Edit button to stop the timer and edit the values.
By default the Production sub-task is selected but users do have the ability change it to the available values.
PS1 - Remove AD Computer
- Package:
OSD - Scripts - Prod - Script:
Remove-ADComputer.ps1
Based on the OSDComputerName value, this script removes the computer object if present in Active Directory. This is because rejoin is not allowed on the AUTH Domain
OAL - Sub Task - Auth - Production
This sub-task is run when the TASK OSD Variable is equal to Production
Install Operating System
PS1 - Dynamically Download Drivers & PS1 - Dynamically Apply Drivers
Theses two steps download and apply the drivers. It uses the permission stored in the MDMUsername & MDMPassword OSD variables.
Offline Customization
This group contains the items that customize the computer before the first boot.
PS1 - Set Dell BIOS Settings
- Package:
OSD - Dell Command Configure - Script:
Set-DellBIOSSettings.ps1
Sets the BIOS settings for all models of Dell computers.
Templates can be made with the Dell Command Configure wizard to edit existing tempaltes or create new ones. The templates will need to be copied into the Templates folder in the package and redistributed
To update templates in the task, change the TemplateName script parameter to the new template's name.
PS1 - Install .Net Framework 3.5
- Package:
OSD - .Net Framework 3.5 - Script:
Install-NetFramework35.ps1
Install .Net Framework 3.5 to the computer. Currently only supports 24H2 and 25H2. This package will need to be updated for every new major release of Windows. Instructions on how to do so.
PS1 - Remove Unwanted Appx Packages
Embedded script that removes a list of Appx packages. The full list is all the uncommented strings in the array.
PS1 - Set OAL Registry Keys
- Package:
OSD - Scripts - Prod - Script:
Set-OALRegistryKeys.ps1
Sets the listed enviroment varibles with their necessary values
Registry Keys
- BUILDING
- ROOM
- DEPARTMENT
- ROLE
- OAL_CN
- VERSION
- MIRDATE
- srvcomment
Setup Operating System
Active Directory - Part 2
Customizes the Active Directory computer object.
PS1 - Edit AD Computer
- Package:
OSD - Scripts - Prod - Script:
Set-ADInformation.ps1
Sets the Active Directory Description on the computer object after it joins the domain
Install Applications
List of applications that are installed as of 4/8/2026
Applications
- 7-Zip
- Audacity
- Google Chrome
- Google Drive
- Microsoft Access Runtime 2013 SP1 (Modified)
- Microsoft FSLogix Apps
- Microsoft Offile 365 - OAl - Shared
- Mozilla Firefox
- OAL-Sysinternal-Psexec-b-copy
- OAL - Tools and Scripts
- VLC Media Player
- Zoom Workspace
- 02-Recast Agent
PS1 - Exit Provisioning Mode
This is a embedded script that exit the Provisioning Mode.
PS1 - Start Backgroup Stamp
This is a embedded script that starts the OAL - Background Stamp - 1.1 Scheduled Task and disables the .
PS1 - Set Temp Power Plan
- Package:
OSD - Temp Power Plan - Script:
Get-ADInformation.ps1
Deploys a temporary power plan so the computer doesn't fall asleep before getting the assigned Power Plan from MECM.
OAL - Sub Task - Auth - Dev
This sub-task is run when the TASK OSD Variable is equal to Dev
The Dev sub task is a copy of the Production sub task that allows admins to test and develop changes needing to be made. I would recommend embedding the scripts as much as possible to minimize having to distribute packages. TSDebugMode is enabled by default.
OAL - Sub Task - Wipe
This sub-task is run when the TASK OSD Variable is equal to Wipe
As the name suggests, this wipes the devices in preperation for decommissioning or surplus. This removes the OS as well as the BIOS settings.
PS1 - Remove Dell BIOS Settings
- Package:
OSD - Scripts - Prod - Script:
Remove-DellBIOSSettings.ps1
Removes the BIOS password and factory resets all the BIOS settings applied to the computer.