| Lesson 3 |
Windows Server 2025 Answer Files |
| Objective |
Explain how to apply unattend.xml answer files to a Windows Server 2025
deployment image using Windows SIM, Configuration Manager, and Windows Setup |
Windows Server 2025 Answer Files and Image Configuration
A core principle of enterprise OS deployment is maintaining a single reusable base image
and applying different configuration data at deployment time — rather than copying the
entire image for every variation. In Windows Server 2025, this is achieved through
XML answer files, normally named unattend.xml or
autounattend.xml, authored with Windows System Image Manager
(Windows SIM) and applied through a deployment mechanism such as Microsoft
Configuration Manager, Windows Setup, or Sysprep.
The Windows Server 2025 Answer File: unattend.xml
Windows Setup uses a component-based XML architecture introduced with Windows Vista and
Windows Server 2008. Setup configuration is expressed in
unattend.xml for
administrator-supplied files, or
autounattend.xml for files discovered
automatically by Windows Setup from defined locations — the root of removable media,
the root of the OS drive, or a location specified by the administrator.
Answer files are organized into
configuration passes that correspond to
distinct stages of the Windows Setup process. A single
unattend.xml file
can contain settings for multiple passes; the deployment mechanism determines which passes
are processed in a given scenario.
| Configuration Pass |
When Applied |
windowsPE |
During the WinPE boot phase, before Windows Setup begins |
offlineServicing |
Applied to an offline image by DISM servicing operations |
generalize |
During Sysprep generalization, before the image is captured |
specialize |
First boot after image application; machine-specific settings such as
computer name and network configuration |
auditSystem |
During Audit Mode, running as the SYSTEM account |
auditUser |
During Audit Mode, running as the built-in Administrator account |
oobeSystem |
Out-of-box experience phase; first-logon configuration and user setup |
Authoring Answer Files with Windows System Image Manager
Windows System Image Manager (Windows SIM) is the Microsoft tool for
creating and validating Windows Setup answer files. It is included in the Windows
Assessment and Deployment Kit (ADK) and is available without additional licensing cost
for organizations that hold Windows Server licenses.
Windows SIM works by opening a Windows Server 2025
.wim file or its
pre-generated catalog (
.clg). It reads the internal catalog of components
and settings available in that image and presents them in a structured interface where
the administrator can add settings to the answer file for each configuration pass. The
tool validates each setting against the image's component catalog and reports errors
before the answer file is deployed.
The workflow for creating a reusable answer file with Windows SIM is:
- Open Windows SIM from the ADK Deployment and Imaging Tools Environment
- Select File > Select Windows Image and browse to the
install.wim from the Windows Server 2025 installation media or a
previously captured image
- Create a new answer file or open an existing one
- Expand the Windows Image panel to browse available components
- Right-click a component and select the configuration pass in which it should
be applied — for example, add the
Microsoft-Windows-Shell-Setup
component to specialize to set the computer name pattern
- Configure the component's properties in the answer file
- Select Tools > Validate Answer File to check for errors
- Save the answer file as
unattend.xml
Important: Windows SIM does not permanently bind the answer file to the
WIM. It uses the image or catalog to determine which components and settings are valid
for that Windows version. The resulting answer file is a standalone XML document supplied
to Setup separately at deployment time. The same answer file can be reused across
multiple deployments of the same Windows version.
One Image, Multiple Configurations
A single Windows Server 2025 install.wim, captured WIM, or generalized
VHD/VHDX can be reused for multiple deployment configurations. Each deployment supplies
a different answer file — or different task-sequence variables and scripts — without
the base image being duplicated. The following mechanisms achieve this in current
Windows Server 2025 environments.
Configuration Manager Task Sequences
Microsoft Configuration Manager is the enterprise standard for this model. A single
install.wim is imported once as an OS image package. Multiple task sequences
are then built around that image — for example, one for an IIS web server, one for a
SQL Server host, one for a domain controller — each referencing the same base WIM while
supplying a different unattend.xml package.
The Apply Operating System Image task-sequence step explicitly supports
a custom unattended Setup answer file. The administrator specifies the package containing
the unattend.xml and its path within the package. If no custom answer file
is supplied, Configuration Manager generates a minimal one automatically. Task-sequence
variables can be substituted into the answer file at runtime, providing per-machine or
per-role customization without maintaining a separate answer file for every combination.
The image package is never duplicated. Only the answer file and task-sequence steps differ
between deployment profiles.
Windows Setup /unattend: and Sysprep /unattend:
For custom deployment pipelines that do not use Configuration Manager, the answer file
is supplied directly to Windows Setup or Sysprep on the command line:
Setup.exe /unattend:path\to\unattend.xml
Sysprep.exe /generalize /oobe /unattend:path\to\unattend.xml
A deployment script applies the base WIM to disk using DISM, then starts Windows Setup
with the appropriate unattend.xml for the target server role. This achieves
the same result as maintaining multiple configurations against one image — using scripted
automation rather than a console UI.
DISM /Apply-Unattend — Offline Servicing Only
DISM /Apply-Unattend applies answer-file settings to an offline
mounted image — specifically the offlineServicing configuration
pass. It is an image-servicing tool for injecting packages, features, and offline settings
into a WIM before deployment, not a complete unattended Setup mechanism.
DISM.exe /Image:C:\ /Apply-Unattend:X:\Configs\WebServer_Unattend.xml
This command applies only the offlineServicing pass from the answer file to
the mounted image. Settings in windowsPE, specialize, and
oobeSystem passes are not processed by this command — those require Windows
Setup or Sysprep to run. DISM is one supporting tool in a deployment pipeline, not the
primary answer-file delivery mechanism.
Virtual Machine and Cloud Provisioning
In virtualized and cloud environments, a single generalized VHD/VHDX or cloud marketplace
image of Windows Server 2025 is maintained. When provisioning a VM, infrastructure tools
supply configuration at deployment time:
- Sysprep + unattend.xml — specializes a generalized image on first
boot, applying machine-specific settings from the answer file
- Azure VM Custom Script Extension — runs post-provisioning
PowerShell scripts to configure roles and applications
- Bicep / ARM templates — define VM properties and inject
configuration data at provisioning time
- Packer — builds customized machine images from a base image and
a provisioning script, producing role-specific images without manual configuration
These tools preserve the "one base image, many configurations" principle in environments
where the server estate is managed through infrastructure-as-code rather than on-premises
PXE deployment.
WDS and Answer Files in Windows Server 2025
The traditional WDS workflow of selecting an image in the WDS console and assigning an
answer file through the console properties is not the recommended model for Windows
Server 2025. The WDS installation-media deployment workflow is partially deprecated for
operating systems after Windows Server 2022.
WDS remains usable as a PXE transport provider to boot machines into a custom WinPE
environment. From WinPE, a deployment script can apply a WIM and supply an answer file
via Setup.exe /unattend: or Sysprep. Answer-file association in this
pipeline is handled by the deployment script, not by a WDS console property.
For organizations using Configuration Manager, its native PXE responder removes the WDS
dependency. Configuration Manager task sequences handle both WIM application and
answer-file injection in a single supported workflow.
Note: Microsoft retired the Microsoft Deployment Toolkit in 2026. MDT
is not supported for Windows 11 or Windows Server 2025 and must not be recommended as a
current deployment path.
Answer File Deployment Summary
| Mechanism |
Answer File Delivery Method |
Passes Processed |
| Configuration Manager task sequence |
Answer-file package referenced in the Apply OS Image step |
All passes relevant to the deployment stage |
| Windows Setup command line |
Setup.exe /unattend:path\to\unattend.xml |
windowsPE, specialize, oobeSystem |
| Sysprep command line |
Sysprep.exe /unattend:path\to\unattend.xml |
generalize, oobeSystem |
| DISM /Apply-Unattend |
Applied to offline mounted image |
offlineServicing only |
| autounattend.xml (automatic discovery) |
Placed at root of USB drive or OS drive; found automatically by Setup |
All passes relevant to the deployment stage |
| Cloud VM provisioning |
Sysprep + unattend.xml; or VM extensions; or Packer provisioning script |
Depends on provisioning stage |
The next lesson covers how to restrict deployment image access to designated users or
security groups in a Windows Server 2025 environment.
