FAQ

A task sequence is a scripted list of steps — format disk, lay down Windows, inject drivers, install apps, join the domain — that runs automatically on the laptop. Without one, a person has to babysit each install for 1-2 hours. With one, the laptop images itself in 45 minutes while you do other work. If you're imaging more than 3-5 laptops, the time you save building the sequence pays back almost immediately.

MDT is free, lightweight, and lives on a single Windows machine — great for 10-500 devices. SCCM (now called Configuration Manager / MECM) is licensed, distributed across multiple servers, and adds patching, compliance, software metering, and inventory — designed for 500+ devices spread across sites. The task-sequence concept is the same; SCCM is the enterprise envelope around it.

Both are the same Windows 11 codebase under the hood. 24H2 is the General Availability release most enterprises run today; 25H2 is the newer feature update with refinements to Copilot+, Recall, and the Settings app. Enterprises typically wait 6-12 months after a feature update before rolling it out widely. Use 25H2 for pilot rings; keep production on 24H2 until your apps are validated.

You can run MDT on any Windows 10/11 Pro or Enterprise machine — no server license required. SCCM does need a Windows Server. Autopilot needs zero local infrastructure (cloud only). USB-install needs no infrastructure at all.

Intel VMD (Volume Management Device) is enabled in BIOS by default on G10+ Intel models. Vanilla Windows 11 setup doesn't include the VMD storage driver, so it sees zero disks. Fix: inject the Intel Rapid Storage Technology VMD driver into boot.wim (the [USB guide for the 840 G10](/hub/guides/win11-24h2-hp-840-g10-usb) shows you how), or disable VMD in BIOS.

You can — Rufus has a checkbox during USB creation to remove the TPM/Secure Boot/RAM requirements. Should you? No, not for HP business laptops. Every HP from G7 onwards has TPM 2.0 and Secure Boot. Bypassing it weakens BitLocker, Credential Guard, and Windows Hello, and Microsoft has stated unsupported installs won't get feature updates. The bypass is for old non-business PCs only.

Windows 11 24H2/25H2 auto-encrypts the disk on supported hardware (TPM 2.0 + Secure Boot + Modern Standby). Add a `manage-bde -off C:` step at the start of your task sequence and `manage-bde -on C: -used` at the end. Or let MBAM/Intune re-encrypt post-deploy. Details in [HP Quirks → BitLocker](/hub/quirks).

Two approaches. (1) For full ISO modification: mount the ISO, extract install.wim, run `DISM /Image:C:\Mount /Add-Driver /Driver:C:\HPDrivers /Recurse`, unmount with /Commit, re-pack the ISO. Heavy but creates a self-contained installer. (2) For MDT/SCCM: just drop the HP driver pack into Out-of-Box Drivers and reference it from your task sequence. Much easier — and you can swap drivers per model.

Use HP BIOS Configuration Utility (BCU) as an early task sequence step. Bundle the latest BIOS SoftPaq with your image, add a Run Command Line step: `HPBIOSUpdRec64.exe -s` (silent flash). BCU also lets you toggle BIOS settings (PXE on, TPM on, asset tag set). See [Quirks → BCU](/hub/quirks).

Yes — Autopilot is cloud-first and works with Entra ID only. You don't need on-prem AD at all. You do need an Intune license (Business Premium, E3, E5, or standalone Intune) and an Entra tenant. Hybrid join (on-prem AD + Entra) is also supported but adds complexity.

Windows 11 itself is free to install — the ISO is on microsoft.com. But to legally activate it in a business, you need a license: Volume Activation (KMS/MAK), per-device retail keys, or M365 licenses that include Windows 11 Pro/Enterprise. Skipping activation is fine for short-term lab testing but not for production.

On a G10/G11 with an NVMe SSD and gigabit Ethernet: ~45 minutes for a full Win 11 24H2 install + drivers + 4-6 apps + domain join. On G7/G8 with a SATA SSD: ~60-75 minutes. SCCM with patching enabled adds 10-20 minutes for updates. Autopilot post-OOBE provisioning is ~15-30 minutes.