For best results, ensure you are on 7.5 SP1 or higher.
These are the known steps to capture Surface Pro images successfully:
- Update Surface Pro firmware to latest version.
- Trusted Platform Module (TPM) [Disabled].
- Secure Boot:
- For 7.5 Secure Boot [Disabled].
- For 7.6 you can have it [Enabled] or [Disabled].
- For the Surface Pro 4 you may need to change the Secure Boot configuration "Secure Boot certificate keyset" from "Microsoft only" to "Microsoft & 3rd party CA."
- Configure Alternate System Boot Order [Network -> USB -> SSD].
- Configure External Ports [All ports enabled].
- Use Microsoft Branded USB-Network dongle (model: 1663) or dock for PXE boot.
- Bitlocker needs to be disabled and the drive needs to be decrypted (If the drive is listed with a padlock, even an unlocked padlock one of these steps is still required to be disabled).
- Import 'Surface Gigabit Ethernet Adapter' driver (msu30x64w8a.inf) into the 'Preboot Database' and rebuild your PXE image.
- Note: Remove any copies of the 'Surface Ethernet Adapter' driver (msu64w8.inf) from your 'Preboot Database,' as it will be matched first for the NIC and cause a failure.
- For Surface Pro 4 also import the ManagementEngine driver (heci.inf).
- Run the procedure in TECH223595: Remove ALL Applications before attempting capture.
- In the advanced options of the image create and restore task add the following ghost command line switches will need to be added -ntexact -ntil -ntic
Note! The time to PXE boot a Surface Pro is significantly longer than a machine with a dedicated NIC. This is likely due to the difference in performance of a dedicated network card compared to the USB dongle. For further information, contact the hardware manufacturer.
Deployment Solution 7.5 all versions.
Deployment Solution 7.6 all versions.
Deployment Solution 8.x all versions.
Microsoft Surface Pro 3 tablets.
Microsoft Surface Pro 4 tablets.