Capture lockdown and branding features (Industry 8.1)
7/8/2014
Learn how to capture the lockdown and branding features from your Windows Embedded 8.1 Industry (Industry 8.1) reference device and deploy them by using the Lockdown Baseline Tool (LBT).
The new Lockdown Baseline Tool (LBT) (LabBaselineGenerator.exe) captures lockdown and branding features from a reference device and puts them into a cabinet file that you can then import into System Center Configuration Manager. From Configuration Manager, you can use compliance settings to deploy the settings to multiple devices.
The LBT creates Windows PowerShell scripts of the settings for the following features:
- Windows 8 Application Launcher
- Assigned access
- Dialog Filter
- Gesture Filter
- Keyboard Filter
- Shell Launcher
- Toast Notification Filter
- Unified Write Filter (UWF)
- USB Filter
Syntax
LabBaselineGenerator.exe [-u [domain\] username] [-p password | *] [-n cabinetname] [machinename]
Parameters
- domain
The user domain of the account that has the lockdown and branding settings that you want to capture.
- username
The user account name. If null, the current user’s account will be used.
- password
The user password. To prompt for the password, set this value to an asterisk (*).
- cabinetname
The name of the cabinet file that will hold the lockdown and branding settings information. This name will also be used as the baseline name in Configuration Manager. If null, “LabBaseline” will be used as the name.
- machinename
The name of the device from which to fetch the lockdown and branding settings. If null, the local device will be used as the name.
Deploy lockdown and branding features from a reference device
Prerequisites
- The desired lockdown and branding features are set on a reference device.
- The LBT is on your development machine in %Windir%\System32. You can download it from the Microsoft Download Center if needed.
- You have access to Configuration Manager, a remote client management suite.
To capture lockdown and branding features
Run the LBT as shown in the following example, where the parameters identify your reference device.
LabBaselineGenerator.exe [-u [domain\] username] [-p password | *] [-n cabinetname] [machinename]The tool creates Windows PowerShell scripts of the settings for the lockdown and branding features that are on machinename and puts them in a configuration XML file. It then creates a cabinet file with the name that you specified as cabinetname.
Import the cabinet file into Configuration Manager under compliance settings. For more information, see How to Create Configuration Baselines for Compliance Settings in Configuration Manager on TechNet.
Deploy the configuration baseline to devices. For more information, see How to Deploy Configuration Baselines in Configuration Manager on TechNet.
The Windows PowerShell scripts run automatically and apply the lockdown and branding settings to the other devices.
See Also
Tasks
Configure devices by using Configuration Manager