Coming SoonSite editionSystem & diagnostics

Golden Image Studio

Set up Windows once, perfectly, then put that exact setup on every other machine in minutes: a clean install on a reference PC or VM, your apps through winget, your settings and policies, then the image is generalised, captured, test-booted and stored in a versioned library; deploying to the next machine is a USB stick or a network boot, with its own drivers, name and account added on the way, and a report that proves each one came out identical.

The problem

Setting up one Windows PC properly takes a day: install, updates, drivers, thirty apps, settings, printers, removing what nobody asked for. Doing it again for the next five, twenty or two hundred machines is the same day repeated, and every machine ends up slightly different. Microsoft's own free toolkit for this, the Microsoft Deployment Toolkit, is out of support; Intune Autopilot needs cloud licences per user; disk cloners copy a machine's identity along with its disk and break when the hardware differs; so small businesses, schools and technicians still do it by hand.

Features

  • Build the reference the right way: a clean install from your own media (Boot Media Studio) into a Hyper-V VM or a real PC, your Windows Setup & Debloat profile applied, apps installed through winget via App Update Center, settings, printers, certificates and policies added, all recorded as a repeatable recipe so the image can be rebuilt from scratch next month
  • Generalise and capture without the usual failures: checks for the things that break Sysprep (per-user Store apps, pending updates, a signed-in Microsoft account), copies the configured profile to the default user, runs Sysprep /generalize, and captures a WIM or FFU image with a hash, a changelog and a version number
  • Drivers stay out of the image: each PC model's drivers are kept in Driver Vault and injected during deployment by hardware ID, so one image boots on a Dell, a Lenovo and a Surface
  • Deploy in minutes: from a USB stick made by Boot Media Studio, over the network from Lab Boot Server (PXE), or by baking the image into install media; the machine name, local account or domain and Entra join, department app set, wallpaper and the first-sign-in tasks are answered automatically from a per-machine or per-group list
  • Every image is test-booted in a Hyper-V VM before it is released, and every deployment ends with a check that the apps, versions, settings and drivers match the reference, in a report per machine
  • Keep it current: a monthly job adds Windows updates and app updates to the image offline (DISM servicing and a re-capture), with the recipe showing exactly what changed between versions

How it works

Build the reference

  • Clean install into a Hyper-V VM (preferred, because the hardware is neutral) or a reference PC in audit mode
  • Recipe as a file: media and edition, Windows Setup & Debloat profile, winget app list with versions, settings, printers, certificates, local policies, files to copy
  • CopyProfile so the configured desktop, taskbar and defaults become every new user's defaults
  • Audit-mode checks before capture: no Microsoft account signed in, no pending reboot, no per-user Store apps that block Sysprep, BitLocker suspended

Capture and library

  • Sysprep /generalize /oobe with an answer file, then capture to WIM (file-based, smaller, servicable) or FFU (sector-based, faster to apply) through the DISM API
  • Library with versions, hashes, sizes, changelogs and a 'tested in VM' badge; images stored on a NAS or the deployment USB
  • Offline servicing: Windows updates, drivers and app updates added to the WIM and re-captured on a schedule

Deploy

  • Per-machine list (name, group, account or domain join, department app set, serial or MAC) from a spreadsheet, or prompted on the machine
  • Drivers injected by hardware ID from Driver Vault; unknown models fall back to Windows Update drivers after first boot
  • USB from Boot Media Studio, PXE from Lab Boot Server, or an install ISO with the image inside; typical time from power-on to desktop 10 to 20 minutes
  • Post-install tasks: department apps through winget, domain or Entra join, printers, BitLocker on, Windows Update, then the verification report

Verify and refresh

  • Each deployed machine compared against the reference: apps and versions, settings, drivers present, activation state
  • Deployment log and per-machine report to Reports and, for a fleet, to Windows Version Manager's fleet view
  • Rebuild from the recipe when the next Windows version arrives, rather than patching an old image forever

Who it is for

IT technician

Twenty laptops for a new office

The reference is built in a VM in a morning; twenty mixed-model laptops are deployed from two USB sticks in an afternoon, each with its own name and drivers, and the reports show all twenty match.

Teacher with IT duties

A school computer lab

Thirty PCs are reimaged every summer from the network in an hour from Lab Boot Server, with the classroom apps and a locked-down profile.

Technician

A repair shop

Every PC that leaves the shop gets the same clean Windows with the customer's chosen apps, deployed in fifteen minutes from the shop's image library.

Benefits

  1. Set up Windows once and reuse it on every machine
  2. Ten to twenty minutes per PC instead of a day
  3. Every machine identical, with a report to prove it

Built to be trusted

  • An image is released only after it boots in a test VM
  • Every image and every deployment is hash-verified and reported
  • The recipe can rebuild the image from scratch, so nothing depends on one old capture

Good to know

Windows licensing is per device: the image carries no licence, each machine activates with its own (OEM key in firmware, retail or volume), and Office and other apps need their own licences too. Sysprep has a rearm limit and some apps (and a signed-in Microsoft account) block it, which is why the checks exist and why building in a VM is recommended. Secure Boot and TPM settings must be right in each machine's firmware before deployment. Intune Autopilot is the better fit for an organisation already in Microsoft 365 with cloud identities; this is for small businesses, schools, workshops and technicians who want the same clean setup on every PC without a server or per-seat fees.

Under the hood

For technical readers
  • DISM API (WIM and FFU)
  • Sysprep and unattend answer files
  • Windows ADK and WinPE via Rescue Studio
  • App Update Center (winget), Driver Vault, Desktop VM Studio, Boot Media Studio, Lab Boot Server
  • Reports and Jobs
Related products

Works well with

Coming SoonPro edition

Windows Version Manager

System & diagnostics

Know where every PC stands and move it forward safely.

Coming SoonPro edition

USB Quarantine

Disks & media

Plug in a USB drive you do not trust and nothing happens to your PC.

Coming Soon

Notify me when Golden Image Studio is ready

Golden Image Studio is planned for a later release. Leave your e-mail address and we will write once when it becomes available. We ask you to confirm your address first, and you can unsubscribe at any time.

Questions now? Contact our team.

Please enter a valid e-mail address.
Please tick the box so we may e-mail you.