Great post over on The Deployment Guys by Richard Smith.

Read the full post and download the scripts here.

A request that I have had from a number of customers lately goes like this:

“we would like to have MDT 2010 download and apply all critical and security updates during image engineering from the Internet, but the device we are using as a reference machine is in the lab network which doesn’t get Group Policy applied and which therefore doesn’t get the proxy server settings required to connect to the Internet” I covered this scenario in a previous post where I discussed using the inbuilt MDT 2010 tasks for applying Windows Updates and how this can streamline the image engineering process.

To enable the reference device to connect to the Internet during Image Engineering, I have a pair of scripts that are added to the task sequence which configure the proxy settings (first script) and then remove the proxy settings (second script) prior to image capture.

The script examples attached to this post should be extracted from the zip file and dropped into the scripts folder in your MDT 2010 Deployment Share

You should then add a Run Command task around where the Tatoo task is in the State Restore phase of your task sequence to execute the first script as cscript CFG-ProxySetting.wsf /Proxy:< or IP Address>:<Port> /Exceptions:local – replacing the command line options with your own proxy server details

for example – cscript CFG-ProxySetting.wsf /Proxy:PROXYSRV01.CONTOSO.COM:8080 /Exceptions:local (you must use both the /Proxy: and /Exceptions: command line options)


To remove the setting place a Run Command just before the Prepare to Capture Image group to execute cscript CFG-ClearProxySetting.wsf


You could combine these two scripts into a single script with a little re-writing to use command line arguments to add the proxy (/AddProxy) and clear the proxy (/ClearProxy) if you wanted to be efficient in your custom script use.