There seems to be some confusion on this from other posts, but this had worked solidly for me. In short, I tend to PXE deploy a vanilla Windows 10 image using WDS and then perform all my post-installation configuration using InTune and Group Policy.
I like to keep my deployed image completely clean but one thing I always end up needing is .net 3.5 for some legacy apps.
- Grab the latest Windows 10 build ISO from either MSDN or another location
- Mount the ISO
- Copy out the \sources\install.wim file and place it in a local directory, i.e. c:\temp
- Create a mount directory, i.e. c:\temp\mount
- Find the index number on the ISO with: dism /Get-WimInfo /WimFile:c:\temp\install.wim (I use the Pro version)
- Mount the wim with: dism /mount-image /imagefile:c:\temp\install.wim /index:8 /MountDir:c:\temp\mount
- Inject /Net 3.5 with: DISM /Image:c:\temp\mount /Enable-Feature /FeatureName:NetFx3 /All /LimitAccess /Source:D:\sxs
- Unmount and commit the changes: dism /unmount-wim /mountdir:”c:\temp\mount” /commit
Now you can pop that wim into WDS and it will deploy with .Net 3.5 alresady installed.