Workstation imaging: deploy Windows hands-free, drivers and security included, with MasteriDesk
MasteriDesk is an imaging solution designed for IT directors, CISOs, infrastructure and support teams, and managed service providers: PXE detection of devices, drivers injected automatically according to the model, BIOS updates, BitLocker encryption and 9-step tracking of every deployment. Accessible from the SecuriDesk console, it can also equip your remote sites. See the features or discover SecuriDesk.
Network, USB stick, Dell, HP and Lenovo: MasteriDesk covers your deployment scenarios
Accessible directly from the SecuriDesk console, MasteriDesk orchestrates automated Windows deployment, whether as a ‘clean’ installation or by image cloning, over the local network or via standalone USB media. Drivers for Dell, HP and Lenovo business ranges are retrieved automatically; for other hardware, you add the driver package to your library yourself.
On your network or offline
- PXE network bootUEFI · Legacy BIOS
- ‘Clean’ installation or image cloning.WIM · .ISO
- Simultaneous device batchesIn batches
- Standalone USB mediaOffline
Dell, HP and Lenovo business ranges
- DellAutomatic
- HPAutomatic
- LenovoAutomatic
- Custom-built PCs and consumer rangesManual import
Workstation imaging: six questions that shape your deployments
Are you still preparing your devices one by one?
Learn moreDoes every installation meet your standards?
Learn moreDo you still spend time hunting for drivers?
Learn moreAre your devices secure from the moment they are installed?
Learn moreDo you know the status of every deployment?
Learn moreAre your remote sites as well equipped as head office?
Learn more‘I’m still preparing my devices one by one, and it takes hours’
- How long does it currently take to prepare a new device?
- Do your technicians still have to work hands-on with every machine?
- Can you identify a device’s manufacturer and exact model before installing it?
- Can you prepare a complete batch of devices at the same time?
- Can you easily find the MAC address and status of each pending device?
- How many steps does it take before a device boots into the right installation?
As soon as a device boots on the network, MasteriDesk receives it in the ‘Sas’ (its staging area) and reads its manufacturer and model via WMI. All you have to do is select the batch and launch the installation, with no hands-on intervention.
‘Every installation still depends on manual steps’
- Do all your devices receive the right system image?
- Do you activate your Windows licences device by device or centrally?
- Is every device systematically joined to the domain?
- Is encryption enabled on every device as soon as it goes into service?
- Are your standards (licences, BIOS passwords, encryption) defined once and for all?
- How many manual steps remain between unboxing and handing the device over to the user?
The MasteriDesk wizard chains together the system image and licences (ADBA, KMS or MAK), drivers and hardware, then the domain and BitLocker. Your global standards are defined just once in the Settings screen.
‘I spend too much time finding, downloading and sorting drivers’
- How many different device models are there in your fleet?
- Where do you find drivers for a model you have never deployed before?
- Does your library keep pace with manufacturers’ new ranges?
- Who maintains your driver packages, and how much time does it take them?
- Do you have to monitor each manufacturer’s XML feeds yourself?
- Does each device receive only the drivers for its model?
The MasteriDesk central repository keeps a catalogue of Dell, HP and Lenovo driver packages up to date. The right package is injected automatically, based on the detected model.
‘I can’t guarantee that every device is secure as soon as it goes into service’
- Is your devices’ BIOS up to date before they are handed over to users?
- Is TPM 2.0, essential for Windows 11, enabled on all your devices?
- Is BitLocker encryption enabled everywhere, without exception?
- Do you know where the decryption keys are backed up?
- Are your BIOS/UEFI compliance rules applied consistently?
- Can you limit the charge of laptops that stay on a docking station?
MasteriDesk updates the BIOS, enables TPM 2.0 and triggers BitLocker during post-installation, with the decryption key automatically backed up in Active Directory.
‘When a deployment fails, I don’t know at which step’
- Is an installed device necessarily an activated and encrypted one?
- Do you know the status of each device in a batch being deployed?
- Can you tell an activation failure from a BitLocker failure?
- Do you have to rerun everything when a single device fails?
- How much time do your teams spend watching installations?
- Can you track an entire batch at a glance?
MasteriDesk displays each device’s progress across 9 steps, from PXE boot to BitLocker. You can see where a deployment failed, then rerun only the devices concerned.
‘Deploying to my remote sites saturates the connection or requires a site visit’
- How many times does the same driver package cross your internet connection?
- Do your remote sites have a PXE server?
- Do you have to send a technician on site for every new device?
- How do you prepare a device for a site with no infrastructure?
- Are your USB installation sticks password-protected?
- How much of your bandwidth do your deployments consume?
The local probe caches the drivers for each model: for 10 identical devices, a single download. And for a site without a PXE server, standalone password-protected USB media.
Industrialise your device preparation
Let’s discuss your context and see together how MasteriDesk addresses your six challenges.