Deploying Windows Hosts

This usage guide helps you deploy hosts running Microsoft Windows. orcharhino can deploy hosts running Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022.

Prerequisites and Used Tools

You require the following tools and files to create an installation media for windows:

Extracting VMware Drivers

  1. Download the VMware tools and open the .iso file in a virtual drive.

  2. Create a directory, for example C:\Extract, where you want to extract the VMware tools into.

  3. Open a Powershell and change into the virtual drive.

  4. Run .\setup.exe /A /P C:\Extract with the last parameter being the directory you have extracted the VMware tools into.

  5. Follow the installation through the GUI and set the installation path to the second path. You find the required drivers in C:\Extract\VMware\VMware Tools\VMware\Drivers as defined in the second step.

Creating a Windows Image

  1. Clone the repository to your local machine running Windows.

  2. Navigate to the local git repository and create a folder under sources\amd64\ for each operating system. There is already a directory for Windows Server 2016.

  3. Copy the .iso file of the operating system to the corresponding folder.

  4. Create a directory called drivers under winpe and copy the VMware drivers into it.

  5. Open a Powershell with administrator privileges and navigate to the local git repository.

  6. Create Windows image using the following command:


TFTP Extension

orcharhino requires ipxe.lkrn to be present in the TFTP directory to boot hosts running Windows.

  1. Download this file from

  2. Copy ipxe.lkrn using scp from your local machine to

Uploading ISO File

To create an installation media, you must first upload the .iso file to your orcharhino instance and then create an installation media entry.

  1. Copy the directory {local git repository}\finalized\amd64\{version} to your orcharhino to /var/www/html/pub/installation_media/windows/{version}.

  2. Copy the directory {local git repository}\winpe\drivers to your orcharhino to /var/www/html/pub/installation_media/windows/{version}.

    You can freely choose the directory structure after /var/www/html/pub/.

You can now reach the files over HTTP, for example

Creating an Installation Medium Entry

Navigate to Hosts > Installation Media and click the Create Medium button.

Creating an installation medium
  • Enter a Name (1).

  • Enter the Path (2) to the installation media on your orcharhino.

    The path must start with http. Provisioning over HTTPS is not supported.

  • Select Windows from the Operating System Family drop down menu (3).

  • Optional: Select an organization and location context.

  • Click Submit (4) to save your input to orcharhino.

Creating an Operating System Entry

Navigate to Hosts > Operating Systems and click the Create Operating System button.

Creating an operating system
  • Enter a Name (1).

  • Enter the Major Version (2) for your Windows host. This example uses Windows Server 2016, which makes the major version 2016.

  • Leave the Minor Version field (3) empty.

  • Optional: Add a Description (4).

  • Select the Family (5) of the operating system, that is Windows.

  • Select the Root Password Hash (6), that is Base64-Windows.

  • Select the Architectures (7).

Associate the partition table on the Partition Table tab:

Creating an operating system
  • Select the Windows Default Partition Table.

    If the partition table does not appear in the list, ensure it is associated to the proper organization and location context.

Add the previously created installation media entry for Windows Server 2016 local in the Installation Media tab:

Creating an operating system
  • Select the Windows Server 2016 local installation media.

Create the following parameters on the Parameters tab:

Creating an operating system
  • Add the wimImageName parameter of type string and value Windows Server 2016 SERVERSTANDARD.

    You can find the proper ImageName for each operating system in the images.ini file. The file is located at {local git repository}\finalized\amd64\2016\sources\.

Click the Submit button to save the operating system entry to orcharhino.

Creating an Architecture Entry

Create an architecture with the name x86_64 if it is not already present.

  1. Navigate to Hosts > Architectures.

  2. Click the Create Architecture button.

  3. Enter the name x86_64.

  4. Associate it to the previously created operating system entry.

Associating Provisioning Templates

Associate the provisioning templates to the newly created operating system entry for Windows.

  1. Navigate to Hosts > Provisioning Templates.

  2. Repeat the following procedure for each template:

    1. Select the Windows default finish template and navigate to the Association tab.

    2. Select the newly created operating system entry for Windows and associate it with the provisioning template.

      If a template does not appear in the list of provisioning template, ensure it is associated to the proper organization and location context.

Creating a Host Group

Navigate to Configure > Host Groups and click the Create Host Group button.

Enter a name and set the deploy on and compute profile options.

Creating a host group
  • Select the Architecture (1).

  • Select the previously created Operating System (2).

  • Choose All Media from the Media Selection menu (3).

  • Select the previously created Media (4).

  • Select the Windows Default Partition Table Partition Table (5).

  • In the PXE loader (6) drop down menu, select the PXELinux BIOS item.

  • Optional: Set a Root Password (7). If empty, each host must receive a root password ahead of provisioning.

  • Click Submit (8) to create a host group. Settings on other tabs are optional.

Deploying Windows Hosts

  1. Navigate to Hosts > Create Hosts and click Create Host.

  2. Select the previously created host group for Windows

  3. Adjust other settings as necessary.

  4. Click Submit.

You can now deploy virtual machines running Windows both boot disk based as well as network based. You can use static IP addresses when deploying hosts using boot disk.

Additionally, you can deploy image based hosts on VMware for which you need to create an image using the VMware tools and the Windows user data template.

Optional Host Parameters

You can optionally set the following parameters when provisioning hosts:

Variable Default Value Note


boolean set to false


string set to enable


string set to winrm


Ports to access hosts through Ansible (5985 and 5986)


Password to access hosts through Ansible


User account to access hosts through Ansible; defaults to administrator if no user is selected


If you use ansible_port 5986, the Ansible HTTP port 5985 will be closed for security. If you want to keep this port open, set this parameter to true.


If you use ansible_port 5986, unencrypted authentication will be disabled. If you want to enable it, set this parameter to true.


Set this to ignore if you use Ansible with self-signed certificates.


You can use the following auth_methods to connect to the host using Ansible: basic, ntlm, kerberos, and credssp.


Domain if domain join is required


Organization Unit if domain join is executed; defaults to the default OU of the connected AD if empty; must use distinguishedName


Create the ansible_user as a local admin or AD account as part of the local admin group?


Administrator user account for joining a domain; must use pre-Windows 2000 login (Domain\User)


Administrator account password for joining a domain; non alphanumeric characters are known to cause issues


Enable the firewall?



Save log files on the host after deployment


Show server manager when logging in to Windows Server?


Global HTTP proxy if required


global HTTP proxy port; is required if HTTP proxy is set



Keyboard layout after booting the host; popular alternatives are en-GB and en-US



Disabling the default local administrator account?


Password for unsafe domain join



Network profile association; required if there is no domain join, else there are issues with winrm


New hosts will try to patch during the installation. If you do not want to patch hosts, set this parameter to false.


NTP server; required if the host cannot access the internet or the DNS or DHCP server does not provide NTP


Create a firewall rule to allow ICMP?


Create a firewall rule to allow remote_desktop?



Language of the host


GMT Standard Time

Time zone of the host



System UI language


Path to the Puppet .msi file if Puppet is enabled


Windows license key


Windows license key owner