Documentation
Everything you need to understand and roll out StageReady, grouped by topic.
Getting started
Concepts
Provisioning
How provisioning works
The end-to-end flow, from a blank disk to an enrolled device.
ReadWhat a setup can do (step catalogue)
Every provisioning step StageReady can run, grouped by what it's for. Turn any on or off, configure each, reorder the pipeline.
ReadApplication deployment
Ship a whole list of apps during provisioning, installed straight from the vendor, signature-verified, with no images and no re-hosting. Plus the ready-to-deploy catalogue.
ReadStep reference
Install Windows 11
True bare-metal Windows 11 install with the right OEM driver pack injected automatically. Wipes the target disk; runs only on the USB entry point.
ReadOOBE configuration
Auto-answer the out-of-box screens (region, keyboard, device name, EULA, optional Wi-Fi) and optionally skip the account screen so the device lands ready, with no duplicate admin.
ReadLanguage & region
Set the display language, keyboard layout, regional format, home location and timezone for the installed Windows and every new user. Autopilot-compatible.
ReadAutopilot registration
Capture the hardware hash and register the device into the client's Windows Autopilot via Microsoft Graph, with no manual CSV imports.
ReadDomain join
Join the device to an on-premises Active Directory domain, with the service credential resolved from the vault and never stored on the USB.
ReadLocal administrator
Create or update a managed / break-glass local admin account, with the password pulled from the vault at runtime and never stored in the template.
ReadInstall applications
Install a whole list of apps in one step from your curated catalogue, either MSI/EXE straight from the vendor with signature verification, or Winget.
ReadInstall certificate
Install a public certificate or a private-key PFX from the vault into the machine store, before any network or VPN flow that depends on it.
ReadSecure Boot check
Report whether Secure Boot is enabled and record the finding on the job, optionally failing the setup if it's off.
ReadHP BIOS configuration
Apply HP firmware settings in WinPE before Windows installs (Secure Boot, TPM, virtualization, boot and wireless) using HP's own BIOS Configuration Utility.
ReadDell BIOS configuration
Apply Dell firmware settings in WinPE before Windows installs (Secure Boot, TPM, virtualization, boot, wireless and Thunderbolt) using Dell Command | Configure.
ReadHardware update
Bring drivers, firmware, BIOS and OEM software to the manufacturer-supported level using the vendor's own tooling (Dell Command Update, HP CMSL, Lenovo). Skips cleanly on VMs.
ReadWindows Update
Run Windows Update like "Check for updates", installing OS, quality/security and Microsoft-published driver updates, rebooting and re-checking across restarts until none remain.
ReadRegistry (HKLM)
Write machine-wide registry values of any type, for third-party app configuration and settings that have no Intune equivalent.
ReadRegistry (default user)
Seed the Windows Default User profile so every new user on the machine inherits the settings. These are the per-user defaults Intune can't reach on a fresh device.
Read