Tanium Provision, "Bare Metal in 2026": Tanium Tech Talks #171
Tanium Provision takes a device from bare metal to domain-joined and software-ready, hands-off, from start to finish. This episode walks through the entire process, end to end.
Rob Broughall takes us through the full provisioning journey: setting up the infrastructure, building a Windows 11 bundle from the ground up, and watching a device go from bare metal to domain-joined and running software in under two hours.
In this episode you'll learn:
🛰️ How to set up provision endpoints and satellites
🌐 The DHCP options and networking basics behind PXE network boot
🖥️ How to build an OS bundle: Windows PE, the ADK, drivers, patches, and required files
🔐 How to join devices to AD or Entra ID
🎛️ How to use key values and prompts to control computer naming, BitLocker, tagging, and time zones
🔗 How to chain Provision straight into Deploy so software installs automatically
🤖 How to automate builds further with a CMDB or external web service
Whether you're setting up provisioning for the first time or refreshing a setup you built a couple of years ago, this one's a complete reference.
RESOURCES:
Docs: https://help.tanium.com/bundle/ug_provision_cloud/page/provision/overview.html
Converge Promo Code: TechTalks2026
CHAPTERS:
0:00 Intros
3:02 Provision overview: a device's full lifecycle
4:41 Retiring devices: lock, BitLocker, and secure wipe
7:50 Provision endpoints: what they are & where to place them
11:29 Endpoint roles: network boot, caching, and ODJ
15:47 Creating a Provision endpoint
22:15 Networking 101: PXE boot & DHCP options
26:36 Prerequisites: endpoint settings & utility download
29:33 Installing the ADK and Windows PE add-on
34:37 Running the ADK prep script
39:40 OS Bundle Files & the required file list
47:06 Optional files: custom PowerShell scripts
51:34 Entra ID, Autopilot, and AD service account setup
56:42 Building a Windows 11 bundle
59:02 Drivers: matching packs to make and model
1:05:19 Key values: naming, BitLocker, and prompts
1:14:10 ODJ extras, tags, time zones, and "wait for" gating
1:21:17 Booting and building a device live
1:28:00 Chaining Provision into Deploy for software
1:33:56 Automating builds with a CMDB & web service
1:36:29 Wrap-up