If you are deploying Windows using MDT 2010 with Lite Touch, the user at the target computer can press F8 during the Windows PE portion of the deployment and break into a command prompt window. You can disable F8 functionality in Windows PE however by doing the following: open the unattend_pe_x86.xml and unattend_pe_x64.xml files using Notepad and replace “/Bootstrap” with “/BootstrapNoSF8”. These XML files are found in the templates folder of your deployment share.
Mitch Tulloch is a Microsoft Most Valuable Professional (MVP) and widely recognized expert on Windows administration, deployment and virtualization. For more tips by Mitch you can follow him on Twitter or friend him on Facebook.