diff --git a/azure-devops/create-new-agent-image.ps1 b/azure-devops/create-new-agent-image.ps1
new file mode 100644
index 00000000000..3031771d3e2
--- /dev/null
+++ b/azure-devops/create-new-agent-image.ps1
@@ -0,0 +1,292 @@
+# Copyright (c) Microsoft Corporation.
+# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+#
+# This script assumes you have installed Azure tools into PowerShell by following the instructions
+# at https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-3.6.1
+# or are running from Azure Cloud Shell.
+#
+
+$Location = 'westus2'
+$Prefix = 'StlBuild-' + (Get-Date -Format 'yyyy-MM-dd')
+$VMSize = 'Standard_D16s_v3'
+$ProtoVMName = 'PROTOTYPE'
+$LiveVMPrefix = 'BUILD'
+$WindowsServerSku = '2019-Datacenter'
+
+$ProgressActivity = 'Creating Scale Set'
+$TotalProgress = 8
+$CurrentProgress = 1
+
+function Find-ResourceGroupNameCollision {
+  Param([string]$Test, $Resources)
+
+  foreach ($resource in $Resources) {
+    if ($resource.ResourceGroupName -eq $Test) {
+      return $true
+    }
+  }
+
+  return $false
+}
+
+function Find-ResourceGroupName {
+  Param([string] $Prefix)
+
+  $resources = Get-AzResourceGroup
+  $result = $Prefix
+  $suffix = 0
+  while (Find-ResourceGroupNameCollision -Test $result -Resources $resources) {
+    $suffix++
+    $result = "$Prefix-$suffix"
+  }
+
+  return $result
+}
+
+function New-Password {
+  Param ([int] $Length = 32)
+
+  $Chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
+  $result = ''
+  for ($idx = 0; $idx -lt $Length; $idx++) {
+    $result += $Chars[(Get-Random -Minimum 0 -Maximum $Chars.Length)]
+  }
+
+  return $result
+}
+
+function Start-WaitForShutdown {
+  Param([string]$ResourceGroupName, [string]$Name)
+
+  Write-Output "Waiting for $Name to stop..."
+  while ($true) {
+    $Vm = Get-AzVM -ResourceGroupName $ResourceGroupName -Name $Name -Status
+    $highestStatus = $Vm.Statuses.Count
+    for ($idx = 0; $idx -lt $highestStatus; $idx++) {
+      if ($Vm.Statuses[$idx].Code -eq 'PowerState/stopped') {
+        return
+      }
+    }
+
+    Write-Output "... not stopped yet, sleeping for 10 seconds"
+    Start-Sleep -Seconds 10
+  }
+}
+
+function Write-Reminders {
+  Param([string]$AdminPW)
+
+  Write-Output "Location: $Location"
+  Write-Output "Resource group name: $ResourceGroupName"
+  Write-Output "User name: AdminUser"
+  Write-Output "Using generated password: $AdminPW"
+}
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Creating resource group' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+$ResourceGroupName = Find-ResourceGroupName $Prefix
+$AdminPW = New-Password
+Write-Reminders $AdminPW
+New-AzResourceGroup -Name $ResourceGroupName -Location $Location
+$AdminPWSecure = ConvertTo-SecureString $AdminPW -AsPlainText -Force
+$Credential = New-Object System.Management.Automation.PSCredential ("AdminUser", $AdminPWSecure)
+
+####################################################################################################
+Write-Progress `
+  -Activity 'Creating prototype VM' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+$allowHttp = New-AzNetworkSecurityRuleConfig `
+  -Name AllowHTTP `
+  -Description 'Allow HTTP(S)' `
+  -Access Allow `
+  -Protocol Tcp `
+  -Direction Outbound `
+  -Priority 1008 `
+  -SourceAddressPrefix * `
+  -SourcePortRange * `
+  -DestinationAddressPrefix * `
+  -DestinationPortRange @(80, 443)
+
+$allowDns = New-AzNetworkSecurityRuleConfig `
+  -Name AllowDNS `
+  -Description 'Allow DNS' `
+  -Access Allow `
+  -Protocol * `
+  -Direction Outbound `
+  -Priority 1009 `
+  -SourceAddressPrefix * `
+  -SourcePortRange * `
+  -DestinationAddressPrefix * `
+  -DestinationPortRange 53
+
+$denyEverythingElse = New-AzNetworkSecurityRuleConfig `
+  -Name DenyElse `
+  -Description 'Deny everything else' `
+  -Access Deny `
+  -Protocol * `
+  -Direction Outbound `
+  -Priority 1010 `
+  -SourceAddressPrefix * `
+  -SourcePortRange * `
+  -DestinationAddressPrefix * `
+  -DestinationPortRange *
+
+$NetworkSecurityGroupName = $ResourceGroupName + 'NetworkSecurity'
+$NetworkSecurityGroup = New-AzNetworkSecurityGroup `
+  -Name $NetworkSecurityGroupName `
+  -ResourceGroupName $ResourceGroupName `
+  -Location $Location `
+  -SecurityRules @($allowHttp, $allowDns, $denyEverythingElse)
+
+$SubnetName = $ResourceGroupName + 'Subnet'
+$Subnet = New-AzVirtualNetworkSubnetConfig `
+  -Name $SubnetName `
+  -AddressPrefix "10.0.0.0/16" `
+  -NetworkSecurityGroup $NetworkSecurityGroup
+
+$VirtualNetworkName = $ResourceGroupName + 'Network'
+$VirtualNetwork = New-AzVirtualNetwork `
+  -Name $VirtualNetworkName `
+  -ResourceGroupName $ResourceGroupName `
+  -Location $Location `
+  -AddressPrefix "10.0.0.0/16" `
+  -Subnet $Subnet
+
+$NicName = $ResourceGroupName + 'NIC'
+$Nic = New-AzNetworkInterface `
+  -Name $NicName `
+  -ResourceGroupName $ResourceGroupName `
+  -Location $Location `
+  -Subnet $VirtualNetwork.Subnets[0]
+
+$VM = New-AzVMConfig -Name $ProtoVMName -VMSize $VMSize
+$VM = Set-AzVMOperatingSystem `
+  -VM $VM `
+  -Windows `
+  -ComputerName $ProtoVMName `
+  -Credential $Credential `
+  -ProvisionVMAgent `
+  -EnableAutoUpdate
+
+$VM = Add-AzVMNetworkInterface -VM $VM -Id $Nic.Id
+$VM = Set-AzVMSourceImage `
+  -VM $VM `
+  -PublisherName 'MicrosoftWindowsServer' `
+  -Offer 'WindowsServer' `
+  -Skus $WindowsServerSku `
+  -Version latest
+
+$VM = Set-AzVMBootDiagnostic -VM $VM -Disable
+New-AzVm `
+  -ResourceGroupName $ResourceGroupName `
+  -Location $Location `
+  -VM $VM
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Running provisioning script in VM' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+$VM = Get-AzVM -ResourceGroupName $ResourceGroupName -Name $ProtoVMName
+$PrototypeOSDiskName = $VM.StorageProfile.OsDisk.Name
+Invoke-AzVMRunCommand `
+  -ResourceGroupName $ResourceGroupName `
+  -VMName $ProtoVMName `
+  -CommandId 'RunPowerShellScript' `
+  -ScriptPath "$PSScriptRoot\provision-image.ps1" `
+  -Parameter @{AdminUserPassword = $AdminPW }
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Waiting for VM to shut down' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+Start-WaitForShutdown -ResourceGroupName $ResourceGroupName -Name $ProtoVMName
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Converting VM to Image' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+Stop-AzVM `
+  -ResourceGroupName $ResourceGroupName `
+  -Name $ProtoVMName `
+  -Force
+
+Set-AzVM `
+  -ResourceGroupName $ResourceGroupName `
+  -Name $ProtoVMName `
+  -Generalized
+
+$ImageConfig = New-AzImageConfig -Location $Location -SourceVirtualMachineId $VM.ID
+$Image = New-AzImage -Image $ImageConfig -ImageName $ProtoVMName -ResourceGroupName $ResourceGroupName
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Deleting unused VM and disk' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+Remove-AzVM -Id $VM.ID -Force
+Remove-AzDisk -ResourceGroupName $ResourceGroupName -DiskName $PrototypeOSDiskName -Force
+
+####################################################################################################
+Write-Progress `
+  -Activity $ProgressActivity `
+  -Status 'Creating scale set' `
+  -PercentComplete (100 / $TotalProgress * $CurrentProgress++)
+
+$VmssIpConfigName = $ResourceGroupName + 'VmssIpConfig'
+$VmssIpConfig = New-AzVmssIpConfig -SubnetId $Nic.IpConfigurations[0].Subnet.Id -Primary -Name $VmssIpConfigName
+$VmssName = $ResourceGroupName + 'Vmss'
+$Vmss = New-AzVmssConfig `
+  -Location $Location `
+  -SkuCapacity 2 `
+  -SkuName $VMSize `
+  -SkuTier 'Standard' `
+  -Overprovision $false `
+  -UpgradePolicyMode Manual `
+  -EvictionPolicy Delete `
+  -ScaleInPolicy OldestVM `
+  -Priority Spot `
+  -MaxPrice -1
+
+$Vmss = Add-AzVmssNetworkInterfaceConfiguration `
+  -VirtualMachineScaleSet $Vmss `
+  -Primary $true `
+  -IpConfiguration $VmssIpConfig `
+  -NetworkSecurityGroupId $NetworkSecurityGroup.Id `
+  -Name $NicName
+
+$Vmss = Set-AzVmssOsProfile `
+  -VirtualMachineScaleSet $Vmss `
+  -ComputerNamePrefix $LiveVMPrefix `
+  -AdminUsername 'AdminUser' `
+  -AdminPassword $AdminPW `
+  -WindowsConfigurationProvisionVMAgent $true `
+  -WindowsConfigurationEnableAutomaticUpdate $true
+
+$Vmss = Set-AzVmssStorageProfile `
+  -VirtualMachineScaleSet $Vmss `
+  -OsDiskCreateOption 'FromImage' `
+  -OsDiskCaching ReadWrite `
+  -ImageReferenceId $Image.Id `
+  -ManagedDisk Premium_LRS
+
+New-AzVmss `
+  -ResourceGroupName $ResourceGroupName `
+  -Name $VmssName `
+  -VirtualMachineScaleSet $Vmss
+
+####################################################################################################
+Write-Progress -Activity $ProgressActivity -Completed
+Write-Reminders $AdminPW
+Write-Output 'Finished!'
diff --git a/azure-devops/install-scale-set-extension.ps1 b/azure-devops/install-scale-set-extension.ps1
deleted file mode 100644
index ce5d7cb6a0c..00000000000
--- a/azure-devops/install-scale-set-extension.ps1
+++ /dev/null
@@ -1,25 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
-
-# Change "ADMIN_PASSWORD" to the "AdminUser" password on the virtual machines, and "PERSONAL_ACCESS_TOKEN" to
-# a PAT with permission to register Azure DevOps agents, then paste the contents of this file into an Azure
-# Cloud Shell PowerShell prompt.
-
-# When demoing changes you may need to change the "STL/master" part of the below URIs to point to your desired
-# branch.
-
-$customConfig = @{
-    "fileUris" = @("https://raw.githubusercontent.com/microsoft/STL/master/azure-devops/provision-agent.ps1",
-    "https://raw.githubusercontent.com/microsoft/STL/master/azure-devops/provision-agent-bootstrap.cmd"
-    )
-}
-$protectedConfig = @{
-    "commandToExecute" =
-        "C:\Windows\System32\cmd.exe /c provision-agent-bootstrap.cmd ADMIN_PASSWORD PERSONAL_ACCESS_TOKEN"
-}
-$resourceGroupName = 'CppStlGithubBuildMachines'
-$vmScaleSetName = 'MSVCSTL-BUILD'
-$vmss = Get-AzVmss -ResourceGroupName $resourceGroupName -VMScaleSetName $vmScaleSetName
-$vmss = Add-AzVmssExtension -VirtualMachineScaleSet $vmss  -Name "DeployAgent" -Publisher "Microsoft.Compute" `
-  -Type "CustomScriptExtension" -TypeHandlerVersion 1.10 -Setting $customConfig -ProtectedSetting $protectedConfig
-Update-AzVmss -ResourceGroupName $resourceGroupName -Name vmScaleSetName -VirtualMachineScaleSet $vmss
diff --git a/azure-devops/provision-agent-bootstrap.cmd b/azure-devops/provision-agent-bootstrap.cmd
deleted file mode 100644
index dd65df2080a..00000000000
--- a/azure-devops/provision-agent-bootstrap.cmd
+++ /dev/null
@@ -1,10 +0,0 @@
-:: Copyright (c) Microsoft Corporation.
-:: SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
-
-:: Switches to the "AdminUser" account, then runs provision-agent.ps1
-:: %1 AdminUser password
-:: %2 Azure Pipelines PAT
-
-curl.exe -L -o "%TEMP%\psexec.exe" https://live.sysinternals.com/PsExec64.exe
-"%TEMP%\psexec.exe" -u AdminUser -p "%1" -accepteula -h C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe ^
-  -ExecutionPolicy Unrestricted -File "%CD%\provision-agent.ps1" "%2"
diff --git a/azure-devops/provision-agent.ps1 b/azure-devops/provision-agent.ps1
deleted file mode 100644
index e477c4c9a09..00000000000
--- a/azure-devops/provision-agent.ps1
+++ /dev/null
@@ -1,208 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
-
-# Sets up VM for use as a build machine
-
-# $args[0] Azure Pipelines Personal Access Token
-
-Write-Output 'Starting...'
-
-if (Test-Path 'C:\agent') {
-    Write-Output 'Agent already installed, terminating.'
-    exit 0
-}
-
-Write-Output 'Agent does not appear to be installed.'
-
-$AzureDevOpsUrl = 'https://dev.azure.com/vclibs/'
-$AzureDevOpsPool = 'STL'
-[string]$PersonalAccessToken = $args[0]
-
-$WorkLoads =  '--add Microsoft.VisualStudio.Component.VC.CLI.Support ' + `
-              '--add Microsoft.VisualStudio.Component.VC.Tools.x86.x64 ' + `
-              '--add Microsoft.VisualStudio.Component.VC.Tools.ARM64 ' + `
-              '--add Microsoft.VisualStudio.Component.VC.Tools.ARM ' + `
-              '--add Microsoft.VisualStudio.Component.Windows10SDK.18362 '
-
-$ReleaseInPath = 'Preview'
-$Sku = 'Enterprise'
-$VisualStudioBootstrapperUrl = 'https://aka.ms/vs/16/pre/vs_buildtools.exe'
-$CMakeUrl = 'https://github.com/Kitware/CMake/releases/download/v3.16.5/cmake-3.16.5-win64-x64.msi'
-$LlvmUrl = 'https://releases.llvm.org/9.0.0/LLVM-9.0.0-win64.exe'
-$NinjaUrl = 'https://github.com/ninja-build/ninja/releases/download/v1.10.0/ninja-win.zip'
-$PythonUrl = 'https://www.python.org/ftp/python/3.8.2/python-3.8.2-amd64.exe'
-$VstsAgentUrl = 'https://vstsagentpackage.azureedge.net/agent/2.165.0/vsts-agent-win-x64-2.165.0.zip'
-
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-
-Function PrintMsiExitCodeMessage
-{
-    Param(
-        $ExitCode
-    )
-
-    if ($ExitCode -eq 0 -or $ExitCode -eq 3010)
-    {
-        Write-Output "Installation successful! Exited with $ExitCode."
-    }
-    else
-    {
-        Write-Output "Installation failed! Exited with $ExitCode."
-        exit $ExitCode
-    }
-}
-
-Function InstallVisualStudio
-{
-    Param(
-        [String]$WorkLoads,
-        [String]$Sku,
-        [String]$BootstrapperUrl
-    )
-
-    try
-    {
-        Write-Output 'Downloading Visual Studio...'
-        [string]$bootstrapperExe = Join-Path ([System.IO.Path]::GetTempPath()) `
-            ([System.IO.Path]::GetRandomFileName() + '.exe')
-        curl.exe -L -o $bootstrapperExe $BootstrapperUrl
-
-        Write-Output "Installing Visual Studio..."
-        $args = ('/c', $bootstrapperExe, $WorkLoads, '--quiet', '--norestart', '--wait', '--nocache')
-        $proc = Start-Process -FilePath cmd.exe -ArgumentList $args -Wait -PassThru
-        PrintMsiExitCodeMessage $proc.ExitCode
-    }
-    catch
-    {
-        Write-Output 'Failed to install Visual Studio!'
-        Write-Output $_.Exception.Message
-        exit 1
-    }
-}
-
-Function InstallMSI
-{
-    Param(
-        [String]$Name,
-        [String]$Url
-    )
-
-    try
-    {
-        Write-Output "Downloading $Name..."
-        [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
-        [string]$msiPath = $randomRoot + '.msi'
-        curl.exe -L -o $msiPath $Url
-
-        Write-Output "Installing $Name..."
-        $args = @('/i', $msiPath, '/norestart', '/quiet', '/qn')
-        $proc = Start-Process -FilePath 'msiexec.exe' -ArgumentList $args -Wait -PassThru
-        PrintMsiExitCodeMessage $proc.ExitCode
-    }
-    catch
-    {
-        Write-Output "Failed to install $Name!"
-        Write-Output $_.Exception.Message
-        exit -1
-    }
-}
-
-Function InstallZip
-{
-    Param(
-        [String]$Name,
-        [String]$Url,
-        [String]$Dir
-    )
-
-    try
-    {
-        Write-Output "Downloading $Name..."
-        [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
-        [string]$zipPath = $randomRoot + '.zip'
-        curl.exe -L -o $zipPath $Url
-
-        Write-Output "Installing $Name..."
-        Expand-Archive -Path $zipPath -DestinationPath $Dir -Force
-    }
-    catch
-    {
-        Write-Output "Failed to install $Name!"
-        Write-Output $_.Exception.Message
-        exit -1
-    }
-}
-
-Function InstallLLVM
-{
-    Param(
-        [String]$Url
-    )
-
-    try
-    {
-        Write-Output 'Downloading LLVM...'
-        [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
-        [string]$installerPath = $randomRoot + '.exe'
-        curl.exe -L -o $installerPath $Url
-
-        Write-Output 'Installing LLVM...'
-        $proc = Start-Process -FilePath $installerPath -ArgumentList @('/S') -NoNewWindow -Wait -PassThru
-        PrintMsiExitCodeMessage $proc.ExitCode
-    }
-    catch
-    {
-        Write-Output "Failed to install LLVM!"
-        Write-Output $_.Exception.Message
-        exit -1
-    }
-}
-
-Function InstallPython
-{
-    Param(
-        [String]$Url
-    )
-
-    Write-Output 'Downloading Python...'
-    [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
-    [string]$installerPath = $randomRoot + '.exe'
-    curl.exe -L -o $installerPath $Url
-
-    Write-Output 'Installing Python...'
-    $proc = Start-Process -FilePath $installerPath -ArgumentList `
-        @('/passive', 'InstallAllUsers=1', 'PrependPath=1', 'CompileAll=1') -Wait -PassThru
-    $exitCode = $proc.ExitCode
-    if ($exitCode -eq 0)
-    {
-        Write-Output 'Installation successful!'
-    }
-    else
-    {
-        Write-Output "Installation failed! Exited with $exitCode."
-        exit $exitCode
-    }
-}
-
-if ([string]::IsNullOrEmpty($PersonalAccessToken) `
-    -or ($PersonalAccessToken -eq 'PERSONAL_ACCESS_TOKEN')) {
-    Write-Output 'You forgot to fill in your personal access token.'
-    exit 1
-}
-
-InstallMSI 'CMake' $CMakeUrl
-InstallZip 'Ninja' $NinjaUrl 'C:\Program Files\CMake\bin'
-InstallLLVM $LlvmUrl
-InstallPython $PythonUrl
-InstallVisualStudio -WorkLoads $WorkLoads -Sku $Sku -BootstrapperUrl $VisualStudioBootstrapperUrl
-Write-Output 'Updating PATH...'
-$environmentKey = Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Environment' -Name Path
-Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Environment' `
-    -Name Path `
-    -Value "$($environmentKey.Path);C:\Program Files\CMake\bin;C:\Program Files\LLVM\bin"
-InstallZip 'Azure DevOps Agent' $VstsAgentUrl 'C:\agent'
-Add-MpPreference -ExclusionPath C:\agent
-& 'C:\agent\config.cmd' --unattended --url $AzureDevOpsUrl --auth pat --token $PersonalAccessToken `
-    --pool $AzureDevOpsPool --replace --runAsService --work D:\
-shutdown /r /t 10
diff --git a/azure-devops/provision-image.ps1 b/azure-devops/provision-image.ps1
new file mode 100644
index 00000000000..767298414a8
--- /dev/null
+++ b/azure-devops/provision-image.ps1
@@ -0,0 +1,193 @@
+# Copyright (c) Microsoft Corporation.
+# SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+#
+# Sets up a machine in preparation to become a build machine image, optionally switching to
+# AdminUser first.
+param(
+  [string]$AdminUserPassword = $null
+)
+
+if (-not [string]::IsNullOrEmpty($AdminUserPassword)) {
+  Write-Output "AdminUser password supplied; switching to AdminUser"
+  $PsExecPath = $env:TEMP + "\psexec.exe"
+  Write-Output "Downloading psexec to $PsExecPath"
+  & curl.exe -L -o $PsExecPath -s -S https://live.sysinternals.com/PsExec64.exe
+  $PsExecArgs = @(
+    '-u',
+    'AdminUser',
+    '-p',
+    $AdminUserPassword,
+    '-accepteula',
+    '-h',
+    'C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe',
+    '-ExecutionPolicy',
+    'Unrestricted',
+    '-File',
+    $PSCommandPath
+  )
+  Write-Output "Executing $PsExecPath @PsExecArgs"
+  & $PsExecPath @PsExecArgs
+  exit $?
+}
+
+$WorkLoads = '--add Microsoft.VisualStudio.Component.VC.CLI.Support ' + `
+  '--add Microsoft.VisualStudio.Component.VC.Tools.x86.x64 ' + `
+  '--add Microsoft.VisualStudio.Component.VC.Tools.ARM64 ' + `
+  '--add Microsoft.VisualStudio.Component.VC.Tools.ARM ' + `
+  '--add Microsoft.VisualStudio.Component.Windows10SDK.18362 '
+
+$ReleaseInPath = 'Preview'
+$Sku = 'Enterprise'
+$VisualStudioBootstrapperUrl = 'https://aka.ms/vs/16/pre/vs_buildtools.exe'
+$CMakeUrl = 'https://github.com/Kitware/CMake/releases/download/v3.16.5/cmake-3.16.5-win64-x64.msi'
+$LlvmUrl = 'https://releases.llvm.org/9.0.0/LLVM-9.0.0-win64.exe'
+$NinjaUrl = 'https://github.com/ninja-build/ninja/releases/download/v1.10.0/ninja-win.zip'
+$PythonUrl = 'https://www.python.org/ftp/python/3.8.2/python-3.8.2-amd64.exe'
+
+$ErrorActionPreference = 'Stop'
+$ProgressPreference = 'SilentlyContinue'
+
+Function PrintMsiExitCodeMessage {
+  Param(
+    $ExitCode
+  )
+
+  if ($ExitCode -eq 0 -or $ExitCode -eq 3010) {
+    Write-Output "Installation successful! Exited with $ExitCode."
+  }
+  else {
+    Write-Output "Installation failed! Exited with $ExitCode."
+    exit $ExitCode
+  }
+}
+
+Function InstallVisualStudio {
+  Param(
+    [String]$WorkLoads,
+    [String]$Sku,
+    [String]$BootstrapperUrl
+  )
+
+  try {
+    Write-Output 'Downloading Visual Studio...'
+    [string]$bootstrapperExe = Join-Path ([System.IO.Path]::GetTempPath()) `
+    ([System.IO.Path]::GetRandomFileName() + '.exe')
+    curl.exe -L -o $bootstrapperExe $BootstrapperUrl
+
+    Write-Output "Installing Visual Studio..."
+    $args = ('/c', $bootstrapperExe, $WorkLoads, '--quiet', '--norestart', '--wait', '--nocache')
+    $proc = Start-Process -FilePath cmd.exe -ArgumentList $args -Wait -PassThru
+    PrintMsiExitCodeMessage $proc.ExitCode
+  }
+  catch {
+    Write-Output 'Failed to install Visual Studio!'
+    Write-Output $_.Exception.Message
+    exit 1
+  }
+}
+
+Function InstallMSI {
+  Param(
+    [String]$Name,
+    [String]$Url
+  )
+
+  try {
+    Write-Output "Downloading $Name..."
+    [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
+    [string]$msiPath = $randomRoot + '.msi'
+    curl.exe -L -o $msiPath $Url
+
+    Write-Output "Installing $Name..."
+    $args = @('/i', $msiPath, '/norestart', '/quiet', '/qn')
+    $proc = Start-Process -FilePath 'msiexec.exe' -ArgumentList $args -Wait -PassThru
+    PrintMsiExitCodeMessage $proc.ExitCode
+  }
+  catch {
+    Write-Output "Failed to install $Name!"
+    Write-Output $_.Exception.Message
+    exit -1
+  }
+}
+
+Function InstallZip {
+  Param(
+    [String]$Name,
+    [String]$Url,
+    [String]$Dir
+  )
+
+  try {
+    Write-Output "Downloading $Name..."
+    [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
+    [string]$zipPath = $randomRoot + '.zip'
+    curl.exe -L -o $zipPath $Url
+
+    Write-Output "Installing $Name..."
+    Expand-Archive -Path $zipPath -DestinationPath $Dir -Force
+  }
+  catch {
+    Write-Output "Failed to install $Name!"
+    Write-Output $_.Exception.Message
+    exit -1
+  }
+}
+
+Function InstallLLVM {
+  Param(
+    [String]$Url
+  )
+
+  try {
+    Write-Output 'Downloading LLVM...'
+    [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
+    [string]$installerPath = $randomRoot + '.exe'
+    curl.exe -L -o $installerPath $Url
+
+    Write-Output 'Installing LLVM...'
+    $proc = Start-Process -FilePath $installerPath -ArgumentList @('/S') -NoNewWindow -Wait -PassThru
+    PrintMsiExitCodeMessage $proc.ExitCode
+  }
+  catch {
+    Write-Output "Failed to install LLVM!"
+    Write-Output $_.Exception.Message
+    exit -1
+  }
+}
+
+Function InstallPython {
+  Param(
+    [String]$Url
+  )
+
+  Write-Output 'Downloading Python...'
+  [string]$randomRoot = Join-Path ([System.IO.Path]::GetTempPath()) ([System.IO.Path]::GetRandomFileName())
+  [string]$installerPath = $randomRoot + '.exe'
+  curl.exe -L -o $installerPath $Url
+
+  Write-Output 'Installing Python...'
+  $proc = Start-Process -FilePath $installerPath -ArgumentList `
+  @('/passive', 'InstallAllUsers=1', 'PrependPath=1', 'CompileAll=1') -Wait -PassThru
+  $exitCode = $proc.ExitCode
+  if ($exitCode -eq 0) {
+    Write-Output 'Installation successful!'
+  }
+  else {
+    Write-Output "Installation failed! Exited with $exitCode."
+    exit $exitCode
+  }
+}
+
+
+Write-Output "AdminUser password not supplied; assuming already running as AdminUser"
+InstallMSI 'CMake' $CMakeUrl
+InstallZip 'Ninja' $NinjaUrl 'C:\Program Files\CMake\bin'
+InstallLLVM $LlvmUrl
+InstallPython $PythonUrl
+InstallVisualStudio -WorkLoads $WorkLoads -Sku $Sku -BootstrapperUrl $VisualStudioBootstrapperUrl
+Write-Output 'Updating PATH...'
+$environmentKey = Get-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Environment' -Name Path
+Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Environment' `
+  -Name Path `
+  -Value "$($environmentKey.Path);C:\Program Files\CMake\bin;C:\Program Files\LLVM\bin"
+C:\Windows\system32\sysprep\sysprep.exe /oobe /generalize /shutdown
diff --git a/azure-devops/run-build.yml b/azure-devops/run-build.yml
index ff2e0668bfa..426b56de3b2 100644
--- a/azure-devops/run-build.yml
+++ b/azure-devops/run-build.yml
@@ -4,7 +4,7 @@
 jobs:
 - job: ${{ parameters.targetPlatform }}
   pool:
-    name: STL
+    name: StlBuild-2020-03-24
 
   variables:
     vcpkgLocation: '$(Build.SourcesDirectory)/vcpkg'