Skip to main content

Posts

Showing posts with the label windows 7

Windows 7 / 8.1 : Dynamically load drivers in a SCCM 2012 task sequence

Windows 7 / 8.1 : Dynamically load drivers in a SCCM 2012 task sequence with Nomad Overview: Within your organisation you have many different types of computer models.  You want a single build task sequence that can dynamically select the correct driver package to install with the OS. The Answer: To achieve the dynamic selection it is necessary to implement a MDT 2013 database (supply link) in which the Task Sequence will gather the assigned PackageID based on a Model type WMI query. With this Task Sequence variable %OSDDRIVERPACKAGE% it is possible to use a command line to run an election and locate the PackageID within the local subnet. NomadPackageLocator.exe -Nomad_local -RemoveHTTPLocations -RequireNomad -HideErrorDialog -RestrictPackages=%OSDDRIVERPACKAGE% Then as a follow up step the use of SMSNomad.exe prestage command will query the DP for the package and then download the Package from the winner of the election SMSNomad.exe --s --Prestage --pp=http://%S...

SHA-1 checksums for files

To obtain the hash, you’ll need a utility that calculates SHA-1 checksums for files – fortunately Microsoft has a free download called the File Checksum Verifier Utility . Run fciv.exe from the command line on your reference PC to obtain the desired checksum:

SCCM "Closing the allow unknown computer support to take control"

Applies To: System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3 Unknown computer support is an operating system deployment feature in Configuration Manager 2007 R2 that allows unmanaged systems to be discovered and receive operating system deployment. http://technet.microsoft.com/en-us/library/cc161877.aspx ~But why is it showing up in my SCCM task sequence? ... This is not an error, it was an informational message just saying that the Task Sequence Availability Checker did not need to add the machine to a collection for task sequences to be available at the next step. This is because we have advertised the task sequences to the unknown computer collections. Any machines that boot up and request task sequences that do not have a record in SCCM will be able to start running one of those advertised task sequences. We are using non-integrated WDS which means we can’t use the unknown computer support on PXE service points. However, the issue here isn’t...

SCCM DCM What is it?

What is Desired Configuration Management (DCM)? DCM is a feature in SCCM that will provide a framework for assisting organizations in both defining and enforcing corporate policies and standards for system configurations, whether related to the operating system or an application installed on the system. Feature include authoring and scheduling, model-based design leveraging Service Modeling Language (SML) (a component of Microsoft's Dynamic Systems Initiative) which makes the features we're about to discuss possible. Some of the key scenarios that drove the features Microsoft delivered in the final release of DCM include: Regulatory Compliance - demonstrating regulatory compliance in system configurations. Not only deploying a compliant standard system configuration, but being able to periodically prove adherence to these policies. Pre and post change configuration - Verify that no unplanned changes took place during the implementation of a planned change. Monitoring for "...

NOMAD 1E not responding to a package status request

Overview : During a SCCM task sequence a specific application is to be installed.  The task sequence is designed to use a NOMAD cache to poll the source.  The sequence fails as no available cache is available. How to troubleshoot? On the NOMAD cacheing server Open regedit and check the package status details. Select the sub folder that corresponds to the cached item and review the details on the right.  You should check the following item are present and correct [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\1E\NomadBranch\PkgStatus\LDC002FE] "Percent"="100.000" "Version"="2" "CachePriority"="1" "CacheToFolder"="D:\\NomadBranchCache" "ReturnStatus"="Completed Successfully" "AlreadyCached"="0" Also check the logs for specific behaviour. C:\ProgramData\1E\NomadBranch\LogFiles The log should state "CacheStatus: (ELD)  pkgID="LDC002FE"(0) local=100.000% verified...

PXE-E32: TFTP Open Timeout

SYMPTOM When the PXE client comes up with the PXE copyright message and completes the DHCP phase, but then displays: TFTP.... After a while, the following error message is displayed: PXE-E32: TFTP open timeout Depending on the PXE client's system setup boot device list configuration, the PC then either stops or tries to boot from the next boot device in the system setup boot device list. CAUSE 1 The "PXE-E32" error indicates that the PXE did not get a reply from the TFTP server when sending a request to download its boot file. Possible causes for this problem are: 1. There is no TFTP server 2. The TFTP server is not running 3. TFTP and DHCP/BOOTP services are running on different machines, but the next-server (066) option was not specified RESOLUTION 1 Make sure that a TFTP server is set up and running. When the TFTP service is running on a different machine than the DHCP or BOOTP service, you need to add option 066 (next-server) to the DHCP/BOOTP server configuration, an...

SCCM PXE Task Sequence

Step 1 1 Check DHCP scope has option 66 with the SCCM server name set as the value. 2 WDS service is installed and running. 3 Under site Systems select the SCCM server and make sure "ConfigMgr PXE service point" role is installed 3.1 For a lab environment. Enable "Allow this PXE... to repond to incoming PXE requests" and "Respond to PXE request on all network interfaces". 4 Create a Collection called "Bare Metal OSD deployment" Step 2 5 Click on "Computer Asscocation"  > "Import computer Information" > Import single computer 5.1 Enter Computer name and MAC address to define system > Add to "Bare Metal OSD deployment" collection 6 Under the node OSD in SCCM click on "Task Sequence"> Select the TS you want to deploy to the collection > Right click and "Advertise", specify the "bare metal OSD deployments". 6.1 Set as mandatory assignemtn. Tick "Ignore maintenance windows...

SMS SCCM WDS MDT Windows 7

Tips- How to package software Switches -r Causes Setup.exe automatically to generate a silent setup file (.iss file), which is a record of the setup input, in the Windows folder.   Packages cmd files must have drive letter more info at  http://www.appdeploy.com/ tick "suppress program notifications" to stop systray bubble/add and remove programs Useful silent (un)install code: msiexec /I "xxxx.msi" transforms="xxxx.mst" /qn /norestart (/qn shows no interface, /qb shows basic progress bar) msiexec /x "xxxx.msi" /qn /norestart C:\WINDOWS\IsUninst.exe -fC:\xxx\xxx.isu -a (-a is for silent) IMAGEx Enter “ imagex /info img_file “, where “img_file” represents the location of the  WIM  file. You should see now the description of the  WIM file  as an XML file. The name of the tag for the  image number  is  IMAGE INDEX . Create a new folder where the image shall be mounted. This is the image path. Now, you can  mount the image : imagex /mount img_fi...

How to sign a powershell script

How to sign a powershell script http://blogs.technet.com/b/heyscriptingguy/archive/2010/06/16/hey-scripting-guy-how-can-i-sign-windows-powershell-scripts-with-an-enterprise-windows-pki-part-1-of-2.aspx http://blogs.technet.com/b/heyscriptingguy/archive/2010/06/17/hey-scripting-guy-how-can-i-sign-windows-powershell-scripts-with-an-enterprise-windows-pki-part-2-of-2.aspx $cert=(dir cert:currentuser\my\ -CodeSigningCert) Set-AuthenticodeSignature demoscript2.ps1 $cert -TimestampServer  http://timestamp.comodoca.com/authenticode My PKI root is called  pki.harper.labs , and it is already trusted by my domain members, as shown in the following image. I will follow these steps: Make the code signing certificate template available on my issuing certificate server. Request a code signing certificate for my user. Sign my Windows PowerShell script and run it. Deploy the code signing certificate as a trusted publisher through Active Directory. Step 1: Make the code signing certificate temp...

Powershell Change NTFS permissions

Help i am getting the error:  Set-Acl : The security identifier is not allowed to be the owner of this object. If you were getting this error with your script please see the reason below. The error is failing to change the folder’s ownership (even though you don't want to)– very frustrating! Microsoft explanation: “Unfortunately Get-ACL is missing some features. It always reads the full security descriptor even if you just want to modify the DACL. That’s why Set-ACL also wants to write the owner even if you have not changed it. Using the GetAccessControl method allows you to specify what part of the security descriptor you want to read” The key line is: $acl = (Get-Item $path).GetAccessControl("Access") How to add 'modify' access to the group 'Users' using Powershell sucessfully $username = "Users" $path = "C:\Program Files (x86)\Java" $acl = (Get-Item $path).GetAccessControl("Access") $accessrule = New-Object system.security....

Windows 7 Offline files will not go Online when connected to network

Issue Several laptop users move between networks, domain, home, etc and when they attempt to access DFS shares explorer status is working offline.  The issue only resolves it self after a reboot. Connecting directly to the share works and i am able to ping network resources.  This behavior occurs for VPN users as well. Possible Causes "slow-link mode". In win7 (with default settings) a client will enter slow-link mode if the latency to the server is above 80ms. In slow-link mode all writes are made to the local cache and a background sync only happens every 6 hours.  Depending on your connection the default slow link detection speed is 64,000 bps On client computers running Windows 7 or Windows Server 2008 R2, a shared folder automatically transitions to the slow-link mode if the round-trip latency of the network is greater than 80 milliseconds, or as configured by the "Configure slow-link mode" policy. After transitioning a folder to the slow-link mode, Offline Fil...

UAC prompt Java

How to remove the UAC elevation prompt Install Application Compatability Toolkit Right click the Database and Create a new Application Fix Provide a name for the program and vendor, then browser to jucheck.exe (C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe) The next page lists the compatibility modes. Locate and select RunAsInvoker from the list and click the Test Run button afterwards to see how the program starts with that new compatibility mode. Save the database of programs by clicking on File > Save As in the menu, e.g. uac-whitelist. The Compatibility Administrator saves the database as an sdb file on the local computer system. The database needs to be installed once. This needs to be done from an elevated command prompt. Click the Windows start button, then All Programs > Accessories. Right-click the Command Prompt entry and select to Run as Administrator from the context menu. Now issue the command sdbinst pathToUAC-Whitelist.sdb

UAC prompt Java

How to remove the UAC elevation prompt Install Application Compatability Toolkit Right click the Database and Create a new Application Fix Provide a name for the program and vendor, then browser to jucheck.exe (C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe) The next page lists the compatibility modes. Locate and select RunAsInvoker from the list and click the Test Run button afterwards to see how the program starts with that new compatibility mode. Save the database of programs by clicking on File > Save As in the menu, e.g. uac-whitelist. The Compatibility Administrator saves the database as an sdb file on the local computer system. The database needs to be installed once. This needs to be done from an elevated command prompt. Click the Windows start button, then All Programs > Accessories. Right-click the Command Prompt entry and select to Run as Administrator from the context menu. Now issue the command sdbinst pathToUAC-Whitelist.sdb

Windows 7 features

Windows 7 features To upgrade XP to Windows 7 logistically data will need to be backed up, HDD wiped, reimage with Windows 7 and restore data. Technical reasons such as file system changes are responsible for the logistic hardship. However; the benefits of Windows 7 include faster than XP-Vista performance especially where the user will notice it the most i.e. wake up speed. Windows 7 UI is dramatically different from XP or Vista and this document should hopefully explain a few of the difference. Anatomy of the Taskbar The Windows 7 Taskbar still resembles the older Windows XP Versions Tool bar but is essential more task-centric, with some great usable features added on. Old Windows XP Task Bar New Windows 7 Task Bar Icons When you open an application, an icon appears along your task bar, the same as XP. However, one of the changes Microsoft has made in Windows 7 is that it is now combining multiple files for the same program under one icon. Aero Peek This is a new feature which all...

Windows 7 Offline Files

How to completely remove Offline files. 1. Navigate to the following location in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Csc\Parameters 2. Create a new DWORDValue called FormatDatabase , with the value 1 3. Reboot (the new key we created will delete itself after rebooting along with the Offline cache)

Windows 7 Offline Files

How to completely remove Offline files. 1. Navigate to the following location in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Csc\Parameters 2. Create a new DWORDValue called FormatDatabase , with the value 1 3. Reboot (the new key we created will delete itself after rebooting along with the Offline cache)

Windows 7 Elevation UAC

How to Create a Elevated Program Shortcut without a UAC Prompt http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html  The use of a schedule task to elevate priviledges works well with programs required within the Startup folder. HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\AppCompatFlags\Layers Create a Dword, named the path to the executable:  C:\windows\regedit.exe Set it value to: RUNASINVOKER

Windows 7 Elevation UAC

How to Create a Elevated Program Shortcut without a UAC Prompt http://www.sevenforums.com/tutorials/11949-elevated-program-shortcut-without-uac-prompt-create.html  The use of a schedule task to elevate priviledges works well with programs required within the Startup folder. HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\AppCompatFlags\Layers Create a Dword, named the path to the executable:  C:\windows\regedit.exe Set it value to: RUNASINVOKER