born to learn!

Hi all,

Our scenario is that we have a fleet of existing Desktops which don't have Bitlocker enabled and only have one partition configured. We also have a few hundred laptops which do have Bitlocker enabled and have two partitions configured. I have been asked to enable Bitlocker on all Desktops, old and new as well as for refresg. I've got a process for getting Bitlocker working on existing Desktops and also with new Desktops but am having a little trouble with the refresh scenario where we re-image an existing Desktop and want to use USMT.

We do have two OSD TS already configured, one for USMT without Bitlocker and one for Bitlocker but without USMT and I need to combine the two. I've added a Disabled Bitlocker step (but this fails if I'm booting straight via PXE and not from within Windows). I've also read that I need to disabled the 'Pre-provision Bitlocker' step (which I am going to test). The format and partition step has the condition to check 'SMSTSClientCache not exist' but I've still found that the partition gets formated. I'm not sure what I'm missing and I haven't managed to find any guides or posts which are completely helpful so far.

Any help would be great.

During my OSD task sequence I use the install applications step and use the coalesced method with variables.

At random some applications would fail with the following error:

The task sequence execution engine failed to install application Microsoft Application Virtualization Desktop Client 4.6.1.20870(ScopeId_5044B817-FBEF-4B2F-B59E-822F9D1320BD/Application_f5a3125d-cb7f-49a5-af12-5e16ed11e79d) that was specified through TS variable for action (Install Base Application) in the group () with exit code 16389.

Any idea how to get this installed successfully on a consistent basis?

Hello All,

Facing this issue from couple of days after googling and performed certain steps to remediate this issue but no success.

Issue,

While installing OS Deployment at task sequence to "get computer name" deployment becomes failed with error shown below,

 ----------------ERROR-----------------------------

Set a global environment variable _SMSTSNextInstructionPointer=3       TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a TS execution environment variable _SMSTSNextInstructionPointer=3         TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a global environment variable _SMSTSInstructionStackString=0          TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a TS execution environment variable _SMSTSInstructionStackString=0            TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Save the current environment block       TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Successfully save execution state and environment to local hard disk      TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Start executing an instruction. Instruction name: Enter Computer Name. Instruction pointer: 3  TSManager         10/30/2015 2:30:44 PM          1328 (0x0530)

Set a global environment variable _SMSTSCurrentActionName=Enter Computer Name TSManager         10/30/2015 2:30:44 PM         1328 (0x0530)

Set a global environment variable _SMSTSNextInstructionPointer=3       TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a local default variable SMSTSDisableWow64Redirection       TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a local default variable _SMSTSRunCommandLineAsUser      TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set a global environment variable _SMSTSLogPath=X:\WINDOWS\TEMP\SMSTSLog        TSManager         10/30/2015 2:30:44 PM         1328 (0x0530)

Expand a string: smsswd.exe /run:PAK00119 cscript.exe getcomputername.vbs                TSManager         10/30/2015 2:30:44 PM         1328 (0x0530)

Expand a string:                TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Command line for extension .exe is "%1" %*      TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Set command line: smsswd.exe /run:PAK00119 cscript.exe getcomputername.vbs          TSManager         10/30/2015 2:30:44 PM         1328 (0x0530)

Start executing the command line: smsswd.exe /run:PAK00119 cscript.exe getcomputername.vbs          TSManager                10/30/2015 2:30:44 PM  1328 (0x0530)

!--------------------------------------------------------------------------------------------!   TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Expand a string: WinPEandFullOS              TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Executing command line: smsswd.exe /run:PAK00119 cscript.exe getcomputername.vbs             TSManager         10/30/2015 2:30:44 PM          1328 (0x0530)

[ smsswd.exe ] InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

PackageID = 'PAK00119'                InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

BaseVar = '', ContinueOnError=''               InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

ProgramName = 'cscript.exe getcomputername.vbs'      InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

SwdAction = '0001'          InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

ResolveSource flags: 0x00000000              InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

SMSTSPersistContent: . The content for package PAK00119 will be persisted       InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

DownloadOnDemand flag is true. Attempting to download content locally for Package PAK00119.            InstallSoftware                10/30/2015 2:30:44 PM  1648 (0x0670)

Locations: Multicast = 0, HTTP = 1, SMB = 0.         InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Package Flags: 0x01000000           InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Multicast is not enabled for the package.              InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Trying http://ServerFQDN.pk/SMS_DP_SMSPKG$/PAK00119.    InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

GetDirectoryListing() entered    InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Initializing HTTP transport.           InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Setting URL = http://ServerFQDN.pk/SMS_DP_SMSPKG$/PAK00119.     InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

   Address=http://ServerFQDN.pk, Scheme=http, Object=/SMS_DP_SMSPKG$/PAK00119, Port=80.        InstallSoftware                10/30/2015 2:30:44 PM  1648 (0x0670)

Setting Authenticator.   InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Set authenticator in transport    InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

WinHttp credentials set                InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

CLibSMSMessageWinHttpTransport::Send: URL:serverFQDN:80  PROPFIND /SMS_DP_SMSPKG$/PAK00119                InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Error. Status code 404 returned InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

dwHttpResultCode >= 200 && dwHttpResultCode <= 299, HRESULT=80190194 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,824)         InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Http result: 404 InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

SendResourceRequest() failed. 80190194             InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

SendResourceRequest(), HRESULT=80190194 (e:\nts_sccm_release\sms\framework\tscore\downloadcontent.cpp,516)                InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

oDavRequest.GetDirectoryListing (setDirs, setFiles), HRESULT=80190194 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,2516)               InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Download() failed. 80190194.     InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

DownloadContentAndVerifyHash() failed. 80070002.      InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

DownloadContentAndVerifyHash ( pszPackageID, L"SMSPackage", saHttpContentSources, saSMBContentSources, saMulticastContentSources, sDestination, dwFlags, L"", 0, dwPackageFlags, mapNetworkAccess ), HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,3052)               InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

DownloadContentLocally (pszSource, sSourceDirectory, dwFlags, hUserToken, mapNetworkAccess), HRESULT=80070002 (e:\nts_sccm_release\sms\framework\tscore\resolvesource.cpp,3273)               InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

TS::Utility::ResolveSource (pszPkgID, sPath, 0, hUserToken, mapNetworkAccess), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\runcommandline.cpp,399)      InstallSoftware 10/30/2015 2:30:44 PM          1648 (0x0670)

Failed to resolve the source for SMS PKGID=PAK00119, hr=0x80070002  InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

cmd.Execute(pszPkgID, sProgramName, dwCmdLineExitCode), HRESULT=80070002 (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\main.cpp,372)              InstallSoftware 10/30/2015 2:30:44 PM         1648 (0x0670)

Install Software failed to run command line, hr=0x80070002        InstallSoftware 10/30/2015 2:30:44 PM  1648 (0x0670)

Process completed with exit code 2147942402   TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

!--------------------------------------------------------------------------------------------!   TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

Failed to run the action: Enter Computer Name.

The system cannot find the file specified. (Error: 80070002; Source: Windows)    TSManager         10/30/2015 2:30:44 PM  1328 (0x0530)

-------------------------------------------------------------------------------------------------

Performed certain steps.

1. Verified NA account.

2. DP are set on anonymous authentication

3. Set the variable for RetryCount=5 and DelayCount=15

But no success. Please help

Have struggling to make Restart Computer step work on UEFI enabled machines. Does someone know what can cause this?

SCCM 2012 R2 SP1 with MDT 2013 and ADK 10

The log consist lines when things fail:

If I press F8 and do disk clean with diskpart and do reboot, then Restart Computer step starts working. If I try to reinstall computer everything starts again. Seems like it requires to have disk without partitions before machine is doing PXE boot. If partitions already available, it will fail. 

I tried also to create completely empty TS with only basic steps. Added reboot after disk partitioning step and it will fail if disk had partitions before booting WinPE. 

Log when disk clean done and things succeed: 

I have read several posts that don't truly fit my issue but I may be wrong but I need help. Let me provide as much details as I can in hopes of resolving my issue.

Network was recently segmented

SCCM 2012 R2 is a VM on x.x.0.0 VLAN 100
Desktops/Laptops are on x.x.20.0 VLAN 20

I did not have this issue prior to segmenting the network and I enabled DHCP Scope options 66 and 67, Option 60 N/A as the DNS and SCCM are not on the same server.

Option 66: FQDN of SCCM server
Option 67: smsboot\x86\wdsnbp.com

When I PXE boot the client sees the deployment server, hit F12 option and it gives error: PXE-M0F: Exiting Intel Boot Agent.
I added a second NIC to the VM and put it on the x.x.20.0 subnet and VLAN tagged 20 on there.

Still the same result. I see that the client gets an IP address from DHCP which is on the x.x.0.0 subnet, I check the Address Leases and what I see may be the issue but not 100% sure on my theory.

Instead of the normal 12 Hex MAC address it is coming up with the GUID address that I see in PXE, think this is also called the SMSBIOS GUID from what I have read.

The Client Machine is a Lenovo T540p if that makes a difference. I thought about removing the WDS feature and reading but I am hesitant on that as it applied to other issues that is not quite like mine.

Any Suggestions would be greatful, thank you!

SCCM 2012 R2 OSD Windows 8.1 x64 image drop.

During the image drop the driver package step suddenly looses access! Troubleshooting in cmd window run ipconfig /all the NIC settings are gone. This Task Sequence works without issue with other system models. I found a workaround where I open a cmd window and periodically run the ipconfig routine every 15 seconds and the driver package continues and able to build. I have contacted the vendor and the NIC driver is the latest for "Realtek USB GBE Family Controller" rtu30x64w8.inf DriverVer   = 07/19/2013,8.7.0719.2013

Hunting Realtek site for driver nada, Google found some drivers but have to experiment and see.

Anybody have any experiences like this?

Thanks!

I´m having serious problem after R2 upgrade and I´m in a hurry to fix this, because OSD in production is interrupted.

So, before R2 upgrade, OSD with W7 x64 was working fine. Image had 2 indexes and it was captured with MDT based task, with 2 partitions (which is wrong, I know).

After I performed R2 upgrade, we noticed that Windows started go to D: drive. PreserveDrive letter variable has no effect, since image was captured previously in the wrong way. After I forced the image to go to C: By modifying Apply Image step (I changed from  OSDisk to Logical C:), I got W7 go to C: but now I can see BDEDrive letter in Windows Explorer. Enabling or disabling"do not assign drive letter to this partition" at BDEDrive partition has also no effect.

In WinPE and OSPhase, I can see drive letters with diskpart and BDEDrive has always come up with letter.

Capturing new image will take longer time to test everything else, so that´s why I´m trying to make this work with old image. CM 2012 R2 non-CU is with MDT 2013 and we´re using UDI based MDT tasks.

Any help or sightview is good, share you thoughts please :)

I'm fairly new to making images but i created a TS to run and build intel NUC's they are very basic and i have had it success twice. Then after a while i tried to image another same model and everything but i continuously am getting errors 0x800700A1 and 0x8004001, i have looked them up (also when the boot image was made they didn't enable command prompt so i cant use cmtrace when it fails) i have done the diskpart, select disk 0, clean. ive even gone though and made partitions. Last time i got an error saying it could not find an active partition and then i cleaned it and i got the other error....any advice would be greatly appreciated...

regards,

Mike

Hey all,

Redid my reference images and now I got an issue with several machines I tried doing bare metal OSD on. 

The TS aborts somehow, it still thinks it's running, after Setup Windows and ConfigMgr. After that step it reboots and I'm greeted with a weird Win 7 logon screen where the font kinda looks like Windings (the font folder on the machine is almost empty, that's why).

Looked at the ccmsetup log. This error is listed: http://social.technet.microsoft.com/Forums/en-US/ee4e31cd-d456-44f4-a980-6a785d393d84/ccmsetup-failed-with-error-code-0x80040154-in-ccmsetuplog?forum=configmanagerdeployment

The log also complains about BITS, too low version to be able to install ConfigMgr. But obviously Win 7 contains BITS v 4, so I don't get what happens.

None of the apps I install in the reference image build I'm able to start (IE 10, Office apps), Office is not even listed in Add/Remove Programs.

I have redone the reference images two times, once in plain MDT 2013 and once in SCCM. 

The error is inconsistent. It happens most frequently on Dell Precision T1700 machines, but not always. Sometimes there's no error when installing the ConfigMgr client and I don't get any font issues, but I still can't start Office apps or IE 10. This is driving me mad.

ccmsetup.log and smsts.log files are here if anyone wants to take a look: http://1drv.ms/1ETazJx

Please help!

Hello everyone

I'm having an incident with a new model I'm trying to deploy (HP EliteBook 820 G2) which is not getting the image, any other model is working fine. We are using PXE boot with SCCM 2012.

After loading files it is just getting stuck then it reboots and tries to boot from the hard disk.

I've opened up a support call to MS about this problem but i'm not getting much help or direction from them with this issue.  I'd like to reach out to everyone here to see if they are experiencing the same problems with Windows 7 UEFI booting.  There is a lot of content out there with SCCM UEFI PXE booting for Windows 8/8.1/10 and i'm sure this process works flawlessly on those OS versions.  Fact is, i'm still on Windows 7 x64 SP1 for my organization and would like for this to work.  If I can get the UEFI partitions working correctly on a windows 7 task sequence, I can probably leverage the Windows 10 upgrade feature down the road when my organization is ready to pull the trigger.  Here is my environment. 

-SCCM2012 R2 SP1 CU1

-MDT 2013 U1 (re-released version) integrated with SCCM

-ADK10 

-"Plain vanilla" Windows 7 x64 SP1 enterprise image (install.wim)

In SCCM, I have built an integrated MDT task sequence using the plain vanilla install.wim image.  The problem I have is that when the task sequence reaches the Apply Drivers step, things go funky and does the following:

-Drivers are downloaded and installed (as expected on a Dell Latitude E5430).

-Very briefly the ConfigMgr client bits downloads and requests a restart

-Upon the restart, the system hangs with the following message:

Windows Boot Manager
File: \EFI\Microsoft\Boot\BCD
Code: 0xc000000d
Status: An error occurred while attempting to read the boot configuration data

If I enable "secure boot" in the BIOS and re-try the task sequence again, I get a different error:

Non-bootable Devices Strike F1 to retry, F2 for setup utility, F5 to run onboard diagnostics

I've read around the support forums that "Secure Boot" was not supported in Windows 7 and must be turned off in order to image a windows 7 with UEFI properly:

http://wibier.me/uefi-generation-2-vm-windows-7-sp1-and-hyper-v-server-2012-r2-or-windows-8-1/

After not solving the imaging problem on a Dell Latitude E5430, I decided to stand up a Server 2012 R2 server with HyperV enabled.  I created a Gen2 VM with "Secure Boot" turned off.  I did get UEFI PXe to work on the Dell Latitude E5430 and so UEFI PXe booting to the Gen2 VM was no problem.  However I am still getting the same error upon reboot; this time it just "hangs" at the "Starting Windows" splash screen.  If I turn on "Secure Boot" in the Gen2 VM BIOS, I can replicate the same error as the Non-bootable Device error.  

Troubleshooting further:  I found this post from a fellow Microsoft PFE Justin Chaflant which fits my ConfigMgr environment:

http://blogs.technet.com/b/jchalfant/archive/2015/09/29/configuration-manager-2012-sp2-r2-sp1-incorrectly-sizes-partitions-during-formatting-steps.aspx

Results: I am still not able to get past the "Starting Windows" screen with these changes implemented.  

Troubleshooting much further:  I uninstalled ADK10, re-downloaded and installed ADK10 and rebuilt both Boot.wim (x86) and (x64) again from scratch; considering this awesome blog post from Brandon Linton:

http://blogs.technet.com/b/brandonlinton/archive/2015/07/30/windows-10-adk-boot-image-updates-for-configuration-manager.aspx

Result: Still no go on the image. 

Troubleshooting much much further:  I said skip the MDT integrated task sequence.  Build a simple Windows 7 TS deployment with no USMT/bitlocker steps enabled.  Simplest TS you can get while implementing the partitioning adjustments from Justin Chaflant. 

Results: No bueno

Now i'm at a lost here.  I have no other ideas to troubleshoot and i'm just thinking this is just a design task that was broken during the upgrade from R2 -> SP1.  Can someone verify that you are seeing the same problems as I am? 

Thanks

Dean

I updated from R2 to R2 SP1 last week and one of the new SP1 features is the deployment verification of High Risk Deployments like OSD task sequences.  When users try to deploy a task sequence, they go to choose the collection and see the new High Risk Verification prompt.  The user can hit OK and choose a collection as normal.  The next screen on the deployment wizard asks if this is an available or required deployment.  When choosing available everything works as normal but choosing required and hitting next should pop up another verification depending on the contents of the collection.  The user can verify that they want to continue with the deployment wizard.

However, I’ve found that if the user's security role does not have access scoped to it for the All Systems collection and the All Users and Groups collection, choosing required and hitting next in the deployment wizard does nothing; no verification popup, no advance to the next screen.  Since we delegate access to our users based on collections querying their department specific OU, and they do not have access to the All Systems or All User and Groups collection, none of them are able to run required OS deployments.

I opened a case with Microsoft today but am curious if anyone else has any workaround or has seen this issue as well.

Every machine on our network that is in the eu.copany.com domain have a DNS Suffix of dept.eu.company.com

this is set from

Control Panel\System and Security\System -> Computer name -> Change Settings -> Computer name (tab) -> Change -> More -> Primary DNS suffix for this Computer.

This Change Requires both Local AND Domain Admin Credantials.

Is there a way to get this done automatically when OS is deployed ?

I have a Powershell script that can do this, but it requirs Domain Admin Credantials, so launching it from Local admin account wont work.

Any Ideas ?

powershell script:

$computerName = $env:computername

$DNSSuffix = "dpt.eu.company.com"

$oldDNSSuffix = (Get-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\" -Name "NV Domain")."NV Domain"

#Update primary DNS Suffix for FQDN
Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\" -Name Domain -Value $DNSSuffix
Set-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\" -Name "NV Domain" -Value $DNSSuffix

#Update DNS Suffix Search List - Win8/2012 and above - if needed
Set-DnsClientGlobalSetting -SuffixSearchList $oldDNSSuffix,$DNSSuffix

#Update AD's SPN records for machine if part of an AD domain
if ((gwmi win32_computersystem).partofdomain -eq $true) {
     $searchAD = new-object System.DirectoryServices.DirectorySearcher
     $searchAD.filter = "(&(objectCategory=computer)(cn=$($computerName)))"
     $searchADItem = $searchAD.FindAll() | select -first 1
     $adObj= [ADSI] $searchADItem.Path
     $oldadObjSPN = $searchADItem.Properties.serviceprincipalname
     $adObj.Put('serviceprincipalname',($oldadObjSPN -replace $oldDNSSuffix, $DNSSuffix))
     $adObj.setinfo()
     #$adObj.Get('serviceprincipalname')
}

Hi!

I have core-image that I built in MDT 2013 Update 1 for Windows 10.

This image contains five extra languagepacks, except for English.

The problem I'm facing is that when the OS has been applied and the Configuration Manager CLient installs, I'm promted to select a language. I want this to be "English" as default for the UI and Swedish for the keyboard and other settings.

I've created an Unattended.xml file in SIM, added it to the "Settings package" and pointed it out in the TS on the step where the OS is applied. But it still prompts me to chose a language...

ANyone that has an idea why this keeps happening? I haven't been able to find anything about it, but this image here, from Windows 8, resembles the issue I'm having:

http://social.technet.microsoft.com/Forums/getfile/309769

Best regards
CM001

Hi Guys,

We have a clean install of SCCM 2012 SP2 and we are trying to use OSD, but when we try to run the Task Sequence we are getting an error saying that the boot image ASP0004 can't be found on a DP.

The image has been deployed to the DP and I can see a successful distribution. Does anyone have any suggestions?

Kind Regards,

Hi, This happens in Configuration Manager 2012 R2; [Server is 2012]Console using the Add New Driver Wizard is there a hotfix for the 2012 server to fix this?

Thanks