Jump to content


rustychuck

Established Members
  • Content Count

    23
  • Joined

  • Last visited

Everything posted by rustychuck

  1. Thanks both for your responses. Unfortunately, each user who is taken to the App Store requires a Microsoft account and then they also need to input payment information even if the app is free. So I'm afraid this isn't an option for a multi-user environment, especially for students. I have read about an enterprise app store which may get around the problem but I've not read up on that yet. I will have a look at AppLocker though so thanks for the tip. I can't believe that Microsoft haven't provided a better method for providing modern apps to multi-users on many computers.
  2. Thanks for your replies. From everything I've read importing the apps in SCCM from a Store connected machine with the app installed is called DeepLinking. This just puts a link on the Start Screen which points to the Windows Store and this isn't appropriate for an education establishment where lots of students will be logging on to a computer. Sideloading the apps is what I'd prefer to do but I need to obtain the appx files for all the apps I'd like to install - where do I find these? As I am finding, if I use Fiddler to interrogate the Windows Store App location then the dependencies aren't always downloaded with the appx file.
  3. Hi We have an enterprise at a university and I am currently building a Windows 8.1 image for use in our collaboration lab. On this build I would like to install some existing Windows Store apps but so far I cannot find how to do this. I have read many articles on Sideloading, which appears to be more for companies who write their own Windows 8 apps and want to distribute them, or DeepLinking which effectively creates a link to the Windows Store for each user to then have to download the app for each machine they log on to. Neither of these are what we would like. I would like to install the apps on each machine so that each user can log on and use the app - not have to download an app when they want to use it. Can this be done? I have found an article which explains to use Fiddler which captures the original location of the Windows Store app and then to SideLoad the app, but I can't see that this is either legal or within the licensing requirements or the apps/Windows Store. Thanks
  4. Hi Yesterday we upgraded to SCCM 2012 R2 from SP1 and all went well, or so we thought. We have two DP's assigned. DP1 is running Windows Server 2008 and DP2 is running Windows Server 2008 R2. When the upgrade finished and we installed the relevant hot fixes etc, we noticed that DP2 was not writing or reading any packages to and from it. We removed the DP role from DP2 in SCCM and allowed all content to be flushed from it. When this was complete we re-added the DP role again - but the same problem happened. Only this time there was no content what so ever on it and it can't copy anything to it from SCCM. We have checked the pkgxfermgr.log and it complains about: CSendFileAction::SendFiles failed; 0x80041002 and No capacity for send request. [package name] will be sent to DP2 at a later time Both DP's were working fine before the R2 upgrade so something happened during the upgrade which we having a hard time figuring out. Any help would be gratefully received....
  5. Hi, we're having huge problems at the moment with running 2007 and 2012 side by side. Due to how we have our network setup (and I'm sure we're not alone), we cannot specify IP boundaries. Instead we are using AD boundaries but both 2007 and 2012 are in the same domain. When we push the client out we have no problems at all because you can explicitly tell the client to be assigned to the 2012 site code. If you install the client via a task sequence though, you cannot specify a site code because as soon as you type SMSSITECODE an exclamation mark appears in the box of the Setup Windows and ConfigMgr step. We can see in the LocationServices.log that the client is offered the 2007 MP but the client declines it and accepts the 2012 MP, but it doesn't fully as it then keeps saying "Adapter is DHCP enabled. Checking quarantine status" for each network adapter. Do you have any ideas why? Thanks
  6. Further testing has proven that it is a Windows 8 issue as well. We have spoken to Microsoft Engineers who have said our problem is because we have overlapping boundaries. We are not convinced this is the issue as we have 'Use this boundary group for Site Assignment' ticked on our SCCM 2012 server and the equivalent enabled on 2007. We have checked the LocationServices logs on both 2007 and 2012 clients and can see the client being offered either server and it checks the client version against the version the server will accept and it declines the offer for the other version, so therefore it is not an overlapping boundary issue. The client is being offered the correct information, it is the client not accepting the information the server is offering it.
  7. We have done some further testing and it appears that Windows 8 does not have this issue. It only appears to be Windows 7. If we build a Windows 7 machine it sits in an unmanaged state. In the LocationServices.log it keeps saying 'Checking quarantine status' for the network adapter.
  8. Is anyone else experiencing this issue? We thought it may be our WIM we are using or something in our task sequence but as yet cannot find anything. It could also be a potential bug in SCCM 2012 - but I need to know if anyone else has had this problem?
  9. We seem to having a rather strange issue with our SCCM 2012 Client when installed using the Task Sequence, in that it keeps 'rotating' to our 2007 management point. We are in the middle of migrating to SCCM 2012 and still have our old 2007 server running as well. I thought maybe we have an issue with how the management points are configured but if we install the client via the 'Client Push' method we do not have the issue. We are currently using the following switches when installing the client using the 'Setup Windows and ConfigMgr' step in the Task Sequence: RESETKEYINFORMATION=TRUE SMSSLP=[service Locator Point] SMSMP=[Management Point] FSP=[Fallback Status Point] I checked the ClientLocation.log and it has multiple entries for the following: Rotating assigned management point, new management point [1] is: [2007 Management Point] (7804) with capabilities: <Capabilities SchemaVersion="1.0"><Property Name="SSLState" Value="0"/></Capabilities> Does anyone know if there are any other logs which may point me in the right direction please? I have been looking on the internet for guidance but cannot find this problem anywhere.
  10. Many thanks for your reply only I have tried doing what you've said but it hasn't worked I'm afraid. I just don't understand why Windows/IE is replacing the key
  11. I have been trying to disable or untick by default the 'Automatically detect settings' tickbox in Internet Explorer. I have read that this is ticked by design but there is a method where you can change it. I do not want to disable it via policy as I would like the user to be able to change it they desire - I just need it disabled the first time the user logs on. There is a registry tweak that you can perform which you can add as a Group Policy Preference, however, this does not work the first time a user logs on to a computer. If the user has logged on before then it works fine. The registry key is in HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections and is a Binary string for the key 'DefaultConnectionSettings'. You simply edit the ninth set of numbers to be '01' which disables both tick boxes in Internet Explorer. '09' means the tick box is ticked. I know the key applies because I have checked the Group Policy trace logs and can see it apply, but once Windows has successfully logged on as the user and I check the registry the ninth set of numbers is back to '09'. This leads me to believe that Windows or Internet Explorer is enforcing the registry key to make the tick box ticked. Has anyone else had this issue or have any advice?
  12. I am currently testing putting the Enable BitLocker step after the HP software has installed as I believe this work. I will update shortly....
  13. I have created a task sequence which enables and activates TPM early on, Pre-provisions BitLocker and then Enables BitLocker - which all works great. My problem is during the section where it installs relevant software for the device. The problem device are HP laptops which require a particular partition which is used for the BIOS and other system software. As soon as this software is installed, BitLocker kicks in during the task sequence and asks for the Recovery Key. I understand that this is by design and BitLocker is working as it should. To get around this I thought I would pause/suspend BitLocker, install the software and then resume BitLocker again afterwards. To do this I am using the 'manage-bde -protectors -disable c:' command, however, I find that it is failing each time and exits the task sequence. Has anyone else managed to get this command to work. It is when the task sequence boots into Windows. I am installing Windows 7 64-bit and I have tried using the 'Disable 64-bit file system redirection' but this hasn't worked either. I have checked the smsts.log on the laptop and it says: 'Failed to run the action: Pause BitLocker. This is usually caused by a problem with the program. Please check the Microsoft Knowledge Base to determine if this is a known issue or contact Microsoft Support Services for further assistance. The parameter is incorrect. (Error: 80070057; Source: Windows)' It has also complained about the '-protectors' switch being unknown, but it lists it as '-?protectors' for some reason!
  14. I have worked out what my problem is with the Enable BitLocker step - it was not applying the correct TPM driver in windows. We have been using the 'Auto Apply Drivers' step which automatically chooses the best one it thinks from a list. This has not worked in the case of TPM and applied a different driver. I turned Auto Apply Drivers off and told it to use a specific driver package and voila! I read a post where someone had exactly the same issue and they recommended to not use Auto Apply Drivers. Thanks for all your help with this though - much appreciated
  15. Ok I have added the pause step before and after the Enable BitLocker step. At the pause before the Enable BitLocker step there is nothing which states that anything is wrong, however, as soon as the Enable BitLocker step runs it errors and tries dropping out of the task sequence. In the smsts.log located in C:\Windows\CCM\Logs it says "Unable to find instance of 'Win32_Tpm'. Ensure that this device has a Trusted Platform Module which is enabled in the BIOS" Well this can't be the case because TPM is enabled and activated. I know this because if I go into the BIOS it says that TPM is enabled and activated. One step that does fail is where is removes the BIOS password - would this affect this step?
  16. Oh ok that's good news. I haven't implemented the pause action yet - I am still going through your task sequence to see how it works. I will let you know when I have implemented it and report its failure. Thanks for your help so far....
  17. I think I've realised why my Enable BitLocker step may not be working. I imported your Task Sequence from the HTA download you provided and went through all the steps. I noticed that you have a different Enable BitLocker step for Windows 7 than you do for Windows 8. I am installing Windows 7 and have been trying to use the built in Enable BitLocker step.....I am presuming that this is only for Windows 8? For Windows 7 you have used a script.
  18. I have checked the logs but I cannot find anything which says why the Enable BitLocker step failed. All I can find is where it states the step has processed. Is there anything in-particular I should look out for? Or search for?
  19. It is strange - I have done a BIOS upgrade to the latest version. It does work without the '=' so I will stick with that. The problem I am having at the moment is it fails on the Enable BitLocker step, however, I believe this may be to do with the fact that we have no Group Policy entry for 'Choose how BitLocker-protected operating system drives can be recovered'. I'm assuming without this Group Policy step configured the computer has no idea what to do with the recover keys?
  20. Even though I have now got my TPM Activation sorted, when it gets to the Enable Bitlocker step it then fails the task sequence altogether. My Enable BitLocker step is currently about half way through my task sequence - do I need to move it towards the end of the sequence like it needed to be in SCCM 2007? When I go in to Windows after it fails, it says BitLocker is suspended and you cannot resume it due to it not having any keys.
  21. Here is a screen shot of my task sequence and the TPM Activation step. Let me know if you need a different screenshot...
  22. I just wanted to say that I have followed the post (which has been a great help thank you), however, I was experiencing great problems with the TPM Activation step on a Dell Latitude E6410 in the task sequence and it failing every time. Obviously without this step succeeding, the whole Pre-Provisioning feature doesn't work! After days of trying to resolve the issue it appears the problem is with the '=' after 'valsetuppwd'. If you remove the '=' the tpmactivation step works! Here's how it should be entered: x:\CCTK\X86\cctk.exe --tpmactivation=activate valsetuppwd [bIOS Password] I just wanted to share it so no one else goes pulls their hair out trying to get this to work. Obviously this may be different for different Dell models and BIOS versions.
×
×
  • Create New...