g-fx

any reason your not using group policy preferences to do this? rather than create an msi

As you can schedule per distribution point, I would say it takes place on the DP , and not the primary server

I had a similar problem... This fixed my problem: https://blogs.msdn.microsoft.com/the_secure_infrastructure_guy/2015/09/02/windows-server-2012-r2-wsus-issue-clients-cause-the-wsus-app-pool-to-become-unresponsive-with-http-503/

I didn't think you can use UNC paths in a batch file without using other commands like pushd etc

do you actually see just the computers in the group? have you also setup AD group discovery in SCCM for these groups?

I use Netwrix account lockout examiner. Great tool. I now see who locks out their account from which device and go from there. There are so many reasons for lock outs.. wireless, exchange, mapped drives, scheduled tasks, cache passwords etc etc.If the source is a workstation, go into control panel and have a look credential manager. gives you a start

it does but then you might add a CU to the server in which it includes a client update... In the Installation properties in the task sequence you can add the PATCH variable eg... PATCH='%_SMSTSMDataPath%\OSD\ADC0001\hotfix\KB3082531\x64\configmgr2012ac-sp2r2sp1-kb3082531-x64.msp’ There are a few way to do this.. this article is one way: http://www.scconfigmgr.com/2014/03/26/install-kb2910552-hotfix-for-configmgr-2012-r2-client-during-osd/

right.. in my case it was KB3098779 MS15-118: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: November 10, 2015 Uninstalled this and it works again... Can you validate this aswell? *edit* Found this article: https://support.microsoft.com/en-us/kb/3118750 If you install .net 4.6, you must uninstall this update. Its abit hard when your doing this via offline servicing. and why does it affect server manager!

Ok, I uninstalled about 20 recent updates.. and now I can add features via server manager so it proves its an update! Just need to find out which one... keep watching this space.

wow.. I am battling this now as we speak.. and its doing my head in. I can add any feature using powershell or DISM, but not via Server Manager. No errors in event viewer , using sfc /scannow , or Dism /Online /Cleanup-Image /ScanHealth I can see issues in the CBS.log and DISM.log 2015-12-03 01:04:39, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE] 2015-12-03 01:04:39, Info CBS Failed to OpenPackage using worker session [hrESULT = 0x800f0805] 2015-12-03 01:04:39, Info CBS Session: 30485753_2664146015 initialized by client WindowsUpdateAgent. 2015-12-03 01:04:39, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE] 2015-12-03 01:04:39, Info CBS Failed to OpenPackage using worker session [hrESULT = 0x800f0805] 2015-12-03 01:04:39, Info CBS Session: 30485753_2664156018 initialized by client WindowsUpdateAgent. 2015-12-03 01:04:39, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE] 2015-12-03 01:04:39, Info CBS Failed to OpenPackage using worker session [hrESULT = 0x800f0805] 2015-12-03 01:04:39, Info CBS Session: 30485753_2664166045 initialized by client WindowsUpdateAgent. 2015-12-03 01:04:39, Info CBS Failed to internally open package. [hrESULT = 0x800f0805 - CBS_E_INVALID_PACKAGE] As you can see from the timestamp, Im working on it All I did was update our Windows Server 2012 R2 image to include .Net 4.6 and the latest updates via Offline servicing, and inbuilt Software updates step in the task sequence so Im at this moment uninstalling updates as I believe some update or update process broke it.

you could also use group policy preferences to deliver the file and shortcut.. might be an easier method

I had this problem for about 2 weeks..waiting to see what the outcome was from this thread. Tried to delete the corrupt SMX files..just keep coming back after 5 mins.In the mean time we had another issue in which we had to power down the sql server and sccm server. After that .. its been about 3-4 days now I don't have this issue again... I know its weird..just thought id comment on it.

I use this method from chris nackers to ensure endpoint is installed with latest definitions at build time http://www.chrisnackers.com/2012/10/18/configuration-manager-2012-installing-endpoint-protection-during-a-task-sequence/

Im going to guess that WInPE is able to start the build but has not injected the network drivers to continue processing the task sequence...is package AKL00085 after the configure client step? when it fails, can you hit f8 and see if you have an ip address?

I've never tried this method, but I can see straight away your still in WinPE and are trying to detect 'C:\Windows" when I can see everything is applied to E: . Im not sure if you have already a captured image, you may need to set the OSDPreserveDriveLetter variable to false aswell as your partitioning options