Difference between revisions of "MDT"
| (12 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | =Backup= | ||
| + | Important ! | ||
| + | After major changes to MDT remember to run e:\BackupMdtConfig.ps1 to create a snapshot of scripts and config in e:\backup | ||
| + | |||
| + | =Updating applications= | ||
| + | After adding or removing applications, remember to update the required applications in CustomSettings.ini. To ease that progress, run E:\FetchApplicationGUID.ps1 and copy the AplicationXXX lines into CustomSettings.ini (replacing the existing config) | ||
| + | |||
| + | |||
| + | =Windows license = | ||
| + | Override product key in customsettings.ini | ||
| + | SkipProductKey=YES | ||
| + | OverrideProductKey=AAAA-BBBB-CCCCC-DDDDD-EEEEE | ||
| + | |||
=Troubleshooting= | =Troubleshooting= | ||
| + | |||
| + | == View deoployed GPO's== | ||
| + | Run rsop.msc | ||
==App Deploy fails== | ==App Deploy fails== | ||
| + | http://www.osd-couture.com/2017/11/mdt-8443-task-sequence-stops-after.html | ||
| + | |||
| + | ==WindowsUpdate== | ||
| + | |||
| + | * Check om den rammer wsus gpo med rsop.msc | ||
| + | * check wsus connection: http://10.200.0.196:8530/ | ||
| + | |||
| + | |||
| + | View [https://blogs.technet.microsoft.com/charlesa_us/2015/08/06/windows-10-windowsupdate-log-and-how-to-view-it-with-powershell-or-tracefmt-exe/ Windows Update Log with powershel: Get-WindowsUpdateLog] | ||
| + | |||
| + | https://gal.vin/2017/10/17/building-windows-10-1709-fall-creators-update-reference-image-walkthrough/ | ||
| + | |||
| + | |||
| + | |||
| + | ==Start Sequence== | ||
| + | |||
If mdt task sequence doesn't continue after os install + reboot, it can restarted with | If mdt task sequence doesn't continue after os install + reboot, it can restarted with | ||
* Start a cmd as administrator | * Start a cmd as administrator | ||
* cd \minint\scripts | * cd \minint\scripts | ||
* cscript litetouch.wsf | * cscript litetouch.wsf | ||
| + | |||
| + | |||
| + | cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f | ||
==MDT restarts== | ==MDT restarts== | ||
iF MDT starts with select sequence - or "Gather local only", it can be resolved by rebuilding the WinPE image https://social.technet.microsoft.com/Forums/en-US/6083347c-8e19-4202-9119-385fc09fa53a/mdt-8450-1709-issue?forum=mdt | iF MDT starts with select sequence - or "Gather local only", it can be resolved by rebuilding the WinPE image https://social.technet.microsoft.com/Forums/en-US/6083347c-8e19-4202-9119-385fc09fa53a/mdt-8450-1709-issue?forum=mdt | ||
| + | |||
| + | =Tips= | ||
| + | ==Delete Partitions== | ||
| + | On re-roll it might be necessary to remove old partition | ||
| + | Use Rufus + gparted live to create a live usb for uefi boot | ||
| + | |||
| + | |||
| + | =ConfigNotes= | ||
| + | |||
| + | CustomSettings.Ini reference : https://technet.microsoft.com/en-us/library/bb490304.aspx#E04D0AA | ||
| + | |||
| + | == BitLocker == | ||
| + | Bitlockser status can be viewed via powershell <code>Manage-BDE -Status</code> | ||
| + | |||
| + | BDEInstall=TPMKey | ||
| + | BDERecoveryKey=AD | ||
Latest revision as of 18:19, 18 January 2018
Contents
Backup
Important ! After major changes to MDT remember to run e:\BackupMdtConfig.ps1 to create a snapshot of scripts and config in e:\backup
Updating applications
After adding or removing applications, remember to update the required applications in CustomSettings.ini. To ease that progress, run E:\FetchApplicationGUID.ps1 and copy the AplicationXXX lines into CustomSettings.ini (replacing the existing config)
Windows license
Override product key in customsettings.ini
SkipProductKey=YES OverrideProductKey=AAAA-BBBB-CCCCC-DDDDD-EEEEE
Troubleshooting
View deoployed GPO's
Run rsop.msc
App Deploy fails
http://www.osd-couture.com/2017/11/mdt-8443-task-sequence-stops-after.html
WindowsUpdate
- Check om den rammer wsus gpo med rsop.msc
- check wsus connection: http://10.200.0.196:8530/
View Windows Update Log with powershel: Get-WindowsUpdateLog
Start Sequence
If mdt task sequence doesn't continue after os install + reboot, it can restarted with
- Start a cmd as administrator
- cd \minint\scripts
- cscript litetouch.wsf
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f
MDT restarts
iF MDT starts with select sequence - or "Gather local only", it can be resolved by rebuilding the WinPE image https://social.technet.microsoft.com/Forums/en-US/6083347c-8e19-4202-9119-385fc09fa53a/mdt-8450-1709-issue?forum=mdt
Tips
Delete Partitions
On re-roll it might be necessary to remove old partition Use Rufus + gparted live to create a live usb for uefi boot
ConfigNotes
CustomSettings.Ini reference : https://technet.microsoft.com/en-us/library/bb490304.aspx#E04D0AA
BitLocker
Bitlockser status can be viewed via powershell Manage-BDE -Status
BDEInstall=TPMKey BDERecoveryKey=AD
