+ Post New Thread
Results 1 to 11 of 11
O/S Deployment Thread, Domain Join Problem with Imageunattend.xml file for image in Technical; Hi all, we have been playing around with Windows 7 and unattended installs. With much research and reading we are ...
  1. #1

    Join Date
    Jan 2009
    Location
    United Kingdom
    Posts
    226
    Thank Post
    22
    Thanked 9 Times in 9 Posts
    Rep Power
    13

    Domain Join Problem with Imageunattend.xml file for image

    Hi all,

    we have been playing around with Windows 7 and unattended installs. With much research and reading we are 99% there!

    We have managed to get WinPE to be totally unattended, apart from being able to select a particular image from a list (I like this option, since it will allow us to choose wim's containing 'difficult' to deploy software (e.g. Prodesktop 8!).

    We have also managed to automate most of the oobe part of installation with Windows 7, however, we have stumbled across a problem with automating the domain join.

    We CAN get the ImageUnattend.xml file to auto add the machine to the domain, but we would also like the ability to choose the computer name, (for setting up new classrooms). I do not particularly want to pre-stage the accounts in AD.

    The machine completes the automated oobe, then when it reboots, looks to have joined the domain.

    When we try to logon, we get a confusing error message:


    I think this is due to the timing of naming the computer (which 'I think' occurs after the unattended domain join). The domain join puts an account in AD, after which we type in the computer name which is different to the record in AD, which is causing the problem. Is it possible to setup the computer name during WinPE, or before doing the domain join?

    Thanks

  2. #2
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,421
    Thank Post
    10
    Thanked 486 Times in 426 Posts
    Rep Power
    110
    Quote Originally Posted by _techie_ View Post
    We CAN get the ImageUnattend.xml file to auto add the machine to the domain, but we would also like the ability to choose the computer name, (for setting up new classrooms). I do not particularly want to pre-stage the accounts in AD.
    You cannot get it to prompt *and* join this way. The domain join happens before oobe and will occur with a random name. Once this is changed by oobe the trust relationship is broken. Microsoft know, they don't care as it's "by design" and was introduced with Vista.

    I prestaged all our Vista machines just to get around it. Windows 7 may have some additional possiblities with the offline join.

  3. #3
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    You can if you use MySysprep which is a rewrite of sysprep, something that microsoft could'nt do or did'nt want to do. http://tsaysoft.com/mysysprep2/

    I am rolling out my win 7 machines with this and it asks for computer name like it did in XP sysprep.
    Last edited by jsnetman; 23rd February 2010 at 10:55 PM.

  4. Thanks to jsnetman from:

    mac_shinobi (24th February 2010)

  5. #4
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,421
    Thank Post
    10
    Thanked 486 Times in 426 Posts
    Rep Power
    110
    Quote Originally Posted by jsnetman View Post
    You can if you use MySysprep which is a rewrite of sysprep, something that microsoft could'nt do or did'nt want to do. http://tsaysoft.com/mysysprep2/

    I am rolling out my win 7 machines with this and it asks for computer name like it did in XP sysprep.
    Hmm, I tried mysysprep2. It didn't work, prompted for the name but never set it.

  6. #5

    sparkeh's Avatar
    Join Date
    May 2007
    Posts
    6,708
    Thank Post
    1,265
    Thanked 1,636 Times in 1,093 Posts
    Blog Entries
    22
    Rep Power
    503
    Quote Originally Posted by _techie_ View Post
    I do not particularly want to pre-stage the accounts in AD.
    Can I ask why not as this seems to solve your problem?

  7. #6
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    Hmm, I tried mysysprep2. It didn't work, prompted for the name but never set it
    Ok I will post my imageunattend below, if the prompt for machine is in the wrong place it fails. Also I tried Mysysprep with the unattend.xml on the c: drive and I could not get it to work but got it to work when I attached the xml file to the image in WDS.

    <?xml version="1.0" encoding="utf-8"?>
    <unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="specialize">
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <RegisteredOrganization>Schhol Name</RegisteredOrganization>
    <RegisteredOwner>School User</RegisteredOwner>
    <ComputerName>%Please input a computer name%</ComputerName>
    <CopyProfile>true</CopyProfile>
    </component>
    <component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <Identification>
    <Credentials>
    <Domain>domain.local</Domain>
    <Password>********</Password>
    <Username>administrator</Username>
    </Credentials>
    <JoinDomain>domain.local</JoinDomain>
    </Identification>
    </component>
    </settings>
    <settings pass="oobeSystem">
    <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <InputLocale>en-gb</InputLocale>
    <SystemLocale>en-gb</SystemLocale>
    <UILanguage>en-gb</UILanguage>
    <UserLocale>en-gb</UserLocale>
    </component>
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <UserAccounts>
    <AdministratorPassword>
    <Value>*****</Value>
    <PlainText>true</PlainText>
    </AdministratorPassword>
    <LocalAccounts>
    <LocalAccount wcm:action="add">
    <Password>
    <Value>YwBoAHMAMQBQAGEAcwBzAHcAbwByAGQA</Value>
    <PlainText>false</PlainText>
    </Password>
    <DisplayName>temp</DisplayName>
    <Name>temp</Name>
    </LocalAccount>
    </LocalAccounts>
    </UserAccounts>
    <RegisteredOrganization>School Name</RegisteredOrganization>
    <RegisteredOwner>School User</RegisteredOwner>
    <AutoLogon>
    <Password>
    <Value>******</Value>
    <PlainText>true</PlainText>
    </Password>
    <Domain>domain.local</Domain>
    <Enabled>true</Enabled>
    <LogonCount>1</LogonCount>
    <Username>sysrebuild</Username>
    </AutoLogon>
    <FirstLogonCommands>
    <SynchronousCommand wcm:action="add">
    <RequiresUserInput>false</RequiresUserInput>
    <Order>1</Order>
    <Description>delete tmp account</Description>
    <CommandLine>net user temp /delete</CommandLine>
    </SynchronousCommand>
    </FirstLogonCommands>
    <OOBE>
    <HideEULAPage>true</HideEULAPage>
    <HideWirelessSetupInOOBE>false</HideWirelessSetupInOOBE>
    <NetworkLocation>Work</NetworkLocation>
    <ProtectYourPC>3</ProtectYourPC>
    </OOBE>
    <TimeZone>GMT Standard Time</TimeZone>
    </component>
    </settings>
    <settings pass="generalize">
    <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
    </component>
    </settings>
    <settings pass="auditSystem">
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <Display>
    <ColorDepth>16</ColorDepth>
    <HorizontalResolution>1024</HorizontalResolution>
    <VerticalResolution>768</VerticalResolution>
    </Display>
    </component>

    <component name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    <DriverPaths>
    <PathAndCredentials wcm:keyValue="facddfe3" wcm:action="add">
    <Path>\\srv2\REMINST\drivers</Path>
    <Credentials>
    <Domain>domain.local</Domain>
    <Password>******</Password>
    <Username>administrator</Username>
    </Credentials>
    </PathAndCredentials>
    </DriverPaths>
    </component>


    </settings>
    <cpifflineImage cpi:source="wim:c:/windows7sysprep/install.wim#Windows 7 PROFESSIONAL" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
    </unattend>

  8. #7
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,421
    Thank Post
    10
    Thanked 486 Times in 426 Posts
    Rep Power
    110
    Quote Originally Posted by jsnetman View Post
    Ok I will post my imageunattend below, if the prompt for machine is in the wrong place it fails. Also I tried Mysysprep with the unattend.xml on the c: drive and I could not get it to work but got it to work when I attached the xml file to the image in WDS.
    I was running it from the local drive too, I was still testing the various sysprep settings and hadn't built the final image for wds.

  9. #8

    Join Date
    Jan 2009
    Location
    United Kingdom
    Posts
    226
    Thank Post
    22
    Thanked 9 Times in 9 Posts
    Rep Power
    13
    Thanks all for your comments.

    I was thinking that the enevitable of pre-staging accounts in AD was going to be the final and only solution. My only issue with this, is obtaining the GUID information quickly? Is there a way to do this remotely?

    Would be good if we could.

    Thanks,

  10. #9
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,421
    Thank Post
    10
    Thanked 486 Times in 426 Posts
    Rep Power
    110
    Quote Originally Posted by _techie_ View Post
    Thanks all for your comments.

    I was thinking that the enevitable of pre-staging accounts in AD was going to be the final and only solution. My only issue with this, is obtaining the GUID information quickly? Is there a way to do this remotely?

    Would be good if we could.

    Thanks,
    Use the MAC address instead? I pulled ours from an export from dhcp.

  11. Thanks to DMcCoy from:

    _techie_ (24th February 2010)

  12. #10

    Join Date
    Jan 2009
    Location
    United Kingdom
    Posts
    226
    Thank Post
    22
    Thanked 9 Times in 9 Posts
    Rep Power
    13
    I guess this is not really a problem, when setting up new machines we tend to do this in the holidays. I just think that they have gone a slight step backwards from RIS in this instance, but that is just my opinion...

    I have found out how to add the computers to the domain first, and also add the GUID, as well as setting WDS to respond only to known clients.

    How would you go about unattending the computer name, once we move over to pre-staging?

    Thanks for your help.

  13. #11
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,421
    Thank Post
    10
    Thanked 486 Times in 426 Posts
    Rep Power
    110
    When using <ComputerName>%MACHINENAME%</ComputerName> in the unattended file on a WDS server it will replace it with the prestaged name instead.

    Also slightly related, if you don't want to create a user account you can do a group change instead

    <UserAccounts>
    <DomainAccounts>
    <DomainAccountList wcm:action="add">
    <DomainAccount wcm:action="add">
    <Group>Administrators</Group>
    <Name>SysAdmin Users</Name>
    </DomainAccount>
    <Domain>domain.name</Domain>
    </DomainAccountList>
    </DomainAccounts>
    </UserAccounts>

SHARE:
+ Post New Thread

Similar Threads

  1. [Fog] Rename w/ serial # and join domain
    By Onslow in forum O/S Deployment
    Replies: 15
    Last Post: 20th July 2010, 09:42 AM
  2. No Domain Join during Setup
    By Nick_Parker in forum Windows 7
    Replies: 19
    Last Post: 24th August 2009, 01:13 PM
  3. Join Domain and Set Hostname
    By DanW in forum Scripts
    Replies: 1
    Last Post: 18th July 2009, 02:36 PM
  4. Cannot join domain, dns problems
    By pod in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 14th February 2009, 03:04 PM
  5. Cannot join pc's to new domain :( - Solved :)
    By richard in forum Wireless Networks
    Replies: 11
    Last Post: 7th December 2006, 09:06 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •