+ Post New Thread
Results 1 to 10 of 10
O/S Deployment Thread, Registry Edits via Snapins in Technical; Curious what tools FOG server admins use to manage registry settings? Looking for some best practices for making these changes ...
  1. #1

    Join Date
    May 2010
    Posts
    11
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Registry Edits via Snapins

    Curious what tools FOG server admins use to manage registry settings? Looking for some best practices for making these changes using snapins.

    Do you create batch files, AutoIT scripts/exe's, VB scripts, etc... ?

    thanks in advance,
    Eric

  2. #2

    Join Date
    May 2010
    Posts
    11
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I know that the main FOG wiki and ssx4life "Supported Snapins" page mentions that VBS scripts require that you link to cscript in the Run Snapin With field, but I do not see any mention of CMD or BAT files.

    I have a CMD file that I am trying to load on a PC and I tried unsuccessfully both with and with out a link to C:\WINDOWS\system32\cmd.exe

    Is there a best practice for loading these kinds of files as snapins?

  3. #3
    ssx4life's Avatar
    Join Date
    Sep 2009
    Posts
    106
    Thank Post
    0
    Thanked 12 Times in 12 Posts
    Rep Power
    12
    Crap.... my nice long response got axed....

    Let me give you the .02 cent version.

    #1. Run the files remotely with psexec - PsExec
    #2. Run them with SFX Maker ( I prefer this method) - iSoft Online :: Home of SFXMaker (basically you encapsulate them)

    FOG has issues with batch / cmd files being remotely executed due to the way windows permissions handles the running of these files (running them locally with local credentials vs. remote)

    Let me know if you need more help.

  4. #4

    Join Date
    May 2010
    Posts
    11
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I was slowly (through experience) coming to that realization - that FOG (actually Windows) doesn't like the way these files have to be run. Figured it was likely permission related. I will check into your suggestions.

    As always, thanks for the advice ssx.

  5. #5

    Join Date
    Aug 2010
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hello All,

    New member to these forums and look forward to participating here. I am the network admin at a small school system and have just setup my first FOG server. We are a Novell 6.5 based network and were using the Zenworks imaging system. I have successfully turned off the Zenworks system and have Fog running and am able to save and deploy images. The problem I am now facing is that after a new image has been restored to a PC, it has to be registered into the Novell eDirectory tree in order for the DLU (dynamic local user) to be recognized. The previous admin has a registry file that has to executed on each machine after a new image. This requires visiting each machine and executing the reg file. I would like to make this a FOG snapin and push it to the machines after a new image or manually pushing it when required. Can anyone please provide some instructions on how to accomplish this?

    TIA

  6. #6
    morganw's Avatar
    Join Date
    Apr 2009
    Location
    Cambridge
    Posts
    816
    Thank Post
    46
    Thanked 132 Times in 126 Posts
    Rep Power
    39
    All of my snapins are just .cmd files that are uploaded to the fog server - this way you can install MSI files via msiexec, use a silent install switch, import registry fragments etc.

    if you wanted to import a registry fragment the easiest way is make a read-only deployment share on a server, then make a .cmd file that contains

    regedit /s "\\server\deploymentshare$\fragment.reg"

    Then upload that .cmd file as the snapin, you wont have to set any run with options or anything like that, just give it a name, upload the file and then save.

  7. Thanks to morganw from:

    dhicks (1st December 2010)

  8. #7

    Join Date
    Aug 2010
    Posts
    3
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for the quick reply. I believe your solution is more elegant than using the "run with" option.

  9. #8

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,624
    Thank Post
    1,240
    Thanked 778 Times in 675 Posts
    Rep Power
    235
    Quote Originally Posted by morganw View Post
    if you wanted to import a registry fragment the easiest way is make a read-only deployment share on a server, then make a .cmd file
    I've tried your way, and I've tried setting up a snapin with the .reg file in question with "run with" set to regedit, all to no effect. fog.log says the snapin is running okay and returning error code 0, it's just not updating the registry how it should be. Does anyone know what user the snapin user runs as - a local administrator, domain admin, or some other limited-rights user?

    --
    David Hicks

  10. #9
    morganw's Avatar
    Join Date
    Apr 2009
    Location
    Cambridge
    Posts
    816
    Thank Post
    46
    Thanked 132 Times in 126 Posts
    Rep Power
    39
    I can't remember exactly, I did see once when trying to install the ActivStudio MSI via a .cmd file using the same method, I think it was something like COMPUTER\localuser or COMPUTER\localsystem as the ActivStudio installer thought it was an actual user and was trying to copy things into it's profile.

    Which reg keys are you trying to set?
    Don't suppose it's getting stopped by a software restriction policy or anything like that?

    The easiest way to escalate your privledges slightly is to use something like a 7zip SFX installer (the way ssx4life sets up all of his stuff). I've only had to do this on about 4 or 5 things out of about 100 though. Had to adjust antivirus settings as well when doing this as NOD32 thinks that a silent SFX installer is dangerous (obviously could be if it wasn't yours). Again I don't know the exact user that it's running with, but I can testify that it works.

  11. Thanks to morganw from:

    dhicks (1st December 2010)

  12. #10

    dhicks's Avatar
    Join Date
    Aug 2005
    Location
    Knightsbridge
    Posts
    5,624
    Thank Post
    1,240
    Thanked 778 Times in 675 Posts
    Rep Power
    235
    Quote Originally Posted by morganw View Post
    Which reg keys are you trying to set?
    I'm trying to set AutoAdminLogon, with the idea being that the snapin runs, then reboots and auto-logins as the "install" user to run a bunch of install scripts. I'm just trying a compiled AutoIT .exe now - it should make sure it runs regedit as a user with admin rights, we'll see if that sorts it.

    Had to adjust antivirus settings as well when doing this as NOD32 thinks that a silent SFX installer is dangerous
    The antivirus client isn't installed yet, that's the part I'm trying to get to...

    --
    David Hicks

SHARE:
+ Post New Thread

Similar Threads

  1. AVE.EXE Registry edits, what are the defaults?
    By L_Jenkins in forum Windows Vista
    Replies: 3
    Last Post: 29th April 2010, 03:12 PM
  2. Cant get any MMC snapins to open on server
    By sidewinder in forum Windows
    Replies: 5
    Last Post: 26th February 2009, 11:08 AM
  3. Registry
    By MrPstv in forum Windows
    Replies: 0
    Last Post: 26th February 2009, 08:57 AM
  4. Wikipedia - Unconstructive Edits
    By dhicks in forum Wireless Networks
    Replies: 8
    Last Post: 2nd July 2008, 02:33 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •