Logging in at PXE Boot
WHen you've successfully PXE booted a workstation you're presented with the login screen for MDT. How does one prevent domain users from logging in?
At the moment MDT accepts everybody and preferably I would like only those within the Administrators group to do it.
I'm assuming your talking about the the point it requests the domain and account at the welcome screen? If so i don't display this on my builds and use a "build account" with limited functionality to complete the imaging.
There is an example of the customsettings.ini here in which it's detailed: http://www.edugeek.net/forums/o-s-de...dt-2010-a.html
Additionally even if someone can PXE boot and get to that point i've added in an initial task sequence which points off to a script to request a separate build password.
<script language="VBScript" >
Set env = CreateObject("Microsoft.SMS.TSEnvironment")
set oTSProgressUI = CreateObject("Microsoft.SMS.TSProgressUI")
env("ALLOWOSDBUILD") = "NO"
MyPass=Inputbox("Please enter the Password to continue")
If MyPass = "password" then
env("ALLOWOSDBUILD") = "YES"
I just password protect the initial pxe boot using syslinux so I can pxe boot other tools such as memtest, offline nt password reset etc...