win 7 sysprep

[sted]

ive just altered my normal x64 win 7 sysprep file to try and get it to autojoin a domain but ask for computer name does the following look right (as atm short of sysprepping my home pc/laptop (and i dont have a domain here anyway) does this look right to anyone?

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="generalize">
        <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <DoNotCleanUpNonPresentDevices>true</DoNotCleanUpNonPresentDevices>
            <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
        </component>
    </settings>
    <settings pass="specialize">
        <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <DisableFirstRunWizard>true</DisableFirstRunWizard>
            <DisableAccelerators>true</DisableAccelerators>
            <Home_Page>http://www.leedslearning.net</Home_Page>
        </component>
        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <InputLocale>0809:00000809</InputLocale>
            <SystemLocale>en-GB</SystemLocale>
            <UserLocale>en-GB</UserLocale>
            <UILanguage>en-GB</UILanguage>
            <UILanguageFallback>en-GB</UILanguageFallback>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <BluetoothTaskbarIconEnabled>false</BluetoothTaskbarIconEnabled>
            <RegisteredOrganization>some school</RegisteredOrganization>
            <RegisteredOwner>some school</RegisteredOwner>
            <TimeZone>GMT Standard Time</TimeZone>
        </component>
        <component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <Identification>
                <Credentials>
                    <Domain>domain.local</Domain>
                    <Password>password</Password>
                    <Username>username</Username>
                </Credentials>
                <JoinDomain>domain.local</JoinDomain>
                <MachineObjectOU>ou=staff domained laptops win7x64,dc=domain,dc=local</MachineObjectOU>
            </Identification>
        </component>
    </settings>
    <cpi:offlineImage cpi:source="wim:k:/sources/install.wim#Windows 7 PROFESSIONAL" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

[DMcCoy]

You can't ask for a computer name *and* join the domain with the supplied sysprep. You either need to prestage the name or use something like mysysprep2 or script the join in a late stage.

With the supplied tools, the join will happen BEFORE the computer name is changed. When this is changed in the oobe pass, then the machine account trust from the domain gets broken.

Microsoft know, they don't care.

[ces973]

You can actually have it prompt you for a computer name, and then in the oobe System phase run a powershell command to have it join to the domain, all it will ask you is for a valid PW. This is how we are currently setting up our Win7 PC's.

C:\windows\system32\windowspowershell\v1.0\powershell.exe -command "Add-Computer -domainname xxxx -cred xxxx\administrator"

[sted]

thanks both its not essential it joins the domain but would be nice although sometimes with win7 ive found if i fore the image out from wds (using my old sysprep file basically the same without the domain bits) it will autoname them username1 and domain it without being asked if only it was consistent lol

[Gatt]

with WDS, you can set it so that unknown computers must be approved by an administrator
this generates a Request ID, adds the PC to the Pending Devices container in WDS.. right click the ID and give it the appropriate name, this then creates the AD comptuer account and auto-names the PC during imaging.

right click servername.domain.local then choose properties then set the PXE Response Tab as shown...

wds-ad-approval.PNG

It only does this the once..

The ONLY caveat I have found is that if you delete a WDS-Staged Computer account, you need to wait 30 days before you can WDS it again, this is something to do with the WDS ID Database not syncing with AD...

[mhundley]

The ONLY caveat I have found is that if you delete a WDS-Staged Computer account, you need to wait 30 days before you can WDS it again

We had a similar issue and found that by using the following command it will clear things out and WDS will then give the machine an IP address and allow you to continue again.

WDSUTIL /Delete-AutoAddDevices /DeviceType:ApprovedDevices

[Gatt]

Doesn't that delete all devices and force them to receive new request IDs ?

[mhundley]

Quite probably, we were looking to continually rebuild a test machine and this was the only way we found to make it work.

We are still in the learning stage though so any advice will be greatfully recieved, especially if we are committing a huge no no in using that command.