[mdt] Logging in at PXE Boot

[Chuckster]

WHen you've successfully PXE booted a workstation you're presented with the login screen for MDT. How does one prevent domain users from logging in?

 

At the moment MDT accepts everybody and preferably I would like only those within the Administrators group to do it.

[Exos]

I'm assuming your talking about the the point it requests the domain and account at the welcome screen? If so i don't display this on my builds and use a "build account" with limited functionality to complete the imaging.

 

There is an example of the customsettings.ini here in which it's detailed: http://www.edugeek.net/forums/o-s-deployment/47596-anyone-using-mdt-2010-a.html

 

Additionally even if someone can PXE boot and get to that point i've added in an initial task sequence which points off to a script to request a separate build password.

 

 

 

Dim env,oTSProgressUI,MyPass

Set env = CreateObject("Microsoft.SMS.TSEnvironment")

 

set oTSProgressUI = CreateObject("Microsoft.SMS.TSProgressUI")

oTSProgressUI.CloseProgressDialog()

 

env("ALLOWOSDBUILD") = "NO"

 

MyPass=Inputbox("Please enter the Password to continue")

 

If MyPass = "password" then

env("ALLOWOSDBUILD") = "YES"

End If

 

[plexer]

I just password protect the initial pxe boot using syslinux so I can pxe boot other tools such as memtest, offline nt password reset etc...

 

Ben