SCCM 2007 - Question about setting PXE Boot Password

[mjgreen]

When we configured SCCM 2007 on our network we set it so that a password must be entered before the user can select which OSD Task Sequence they should choose.

 

We want to advertise the TS to 'All Systems' to allow for IT support to easily reimage any PC (as long as they know the password).

 

However, we noticed an issue with this....

 

If the user access the SCCM client via the control panel and looks at what they have advertised to them, obviously they can see the OSD task scequences. If they then run a task scequence from here they are NOT prompted to enter the password after the PC reboots.

 

Obviously we have the control panel hidden to pupils but some staff (admin) can still access the control panel. Is there a way to ensure that the password has to be used even if they run the OSD TS from within configuration manager the control panel?

[andyrite]

I do this slighty differently. I have a collection with the OSD task assigned to it. I add the PC to the collectiopn when it needs reimaging. There's a script which removes it when done. That way I'm in control of what is imaged.

 

Andy

[mjgreen]

Thanks Andy,

 

I have been thinking about doing it this way. Maybe it is the best way to go.

 

I just wanted to avoid the extra step of having to add a PC to a collection if it was not neccessary. Sometimes its quite handy to just be able to image something there and then, rather than head back to the office and move a PC to another collection.

 

Maybe I am just being lazy!

 

Would be interested in your script if you dont mind sharing?

 

I would of course still appreciate everyone elses experiences.

 

Thank you

[andyrite]

I used this one.

 

Updated: Remove a computer from a Collection when OSD Task Sequence is completed - CCMEXEC.COM – System Center blog

[mjgreen]

wonderful, thank you

[mjgreen]

I forgot to ask.....

 

How does this deal with 'new' machines? Obviously the computer wont be picked up SCCM until it is imaged so how does it know whether it should allow that machine to see the OSD TS?

[andyrite]

Just advertise the OSD TS to the unknown computers collection.