[wds] Stop it auto authorizing?

[dany2010]

Hi,

 

I've just finished setting up WDS and MDT to roll out windows 7 but i've found a problem.

 

Is there a way of stopping Windows Deployment Services automatically authorising computers that have been approved before?

 

I can see many of our computers breaking because the kids have discovered how to reinstall without a CD.

 

This also would mean we could get rid of the F12.

 

I've found the command to manually delete the approved list but can see this being forgotton to be done by the other techies.

 

Many thanks,

 

Dan.

Edited October 2, 2012 by dany2010

[BHMS]

2 options:

 

The first is to disable PXE boot on every bios and make sure that your bios is password protected. Then enable it on when you need basis.

 

Second option is remove your login details from your WDS boot answer file. That way it prompts for admin login before it connects to the WDS server to get the image list for selection.

[Boredguy]

We added a splash screen to our PXE boot, so that a password has to be entered before the build process can be accessed but after several seconds it carrys on booting off the local drive.

 

Instructions can be found here deployvista.com > Home - Deploying Ubuntu 8.04.1 using WDS (Windows Deployment Services)

[dany2010]

Thanks,

 

Most of the bios have passwords and default to boot from the HDD except if The boot menu key is pressed.

 

Most of the machines protect the boot menu but some don't for some reason.

 

MDT asks for a password before showing a list but didn't think about it. Will try entering a pupil password tomorrow to see if it lets them passed. Might already have the answer.

 

If not il give the splash screen a go, not a bad idea.

[dany2010]

We added a splash screen to our PXE boot, so that a password has to be entered before the build process can be accessed but after several seconds it carrys on booting off the local drive.

 

Instructions can be found here deployvista.com > Home - Deploying Ubuntu 8.04.1 using WDS (Windows Deployment Services)

 

Managed to get this splash screen working today. Brilliant idea,

 

I've also set the permissions on the MDT share to deny pupils and staff. This means if they get past the splash screen then they still cant see the images.