TheScarfedOne

Hmmm... I cant see anything obvious. I know its not an answer - but you could just use native SCCM, ad groups and collection filtering/variables to acheive the same thin in your task sequence. Thats what i do. Sub collections based on AD groups - with the TS detecting the security group and skipping or installing; or straight adverts to collections.

No go sadly. FEP requires SCCM.... will check back what the guide costs where...

I rather like FEP... and since Im a System Centre lover anyway it kinda made sense. Its good becuase its one of those set it up and leave it too it jobs. It can auto install as part of windows updates, gpo or SCCM. Set up your email triggering and it'll tell you if it wants something. Plus - licence wise, its as cheap as chips. And, System Centre is cheaper if you buy the pack on EES....

Indeed, thats what I get. Theres two GPOs which control this - Hide drives and Prevent access to drives. Double check your precidence

Nope, not either of those - but ive given all my team HP TX2's...

Ok... I think I can see your problem. You need to set the share level permissions to be the highest you need (even for lower down the tree), and then restrict it back with NTFS permissions. So... Staff (Share: Modify; NTFS: Read) > UserFolder1.... (NTFS: Modify) This should do what you need.

i have a script which is looking for local printers, actually - it is useds to delete all printers except local - buut it will give you the logic. will post it on monday.

I would hunt down Mr Willis who is lurking here on the Forums somewhere - and an excellent bit of software called Salamander. This will do that automatically for you - and a load of other shizzle for you too. I am not a Salamander employee btw... got my eyes on this for my place after having it at my last.

Group Policy Preference - Scheduled Task. Works a treat Post up your settings and lets take a look

on dfs?

Mine is a base WIM, with differnt TS's for different purposes - with the TS's adding all the software. I use Collection Membership queried by AD group to deploy software too.

Good luck @Ric_, and from the sound of it.... good luck @Domino!!

Ah yes - few good pointers there @vikpaw. I was doing such a quick add that forgot to include the details on how to use... The C:\SIMS folder was created on the machine just to hold the SimsVersion.txt check file the script uses. This can really be anywhere - I just didnt want to junk up the main program files folder any more. The S:\ is what Capita usually want to coded it to use that. However, you could change this in the section at the top where the variables are declared. This will change where the setups are read from. The same with the "Current" folder. This allowed us to choose when the setup files where available and separate out from the main setup files. I cant remember why I did this, as having just implemented it again - Ive removed that option. Yep - used that on startup on workstations, and as a shortcut (with elevated privs) on the start menu for laptops. There isnt a countdown in there anymore as far as I can tell, but Ive programmed on in on the message box warning what is about to happen. Wish could add a progress bar or a % bar to it tho. Glad you like :-)

I could probably modify the script i have for checking the workstation name to instead do a case statement on logged on username and trigger an SMTP call. Will have a go at it next week...

The method Im referring to is Capita supported - I should have referred to that. Also - the installers are run silently, as stated in my first reply. Attached VBS Code... SimsVersionCheck.vbs

Not strictly true. AppV grew from a compatability background. In Thin Client - you wouldnt be using it - as true thin clients dont do any local processing. Essentially just a dumb terminal passing keyboard, mouse and vga back and forth. AppV does place a load on the machine, with the package being streamed and cached. They do locally processes the application, it is simply separated from the os and other installed programs. A box within a box if you like. Like I said, it is not being used for all apps - simply those that either dont like W7, are huge to deploy, or where I want to run two versions of the same software. Solus 3 has great potential - Capita just werent expecting Schools to be playing with AppV and virtualisation like we are - then again, neither were Microsoft!

And this post on the AD blogs from Technet is how I do it... Automatic creation of user folders for home, roaming profile and redirected folders. - Ask the Directory Services Team - Site Home - TechNet Blogs

As im having to do this, I will post up my VBS scripts for installing SIMS the old fashioned way. Does a text file version check, then runs each setup silently.

AppV isnt just for thin clients. Also used on our standard PCs... quicker and more reliable app deployment. Also means you can do upgrades to apps easiler (ie once), and have two versions of the same app (ie Dreamweaver CS4 and CS5) to aid curriculum transition. Its a pain about Solus 3, bumped it up the feature request sheet and will post its number.

Ive got one too, pretty good spec too! It was doing my test SCCM stuff before it moved into HyperV. Looking to repurpose now for DPM i think, with an even older 8600 - but it has shedloads of hotswap bays in it :-)

So, as you will have gathered from my recent blog posts... there is some serious systems change happening at my place! Quite simply put - without SCCM and Windows Thin PC, there is no way I could have got it done. THat being said... there were a few times I was pulling may hair out with it! So, this post is a heads up on what might go wrong... and in no particular order... 1. Error 8004005 - Cannot retrieve policy for this computer and a reboot before even getting to task sequence choices in OSD. THis pain is often caused by an incorrect Network Access Account, or in my case - the account had got locked out. Grrr! For info - 8004005 generally means access denied so go on the permissions and account checking (or in packages, DP checking)... 2. SCCM Client not installing Error 1635 in Windows Event log. This one comes up when, like me you are trying to integrate the R3 (or any other Client updates) hotfix into your OSD task sequence. This was a head scratcher, but was fixed by changing the properties of the step in the task sequence. The correct property is PATCH="C:\_SMSTaskSequence\OSD\<PACKAGEID in SCCM>\i386\hotfix\KB977384\ sccm2007ac-sp2-kb977384-x86-enu.msp" 3. FEP via OSD - by default, this one will bomb your TS. And just when you think youve fixed it, unless you update to Update Rollup 1 - then your Windows Thin PCs will bomb as well! So... the fix...! Firstly - update to UR1. There is a pre-requisite, and then the UR itself is made up of three separate updates. Link here: http://blogs.technet.com/b/clientsecurity/archive/2011/06/28/forefront-endpoint-protection-2010-update-rollup-1.aspx Next, create a new program in the deployment package. The program is "FEPInstall.exe /s /q" (without the quotes). I know thats not what it says on this article (http://social.technet.microsoft.com/wiki/contents/articles/how-to-deploy-the-fep-2010-client-via-osd-and-test-deployment.aspx) but it doesnt work if you do that - not on UR1 anyway! Also - very important... the Program name is InstallFEPviaOSD... or no default policy. Thats it for now... well tomorrow... when i will add a few more gotchas - but I dont have all the details to hand. Hope this helps...

Couldnt quite work out what to call this blog post - as it ties so many different areas in together. As Ive written about before - Ive been busy doing a mass upgrade and virtualisation project at my new place. First step was getting the HyperV hosts all set up. That was a breeze, as was the SAN - all bar a bit of waiting whilst it all initialised. Once that was done, it was time to get the roles onto each of the nice new HyperV Clients. An SQL cluster, a pair of SCCM servers, and Forefront Endpoint on one of the SCCM boxes too. SCCM went on fine, as did SQL - nothing to see here. FEP however... more of an issue. For those also playing with clustering, or just FEP in general - here are the setup gotchas! 1. SQL Reporting Services Make sure that one of the SQL Nodes has SQL Reporting Services set up, and initialise its database. Point your FEP install at it - not the Cluster. The DB still points at the Cluster though. 2. SQL Server Prerequisite Error This looks like: "Setup cannot verify the service principal name (SPN) for this account. Ensure that there is a single valid SPN entry for this account in the Active Directory Domain Services. Account: Yourdomain\accountname" And to fix it... Launch an elevated CMD Prompt and use the following... setspn -a mssqlsvc/NODE1FQDN Domain\ServiceAccountname setspn -a mssqlsvc/NODE2FQDN Domain\ServiceAccountname setspn -a mssqlsvc/NODE1 Domain\ServiceAccountname setspn -a mssqlsvc/NODE2 Domain\ServiceAccountname setspn -a mssqlsvc/CLUSTERFQDN Domain\ServiceAccountname setspn -a mssqlsvc/CLUSTER Domain\ServiceAccountname 3. Pending Restart This one is a real pain. You restart, as it sayis, but the more stranger thing happens after you restart your computer and start the Setup again. The same is displayed. Why? Well, maybe because on the FEP 2010 requirement is to have a working Configuration Manager 2007 infrastructure and almost always ConfigMgr will have open files and read/write operations on the computer you’re trying to install FEP 2010. So, to workaround this problem you have to modify your registry (do it on your own as I did). Open PendingFileRenameOperations key from HKLM\SYSTEM\CurrentControlSet\Control\Session Manager and delete or copy its content to a notepad. Save the key and start Setup now, it should work, at least it for me. Hope this helps Stuart

ZH beat me to it! Thats what i do.... GP preference > Scheduled task

It depends how your script was set up as to how easy this is for you. Mine, just has a variable "printserver" so change that once and job done. Funny, weve jsut done exactly the same thing here - migrate print servers (mine has gone virtual though) and papercut too! Stuart

lol @witch :-p Keep your eyes out for announcements in the future guys...