ihaveaproblem

Yup, many times. I'll have another read now incase I'm missing something.

Hiho, Bitlocker is starting to give me a headache.. Been trying to sort it out for the last day and a 1/2 and I've still got problems and starting to struggle. I want to encrypt client devices and USB drives with bitlocker and have the recovery details backed up to AD. Let me explain what I've done so far. 1) I've updated the schema and installed the bit locker viewer feature = Success 2) I ran the command " Cscript Add-TPMSelfWriteACE.vbs " to add the permission so the TMP recovery information can be backed up. This ran successfully, however when looking at the security of the OU's in AD I noticed the permission wasn't set. I delegated control of the OU and added the permission to overcome this ( Think the permission required was called "Write msTPM Owner" to the SELF user) I delegated control at the top OU and the permission has filtered down to the OU's below... however the permission hasn't been set on the computers in the OU and I don't know why. This was causing a problem and giving me an error when trying to encrypt a laptop because the TPM failed to back up to AD. I fixed this by once again manually adding the permission to client in AD, however I shouldn't have to do this. 3) I have a GPO for bitlocker set correctly to ensure all is backed up to AD 4) Now after manually adding the permission for TPM backup, the encryption method tried to move on to the next step and start encrypting the drive, but then I get an error " Access is denied " I'm attempting this from a domain admin account.. I do get an error in event viewer ( cant access the computer with the log so will try to find it online ) Has anyone got a similar set-up as I'm trying to achieve and can offer any advice? I've done lots of searching around online, and testing settings etc. however nothing seems to fix my problem. Many thanks

Nice My friend has the galaxy tab 8.9 and she is very happy with it and says it's great. Do you think android 4.0 will be available for it in the future? I saw today the new re-design of the Samsung tablet as well BBC News - Samsung redesigns Galaxy Tab after Apple's sales ban

Thanks Added it to my MDT task and it works a treat.

Hi, Anyone got a script that installs the symantec end point protection client? thanks Edit Found this that might work http://www.ehow.com/how_7791326_install-endpoint-protection-using-script.html going give it a go.

Hmmm. Where in your task sequence have you added these scripts to run? I added some scripts to run and added them last in the task sequence. It all worked perfectly fine. I made some changes in the unattended file so the auto login is a domain account instead of the local administrator. This account is domain admin so has permissions to run these scripts, but for some reason they don't run until I log in with the local admin account. Is there a reason it does this? EDIT Sorted it !

Nearly there now Just messing with my unattend file.

Hi, What roles are the servers running that you want to upgrade? I'm guessing DC's, but wanted to check first.

At my old work place they had a similar setup and i believe it was the free smoothwall express we used to get around the problem of having to set the proxy. Then we just had ACLS set like you mentioned

That fixed it I removed the password from the bootstrap and only left the domain and username. Helps me type less but still keeps kids out. In you're task sequence where abouts did you add the command line tasks to install extra software? I am looking at that now. Might of worked it out before you reply tho:) will say if have !

optimize Guessing it needs regenerate and that would make sense !

I updated the deployment share if that's what you mean. The boot image is already in WDS so I thought when the deployment share updates it would also update the boot image in wds? ( Maybe i'm wrong ) I will try replacing the boot image now.

Says this in help -- about Guess it's the newest version because I downloaded direct from MS site.

Skip BDE is this screen right? ( apart from mine looks difference because a newer version I guess ) http://blogs.technet.com/blogfiles/mniehaus/WindowsLiveWriter/MDT2010NewFeature8Nomorevisiblecommandwi_129/image_thumb.png That screen isnt being skipped either even though it's in my bootstrap.ini Everytime i update something I always right click and 'Update deployment share' Is there something else I have to do?

Thanks For the some reason the sign in to MDT didn't work. I'm guessing I made a mistake with the credentials I entered in the bootstrap.ini and going to double check them now. EDIT Nope cant get the auto login to work. Credentials 100% correct and have permision to access the share, yet it still asks me to enter them during the MDT boot image load.

Thanks very much. Am I right in thinking this JoinDomain= Domain name? e.g mydomain.local DomainAdmin=Account with domain admin rights ? DomainAdminDomain=domain name again? DomainAdminPassword=password for domain account used above? Having these details entered will join the computer to the domain during the deployment proccess?

mbrunt, is there any chance you can post your customsettings.ini and bootstrap please?

I will try to change these back. I've edited them already and now need to remember what I changed. All I want is Option to Enable Bit Locker Option to set computer name Option to join Domain Alot of the other options I see in these guides cant I just do in the unattended file for the image? Like set admin password, time zone, keyboard settings etc. Or does MDT ignore the unattended file?

Thanks Arthur. That guide is being helpful. mrunt, I'm getting there slowly... but still struggling to understand some bits. Let me say where I'm at. WDS = Tick, Known how to use and add boot images etc MDT Install = Tick, Is easy enough Deployment Share = Tick Adding OS = Tick Adding Drivers = Tick ( Altered the structure to follow the advice given on the guide Arthur posted) Adding Applications = Not really sure I need this. All my programs will be on the image i've captured so wont need to add more. Might be usefull if I can install sims and other staff specific software using this ? Task sequence i've followed the advice given in the guide and starting to understand that. At the moment i'm trying to get my head around the customsettings .ini file and what I need to edit from his example...

Hmm okay. I guess the easiest way to get my head around this is to just set one up and try to deploy and image. If it works...great. If doesnt work... I can look at making changes. There is lots of options like 'capture image' by default that you can see on this screenshot I only want to deploy an image, so why do I need these?

nope still cant get my head around this task sequence:confused: By default it has a lot of options added and most of them I don't have a clue what they do. Do I need to keep these?

I'm trying to understand MDT however I’m getting really confused. I want to use MDT so I can have one image for all computers. The task sequence part is really confusing me. I'm reading the guides posted in the sticky but I just can’t seem to get my head around it. I think I understand it all... apart from this task sequence part. I simple want my deploy image to Deploy the image + look for drivers in driver store + encrypt hard drive with bitlocker ( Read it can do this ) + join domain The tasks sequence how so many options and I’m so confused as to what options I need and don’t. Can anyone kindly share a screenshot of their task sequence and explain to me what it does so maybe I can understand. Thanks

Do the printers map if you run the script manually on the machine?

My friend just got a samsung galaxy tab 8.9 and she is happy with it. She went for the samsung mainly due to the size as she felt an ipad was a bit big for her. It comes with in 16gb and 32gb versions but has no sd card slot to expand. I guess an ipad is just as good, just depends if you want to stick with android and possibly a smaller size.

my friend just got a samsung galaxy tab 8.9 and she is very happy with it. It seems a bit difficult to find many places selling in the UK though so we ended up getting it from ebay. HMV also sell it but they messed us around. Is a good little tablet.