jugglerjoe

Hi there, This was a topic of arguing between me and my boss With windows 8 we do not deploy start menu redirection. This means, students get more customisation and happiness not being restricted. And new application installs automatically put icons on the main start screen (as long as your customisation files don't conflict with it). Then anything in the %programdata%\Microsoft\windows\Startmenu + Programs get somehow put on the start screen. anything we do not want to appear i do a file delete with GPP Hope that helps. but also 8.1 should adresss some of these things =]

@ChrisH That's exactly what i said >_< but with steps on the Task sequence Indeed a startup script should work, not tried it tho =]

As for @MordyT i believe HP/Dell Machines have this capability but i have not heard of any others. Unless you run a bois update with a bois file through a startup script maybe but i am unsure.

Right. I have just done this without SCCM for upgrade from 7 to 8. In the MDT Make a generic task sequence with minor changes. One that can do Replace\New Computer\Refresh Deployments. Now i need to warn that this is not best practice at all but i found it worked for me. In your Task Sequence for the upgrade in the State Capture part, inbetween the Capture Network Settings and the "Refresh Only" Folder add in a task sequence variable step. I named Mine upgrade and made it Equal to "YES". Then on Refresh Only folder Remove the DeploymentType variable filter and add your upgrade one. (Do that on both Refresh Only folders). In the Preinstall part i have disabled all 3 of the folders of "New Computer Only" + "Offline User State Capture" + "Refresh Only". then add whatever you want. I didn't find this way i did get a few boot errors on first boot and had to F12 some anyway but the majority seemed to work. then to launch it. Make a fully automated Customsetting.ini (but don't overwrite the one you use now). If you want to keep the current computer names in the CS.ini put OSDComputerName=%computername% and stuff like that (or use scripts if you really wanna) then to do it properly google for psexec and download it. then use the psexec program to execute this on remote computers. (alt u can use remote powershell etc etc) \\\\Scripts\LiteTouch.vbs /rulesfile:CustomSettingsWin7To8Upgrade.ini hope that helps =]

that would make sense... I dont think the apps are setup for folder redirection or anything because the music app doesnt get music from shared drives (or atleast didn't) a month or 2 ago. Sorry no ideas from me will keep you updated if i do find one tho.

just wondering. Are you only using firefox because you cannot get IE to do both? and also have you thought about trying chrome? If you could not get it going with IE youll want to look up .pac files and chrome has group policy ADMX files which you can use to customise this. Say in 6 months, something happens and the proxy settings need to be changed. Will this be viable the way you are currently trying? or is that something for future lovelldr to worry about?

ok. when you boot into PE I guess your network booting then pressing F8 to do it manually? If so might be worth disabling the "Install Operating System" step and putting in your own custom command line to apply the image using imagex generally the deployment share gets mapped to Z: so path would be Z:\Tools\Imagex (or something like that) then Z:\OperatingSystems\ for the wim file. could be worth a try?

now... this might be helpful it might not. we had this happen on a large scale before. tried EVERYTHING WE COULD. Boss restarted all our servers when I concluded I could not fix it and this solved the issue. So it could be worth a try restarting the file servers that the desktop redirection goes to. Really dunno about this but that was our experience xD

Cool glad to hear. netdom.exe resetpwd /s: /ud: /pd:* The * will prompt so if you want it as a login item for local admin account youll need to make sure you set permisssions on the script so that only local admin can see and no one else ass youd possibly need a clear text passwd. Alt you could use powershell credential object. idk but that's it. if it helps =]

at absolute worst you could boot to PE and manually apply the image. but I am unsure I have never syspreped most than updates. might be worth reading up on imagex command line switches. maybe theres a specific one in there that might help. Sorry I cannot help more than that.

Hi guys, I have read about this else where but have yet to implement it on my network due to being busy with helpdesk + windows 8. There is a command line utility called "NETDOM". There is a function within that to reset the computer account. What you can do to create a quick fix is to set it as a login item for a local admin account. that way its fixed after login then restart. Sorry if I have got the wrong jist of what is happening here but I believe I am right in thinking this.

ermmm why is your image 300gb?

Heya There, How we have ours set up is to on the "\\server\share\windows 8" Folder give them inherent permissions from there to do "Read & Execute" + "List Folder Contents" + "Read" + "Write". This should let profiles be created. and have it apply to "This Folder, Subfolders and files" That is the best way i found to set these up. the annoying thing is it doesnt let a local user login. Cannot wait for the full windows 8 roll out, 13-15 days! =D

oh for this. There is a place in the appdata folder called WINX or WIN X and that has folders in there called Group 1, Group 2 and so on. In our default profile i deleted these folders and believe that done the trick.

I would try using GP Preferences to apply a printer at login. Defo worth giving it a go

it is right. Works better than any other OS. Goon. "Oh macs dont crash"... no they just sit on a ball of death for half an hour.

Agreed. Start screen is awesome. thats coming from someone whos never used win 8 on a tablet/touchscreen device.

but there are some improvements in managing it tho. this makes me happy...

While i agree with the others that an OU Structure is way easier to do what you can do is Make a AD Group Called "Staff Computers" then in the OU or using a powershell script, add all the staff computers into the "Staff Computers" Group then in Group Policy Management click on the Staff Group Policy and Remove "Authenticated Users" then Add your "Staff Computers" and possibly Staff users groups too. I have done something similar for windows 8 where i still have OU Structure but had to do this to enable our admin account to work properly still as the GP I have on there uses Loopback processing

you could have a powershell script at the end of the build to run that goes something like this $ProKey = Read-Host "Please Enter the product key for this version of windows" slmgr /ipk $ProKey slmgr /ato

ah that could defo be your problem if you want to double double triple check boot into the MDT (but dont start the task sequence). Press F8 and a CMD box should appear. if you type "cscript Z:\scripts\ztigather.wsf" it should output loads of TS variables. Look for the Make and Model variables and see if these are the same. If that is the case for all ERGO machines AND you only have ERGO machines then in your Customsetting.ini you can just put DriverGroup001=\%make% and then your out of box driver structure would be (for windows 8) "Windows 8\ERGO" If you have other machines then in your CustomSettings.ini then you can put in "Model" or "Make" in the priority part of the CS.ini and then put the Model/Make in [] then under that put your driverGroup001. For Example This is cut and paste from ours. Priority= Model,BeginningFix,UserApps,ByVMType,Default [sATELLITE R830] 'Toshiba R830 Laptops need to have this installed to enable certain button functions MandatoryApplications001={7a12a60c-62bd-4125-8530-3ef5b1b48b94} [sATELLITE R930] 'R930 Keys MandatoryApplications001={6c417364-dffc-4e99-8f05-1f8d5fdbdcb1} 'DriverGroups DriverGroup001=Windows 8\TOSHIBA\Satellite R930 [300E4C/300E5C/300E7C] DriverGroup001=Windows 8\SAMSUNG ELECTRONICS CO., LTD.\300E5C Hope that helps. Joe

first of all. To get past slow start ups. force power off (hold button/unplug power) and turn on again and it should skip the affected GP. Try out the hotfix as that could be the way forward. however, could also be worth enabling the GP option. Comp config -> Admin Templates -> System -> "Display Highly Detailed Status Messages" and set it to enable and you should easily be able to see where the GP is hanging

First of all, the computer name. Right, in MDT the unattend.xml is kept in the "\Control\\Unattend.xml" So you need to check that or something similar to that is in your unattend.xml file. to edit the file properly go into the task sequence -> OS Info -> Edit unattend.xml. also, another thing to to check is that the CustomSetting.ini file in the Deployment Share Control Folder doesnt have "SKIPWIZARD=YES" OR "SKIPComputerName=YES" set. Even if they arnt set try doing "SKIPComputerName=NO" then when you first network boot the machine you will have to put in the computer name then. Secondly, with the drivers, sounds like a generic problem. First of all, can you manually install the drivers and they work? I do not know exactly how your doing drivers. If your doing the DriverGroup001=%make%\%model% way then you need to make sure the folders are correct. You can do this by running this in powershell: "Gwmi win32_computersystem" on the computer in question. The Manufacturer is what the %make% needs to be. and Model is %model%. thats how the folder structure will need to be. Then in your Task Sequence (TS) you need to go to the first "Inject Drivers" step and set the selection profile to "Nothing" and you can choose what you want for the option below, i personally use matching option. Hope that helps, Joe

i know absolutly ridiculous isnt it! >_< took me god near a month to figure out start screen and default profiles anyways, hope it helped. I am now sticking in automated emails and things so we make sure everything that is win 8 is in the group to disable them from seeing that location ^_^ we are thinking about removing the default user from the network and getting win 7 to pic it up locally too. however are unsure oof implications of this so waiting till summer

yeah i would personally wait untill 8.1 now IF you have the choice. if not... get a new build on a machine with youe default applications on (ones that are on every machine). customise the start screen how you like (IF icons for applications are allready on there, delete them and re-add them from the exe in the C: Drive) once you have got it customized how you want go to sysprep and sysprep into audit mode. login and move C:\Users\Administrator\Local\Microsoft\Windows\AppsFolder.Itemdata-ms C:\Users\Administrator\Local\Microsoft\Windows\AppsFolder.Itemdata-ms.bak C:\Users\Administrator\Local\Microsoft\Windows\AppsFolderLayout.bin C:\Users\Administrator\Roaming\Microsoft\Windows\Start Menu\Programs move to the default user in the same locations. set up a GP to file copy those from network share to the locations. IF Deploying along side windows 7 deny win 8 pcs access to \\\NETLOGON\Default User.v2 otherwise windows 8 pcs will use this. its kinda trial and error for the start screen... =[ to remove packages from a wim i use this powershell script. (youll need to edit to make it work for you obvs) Mount your image with dism then edit this to suit your needed $WimLoc = "C:\wim" $PackageLoc = "$WimLoc\Program Files\WindowsApps" $packname = dir $PackageLoc $packname = ($packname).Name foreach ($pak in $packname) { dism /image:$WimLoc /remove-provisionedappxpackage /packagename:$pak } Think thats right. just UN-provisions them so they dont install for users. that will remove them form the wim which is a one time process. OR what you could do is add a step in the unattend.xml file / or task sequence to run "powershell.exe -command (get-appxpackage | remove-appxpackage)" should do it. but will delete the whole app rather than just unprovisioning them. sorry if this is all ramblings im quite O_O right now ^_^ message is ya want help with soem stuff