jugglerjoe

ok well maybe not a "server" in a typical sense but still probably an integral part of what you are gonna do. You do not want that sitting on a workstation in an ideal world

can you not just get a cheap mac mini server? I personally wouldnt want a network based around my own pc and wehat my pc is using. remember network services and stuff will use mac mini resources as well as you using them. If you are looking to get one one for yourself and one for sync server just by a copy of parallels or vmware fusion and put a copy of windows on there (will need to purchase a win 7 license as well) should work fine. then you get the best of both worlds

when you say randomaly? is that like one in every 2 tries or like once every 10-15? also do they logoff and log back in when testing this? (if so roaming or local profile and or folder redirection)? this might bring up some good logs to look through i would possibly try rebuildign the whole of the appdata for the user if you can

we have our exchange virtualised with VMWARE server thyat has 1.3-5k active users with 4 virtual cpus and 16GB of ram which runs at around 90% ram usage like no cpu haha xD I think its one of those things that need to be tweaked with your environment. Also a while back i did see a thing about iphones with exchange activesync using up CPU on the exchange server.

Ive had this issue before with a couple of users. Best way to overcome this is to just rebuild the appdata (if that doesnt cause too many issues) if it does then i believe if you delete all the protect folder from appdata it should force it to work again. %userprofile%\AppData\Roaming\Microsoft\Protect Then start up outlook, type in the the username and password and it will work again.

heya Chazzey2501, on the persons PC have you actually tried to disable UAC and run the software of turn down UAc 1 notch at a time to see if he can run it like that? I would recomend trying that sounds like the group policy admin approval rule for UAC or so. not an expert on how that works tho, just an idea ^_^

Keep all folders redirected. Where your roaming profiles are might be worth doing a tracert from a pc to make sure it can see it ok. with roaming profiles you can exclude directories from the profile. This link will help are you running at slow network switch speeds? There are ways to stop profiles growing too biug but are not advised. in group policy there is a "Limit roaming profiles size" or something like that and also in your roaming profiles share you could create a storage quota. in our actual roaming profiles all thats in there is an appdata folder with a couple of tiny bits, Contacts folder, Favourites, Links,Saved Games,Searches. (i believe we redirect favourites now tho..) all else is redirected to their network user area. we do get the odd student that somehow has local appdata in their profile. but deleting their profile and appdata and signing them in again generally does the job. Also just as a note if you find you are having loads and loads of people comming to you about this issue we once had a switch that was slowly dying but still working enough to log people on and get their network areas. This brought profile madness untill we got it replaced. Hope this helps

+1 to steewy and bshingler you can do custom driver dpeloyment with the MDT which is why i like it. requires some forward organising but its fairly simple, see here

Hmmm takes no longer then sysprep from what i have seen in my test. only twice i done the sysprep, my boss hates it xD he likes it all "fresh" I just looked at the MDT monitoring service and for most things a complete rebuild seems to average the hour mark. on newer hardware and vs around 40 mins to do the whole thing. That does the image, Office, Live Essentials Movie Maker and Photo Gallery and Kaspersky and then all MSI software from group policy etc obv

maark, i know Office Updates are very annoying. i have alot of annoyances with updates. if the only reason you are syspreping with office in is for the office 2013 updates then a little tip. If you are using MDT 2012 which it looks like you are i guess you use the Office Customisation Tool. If you call that file something that begins with the number 1. I called ours "1 OCT.msp" then in that same "Updates" folder you can put in the office files and they will auto install after office when you install office. i found this to be easier for me rather then having to sysprep every month or so to put new updates in. To get the updates go to this website and search for "Office 2013 32-Bit" or "Office 2013 64-Bit" whichever you are using. and download all the updates you need then Hope that helps As for jammin, backup plans are always good

ok reggie that sounds like its possibly where your problem is. tell us how you get on

The above from sted but check the whole part of gpo where that lays. Computer config -> Admin Templates -> System -> User Profiles. also, cant remember where it is or what the exact name is, but there is an allow logon locally setting, might be in the above. might be worth checking that

IF you have the time to set it up id totally recommend it, even if youy use SCCM or whatever the MDT add on is still good

we dont deploy language packs so we skip all but computername, applications, task sequence and connect to network share (so we have to put username and password so students couldn't do it) I do have script to automate builds which parse a fully automated customsetting.ini tho these are for refresh and upgrade builds =]

Id 100% use the MDT to do this. You can do very easy driver deployment with the MDT which is why it is so desirable for your situation. Using Windows SIM (System Image manager) will also help with making the XML if your not using at the moment. Just reading through your stuff and saw abbeyfield.sch.uk to me this seems funny. i am lead to believe this is wrong from what i know, but could be right. to double check go onto active directory users and computers and at the top of the tree should be like something in the format of for example my home one i use for learning stuff is "JOE.Internal" i think this is what is causing your issues but i may be wrong. personally i ALWAYS remove all of these form every XML file: 32 1400 60 1050 Also for testing purposes might be worth taking out ldap string just to see if it adds it to the root of the domain (in the "Computers" Folder) or if your using the MDT you can prename a computer object and it will force join the domain over the top of the computer. Thanks Joe EDIT. just thought. If your computer has RSAT installed and your on windows 7 / 8 you could open powershell and run this: import-module activedirectory get-adcomputer $ENV:Computername -property * | select-object DistinguishedName the output from the second will give you a long thing like, CN=CompName,OU=StudentPCs,OU=Silly,DC=abbyfield,DC=sch the ones that are DC= are your domain name. so for the example above your it would look like. abbyfield.sch Hope that helps.

As a plus from Fiza post. SkipWizard=YES can be used if you dont want to have to do anything however would recomend keeping something in there that will only allow IT staff to build them otherwise studewnts/teachers could accidentally trigger builds

what happens is MDT basically controls the whole task sequence and deployment and the WDS side controls the network boot of the wim file. To do this right click on your deployment share and click update deployment share. I prefer to do the "Completely regenerate" option rather than update. that will then make a boot image in the boot folder called something like LiteTouchPE_x64.wim and maybe an x86 version aswell if you dont untick it before hand then in WDS you then import that boot image from the MDT. To run everything fully automatic download the MDT print ready documentation from here this will help when editing the customsettings.ini file. I use the "Toolkit reference" that is in the documentation most as its super helpful. you only really need 1 image for each OS you have. (i personally sysprep a base image with NOTHING in it but updates as .net updates take FOREVER to install ) for drivers you can use the drivergroup task sequence variable and set everything up correctly from there. This will help. I Use the "Large Scale" Part but pick whatever suits your environment really. Hope that helps, Thanks Joe

in you deployment share go to the folder control and open the Customsettings.ini file. in that file under [default] put SkipAdminPassword=YES UserID= UserPassword= UserDomain= if you are wanting to take out the credentials bit for joining the domain you can use SkipDomainMembership=YES JoinDomain= DomainAdmin= DomainAdminDomain= DomainAdminPassword= These will now skip those steps and fill out the info in the background. Hope that helps, Joe

Yeah i remembered it being in the install now, haven't done it for like a year and a half now >_< we have multiple VLANS but it only needs to work on 1. no idea how that was setup here as that bit was done before i was here >_<

mmmm if you are possibly up for trying this still. It sounds like a DHCP Issue where it cannot find the boot image on the WDS server. I believe its something like option 63 bootfile name and another option need to be set. Also are the netbooks intel/amd based? I am the same. id rather spend like a week making a software package than rolling it out manually to every machine xD

thats the problem sted. that is a good idea but he still needs students to be able to use flash for lessons... >_<

no idea if it would work....but possibly a user logon script could be the way forward here to do the scan? or maybe make the particular document that has the games in an enemy of your virus scanner so it wont let them use it? I am in a very lucky school where i havent had to do something like this. Our headteacher says that should be down to teachers to control in their classroom >_<

ive not used those as we only have dell servers and all out dell machines bar 15 Vostro 360's were decommissioned last year and i didnt have controll of our deployment properly then =[ All I do for drivers is when ya get a new desktop. Take a full driver backup onto a usb stick. then rebuild with the current drivers from our network. we get 90% of our pcs from 1 supplier who use the mostly the same components and just update them. if it works fine form the network I may update them to newer versions but otherwise ill just import ones that dont work

ok. Here is my script i use to get this done. it works with most updates and takes a good while to complete. change the $WimFullFilePath variable to the location of your .wim image $MountDir needs to be a place that you want to mount the offline image $IndexNum is the edition image you want to use. you can run dism /get-wiminfo /wimfile:$WimFullFilePath to work out your correct index number $PathofMSUFile is your WSUS download location. There should be loads of folders in this location. Here is the powershell script (with server info taken out. Ive had to edit a tad because we have a rogue update which cripples the image) #Path to install.wim file $WimFullFilePath = "" #Path for directory to mount the .wim image in $MountDir = "" #Index number of the image.. use "dism /get-wiminfo /wimfile:$WimFullFilePath" to get the index number $IndexNum = #Path of Win7 x64 WSUS location $PathofMSUFile = "" #Getting all MSU Files $MSUFiles = Get-ChildItem $PathofMSUFile -Name #Using dsim to mount the WIM Image dism.exe /mount-wim /wimfile:$WimFullFilePath /mountdir:$MountDir /index:$IndexNum foreach ($Update in $MSUFiles) { Write-host "$Update" Dism.exe /image:$MountDir /add-package /Packagepath:"$PathofMSUFile\$Update" } #unmounting the wim and commiting to updates. Dism.exe /unmount-wim /mountdir:$MountDir /commit Hope that helps ya. as for basicchannel Build and capture is a fully automated process. You can run things in the task sequence like automated application deployment and automated updates that make the deployment of an image faster. what you are describing is a sysprep and capture

I dont use SCCM but MDT has build and capture task sequences. I literally use them or adding .net updates in which is not very often. IF you use WSUS then you can use the DISM tool and powershell to automatically update your images every week or day. This is a simple thing you can schedule and run it when you are not at your pc or or a server when its in low use