Rob414

Brill psydii!! This worked a treat for me in a domain environment. Just had to also deploy the print queues in GPO under computer section and your script in user logon and worked a treat Rab

Hi guys, Trying to use SCCM to create a complete backup of a machine in WinPE at the start of a task sequence. I’ve managed to do this previously with WinXP machines and Configmgr 2007, but now we’ve upgraded to Configmgr 1802 and trying to backup Win10 machines, the same method doesn’t seem to work. I’ve integrated MDT into SCCM and following this guide: which is along the same lines as with WinXP backup. However, the TS errors our with the following from the ZTIBackup log: About to run command: "C:\_SMSTaskSequence\WDPackage\Servicing\x64\dism.exe" /Capture-Image /CaptureDir:C: /ImageFile:"\\\.wim" /Name:"201905172105CDrive" /Compress:MAX /ConfigFile:"C:\_SMSTaskSequence\WDPackage\Tools\\wimscript.ini" /ScratchDir:"C:\_SMSTaskSequence\Scratch" ZTIBackup 17/05/2019 21:05:23 0 (0x0000) Command has been started (process ID 1960) ZTIBackup 17/05/2019 21:05:23 0 (0x0000) Console > Deployment Image Servicing and Management tool ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Console > Version: 10.0.17134.1 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Console > Error: 2 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Console > The system cannot find the file specified. ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Console > The DISM log file can be found at X:\windows\Logs\DISM\dism.log ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Return code from command = 2 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Error creating an image of drive C:, rc = 2 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) ZTIBackup COMPLETED. Return Value = 2 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) ZTI ERROR - Non-zero return code by ZTIBackup, rc = 2 ZTIBackup 17/05/2019 21:05:24 0 (0x0000) Not sure which file it apparently can’t find, and I’ve confirmed the account does have rights to save to the specified location. So at a bit of a loss. Has anyone seen this before and know how to get around it? Or is there another perhaps better way to create a backup of a PC from TS? Thanks for any help.

Hi, hopping someone could point me in the right direction to where I might be going wrong. I’m running Win10 LTSB and looking to block use of USBs except certain ones. I have a GPO where under “System/Device Installation/Device Installation Restrictions” I have set the following Allow administrators to override Device Installation Restriction policies - Enabled Prevent installation of devices not described by other policy settings - Enabled Allow installation of devices that match any of these device IDs - Listed Hardware IDs and Compatible IDs of the USBs I would like to run Have double checked RSOP that the GPO is indeed enabled and picked up. However, the result has been that ALL USB devices are blocked. Have not configured any removable drive restrictions elsewhere. So wondered if this GPO is still usable or is it depreciated for LTSB? Does anyone else use this setting and it works? Thanks for any help.

mrwoberts, yeah i've tried a few of these PS scripts, i'll take a look at that one you suggest. Many of the ones i've tested tend to leave some icons behind in the start menu. We decided to go with LTSB so we weren't getting the metro apps issues and better control over the updates. The EDU edition looked to be exactly the same as enterprise but missing Cortana.

Hi, had a look at the app you suggested and made a few tweaks with it. Managed to shave a little bit off the student build but nothing significant.

I did try our build with an SSD and our standard 8Gb RAM and was much better times. However we're stuck with HDDs for most of the estate unfortunately. Rab

Thanks for the tip mrwoberts, i'll have a look at Shutup10 and see how that goes. Cheers, Rab

Thanks for the replies guys. We have HDDs or hybrids on our student machines. SSDs would be much better I agree, but management won't go with that option (new drives in old machine). I've not updated the BIOS though, will look at that as well to see if it helps. We use Deep Freeze to reset our machines as well, so it's always a first login for the student. But if they logout and not restart, the subsequent logins are much better. Default profile is sitting at 77MB I didn't think there were metro apps running on LTSB, but i'll double check that. Thanks, Rab

HI all, We are in the middle of creating a Windows 10 build for staff and students. We’ve been testing v1607 LTSB for students in a small lab over the last few months and it seems stable enough to be used as the base image for the remainder of our student labs for this coming year. My issue is login times. Even on the stripped down LTSB version it takes a good 90sec from login to desktop (which always seems longer when sitting in front of it). When building the image we use a setup profile and copy this to default (same as we did for Win7) which on the whole seems to be working fine. Start menu layout etc are all there for each login, search works ok. Just the time it takes to get there. Have checked all the usual things in default profile to make sure there’s no unnecessary files lurking. Have also checked GPO for any unnecessary influences. Just wondering if anyone could offer any tips they’ve found when tweaking their image to speed up logins. Thanks for any help, Rab

Enterprise x64

Thanks alfatec, I’ve removed the apps using PowerShell from the setup profile and then copy the setup profile over to the default profile using DEFPROF. As I understand it the switches are meant to stop the apps reinstalling for subsequent users, but that doesn’t seem to work. I would be doing this on a custom image and then rolling this out to multiple machines.

Hi all, Is anyone using DEFPROF to copy a setup profile to the default profile for Win10? I’ve downloaded the latest version for Win10 (1.11) and using the switches /NoAppx and /DeleteAppxService to get rid of the built in apps. However, the apps still install per user. Anyone had success with this or are you using something else that’s better? Thanks in advance. Rob

Thanks disk but i managed to get a script to gather in the boot info from the event logs. I'll get a look at Soluto though, could be handy. Cheers

Hi, I’ve been looking for a way to collect the boot and login times from a list of remote computers. Would anyone happen to have something they’ve used, can point me in the right direction? I’ve tried a few powershell scripts that are meant to gather event logs, but not managed to get one to work yet. Thanks v much for help. Rob

Thanks Seawolf. Not exactly sure what the server is running on, i'll have to do some quiet digging (the server guys don't like to give much away). Looks like we're not the only one with the issue and not just a misconfiguration in our server Rob

That's what I would have thought. One MAC address gets one IP address. If DHCP was setup on a lynix box would that cause an issue?

I take it you build a 'golden' image and deploy that out? Check the image to make sure there's no superfluous files in your Default profile that's then being copied to all user who logon. Some apps you install may bring with them sample files or demos that are typically put into the My Documents folder. Move them to a more general location that's not part of the Default profile. An app called Treesize is handy for showing the size of your folder structures. Rob

HI, Wanted to run something past you guys in the hope that you would be able to tell me if it’s just how it needs to be or there’s something wrong with our configuration. If I want to use PXEboot to deploy images out, I have to let our network guys know in advance so they can lower the IP lease time from the normal 2 weeks to about 5 hours. This they say is because when I deploy using PXEboot, the computer ends up with 2 IPs. One given to PXE and the other to the OS once installed. Even if PXE is switched off on the computer after deployment, the PXE apparently still holds onto the IP. Resulting in some of the subnets running out of IPs for the DHCP to distribute. I would have thought the DHCP would be clever enough to know a computer’s MAC addy is already assigned an IP and not give it a second. My network/server guys tell me if I leave PXEboot on in the BIOS the machine ends up being assigned multiple IPs! I just didn’t think that sounded correct. I’ve never heard of anyone else having to do this and wondered what other people do? Thanks

Hi folks, I’m getting a problem with multicasting from my DPs and wondered if anyone had experienced anything similar or give me some points on what I could check. I’ve got 3 DPs in different areas of campus being managed by SCCM 2007. These were put in place last summer and worked fine for the major rollout last year. This year however, if I advertise and image out to PCs they get the advert and reboot, but will only try to contact DP3 (whether it is closest or not) and pull the wim from there. If I pxe boot the machine, it will get the same boot image as the advert, but will only try to contact either DP1 or DP2 and never tries DP3! Last year when it worked ok I could see the machines try to contact any of the 3 DPS and worked fine. I’ve had the network checked for multicast being enabled etc. but that’s all in place as it was last year. I’ve refreshed the boot image and checked all the DPs for health and errors, but come up empty. I’ve also removed multicast from all the DPs and content, then re-enabled it again but still the same. Does anyone have any ideas of where to look next or what to try? Thanks.

Hi Dave, I have set the homepage in the GPO under User Configuration/Policies/Windows Settings/Internet Explorer Maintenance/URLs/important URLs However, unless I also lock it down so user's can't change or add to it then it doesn't keep for all new profiles. I'm sure this shouldn't be the case, but not sure what's interfering with it. Thanks, Rab

Hi Ben, The image is setup for staff members and they do login to a domain. I'd like to be able to set things up at the image level though. From what i've read elsewhere it should be able to set the homepage using the LGP in the favourate URLs, but this doesn't 'stick' unless it's also locked down. Rob

Hi, I’m having a bit of a problem with setting a default homepage for IE for all users. Wondered if anyone else had this issue and solved it I want to be able to set the IE 9 homepage for all users, BUT allow them to change it or add more homepage tabs if they wish once logged in. I have tried to set it in the LGP and the registry. However, unless I also set the LGP option to not allow users to change, then the homepage doesn’t keep for all users. Or can’t it be done?

Hi folks. Was hoping someone to help me out with a powershell script problem. I'm quite new to PS and been trying to put together a script that will check a remote machine for attached printers and mapped drives, then output this to a text file. I got the script to work at first, but then thought it would be nice to have it ping the machine and if no response let you know it's down. However, I've got stuck trying to put the ping function in. If anyone could shed any light on where I'm going wrong that would be great. Script looks like this so far: #Get computer name # cls Function GetCompName { $Compname =Read-Host "Please enter computer name" } # Ping status of computer # ForEach($MachineName In $CompName) {$PingStatus = Gwmi Win32_PingStatus -Filter "Address = 'CompName'" | Select-Object StatusCode If ($PingStatus.StatusCode -eq 0) {Function GetInfo} Else {Write-Host $MachineName Ping Failed -Fore "Red"}} #PC Printer Information Function GetInfo { $prin = gwmi -computer $compname Win32_Printer | Select-Object DeviceID,DriverName, PortName, Comment | Format-List #PC drive Information $drv = gwmi -Computer $compname -Class Win32_MappedLogicalDisk | select Name, ProviderName } Write-Output $prin, $drv | Out-File -FilePath c:\Results.txt Write-Host " " Write-Host " " [string]$message = "Results can be found in C:\Results.txt - Press any key to continue..." Write-Host -NoNewLine $Message $Host.UI.RawUI.FlushInputBuffer() do { $key = $Host.UI.RawUI.ReadKey("NoEcho,IncludeKeyDown").Character } while ([int]$key -eq 0) Write-Host "" Thanks

Hi, Having problems with migrating WinXP to Win7 on SCCM using hardlinking. I’ve setup a TS using this blog: How to use USMT 4 hardlinking in a Configuration Manager 2007 Task Sequence - The Configuration Manager Support Team Blog - Site Home - TechNet Blogs In the Capture User Files and Settings I have a TS variable: Set USMT Additional Capture Options OSDMigrateAdditionalCaptureOptions /nocompress /hardlink But problem occurs when it encounters a computer with local profiles, as it can’t restore them so it stops the entire restore process and doesn’t even restore the domain profiles. So after reading some blogs I’ve changed that variable to: /nocompress /hardlink /ue:%computername%\* As that is meant to not include any local profiles. Unfortunately this isn’t working either. Could anyone share with me how they have done this step to exclude local profiles from being captured please? Thanks, Rob

Tried changing the Local Group Policy to streach and seems to work ok, as it's a fairly basic wallpaper. However, I wouldn't mind trying the scripts as well to see which works best