clareq

Yes, and I've tried the appropriate drivers in both the 32bit and 64bit boot images.

Dell only have vista drivers available, but I've tried them and the Intel ones. A different TS didn't help. Its strange - I can start a ping to the SCCM server, and it's fine, until I select a TS, then it just drops off.

This is strange. OSD is working, and we have successfully PXE booted and built almost 1000 machines. However, Toshiba Tecra A9 laptops are confusing me. We can PXE boot them, and boot into WinPE. We put in the media password, and select the task sequence. If I set up a ping to the System Centre server it responds perfectly until I select the TS. At that point the ping times out and the build fails with a 0x80072EE2 error, which i believe is a time out. I've checked the drivers in the boot image, but it can't be them, as we can see the list of TS I've set up. Typing this I've just thought it could be a problem with the TS I'm selecting, so I'm about to try a different one.

It's self perpetuating - they fail to produce enough waste food, the power goes off, the freezers go off - hey waste food...

Glad to have helped.

What version of virtualbox are you using? Apparently it's a known problem with a number of anti-virus produts: https://forums.virtualbox.org/viewtopic.php?f=6&t=62615

I redirect start menus to a folder on the local hard drive, that way each machine will show only the software installed on it.

My husband has a grey suit he insists is blue. I'm not sure which of us is wrong.

I can confirm that the task sequence above, with the typo pointed out by Mrbios corrected, works. I'd like to thank @TheScarfedOne, who offered help in another thread, and pointed me in the right direction. 4-6 weeks of work trying to get this sorted, and I'm off for the next 3 days, so I can relax before the mad summer we have ahead.

Windows 8 manages bitlocker differently apparently - I know a TPM chip isn't required.

It seems so. Everything I've read certainly says so.

You still need to turn on the TPM and take ownership. I have the GPO settings set, but nothing happens to a laptop in that OU unless I take these steps.

Thank you. Correcting now.

I am going to cautiously say it's working. My task sequence includes: I've obviously removed the password we've used to take ownership. I'm now going to get a fresh machine and try and run the TS on there. The important thing is to ensure the Disable 64-bit file system redirection is ticked.

No, I get that the TPM is turned on, but ownership has not been set. i have seen that screen before (I've been working on this for about an month) If I remember rightly I had to set some permissions in AD to allow machines to write back the key. have a look here: Henk's blog: How to Enable BitLocker, Automatically save Keys to Active Directory

It didn't work Back to the drawing board.

From what I've seem some BIOS do require a password set before you can enable TMP. As we don't send any machines out without a BIOS password, that isn't an issue for us.

We have a varied bag - Dell, Samsung, Ergo, Lenovo and HP. I'm trying to get a non specific TS set up. I don't fully understand why you need a utility to manipulate BIOS if you can set it manually before running the TS. We have to go into BIOS anyway to set up admin password etc.

I should know whether it's worked in 30 minutes or so - I'll grab celebratory screen shots if it's worked

I'm working my way through this one as well, and am still testing - I think I'm nearly there. In BIOS I'm enabling Take Ownership, and then, in my task sequence I'm adding the following run command line switches - each a separate line, so I can see where it's breaking. Switch on Bitlocker: cmd.exe /c manage-bde.exe -tpm -TurnOn Take Ownership Bitlocker cmd.exe /c manage-bde.exe -tmp -takeownership Start Encryption cmd.exe /c manage-bde -on - adbackup Each line is set to continue on error Now, all this works if I run the commands on the machine once it's been added to the domain, but for the life of me, I've not yet managed to make it work fully from a task sequence. Having said that, I found a typo in my second command 30 minutes ago, so I'm running another test now. I'll let you know how it goes.

I plan to deploy the solus3 agent as the last step in my task sequence, after the machine has been added to the domain, and then add the machine to the Solus 3 management console by searching for agent computers. Does anyone see a flaw in that plan?

What command are you using to run sysprep? I'm assuming you're running it from an elevated command prompt?

I think I got a step nearer today - I managed to start bitlocker entirely from the command line. If I can make the same commands work in a TS I'm laughing.

My neighbour was at my door early Saturday morning in tears, having just had one of those calls. She's a single mum who scrimped a long time to be able to get a computer for her daughter, and the call really upset her. Fortunately she has no money to pay their "fixing fee" so eventually put the phone down on them. It took us a long time to convince her it was an evil con. For those of us who understand computers these calls are funny, but the effect on the majority of people is horrible to witness.

This is aimed at kids, but it fits your brief: https://1stfone.myownfone.com/