garethEds

Hi @kieran1990 - that's what I've done now as I left work with the machine building. I pointed MDT at the W7 driver store instead. Let's see what happens. @ZeroHour - I would have thought/hoped so too. Gareth

Evening All, After a few years on and off, I've finally got around to sorting WIndows 10 (forced) but some of our estate is old - including HP 7700, 7800 and 7900 desktop models. I've built a 7900 today and it all went well - but it couldn't find any drivers for the USB ports. Panic - had to root out an old PS2 mouse and keyboard to use the machine. Probably the last one in the school. HP do not make drivers for 7900 machines so they definitely will not make drivers for 7700 and 7800. Has anyone managed to deploy W10 to these machines with USB working that can advise? Thanks all, Gareth

Afternoon All, Having successfully sorted out W10 and deploying with MDT and PDQDeploy, there is now some funding for PDQInventory. So - I've bought it :-) How much change to I need now - am I right in thinking I can create groups of computers that only need certain apps? At the moment our PDQDeploy/MDT solution installs everything to machines - but they quite often don't need every piece of software. So will PDQInv let me split the packages into groups - and then use MDT to deploy with the 'base set' of applications via PDQ Deploy and then when they have built and joined the domain let PDQInv kick in with the packages that need to go to certain groups. For example the 4 ICT Suites need VB - but nobody else does. One of the ICT Suites and our media suit need Adobe Creative Suite But they all need the base apps deployed at build time. They also all need SIMS but this cannot be deployed until the machines have joined the domain so cannot happen during deployment time. Does this simplified description sound like it's right? Edit: After reading this page again: https://www.pdq.com/blog/mdt-imaging-in-pdq-deploy/ - I'm thinking the first option is right - using the hearbeat trigger to kick off once Windows 10 has been deployed. Gareth

Morning All, Does anyone have a corporate lock screen I can take a look at? Just for the wording that may be on the page? Cheers Gareth

So...... We have purchased Enterprise PDQDeploy and now have it working with MDT when deploying new machines. We are currently re-imaging our estate with Windows 10 1809 and using PDQDeploy to push the packages out. It works neatly and does the job. However, when imaging a PC the PDQDeploy bit takes around 25 mins - that's fine but is there anyway of stopping the Windows 10 image from logging itself out? I can move the mouse of course but it prompts for the password. Nothing bad about it - just annoying. Gareth

Well -I've sorted it. It's a permissions issue so I've reverted back to using the delegated domain admin for testing and it all worked. Now I need to work out why by Build Service Account will not work. Gareth

@davipton - I cannot even get the psexec script to run in the first place. I have a service account for building via MDT which builds machines without any issues. It's just the task sequence step for running the script which gives me: Not sure why the build account cannot run the psexec script to then call the psexec commands. Fed up now. Gareth

Hi @executiverocker I've got the same script (from the pdq website/webcast). I've not tried Bypass twice - but am doing so now based on how you point it out. Not much different to what I have been doing. Thanks for posting. Gareth

HI All, Having a nightmare getting pdq deploy to send out packages as part of the MDT Task Sequence - has anyone got it working at all? I've split the commands into several steps: 1. Copy PSExec to the local machine (this works) 2. Copy the pdq_deploy script to the local machine (this works) 3. Run the script - this doesn't work despite the task sequence saying it does. I'm stuck. I have no idea what is going on. The command line runs fine, the TS looks to be there. The machine looks to be doing something, but nothing gets installed. I am assuming it maybe a permissions issue. MDT logs the machine on as an local Administrator - is this the issue? Here is the command in MDT: powershell.exe -noprofile -command "Set-ExecutionPolicy Bypass LocalMachine"; powershell.exe -file "C:\Windows\pdq_deploy_psexec.ps1" - it's not the first command I have tried. I've tried running the command line as a the service Build Account - but this didn't work either. Something is stopping it - but I'm lost to what it could be. The build completes with not issues but no software has been installed. If I then login as an domain admin and run the script it works and everything gets installed. Do I need to move the command somewhere else? Or somehow get the script running as a different user? Any help would be appreciated. Gareth

@fiza - I'm doing this but having a nightmare getting pdq deploy to run from the task sequence. GJE

@toffee_paul - I've tried this but am getting prompted by the script to allow or disallow etc etc. I simply cannot get past this at the moment. Any idea why this would be happening? I've got exactly the same command as you. Cheers Gareth

Afternoon Peeps, Just a quick question.... in an MDT task sequence I have the following command - could someone check the syntax for me? set-executionpolicy unrestricted; %SCRIPTROOT%\pdq_deploy_psexec.ps1 This is for a deployment. Do I need to put in the full path to %SCRIPTOOT% or does it know it? Just about to go for lunch before experimenting - so thought I'd ask. Cheers Gareth

Afternoon Everyone, I'm suddenly seeing an issue when deploying Windows 10 1809 via MDT. For some strange reason the task sequence is not deleting the MININT directory on the root of the deployed machine hard drive. A look at the logs shows this error - which I've never come across before. Has anyone else seen it and solved it? Edit: Looking at that error, I cannot see that folder on the deployed machine harddrive - _SMSTaskSequence - it isn't there anyway but there is a MININT folder. This MININT folder is not going. Cheers

Yeees - and that happens before 'Recover from Domain' - which is when it joins the domain. Silly me. Gareth

I swear I am loosing my memory/mind/sanity. When MDT installs an application does it do it before or after the domain join? We have a GPO setting that stops certain file areas. It's set centrally by the LEA and is meant to disable attacks such as Cryptolocker. This gets applied on domain join which then means neither PDQDeploy or MDT can install Office via the task sequence. I need the apps to go on before the domain join but cannot remember which order everything happens. Any help? Gar

Hi All, It's working now. I brought the LEA file over to my server and it worked. Must have been something wrong with the exported one. I'm now building it by hand - trying to learn how it all works. Rows and Columns are driving me mad. Gareth

I am working with 1809 for now. Gareth

Does anyone know of a template sheet that shows how the layout file is built? Showing the column and row numbers? I want to give it to a class of pupils (my Pupil Voice) to design the layout they would like to see. I'm also surprised nobody has released a cool application that helps you design layout options. Cheers Gareth

Aww sorry - got my terminology mixed up. We have a redirected start menu - that works fine. It's the .xml file for the tiles that is not being applied. I've put it in a test GPO of it's own and applied it last in this OU. Gareth

Evening All, I've got a situation where I cannot get the startmenu .xml layout file to apply to a user. I've exported one from my machine to test so can assume it is all formatted correctly. I've used the Start Menu GPO under Users to provide the path to the .xml file and it is stored on one of our servers - but it doesn't apply. The LEA have sent me a link to one of their .xml files which was put in place for a primary school. I can point to this and when a user logs on it applies. Would this suggest security settings on the .xml file or the folder? A colleague in another school send me their .xml file which works in their school and I've put this next to mine on the server and pointed to it - doesn't work. Yet when I change back again to the one on the central LEA file tore - it works. Am I missing something? Cheers Gareth

Hi @Arthur, Thanks for this for the domain admin user and it has created the shortcuts and shortcut folder without any issues. Our Admin user doesn't have a redirected shortcut folder. It's not working with our locked down staff users -despite me setting that GPO. Plenty more research to be done next week. Gareth

Hi @Arthur - I've been thinking about this - does it mean you don't use redirected start menus? Gareth

That application you are using costs a fortune. Time to research a free one. Thanks @Arthur - not entirely sure what I am doing. Gareth

Evening all, So I'm playing with App-V on a test part of the school network. It's been pretty good so far and I managed to get Office 2016 streaming to a machine earlier today. However - it seems AppV will not work with redirected start menus where all users access the same redirected start menu. I think this is how it read in the MS docs - https://docs.microsoft.com/en-us/windows/application-management/app-v/appv-planning-folder-redirection-with-appv So - how do people do it? It will work with roaming profiles but we don't use any profiles. Interestingly if we could get that to work, how do you get one icon to display in two different start menus? Hope that makes sense..... how many people use App-V? Can .appv containers be shared? Is there a central repository somewhere of pre-created ones? Cheers Gareth

I'd love to see Microsoft just say to schools - "Here you go. Enjoy - here's all out stuff for free". Don't worry about licensing. Gareth