Small workaround when Clear PXE advertisements doesn’t seem to work
I find it very annoying that sometimes when I clear an PXE Advertisement from the SCCM console and I reboot the machine I still get the PXE Boot Aborted message… a small workaround I always use is the following.
- Clear the PXE Advertisement using SCCM console
- Stop the WDS Service on the SCCM PXE Server
- Clear RemoteInstall$\SMSTemp on the SCCM PXE Server
- Start WDS Service on the SCCM PXE Server
And voila! The advertisement does work this time around…
All in all I have experienced a lot of troubles with PXE and SCCM… I am really hoping the next version of SCCM will bring major improvements to this part….
Creating a custom boot image for SCCM SP2 (WinPE 3.0)
Today I had to recreate my x86 boot image in my SCCM environment. I had just upgraded my testserver to SCCM SP2 and found that the old way of creating a boot image didn’t work anymore… seeing as SCCM SP2 uses DISM.exe instead of imagex and peimg. So I went looking for instructions on creating a custom SCCM SP2 image, but couldn’t found any, so here are the instructions
.
1. Start the Deployment Tools Command prompt and enter the following command:
COPYPE.CMD x86 1 c:\WINPE
When you're working on a 64-bit WinPE image use "amd64" instead of "x86"
2. Mount the winpe.wim file to the mount dir that’s created automatically:
DISM /Mount-Wim /WIMFile:c:\winpe\winpe.wim /Index:1 /MountDir:C:\winpe\mount
3. Add the packages required by SCCM to the wim (again, if you’re working on 64-bit Windows PE substitute "x86" with "amd64")
DISM /Image:c:\winpe\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-scripting.cab”
DISM /Image:c:\winpe\mount /Add-Package /PackagePath:”C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab”
After this step you can continue adding packages (such as winpe-hta.cab and winpe-mdac.cab) or custom files to the boot image. The 2 packages worked out above (Scripting and WMI) are required by SCCM, without these packages you will receive an error during updating your boot image to the distribution points.
4. Commit the changes to the WIM and unmount the WIM
DISM /Unmount-Wim /Mountdir:c:\winpe\mount /commit (thank you for the correction Matt!, It appears as if I was quite sleepy when I wrote this post
)
5. Import your custom boot image into SCCM.
That’s it, just as simple as it was with the previous version of WAIK, only different commands
System Center Team announces SCCM 2007 R3
Looks like Microsoft is releasing a "Green IT" release for SCCM....
As posted by Jeff Wettlaufer (Sr. Technical Product Manager System Center at Microsoft)
There are a few areas of focus for ConfigMgr R3, with the main engineering effort concentrating on Power Management. Here are the goals for this feature:
Power Management
The goal of this capability is to enable Configuration Manager to further reduce the operational costs of IT by providing basic power management features native to the product. Our approach is based on 3 primary areas:A. Help the organization plan a power strategy by monitoring current power state and consumptions and reporting on machine utilization trends, current power settings and current energy consumption
B. Enable the Administrator to easily create, deploy and enforce specific power settings using the existing ConfigMgr infrastructure
−Ability to set peak and non-peak schedules
−Ability to remediate settings if changed
−Ability to opt out machines from power policyC. Provide the business meaningful report formats that are relevant to Power Management
An effective approach to power management needs to maximize power policy deployment while minimizing the impact to the end-user. System Center Configuration Manager helps customers further reduce their operational costs by adding new in box capability to their ConfigMgr infrastructure, and by seamlessly enabling power management client agent services to their existing Collection landscape.
In addition to power management, ConfigMgr R3 will provide customers with enhanced scale and performance support above current numbers. In addition, further capabilities – in time for your Window 7 deployments – around Operating System Deployment will be enabled.
Configuration Manager 2007 R3 will release will release as a beta at the end of October 2009, with a targeted release of late Q1 calendar 2010. Continued blogging and product news, Twitter updates, interviews with key people on the project, and some videos and demos of the new code in action will be releasing over the coming months.
Configuration Manager 2007 SP2 RC released!
As posted by Cliff Hobbs on wmug.co.uk.
It’s official, the RC of SP2 is now available for download from Connect.
IMPORTANT: Remember that that Microsoft only supports TAP Customers running this in Production. If you’re not a TAP customer then make sure you only run it in your lab.
More details:
The System Center Configuration Manager team would like to announce that the following has been released and available for download:
Configuration Manager 2007 Service Pack 2 Release Candidate
This is the official Release Candidate build for Configuration Manager 2007 SP2.
New features:
- Refer to the SP2 Overview article posted on the primary Configuration Manager MSConnect site for all the new features and new supported configurations
- Hotfixes included in SP2 article can be found on the primary Configuration Manager MSConnect page.
- Deployment guides for BranchCache and the new AMT features are available in the download section.
- The new OpsMgr07 R2 ConfigMgr07 Management Pack can also be downloaded, this supports 64bit OpsMgr client agents.
- Please review the Release Notes before performing any installation and upgrade.
Feedback and Support:
- All registered Sp2 Open Beta users can submit bugs, design change requests (DCR’s), and other feedback. See the help link on the ConfigMgr MSConnect homepage for more instructions.
- Newsgroups are a great way to post questions and receive general support question answers.
If you experience any issues with the download or the MSConnect site please contact, sccmtap@microsoft.com
Regards,
The Configuration Manager Customer Team
ZeroTouch for MDT 2010 without SCCM!
Don’t you just wish you could set all your clients to boot from network, and let the PXE server evaluate whether or not it should load the WinPE image to redeploy the computer? Well you can with SCCM using mandatory advertisements of course… but I've written a little script that will achieve the same functionality using native MDT, without the use of the SCCM infrastructure
Here’s how you do it:
- Requirements:
- MDT2010 (beta 2) /WDS installed on Windows Server 2008
- Powershell enabled on the WDS server
- MDT deployment share configured to use the database (i’m using an SQLEXPRESS instance configured on the same machine as MDT/WDS in this example)
- SQL Server Management Studio or equal SQL server management tooling for editing the database.
Ok here we go and setting it up. First some simple stuff
- Set your WDS server to admin approval mode
- On the Directory Services tab, make sure you set the OU location in which the WDS server will create the temporary computer object for approved devices
- Make sure your WDS server account has full control on the OU set in the WDS directory services
Ok, that was easy now wasn’t it?
Now let’s edit the MDT database to fit our needs. This assumes your already set up your database using the database wizard in the MDT Workbench.
- Start the SQL Management Studio application and expand the MDT database (MDT_DB in this example)
- Browse to Tables –> dbo.Settings –> Columns
- Right click Collumns and select New Column
- Give the new column the name of netBoot and type nvarchar(50)
- Save and close the SQL management studio
- Verify the database expansion was successful by opening the MDT Workbench and navigating to the database view > Computers > properties
- Select the Details tab and browse all the way to the bottom to verify that the netBoot value is there
Ok, that was part 1 of the configuration. Now we have to know what to actually do with this extra field in the database. Well that’s where my script comes in. Here’s how you install it.
- Run the following command as an administrator on the WDS/MDT server:
- Server 2008: Powershell.exe –command “ & {Set-ExecutionPolicy Unrestricted } “
- Server 2008 R2: Powershell.exe –command “ & {Set-ExecutionPolicy Bypass } “
- Download the MDT-ZTI.ps1 file to your WDS/MDT server (in this example I'm using D:\MDT-ZTI.ps1)
- Start Task Scheduler and Right click library > Create Task
- Give the task a name of your liking. I’m using MDT-ZTI in this example.
- On the triggers tab select: New
- Begin the task: On an event
- Log: Microsoft-Windows-Deployment-Services-Diagnostics/Operational
- Source: Deployment-Services-Diagnostics
- EventID: 4096
- Click Ok and go to the Actions tab and select New
- Add action
- Start a Program
- Program/Script: Powershell.exe
- Add Arguments(optional): –command D:\MDT-ZTI.ps1
Ok the ZeroTouch “service” is almost ready to go. Now there’s another thing that we need to configure… we have expanded the MDT database to contain an extra column… but how does the service know what database and what database server to use?. Well that is hardcoded in the top of the configuration of the MDT-ZTI.ps1 file. In the future I will be using params() from powershell, but for now just change it in the top of the script.
# //*************************************************************************** # // Configuration: # // Notes: Set the database name and datasource for your environment here. # // For SQLEXPRESS on the same server use "\SQLEXPRESS" as datasource # //*************************************************************************** $Database = "MDT_DB" $DataSource = ".\SQLEXPRESS"
Now how does the “service” know what computers are allowed to boot into WinPE and what computers should boot to the next boot device? That’s a simple 3 part answer:
- Every computer that is NOT in the MDT database will be rejected (pxeabort.com) by the ZTI.
- Every computer that IS IN the MDT database will be polled for the value of netBoot.
- If the value of netBoot does not equal FALSE it will approve the device so it will load the boot image, and then set netBoot to FALSE so the device won’t load the boot image on the next reboot
So if you have a computer which is not booting into winPE just clear the netBoot field in the database and on the next reboot it will boot into winPE.
IMPORTANT: Please be sure to test this first in a test environment first, it is not recommended to implement this in production directly.
Download: MDT-ZTI
SCCM 2007 R2 on Server 2008 Weird WebDAV errors on MP installation
I was messing about with installing SCCM 2007 R2 on a Windows Server 2008 box. Everything went nice and smooth up to the point where my Windows PE for building and capturing an image would just Initialize and then spontaneously reboot…
So I decided to dive into the smsts.log (located in x:\SMSTSLOG or c:\smstslog, depending if your task-sequence was able to format the c:\ drive allready
)
In there I found some errors relating to my MP ( No MP Certificates found). From there on I decided to check out my Site and Component status in the SCCM Console and found out that my Management point was having issues with the WebDAV configuration, so I zoomed in on the MPSetup.log (located in %programfiles%\Microsoft Configuration Manager\logs) and there were the following lines:
<06-24-2009 19:53:49> checking WebDAV configurations <06-24-2009 19:53:52> WebDAV settings is not setup appropriately <06-24-2009 19:53:52> [Allow property queries with infinite depth] should be true (true) <06-24-2009 19:53:52> [Allow Custom Properties] should be false (true) <06-24-2009 19:53:52> [Allow anonymous property queries] should be true (true) <06-24-2009 19:53:52> Allow [All users read access to All content] authoring rule should exist (exist)
Which was really strange, because according to my IIS Manager>WebDAV Authoring Rules>WebDAV Settings, Allow Custom Properties was set to false…. eeeh what the hell?
I googled around and found out the following, the IIS console doesnt always update the webDAV configuration file correctly…. so I edited the config file manually.
C:\Windows\System32\inetsrv\config\schema\WEBDAV_schema.xml
I found the following lines:
<element name="properties"> <attribute name="allowAnonymousPropfind" type="bool" defaultValue="true" /> <attribute name="allowInfinitePropfindDepth" type="bool" defaultValue="true" /> <attribute name="allowCustomProperties" type="bool" defaultValue="true" />
and changed them to:
<element name="properties"> <attribute name="allowAnonymousPropfind" type="bool" defaultValue="true" /> <attribute name="allowInfinitePropfindDepth" type="bool" defaultValue="true" /> <attribute name="allowCustomProperties" type="bool" defaultValue="false" />
Then I restarted the IIS service, and after that I restarted the SMS_SITE_COMPONENT_MANGER service from within the ConfigMgr Service Manager (located under the Tools node). After that my Management Point played nicely
Custom SCCM context menu’s
How to make custom actions on resource objects within the SCCM console.
1) browse to %Program Files%\Microsoft Configuration Manager\AdminUI\XMLStorage\Extensions\Actions
2) create a folder with name: 7ba8bf44-4035-bdb4-16630291dcf6
3) place your custom actions XML within this folder
Here's some sample XML:
<ActionDescription Class="Executable" Displayname="Do Something Cool" MnemonicDisplayName="Script" Description="Something Cool"> <Executable> <FilePath>wscript.exe</FilePath> <Parameters>%TEMP%\Helloworld.vbs</Parameters> </Executable> </ActionDescription>
For a complete reference of possibilities, download the SCCM SDK here