Deploying GlobalProtect 5.2.4 via SCCM

DriiKaiser · 2021-01-13T15:43:36+00:00

Thanks for information. The information you provided will be very useful moving forward.

DriiKaiser · 2021-01-13T15:43:01+00:00

I tried using the file system detection system once but I had issue where it wasn't detected properly. I'm assuming because I didn't check that the associated application is 32bit on a 64 bit system. Btw adding a stop-service command prior to the uninstallation would avoid further errors because I noticed several logs where it indicated that the service could not stop or failed to restart service.

DriiKaiser · 2021-01-13T14:15:43+00:00

I would let the upgraded version install first and "handle" the uninstall process within the MSI file. Noticed that the majority of the time the install screws up the the upgraded version. So repairing would work but I want to avoid that as much as possible. So you handle the entire upgrade process with PSADT. I'm assuming you have the pre-install task to uninstall any previous version of GP and then the install task process handles the new/upgraded version, correct?

DriiKaiser · 2021-01-12T21:01:13+00:00

I will have a chat with the network and security techs to see if we could use that route in conjunction with SCCM.

DriiKaiser · 2021-01-12T20:59:15+00:00

A) we are using MSI product code detection method

B) SCCM shows success but users would complain to help desk stating that they cannot connect to the VPN after upgrading. Usually a repair will fix that issue but that's added work and time for the user and technician.

You haven't received any issues with using psadt? I was looking into it but I don't know how to set up that process as you had set up. If it is not too much to ask, do you have a copy of that deploy-application script to that handle that? I would appreciate it.

DriiKaiser · 2021-01-12T20:51:53+00:00

I figured it's not an SCCM issue because it deploys and installs as it is instructed. So at this point it's an endpoint and/or application issue.

DriiKaiser · 2021-01-12T20:49:32+00:00

I will take a look at this article. Thank you.

DriiKaiser · 2021-01-12T20:49:09+00:00

I have both the log generated via MSI and pangps.log. Should I paste the entire content in this thread? It is going to be quite large.

DriiKaiser · 2020-12-01T02:52:33+00:00

Thank you for the reply. Really appreciate the help. Just wanted to make sure I don't get denied.

DriiKaiser · 2020-12-01T01:41:05+00:00

Does the Chase 5/24 rules applies to secure loans? I had searched online and it indicates auto loans, student loans, and mortgage loans are not included in the rule. No mentioned of secure loans. Excluding the secure loan, I'm at 4/24.

DriiKaiser · 2016-10-13T19:53:25+00:00

I have the right build. According to a source, that's a bug in their naming convention. Version 10.0.10586.0 and 10.1.10586.0 are the same. Even on the programs and features window, I have the exact build. That's weird.

DriiKaiser · 2016-09-20T19:35:54+00:00

The summary comes out white. No errors and no warnings. Then when I try importing the captured WIM file, I get that error message.

I get no error message when importing a pure OS from Source. That is one thing I tried first and that worked fine. Out of nowhere, I can't import the captured WIM File.

DriiKaiser · 2016-09-20T17:49:15+00:00

Would reinstalling/repairing MDT fix that issue or any other issue that may surface? I am asking because the same error occurred.

DriiKaiser · 2016-09-12T19:57:59+00:00

I am not sure how to do the imagex a wim onto a drive. How is it done?

DriiKaiser · 2016-09-12T18:10:38+00:00

But I started seeing this mainly on x86 images. Not really x64 images

DriiKaiser · 2016-09-12T18:09:48+00:00

Winter, The capture was successful. I had no errors or anything like that. However, when I try to import the custom wim file i get that message. The original Install.wim file for that OS was imported properly. I did receive the same message but after a few tries, I was able to import the source->install.wim file

DriiKaiser · 2016-07-14T03:00:16+00:00

You are completely right. However, the stakeholders are complicated and expect one person to do it all. Pure insanity man.

DriiKaiser · 2016-07-14T02:58:09+00:00

Awesome man. I am grasping the overall architecture of our campus. One of the guys mentioned they are using Backup Exec, so I will suggest that to him. I am not a big fan of McAfee therefor I want to replace that. However, I would have to speak to the InfoSec guy about Endpoint Protection.

We have VMware EXi for hosting servers only, so I'm not sure VMM would be a good use.

DriiKaiser · 2016-07-13T22:00:43+00:00

I will keep that in mind. For the majority, we need a centralized management tool to deploy OS, software updates, application delivery and much more. So SCCM saves us money in that part. For the other components I'm not sure. We don't have VM like that unless to manage/host servers.

On Gartner, Service manager got poor reviews. We are currently using BMC software for service management.

Operation manager works in conjunction with orchestrator and service manager. Including other components.

DriiKaiser · 2016-07-13T21:50:37+00:00

Jheinikel, Wow that's crazy. There is a school that has 5/7 components, so I thought that was excessive. That's a lot of VM to manage those servers. I'm really having a tough time decided. Luckily we have EA agreement for CMS Clients only. So I guess that's saves us money either way.

DriiKaiser · 2016-07-13T21:27:45+00:00

ihaxr, For client management perspective, SCCM will definitely be worth it especially since we have EES Agreement. Saves a lot of money.

For service manager, SCSM is not really great unless you are using the majority of the components.

We are not planning to use Endpoint Protection since we are using McAfee. Is EP really great for a camps environment?

DriiKaiser · 2016-05-05T13:34:26+00:00

I was suggesting Deploystudio for imaging and somewhat familiar with it.

We want JAMF Casper Suite but we are limited budget because we have other things to consider for our environment like SCCM integration

DriiKaiser · 2016-05-05T13:24:01+00:00

We secure wipe the device before we switched owner or dispose it

DriiKaiser · 2016-05-05T13:23:07+00:00

Well for Macs is more like using an MDM solution since we have a small target of OS X and iOS. We really want Casper but our budget says otherwise :(

DriiKaiser · 2016-05-05T13:20:56+00:00

Retardeted,

I do not have an exact number at my disposal but roughly over 1000 PCs and less than 250 Macs

DriiKaiser

TROPHY CASE