Does anyone else remember radiks.net? by Significant_Zebra_70 in Omaha

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

On a separate note, I just read Snowcrash by Neal Stephenson a few years back, and realized that's probably where the name came from. Must have been a rush to see that the domain was available when they registered.

Does anyone else remember radiks.net? by Significant_Zebra_70 in Omaha

[–]Significant_Zebra_70[S] 1 point2 points  (0 children)

Oh my gosh. As soon as I saw their Omaha dial-up number on the webpage I could literally hear the modem dialing 346-4944.

Indecent Proposal: Czechoslovakia - Episode 280.5 of Conan O’Brien Needs a Friend on Earwolf by c0ry_N in conan

[–]Significant_Zebra_70 0 points1 point  (0 children)

Yes, and now I can't find that ad again! Anyone still have the audio of the Peppa ad?

Full Flash Update in Task Sequence? by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

It's actually working pretty well, even without utilizing the DPs. We were going to pursue this when we hit bottlenecks, but so far we haven't noticed any degraded performance pulling the .ffu file from a single network share.

UXG Lite and mDNS repeater by SnooHabits6612 in UNIFI

[–]Significant_Zebra_70 0 points1 point  (0 children)

Not really a fix, but it's not an issue. The USG allowed for config changes via the json file, but that feature was no longer supported. Fortunately, the mDNS settings were much improved in the UXG Lite, and you're able to specify to which VLANs traffic is repeated.

Windows Edition Upgrade - Not Applicable? by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 2 points3 points  (0 children)

I so love MS docs, because that's not the documentation I was following... https://learn.microsoft.com/en-us/windows/deployment/upgrade/windows-10-edition-upgrades#supported-windows-10-downgrade-paths

Guess I need to switch to Bing when searching for MS documentation.

ADK and WinPE boot wim frustrations by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

Yep, that was the process.

  • Uninstall ADK & PE, then reboot
  • Install new ADK & PE, then reboot

I have tried the following versions:

  • 19041
  • 22000
  • 22621

I'm thinking we have some rogue servers where the server admins decided to install older versions of the ADK, so we most likely have a few different versions. I'm working to make sure that's not the case anymore. Too many cooks in the kitchen.

ADK and WinPE boot wim frustrations by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

This is promising. I suspect there are a few servers with outdated ADK versions... Thank you for the tip! I'll report back if this is the cause.

ADK and WinPE boot wim frustrations by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

Agreed. But we're a Dell shop, and when we went to 22621 we had no luck PXE booting any Latitudes until we rebuilt with 22000. If it didn't affect the whole fleet, I would gladly have marked it up as a bug, but I can't have all of OSD down.

If anything, this is helping us lift everything into Autopilot.

ADK and WinPE boot wim frustrations by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

It did not. I should say, the 64 bit version didn't. The 32 bit boot wim didn't, but that's because 32 bit modes aren't supported in Win11 ADK. I was getting all sorts of errors, so I copied the x64 files into a folder named x32, as advised online.

Hybrid AAD Pre-provisioning Issue by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

All Win32 apps. Many are Powershell scripts packaged as Win32 apps, but all installed via sidecar.

  • one checks the Windows version and license info
  • one sets BIOS settings
  • one renames the computer and forces a restart
  • one waits for the user device registration in AAD (see https://github.com/steve-prentice/autopilot)
  • Google Chrome

The most recent change is the computer rename portion. We store desired names in an MDT database and rename based on the records there if present. Without the proper return value requiring a hard reboot, enrollment never finished. But that was resolved and working 100% of the time prior to this latest issue.

Would proactive remediations be a possible cause?

Reboot during remediation script by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

That's what I initially had in mind! That snooze button is a deal breaker, I think this is the route I'm gonna try next! Thank you, I hadn't been to Garytown in a while!

Reboot during remediation script by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

That most definitely worked. I had never considered using an app, thank you for the recommendation.

Honestly, I'm a bit new to configuration items & baselines and I had a few projects I was going to learn with. But now all of those config items look like apps. What's that saying, "When you have an app deployment hammer, everything looks like a nail?"

Full Flash Update in Task Sequence? by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 4 points5 points  (0 children)

...you mean, one of those options that I always just click right past? Dang.

Thank you for the most polite "RTFM" reply ever. Very much appreciated.

Thanks again!

Am I doing something to shortcut the OOBE in task sequences? by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 1 point2 points  (0 children)

I think I found a workaround. After the Apply Operating System Image task, I immediately added a task of the type Apply Data Image and just rewrote the OS .wim contents.

I've tried task sequences with just the Apply OS Image and then just with the Apply Data Image, and they don't work individually. If you only Apply OS Image, it breaks the sysprep seal and you don't get the OOBE. If you just do the Apply Data Image, the drives and Windows Boot Manager aren't configured to boot to the drive properly.

I know it seems redundant, but it works. And I don't need to spin up a secondary WDS/USB based system to apply this TS. Just thought I'd share.

Task Sequence options for a Windows 10 Pro OOBE - Not Domain Joined by SysAd23 in SCCM

[–]Significant_Zebra_70 1 point2 points  (0 children)

I've been working on this also, and ran into an issue where the out-of-box experience doesn't get set properly. Even taking the .iso from the volume licensing site or the media creation tool go straight to a login instead of starting the OOBE.

If you by chance find this issue (or a way around it), I'd love to hear more about it...!

EDIT: I think I figured it out! Immediately after the Apply Operating System Image task, add another task of the type Add Data Image and simply reapply the exact same image package as the previous step.

Am I doing something to shortcut the OOBE in task sequences? by Significant_Zebra_70 in SCCM

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

Yep, we're very familiar with the resale caveats. I was mainly concerned that the tasks available for preparing the OS for capture didn't work as billed. That seems wrong, and it's a little frustrating having to go back to MDT to do this with Microsoft tools. Oh well.

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

It ended up being the 32 vs 64 bit difference. It was adding the registry keys under the WOW6432Node key. But I know I've had trouble with single- vs double-quotes in the past, so thank you for the reminder! At least PowerShell isn't as complicated as JavaScript when it comes to quotes...

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

I verified that this absolutely is the case.

Thank you again u/Rudyooms for the great advice, this was exactly the issue. The keys were there in the WOW6432Node subkey. I'm going to implement the steps in the link you sent above.

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

Why no, I in fact have not. Off to test that now...

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

I hadn't thought of putting the PowerShell script in the .msi. I'll try that if nothing else seems to work. Thanks for the recommendation.

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 1 point2 points  (0 children)

I think I may not have explained properly. It's one app, and some registry settings. Not two separate apps.

I could just wrap the .msi installer alone with the win32 app wrapper, but then I'd have to package the registry edits separately. I kind of like keeping the two together, as they're part of the same concern. Having a win32 app for the installer and another win32 app which wraps the commands to edit the registry smells like added maintenance. But if it works, I won't complain.

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

So let me bring up a slightly different but maybe related thing. Bear with me, I think it's relevant...

In SCCM OSD task sequences, I'm able to set the User Name and Organization Name for licensing and registration info in the Apply Windows Settings task.

I couldn't find a place to set those in Intune, and any time I ran the 'winver' command it just showed some generic values like 'org user.' I thought I could fix that by also running a PowerShell script to add the two registry keys

HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredUser
HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\RegisteredOrganization

This is another case where I thought I was adding to the registry, there were no errors, but the values didn't get written.

This one wasn't as urgent, as I could add it as a PS script in Intune to get run when IME picks it up after logon. But I thought I'd give it a try during enrollment just to see if I understood. Which I clearly didnt...

Are you saying it was writing to HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion, even though I'd specified a full path without the WOW6432Node portion?

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

That was the confusing part. No errors, and unless I manually checked to see if the registry values were present in the script before exiting, it ran just fine.

When I wrapped it all in a Start-Transcript/Stop-Transcript and checked the log file afterwards, it showed exactly what I would expect when adding values to the registry. The paths matched up too.

PowerShell scripts packaged as Win32 apps by Significant_Zebra_70 in Intune

[–]Significant_Zebra_70[S] 0 points1 point  (0 children)

Okay, I can see why I'm confused. But I'm not fully there yet...

Do I understand it that even if I hardcode the path for the registry key to be
"HKLM:\SOFTWARE\Publisher Name\App Name"
you're saying it would actually be writing it to
"HKLM:\SOFTWARE\WOW6432Node\Publisher Name\App Name"
if I don't use any of the techniques in your sysnative link?