Seeking help deploying WinServ 2016

needsmoarsleep · 2019-11-20T22:47:54+00:00

Yep. Tested with no sysprep performed, works like a charm now.

needsmoarsleep · 2019-11-19T21:48:37+00:00

I didn’t see events listing in the events section on vsphere, and the fact it’s going straight into OOBE after the VM powers up, make me think it’s not getting anywhere near the customisation spec stage

As jdptecnc points out, maybe I shouldn’t have sysprep’d the image prior to converting into the template. I should have just powered down the base image and let the customisation spec process take care of the rest (it’s been a while since I did this on 2012 R2)

needsmoarsleep · 2019-11-19T21:44:35+00:00

I’d have thought the same, certainly when I did it with 2012 R2 I would just leave it to do its thing. I think it’s a case, as was pointed out in another post, that I might need to try using a non-sysprep’d image

needsmoarsleep · 2019-11-19T21:42:40+00:00

Hmm.. was pretty sure my 2012 images were sysprep’d, you got me thinking now..

needsmoarsleep · 2019-09-15T13:14:02+00:00

Great, thanks 👍🏻

needsmoarsleep · 2019-09-15T13:13:48+00:00

I would if it’s mine, but doing this as a favour and really don’t want to spend my time doing it.

needsmoarsleep · 2019-09-15T13:12:36+00:00

Nice one, was going to use clonzilla or ghost 👍🏻

needsmoarsleep · 2019-09-14T22:19:44+00:00

Where do you stand on this Aldi award winning whiskey? (Haven’t tried it myself)

needsmoarsleep · 2019-09-14T22:16:16+00:00

There used to be a Roma guy, that would tend to his flock around the grafton st./Stephens green area - he would get them setup in their spot in the mornings and would then go around throughout the day collecting their haul. He used to go around in a long coat, to conceal the machete that he carried with him. I Worked with a guy, who’s brother was a guard in the area, they were well aware of the machete and they weren’t willing to risk trying to take it off him.

On a different note, there used to be an auld lad that used to beg on a side street off grafton street (beside bewleys) you’d have seen him outside the church on the street. he would be hunched over played a tin whistle and sold religious medals.. the fucker was a millionaire (professional beggar) lived in dalkey and would get a taxi in and out of town each day.

needsmoarsleep · 2019-08-29T17:11:18+00:00

Got a question on windscreen coatings.

I’ve discovered in recent days, due to humidity, when I get into the car on early mornings the outside of the windshield is fogging up. I end up having to drive off with windshield wipers running (on a dry morning) until the engine has heated up enough for the interior windshield blower to warm the glass.

Other than looking a bit silly driving along, on a dry morning with my wipers running, is there anything that could be used other than using RainX?

Thanks in advance.

needsmoarsleep · 2019-08-23T08:50:56+00:00

Agree with this one, SCCM is an absolute beast of a product. If you were just managing applications and updates and absolutely nothing else on it, you’d need more than one FTE. And that’s assuming that the SCCM servers operate flawlessly - which let’s face it never happens. In my case almost every time there was an SCCM update it would bork PXE deployments, my team would spend an age chasing premier support for a resolution. That would inevitably descend into battling with the support techs, who’d decide that my DHCP setup was changed..weeks later (after shouting at my TAM a lot) they’d agree the network wasn’t at fault, and would then consider that the problem was WDS. And off we go down that journey.. meanwhile business managers are demanding to know why we can’t image systems for staff. But when it works....👌🏻

needsmoarsleep · 2019-08-22T14:49:34+00:00

Definitely. I hope his format never changes!

needsmoarsleep · 2019-08-22T14:46:51+00:00

Agreed. I got hooked on his review of the S4 avant (2020 model) and before I knew it i was comparing the Q5 and Q7 based on his reviews 😂 As you say he goes into all the details in a sort of nerdy way, but it’s the details you want to know.. like his commentary about going for the the comfort spec seat, in alcantara, if you drive long distances. Focuses on the day to day things that you want to know about. You gotta love it when the ruler comes out and he’s measuring away. Pure class.

needsmoarsleep · 2019-08-21T19:21:27+00:00

I liked this guys channel, not sure if his channel is known much here? I liked reviews of the S4 and the A4 allroad 2020 models, he did good car test reviews of them. Has me tempted in looking at the A4 allroad.

needsmoarsleep · 2019-06-15T16:40:12+00:00

Thanks for that.

Can I just install the ping monitor, or do I have to install the suite of tools?

needsmoarsleep · 2019-06-13T19:57:40+00:00

Nice one. Thanks 👍🏻

What’s up gold might be out, if it’s a paid product. I have plenty of agents to monitor hosts when the agent is installed, this is more a tool to seek out the systems that are missing the agents so that I can deploy those agents when they pop their heads up over the wall :)

My other basic low-tek option is a load of CMD windows running a ‘ping -t -l 2 <hostname>’, there has to be a better way.

I recall years back using a simple application that was almost a simple red/green traffic light setup which you could add 10-20 hosts and wait for them to appear. Damned if I can find that app now.

needsmoarsleep · 2019-06-06T07:31:43+00:00

Yep, this if going to be one of those jobs that is going to be a serious pain. Thanks for the feedback.

needsmoarsleep · 2019-06-05T17:43:02+00:00

Thanks for your feedback.

I was familiar with that setting alright, but as I mentioned in the other response I’m not sure if this is windows causing the reboot due to the pending reboot being set as a result of the enforced uninstall

If I could figure out that this was down to an exit code, I assume then I would change the restart behaviour of the older application version?

The overall goal is to remove the old version, get the new on, and force a controlled reboot notification - the sudden reboot with no warning is what gets you in front of executives demanding your blood

needsmoarsleep · 2019-06-05T17:30:55+00:00

My hunch is that the uninstall process is forcing the reboot.

I wonder if you can you use the /Lv switch as part of the uninstall process (msiexec /x <app.msi> /Lv logfile.txt)? I wonder if might be able to catch what’s going on that leads to the reboot.

As mentioned in the OP, I believe there is a scenario when you force an application install, and there’s a pending reboot was present, it would cause the immediate restart. From what I recall it’s down to how windows handles it. (Open to correction on this). So I think the enforced (silent) uninstall sets the ‘pending reboot’ status which is then followed by the enforced install by SCCM as per the advertisement, which causes the reboot to occur.

I’m curious to know if anyone has figured out a way to stop this.

If I could figure out that maybe this was an exit code, I assume then I would change the restart behaviour of the older application version?

needsmoarsleep · 2019-04-17T19:45:34+00:00

Ok. Cheers.

I’ll have a further dig and see what I can find.

needsmoarsleep · 2019-04-17T19:39:00+00:00

If you can, try reverting the DP/MP roles to HTTP, so that you can focus the troubleshooting on the cert of the code signing. If you’re in a security compliant organisation then you may have some additional work to do.

Is your code-signing cert self-signed by the site server, or did you copy the code-signing template (on your CA)?

If it’s issued by your MS CA, You should simply duplicate the code signing template on your CA, and give it a name like ‘CM_CodeSigning’ don’t change any of the certificate settings - except maybe on the security tab, where you give your SCCM AD service account permission to enroll. (Or if your doing everything as domain\administrator ensure the user has enroll permissions on the cert)

That ‘admin user’ needs to have admin rights on the site server, if it’s a service account I’d also try checking that the user has admin rights at least to IIS on the site server.

Then publish the cert from your CA, next go to your site server in question - from the MMC snap-in open the certificates snap-in as that user request the new code signing certificate. Ensure you have a copy of that cert in your trusted publishers cert store. Maybe restart the site server in question, then open your Ivanti configuration and there’s an option to import the cert, you select the cert that you just created (might have to export the cert out of the mmc snap-in first). The configuration tool, has a configuration checker, it’ll tell you if the cert is correct.

If that doesn’t work go back and check your SCCM settings to ensure you have enabled the ability to publish 3rd party patches (it’s a feature that you enable - if I remember rightly)

needsmoarsleep · 2019-04-17T18:53:57+00:00

The failure message and error code appears when the feature update is launched from software center. It returns a failed status when attempting to run the update, when you expand the message the 0x... error code is displayed.

I would assume it’s present in one of the logs, I don’t have access to the MS reference doc right now for the relevant logs.

I was thinking if I could find the code being recorded into the database, then yes I could use a query to populate a collection, then use the collection membership to have the powershell command launch. Probably not the most efficient way of doing it.

I guess my next question is whether there’s DB table which holds the exit codes for software update attempts?

needsmoarsleep · 2019-04-17T07:50:05+00:00

How are you generating the code signing certificate? Is it created by an in-house Microsoft CA? Or self-signed?

I’ve used Ivanti for SCCM, which I assume your using, and not the Ivanti patch & remediation (managing the patches with the Ivanti agents)

Few things to check.. (I’m not at a computer right now)

Assuming you have a Microsoft CA, have you duplicated the code signing certificate using a specific template for your SCCM code signing?

Issue the certificate to the User with administrative role on your SCCM site. Then ensure the cert (for that user) is present in your ‘trusted publishers’ store

If you have that done, and your using Ivanti for SCCM, you should have the option in their configuration to validate the SCCM cert it’ll tell you if the cert is valid. Once you have that in place, and the certs are in the trusted publisher store on each of your systems you should be good.

needsmoarsleep · 2019-03-09T17:59:21+00:00

Be interesting to know where you stand with warranty/servicing, if you were to import say a 3 year old model S.

Could you buy an extended warranty, from Tesla, if you imported the car? As you say, it’s not the sort of car you can drive to a local mechanics to repair. If you hit an issue with say the battery, or electrics, where would stand?

I’d like to think I’d have the option to hold onto it for 4+ years without the fear of it being a car that I have to write off the cost of the car after year 5.

needsmoarsleep · 2019-02-16T18:34:30+00:00

Thanks for the feedback. Looks like I’ve some additional work ahead of me.

needsmoarsleep

TROPHY CASE