System Management

Suppose you have created a task sequence, advertised it and booted from task sequence media or however you want; if you receive the following error: “Task Sequence: <TS name> has failed with the error code (0×80004005). For more information, please contact your system administrator or helpdesk operator.” at Setup Windows and ConfigMgr step you might want to check the Product Key! Most probably the key is not correct, so either write another one or remove the product key at all from Apply Windows Settings step in your task sequence and you will have to provide it during the install phase.

I left the product key blank and next time I booted the PC from the TS media, at the Setup Windows and ConfigMgr step I was asked to provide a product key. I entered my Business edition product key and everything was ok.

Few months  ago I had an interesting problem at a client site that took me a while to resolve. So I want to post it here, maybe it will help others…

After a successful upgrade from SMS 2003 to SCCM 2007 SP1, I configured software update point, synchronized with Microsoft update to get the list of updates for products I needed and created a new list with updates required by clients. When I tried to deploy software updates it should download the updates to my SCCM server. Well, this step failed. PatchDownloader.log reported the following:
Trying to connect to the root\SMS namespace on the XYZ-SCCM machine
Connected to \\XYZ-SCCM\root\SMS
Trying to connect to the \\XYZ-SCCM\root\sms\site_XYZ namespace on the machine
Connected to \\XYZ-SCCM\root\sms\site_XYZ
Download destination = \\XYZ-SCCM\WsusContent\08123a3c-c7fd-43a4-a4ce-80089b1267df.1\WindowsXP-KB938828-x86-ENU.exe
Contentsource = http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsxp-kb938828-x86-enu_ba3f0cbe4ba5736d4254732e41fe058697b76ebc.exe
Downloading content for ContentID = 8170, FileName = WindowsXP-KB938828-x86-ENU.exe
Try username DOMAIN\USERNAME from the registry
Proxy enabled proxy server ISAserver:8080
HttpSendRequest failed 12007
Download http://www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/windowsxp-kb938828-x86-enu_ba3f0cbe4ba5736d4254732e41fe058697b76ebc.exe to C:\DOCUME~1\ADMINI~1.LAB\LOCALS~1\Temp\2\CAB3B.tmp returns 12007
ERROR: DownloadContentFiles() failed with hr=0x80072ee7


First I thought it was a stupid error, as I set (and checked twice) all correct information. Looks like proxy information was old and not updating with what I have set later in SCCM. So I needed to remove old information and set the new ones again.

I have checked the registry and I couldn’t do much as username and password was encrypted. Well, I used upddwnldcfg.exe (from <ConfigMgrInstallationFolder>\bin\i386\00000409 folder on a x86 machine) to delete all proxy information stored in the registry and added the new username, password and server’s IP address. After this, downloading updates worked perfectly. More information about configuring proxy settings using upddwnldcfg.exe, you can find here: http://technet.microsoft.com/en-us/library/bb892795.aspx

A few days ago I had to make an image with Windows XP SP3 with all needed applications for lite touch installation.

Everything went well and I was happy until I entered the mini-setup phase on the first computer with that image applied on it. I received an error regarding the product key. I guess I tried a dozen of product keys but none of them worked. After reading the message again and more careful, I realized that the problem was with my Windows XP media – it was not a VL media. And I realized this because the message said to look for a product key on the Certificate of Authenticity (COA) sticker and not my License Agreement…

Resolution

Got another media with Windows XP SP3 VL and made a repair. During the repair phase, I provided the VL product key and it worked. Next time I entered the mini-setup, I filled in some info and that was it.

I just spent half an hour trying to understand why my task sequence cannot find the files on a distribution point; although the TS runs normally, I see all available TSs and I can choose the one I need. Then I found why: I missed something I never missed before and that must not be forgotten! I forgot to configure the network access account .

So, if you receive the following error: “This task sequence cannot be run because the program files for <your package here> are inaccessible on the distribution point.”

you should check if your network access account are configured and the information is correct.

To resolve this issue, you must correctly configure the System Center Configuration Manager 2007 client network access account. To do this, follow these steps:

1. Use an account that has administrative permissions to log on to a computer that has the System Center Configuration Manager 2007 Administrator Console installed.
2. Click Start, click All Programs, click Systems Management Server, and then click SMS Administrator Console.
3. Expand ServerName, expand Site Management, expand SiteName, and then expand Site Settings.
4. Click Client Agents, right-click Computer Client Agent, and then click Properties.
5. In the Computer Client Agent Properties dialog box, next to the network access account that you want to configure, click Set.
6. In the Windows User Account dialog box, enter the user name and the password that you want to use for the network access account, and then click OK two times.

Here is Microsoft’s article about this: http://support.microsoft.com/kb/935914

Do you know how Microsoft IT manages thousands of servers worldwide in multiple countries for a large number of departments and customers using SCCM 2007?
If no, then you should listen to this 30 minutes podcast: Microsoft IT Business Case for System Center Configuration Manager 2007 in a Data Center.

And here is the full article about this business case. I found it very interesting…

My last post (Using Group Policy to deploy Office 2007) was quoted on TechEdBloggers site.

Last week I tested how Office 2007 installs via Group Policy.

I created a software installation package and it worked successful; except the fact that it is not fully installed when a user logs on and that it will not upgrade (or remove) the existing version of Office even if I added the Office 2003 package that should be upgraded. After the Office 2007 installs, the users will have both version of Office – 2007 and 2003.

This is because Microsoft changed a little the way Office 2007 installs; and here they explain why they did this. Bellow are some considerations from that article:

• Difficulties with scheduling installation, consistently managing network bandwidth, and providing feedback on the status of the installation.
• Limited ability to customize features or user settings before installation of the 2007 Office system. You cannot use Office Customization Tool to create an .msp file. All customizations have to be made in the Config.xml file.

So, the best way to install Office 2007 in a medium organization is to use System Center Essentials or Configuration Manager in a large organization. Using these tools you can know exactly what features to install, when to install and how to install or upgrade Office 2007 suite.

Something I have learned the other day…

I had to install a small .msi using Group Policy, using a logon script. As it was a small package and not very important, I used a User Configuration Logon script.

I created and linked a new GPO to a specific OU with some users (with no admin privileges) and client computers only. The script run well and the package installed very quickly on all machines in that OU.

The problem was that I have another OU with member servers and at the moment I logged on to one server using a normal user account, I had the package installed right after first logon. This is because I configured User Configuration logon script instead of Computer Configuration startup script.

What I’ve learned? That I should plan more careful even the installation of a small package.

In case you have PXE Boot working normally but suddenly it is not working anymore, it may be because of the WDS service. This might sound strange but sometimes Windows Deployment Services (WDS) Server does not start after restarting the server, even if it is set to automatically start. It happened to me a few times….

Starting the service fixed the problem (in my case) every time. I didn’t tried, but maybe configuring delayed start for this service will fix the problem in the future.

Yesterday, on SCCM TechNet forum, somebody asked me more info about “Format and Partition Disk” and “Apply Operating System Image” tasks in a task sequence. As the answer requires some screenshots to be provided, I decided to write a post here with that details and direct that user to this post.

Format and Partition Disk:

In SCCM console navigate to Computer Management, Operating System Deployment, Task Sequences. Suppose you already created or imported a new Microsoft Deployment Task Sequence. If not, do it now.

• Select the desired Task Sequence and click Edit in the Actions pane
• In the <Name> Task Sequence Editor window, in the left pane select Format and Partition Disk

• Click the yellow star to add a new partition
• In the Partition name type the name of your system partition, this will be you disk C:
• Under Partition options, select the Partition type as Primary
• Choose how you want to set partition size, use a percentage of all hard disk drive or a fixed value. I use 50% of the HDD size, because not every time I know what HDD size new laptops/PCs will have but for sure it will be more than 80GB
• Check the box to make this partition bootable
• Under Formatting options, choose the file system you want and check the Quick format checkbox (optional) to save time during installation
• Under Advanced options write a Variable name
• Click OK when you’re done making your changes

Now you’ll see this volume in the task sequence editor.

To add another partition click the yellow star again and fill in the following details:

• In the Partition name type the name of your partition, this will be you disk D:
• Under Partition options, select the Partition type as Primary
• To use all the remaining disk space, select “Use a percentage of remaining free space” and set the Size(%) to 100
• Under Formatting options, choose the file system you want and check the Quick format checkbox (optional)
• Under Advanced options write a Variable name
• Click OK when you’re done making your changes

Now you’ll see both volumes in your task sequence editor window. Next time you will deploy an operating system, the hard disk will format and create 2 partitions (C: and D:) and your computer will boot from the first partition (C:).

How does SCCM know that it needs to apply the OS image on the first partition and not the second? Well, it doesn’t, we will set this up in the “Apply Operating System Image” task.

Apply Operating System Image:

In SCCM console navigate to Computer Management, Operating System Deployment, Task Sequences.

• Select the desired Task Sequence and click Edit in the Actions pane
• In the <Name> Task Sequence Editor window, in the left pane select Apply Operating System Image
• If you are installing the OS using the source media, then choose “Apply operating system from an original installation source” option using Browse choose one of the installation packages you have created when making the task sequence
• If you have captured and OS image previously as a .wim file, you can select “Apply operating system from a captured image” option and select the image you want

          - To apply the image on a specific partition, under Destination select “Specific disk and partition”. Under Disk select 0 (zero) and under Partition select 1 (first partition). This is the option I use every time
          - To apply the image on the C: partition, under Destination select “Specific logical drive letter”. Under Disk letter select C:

This is it about these two tasks. Of course these tasks can be further customized using the Option tab of each task.