Mask all important passwords in all MDT logs

By default, MDT logging routine masks the entire line if it sees the word “password”. I came across the problem with UDI, when using ZTIUserSatat.wsf, the encryption key is exposed in clear text in the logs with command line when ScanState.exe or LoadState.exe is called because there is no word “password” in the logging line. Regardless, you…

0

StartMBAMEncryption script updated!

In my previous blog post here: http://blogs.msdn.com/b/alex_semi/archive/2013/08/12/start-mbam-encryption-on-bitlocker-pre-provisioned-and-windows-to-go-drives.aspx?CommentPosted=true#commentmessage I talk about starting MBAM encryption as a part of SCCM Task Sequence, saving the key to MBAM database. Apparently, the script did not work on Surface Pro or pretty much any other tablet – it needs one more registry key under Policy\FVE – OSEnablePrebootInputProtectorsOnSlates I added this…

0

Dart Remote recovery starts too late in your OSD MDT Deployment? Here is the fix.

I hope everybody leverages DART Remote Recovery remote agent in their OSD task sequences with MDT integration. It works in conjunction with MDT Monitoring, and it starts when first “Use MDT Package” step runs in PE. This step is calling ZTISCCM.WSF script. The problem is, that there are lots of other errors, related to drive…

3

Prevent "half-baked" computers in your environment with special handling of failing steps in State Restore phase

I bet you’ve seen technicians, imaging computers, ignore failed task sequences when in Live OS already and giving those computers to the users. They make a judgment that computer was imaged “good enough” and it’s a hassle to escalate it and have some SCCM admin to look at it, investigating what happened. This simple script…

1

Meaningful error messages in SCCM OSD Task Sequence

How many times a technician came back to you reading some “4005” generic error back to you expecting your reaction and ability to troubleshoot by this error number? Endless times.   We all know you need SMSTS.LOG, a few minutes to find the “real” error somewhere above and only after that you can tell –…

0