Solved

WDS - Client Naming Policy Not Working

Posted on 2013-01-25
7
3,581 Views
Last Modified: 2013-01-26
Hi Guys,

I'm trying to deploy Windows 7 x64 Ent Machines out, and need the machines named ws01, ws02, ws03 etc.  

I went into WDS properties and specified the client naming policy as "ws%02#".  I did not include a computername in the unattend xml file.

Basically when the machine boots, the user is prompted for a computer name.  Which wouldn't be so bad by itself, however by this stage the system has already been joined to the domain as a random name.

Any help with getting the correct name and getting the clients domain joined would be greatly appreciated.

Many thanks,
Matt
0
Comment
Question by:mmcdoug
  • 3
  • 3
7 Comments
 
LVL 11

Expert Comment

by:netballi
ID: 38819066
0
 
LVL 39

Expert Comment

by:footech
ID: 38819110
If you're using an answer file (the image unattend file), then you need to specify a variable for the computer name.  Here's an example of what is needed for the specialize pass.
    <settings pass="specialize">
        <component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <Identification>
                <UnsecureJoin>true</UnsecureJoin>
                <JoinDomain>%USERDOMAIN%</JoinDomain>
            </Identification>
        </component>
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <ComputerName>%MACHINENAME%</ComputerName>
        </component>
    </settings>

Open in new window

Here's a list of the variables that WDS can use (copied from a Microsoft site);

Using Variables to Obtain Information from the Client
--------------------------------------------------------------------------------
Windows Deployment Services can obtain information during an installation, which you can use as part of a custom deployment scenario. Windows Deployment Services will insert the proper values into your unattend file automatically as long as the file is formatted correctly. The variables that the client can use for this purpose are:
•%USERDOMAIN%. The name of the user's domain, which was specified either by credentials or in the Windows Deployment Services client unattend file.
•%USERNAME%. The user's name, which was specified either by credentials or in the Windows Deployment Services client unattend file.
•%USERPASSWORD%. The user's password, which was specified either by credentials or in the Windows Deployment Services client unattend file. We do not recommend using this variable because it may pose a security risk. The password will be written to the unattend file in plain text.
•%MACHINEDOMAIN%. The domain that contains the computer account that represents the physical client computer.
•%MACHINENAME%. The computer name of the computer account that represents the physical client computer.
•%TIMEZONE%. The time zone of the Windows Deployment Services server.
•%ORGNAME%. The organization name of the Windows Deployment Services server.
0
 

Author Comment

by:mmcdoug
ID: 38821224
Hi footech,

Thanks for your suggestion.

Even with the suggested modification in specialise (as below)

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <CopyProfile>true</CopyProfile>
            <TimeZone>E. Australia Standard Time</TimeZone>
            <RegisteredOrganization>Company</RegisteredOrganization>
            <RegisteredOwner>Company User</RegisteredOwner>
            <ComputerName>%MACHINENAME%</ComputerName>
        </component>

Open in new window


I still get a random name.  In the setupact file, it just has

[Shell Unattend] Running 'specialize' pass
[Shell Unattend] ComputerName: generating computer name from user name
[Shell Unattend] ComputerName: generated name 'ALLIANC-M81TTR7'
[Shell Unattend] ComputerName set to 'ALLIANC-M81TTR7'

Open in new window


You will see in the server properties, this is what I have:
Properties
Any help would be greatly appreciated.

Thanks!
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 
LVL 39

Expert Comment

by:footech
ID: 38821376
Are those settings in the image unattend file (not the client unattend file) which is linked to a particular image?
If you had a file linked, and then made any changes, you need to go to the properties of the image and re-select the the unattend file to use so it picks up the changes.
Just for reference I'm including basic client and image unattend files which work.
WDS-x86-part1.xml
WDS-x86-part2.xml
0
 

Author Comment

by:mmcdoug
ID: 38821422
Guys,

I have a solution.

In order for this to work you must enable "require administrative approval for unknown computers" under the PXE response policy.

In addition, you must delegate access to the Computers OU, and allow the WDS server permissions to create computers in AD.

Thanks for your help.
0
 

Author Comment

by:mmcdoug
ID: 38821923
I've requested that this question be closed as follows:

Accepted answer: 0 points for mmcdoug's comment #a38821422

for the following reason:

Guys,<br /><br />I have a solution.<br /><br />In order for this to work you must enable &quot;require administrative approval for unknown computers&quot; under the PXE response policy.<br /><br />In addition, you must delegate access to the Computers OU, and allow the WDS server permissions to create computers in AD.<br /><br />Thanks for your help.
0
 
LVL 39

Accepted Solution

by:
footech earned 500 total points
ID: 38821565
I don't use the same settings as you and I haven't worked out all the combinations, but I believe the reason you needed to make changes as you did stems from the use of checking something other than the default for Computer Account Location in WDS properties.  When creating accounts in the default location, you don't need to modify permissions or approve requests.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
sync conflicts 1 20
Windows 7 lost password...(reset vs change) 5 29
lync, outlook 1 19
windows 7 password recovery tools 3 19
First some basics on Windows 7 Backup.  It has 2 components one is a file based backup which is stored in .zip files each zip is split at around 200 Megabytes and there is the Image Backup which is as the name implies a total image of the partition …
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now