Solved

Cannot run EXPLORER.EXE from Domain accounts after sysprep

Posted on 2014-02-26
7
921 Views
Last Modified: 2014-07-16
I am using MDT 2013 & WDS on Server 2012 to deploy Windows7 x64. If I run the Sysprep and Capture task sequence and then deploy the image all domain accounts on the system get the following error when ever EXPLORER.EXE is invoked.

"Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item."

If I skip the capture and just join it to the domain it works fine. I thought that maybe it had something to do with the Default Profile but existing and newly created local accounts do not exhibit this issue.

Our profiles are redirected to the network. I thought maybe that was an issue but we have an older image built and deployed from MDT 2010 on Server 2K8. Deploying the older image from this server works fine deploying that same image from the 2012 server does not.

The only relevant difference I can see is WinPE. The other server runs an older version. The 2012 server is running the MDT 2013 WinPE (Win8).

My next step is to remove the domain join sequence to see if it makes a difference. After that I will figure out how to build an older version of PE for deployment.

Antivirus is not included in the image.

One other oddity is that I have the big red X through the NIC in the tray but the network is fine.

This is so odd.

Any help is greatly appreciated!
0
Comment
Question by:MarkMelanson
  • 5
  • 2
7 Comments
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 39891566
just to double check if the source computer (where the image was captured) was in the domain before capturing the image? It should NOT be in the domain. Every new build using or based on the image should join in the domain individually.
0
 

Author Comment

by:MarkMelanson
ID: 39891596
No. It was never in the domain.

Sorry I failed to mention that.
0
 
LVL 37

Expert Comment

by:Bing CISM / CISSP
ID: 39891624
thanks for the clarification.

one more thing. were the image's OS and applications installed and configured using the SAME user account with ADMIN priviligies?
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:MarkMelanson
ID: 39891833
Yes. All the installs are automated and run during the task sequence.
0
 

Author Comment

by:MarkMelanson
ID: 39894766
I am going to re-create the task sequence from scratch.
0
 

Accepted Solution

by:
MarkMelanson earned 0 total points
ID: 40191077
It is a profile issue. I had to delete the older .DAT files. I think USRCLASS.DAT was the culprit.
0
 

Author Closing Comment

by:MarkMelanson
ID: 40198828
The script below resolved the issue:

@echo off
PUSHD %~DP0
CLS
echo.
echo Deleting NTUSER Junk in Default Profile...
DEL /ah /f C:\users\Default\*.log*
DEL /ah /f C:\users\Default\NTUSER.DAT{*
echo Deleting APPDATA Junk in Default Profile...
del /AH /F C:\Users\default\AppData\Local\Microsoft\Windows\USRCLASS.dat.*
del /AH /F C:\Users\default\AppData\Local\Microsoft\Windows\USRCLASS.dat{*
popd
echo.
echo Done
1

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now