Solved

SCCM 2012 - Extract Task Sequence XML from Stand Alone Media

Posted on 2016-09-06
6
7 Views
Last Modified: 2016-09-26
Hi Everyone:

I had created a SCCM 2012 - OSD Task Sequence and then created a USB stand alone media to deploy onto a few laptops.  Unfortunately, the SCCM 2012 server was in my lab environment and it crashed.

I was looking to see if any one knows how I can I obtain the SCCM 2012 - Task Sequence XML file from my SCCM - OSD stand alone media?

I am open to any ideas or suggestions even if it is many steps.

Thank you!
0
Comment
Question by:rmessing171
  • 4
  • 2
6 Comments
 
LVL 16

Expert Comment

by:Mike T
ID: 41787555
Hi,

The final is on the USB but it's not going to be any good to you if you want to read it as it's encrypted/encoded for security - MS don't want anyone to copy your TS and us it anywhere, or indeed read the content as it might well have passwords embedded.

What problem are you trying to solve? Do you want to recover your TS or just extract a command or two?

Mike
PS: does the USB work OK?
0
 

Author Comment

by:rmessing171
ID: 41787818
Hi Mike,

Thank you for reaching out to me!

You read my mind, I would like to recover the entire TS with the associated program command lines.

Is there a way to do this?

Thank you again for your assistance!
0
 

Author Comment

by:rmessing171
ID: 41787820
Yes, the USB works find, I would just like to reproduce the TS back into my rebuilt SCCM 2012 Console.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 16

Expert Comment

by:Mike T
ID: 41788048
Hi,
I just double checked and the TS is saved in <Drive>:\SMS\Policy.xml.
The bad news is that it is indeed binary not text.

The good news is that you can recover *some* (probably the key ones) from the logs.

Look in the path C:\windows\ccm\logs

FILE
execmgr.log  - This contains ALL MSI command lines you may run if you use packages
AppEnforce.log  - same as above if you use Applications.
smsts.log  - this contains ALL steps, but won't contain the MSI commands for obvious reasons; it does have some commands though that you can piece together;

filtering will help immensely

Appenforce.log        Executing command line
execmgr.log             Running
smsts.log                 Executing command line
                                Start executing an instruction

The latter will give a pure list of ALL steps you had in your TS, but without the detail - i.e. just the title of each step. It's handy to save and print out and then you can follow your TS along as having 200 odd steps get a bit hard to remember.

I don't know of any other way. You *might* be able to import the TS from the USB into your new CM site. It's not something I've tried and I doubt MS would let you for security reasons.

I hope that helps.

Tip I learnt: Export your TS often from the console and then save a copy elsewhere. There's too much work to lose.

Mike
0
 
LVL 16

Accepted Solution

by:
Mike T earned 500 total points (awarded by participants)
ID: 41788053
PS: when I said filtering I meant within CMTrace. Is there any *other* tool :P ?
0
 
LVL 16

Expert Comment

by:Mike T
ID: 41815722
There is NO way to recover a TS - it is encoded/encrypted by MS on purpose. The only solution is to piece it together from the step in the logs as detailed in my answer.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Article by: Leon
Software Metering within our group of companies has always been an afterthought until auditing of software and licensing became a pain point. Orchestrator and SCCM metering gave us the answer and it was an exciting process.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now