XP SP2 deployed via RIS server Help!!

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Mike Adams - 09 Mar 2006 17:12 GMT

When XP SP2 is deployed it enables the firewall and disables the local Admin
account. I need to login to the pc locally to keep our SMS client from
installing.
Heres the Problem.
I can't remote manage the pc and enable the local administrator account
because of the Firewall is on.

How do I either disable the firewall or enable the local administrator
account when deploying from a RIS server?

Thanks
Mike

Reply to this Message

Mark - 10 Mar 2006 08:26 GMT

Hi Mike,

Go into the sif file of the image you are deploying; find and delete the
line below.
DisableAdminAccountOnDomainJoin = 1
The local admin account should be enable when the machine has completed the
installation. Don't ask me why but setting it to 0 in the sif file didn't
seem to make a difference on my images.

You could disable the firewall through Group Policy. Or set a script to
RunOnce when the machine first boots and use sc.exe or something to stop and
disable the firewall service.

Hope this helps,
Mark

Reply to this Message

Mike Adams - 10 Mar 2006 15:11 GMT

Mark thanks.
I have another problem.
I've had to add drivers for my NIC to the CD image and it worked. Then I
made an image of the box and try to push the image out to other pc's and I
get the NO NIc Drivers Error.

I've modified the Sif add the driver $oem$\... folder, stop and started ris
service.

Any help?

> Hi Mike,
>
[quoted text clipped - 11 lines]
> Hope this helps,
> Mark

Reply to this Message

Mark - 13 Mar 2006 12:03 GMT

Hi Mike,
I've had this problem before and always forget what fixed it. Now the main
question is when does it fail? During pxe boot, text mode or Gui-mode of
setup?
As far as I remember I had to get the Nic drivers into the CD based image as
well to get it working with the Riprep image. Not entirley sure where I put
the drivers but as far as I am aware the oem drivers path is only used during
plug&play in the gui stage of setup, when does this fail? I ran a search and
found the drivers under the i386 folder as well as the $oem$ structure with
drivers in the CD-based image. So try both and see which works for you
(restart the binl service in between).

I also had to edit the inf file of the nic drivers so if the above doesn't
work then try this. http://bink.nu/Article2180.bink was the process (and
possibly the article) that I followed to complete this. I've had to do this
with other manufacturers, not just Broadcom. You'll want to restart binlsvc
after this as well.
Let me know if this works,
Thanks,
Mark

Reply to this Message

Mike Adams - 13 Mar 2006 15:20 GMT

I had to put in a call to Microsoft. It turns out they have a problem with
RIS. If you have more than one CR-ROM image you have to either rename the
folder of the CD-ROM that you are using so that it appears 1st alphabetical
or update all the drivers.
Example:
Folders
WindowsXP Nic drivers b57winxp.sys  Version 6.5
WindowsXPSP1 Nic drivers b57winxp.sys  Version 6.8
WindowsXPSP2 Nic drivers b57winxp.sys  Version 7.0
In the folder WindowsXPsp2 you’ve updated to 8.4 in the $oem$\$1\Drivers\NIC
folder

Now you build a PC based on the winxpsp2 CD-ROM image (Folder HP7600). When
you try to build other PC from that image if fails. That is because the
binlsvc service uses version 6.5.
If you rename the WindowsXPSP2 folder to AWindowsXPSP2 and restart the
binlsvc service it will use the 8.4 version.
Microsoft’s single instance storage does not check versions.

> Hi Mike,
> I've had this problem before and always forget what fixed it. Now the main
[quoted text clipped - 16 lines]
> Thanks,
> Mark

Reply to this Message

Bruce Musgrove - 29 Mar 2006 16:22 GMT

From the XP SP2 REF.CHM file, [windowsFirewall] section

[WindowsFirewall]
Profiles = WindowsFirewall.TurnOffFirewall

[WindowsFirewall.TurnOffFirewall]
Mode = 0

Put this in the RIS SIF file you are using

> When XP SP2 is deployed it enables the firewall and disables the local
> Admin
[quoted text clipped - 9 lines]
> Thanks
> Mike

Reply to this Message