Windows – the STONYWALL blog

the STONYWALL blog

where my mind comes to rest...

MDT Task Sequence: Inline Surface Pro Pen Pairing without Image Modifications

Derek Bannard February 3, 2018 Comment Closed MDT

Surface Pro tablets are great, for the most part. One of the most useful addons you can get for it is the Surface Pen. It’s great, powerful and useful… only if you remember to pair it to the tablet before giving it to the end-user. I present to you the automated(ish) way to inject the pairing files into the OS…

Read more »
Local Admin Users on Domain Workstations (GPO/AD Method)

Derek Bannard January 4, 2018 Comment Closed Group Policy

This method consists of three parts, two AD security groups and one GPO.
One security group will be used as a template, but more on that shortly. Important: Looking for guidance adding a new computer to an existing setup, refer to the section Security Group: Authorized Users below. Requirements Automate as much of the process as possible, for handoff…

Read more »
Adding DHCP server support for PXE BIOS and UEFI Booting

Derek Bannard July 4, 2017 Comment Closed DHCP, MDT, Powershell

There are numerous websites with really helpful articles on how to add PXE booting for both BIOS (Legacy) and UEFI devices. In some cases you are directed to add (to enable UEFI, and thus disable BIOS) or remove (to disable UEFI and re-enable BIOS) an entry on your DHCP server. Specifically the Option 060, with a value of “PXEClient”. While…

Read more »
WMI Filtering Based on Computer Type (Desktop / Laptop)

Derek Bannard May 1, 2017 Comment Closed Group Policy

There have been many discussions on this topic, so what’s one more eh? I use WMI filters for a lot of situations. Some include Screensavers, Backgrounds and Power Plans.
Simplicity and future-proofing is what I’m all about, and thinking the currently accepted way to find out if a PC was a desktop or a laptop worked pretty well. Until…

Read more »
Java Group Policy (GPO) with Item-Level Targeting

Derek Bannard November 25, 2016 Comment Closed Group Policy

Group Policy Objects (GPO) are great ways to assign settings to Windows based computers. Sometimes you need more control than what the default WMI or access based controls offer. Let me introduce you to “Item-Level Targeting”. It’s a way to target parts of the GPO to only certain computers or users. Let’s use our favorite program, Java, to illustrate…

Read more »
MDT 2013 Update 2: Adding Domain OU’s with Friendly Names

Derek Bannard November 14, 2016 Comment Closed MDT

Adding computers to the domain is easy if you want them to all end up in the (default) computers OU, or pre-populate the computer account in active directory. For those of us that like to choose the computer OU on the fly when imaging, entering the OU manually is very tiring and mistakes are often made; at least for…

Read more »
MDT 2013 Update 2 not using ADK for WinPE Boot

Derek Bannard November 14, 2016 Comment Closed MDT

When you have a matching Windows OS in the deployment share, MDT uses the BOOT.WIM from that source. When they don’t match, MDT uses WINPE.WIM from the ADK that is installed. While this is generally preferable, you may want force it back to using the Microsoft ADK for WinPE booting. You will need to manually edit the Settings.xml…

Read more »

MDT Task Sequence: Inline Surface Pro Pen Pairing without Image Modifications

Local Admin Users on Domain Workstations (GPO/AD Method)

Adding DHCP server support for PXE BIOS and UEFI Booting

WMI Filtering Based on Computer Type (Desktop / Laptop)

Java Group Policy (GPO) with Item-Level Targeting

MDT 2013 Update 2: Adding Domain OU’s with Friendly Names

MDT 2013 Update 2 not using ADK for WinPE Boot

Search

Categories

Recent Posts

Archives

Meta