All posts by Jim "Microsoft Fanboy" Galloway

Windows Imaging Server (ISCS-MDT) Updates

The Windows imaging server (ISCS-MDT) has been updated to include the Campus Labs Windows 7 image and all software included on that image. If lab computers come to the build bench for any reason and need to be re-imaged you can PXE boot to MDT as you normally would and select the Windows 7 master image under the Campus Labs section.

Task sequences are now associated with IP subnet. For example, if a computer PXE boots on the CN or ROOTS build bench you will see the task sequence selection screen. If a computer PXE boots in one of the computer labs MDT will perform what’s called a “zero-touch” installation and automatically re-image the computer. This assumes the IP range or individual workstations in Cyder are pointed at the OSU-MDT-PXE workgroup.

ISCS-MDT moved to new core

The ISCS-MDT server (used for Windows deployments at the build bench) has been moved to new core and to the same VLAN as the build bench in Milne. Anyone using a USB boot stick to do deployments will need to update. Some quick notes about the move:

– Cyder workgroups (DHCP options) OSU-MDT-PXE and OSU-MDT-PXE-UEFI have been updated with the server’s new IP address.

Old: VLAN 463, 10.198.0.68
New: VLAN 1112, 10.217.96.133

Note: Next week I will be asking NOC to configure IP helpers on the Milne building router. This will replace the workgroups above for the build bench, allowing any client (BIOS or UEFI) to PXE boot.

– MDT boot images have been updated to use the server’s FQDN/DNS name instead of IP address.
– The build bench firewall (CN2-FW) has been updated to allow the necessary ports through for remote management and OS deployment.

NEW WINDOWS IMAGES WITH OFFICE 2016

New Windows images with Office 2016 will go live tomorrow.

Windows 7/8.1: Added .NET 4.6.1, PowerShell 5.0, Office 2016 (replaces 2013)
Windows 10 CB/LTSB: Added Office 2016 (replaces 2013)

Added the following applications/packages to the MDT build share:

  • All IE11 prereqs
  • Microsoft Internet Explorer 11 for Win 7
    • Created a custom deployment package with IEAK 11
  • Microsoft .NET 4.6.1
  • Microsoft Windows Management Framework 4.0
  • Microsoft Windows Management Framework 5.0 for Win 7
  • Microsoft Windows Management Framework 5.0 for Win 8.1
  • Kernel Mode Driver Framework 1.11
  • User Mode Driver Framework 1.11

These applications have been added to all applicable build task sequences to reduce manual work on reference images.

WINDOWS CLIENTS: TUESDAY UPDATES

Tonight @ 10 PM we will be pushing an SCCM package to remove bad patch KB3114717 from Windows computers with Office 2013 32-bit or 64-bit installed. This push will not force a reboot.

Note: This patch has already been removed from WSUS and has been added to MDT for the build bench to run after builds have been completed.

This push will impact the following computers:

Devices with KB3114717 on Office 32-bit – SCCM Detailed Report
Devices with KB3114717 on Office 64-bit – SCCM Detailed Report

WINDOWS CLIENTS: TUESDAY UPDATES

The following applications will be updated tonight via Ninite:

Flash IE + Firefox: 20.0.0.286 -> 20.0.0.306 (details)
Java: 8.0.710.5 -> 8.0.730.2 (details)
VLC: 2.2.1 -> 2.2.2 (details)

Internet Explorer 11 has been re-approved on the new WSUS server. A little over 2,000 computers should be receiving this update; customers have been notified.

All Windows users can expect to see ~1GB of updates, the majority of which are for Microsoft Office (details).

Note: These updates do require a reboot.

No issues to report.

ISCS-MDT upgraded to 2013 Update 2

I have successfully upgraded ISCS-MDT to 2013 Update 2 (6.3.8330). Please be aware that this is what’s considered a quality release; there are no new major features.

Work completed:
– VMWare snapshot created for ISCS-MDT.
– MDT 2013 Update 2 applied.
– MDT build and production shares upgraded.
– MDT build and production boot images updated.
– Updated boot images applied to Windows Deployment Services.

Release notes and Information:
http://blogs.technet.com/b/msdeployment/archive/2015/12/22/mdt-2013-update-2-now-available.aspx

Things you may need to complete:
– For folks who log in to ISCS-MDT directly you may need to recreate/re-pin shortcuts to the MDT Workbench.

Additional notes:

The Assessment and Deployment Kit (ADK) for Windows 10 was recently updated by Microsoft. This version is cited to have issues which could impact some MDT deployment scenarios. I will be doing more testing before moving forward with this update.

WINDOWS CLIENTS: TUESDAY UPDATES

The following applications will be updated tonight via Ninite:

Acrobat: 11.0.13 -> 11.0.14 (details)
Shockwave: 12.2.2.172 -> 12.2.3.183 (no details available)
Silverlight: 5.1.41105.0 -> 5.1.41212.0 (details) Security fix

All Windows users can expect to see ~1GB of updates, the majority of which are for Microsoft Office (details).

Note: These updates do require a reboot.

No issues to report.

MILNE COMPUTER LAB UPDATES – December 30th

All Dell Windows computers were updated (Citrix PVS image) in Milne on Wednesday, December 30th.

Bug fixes, improvements, and updates:

  • Fixed Adobe After Effects intermittent crash error 0 :: 42.
    • The fix was to update the video drivers.
  • Fixed newly introduced Adobe After Effects error about not having a disk cache configured.
    • I’ve created a folder C:\Temp and have configured the default user profile to point the cache there.
  • Fixed GPU performance error for Adobe Illustrator.
    • I’ve configured the default user profile to disable this feature and stop prompting the user.
  • Removed the Java update application from the run key in the registry. This should stop the update notifications.
  • Applied Windows updates.
  • Applied Ninite updates.
  • Applied Adobe CC updates.

Newly installed applications (by request):

  • TeXnicCenter
  • MiKTeX
  • MPlus
  • Eclipse IDE

Applications removed:

  • Winsent Innocenti

NEW CORE MIGRATION: BUSINESS AFFAIRS

Yesterday Business Affairs was moved to the new core network.

Cyder/IP change
All workstations and printers…
Moved from: zone.baf (10.198.30.11 – 10.198.30.252)
Moved to: zone.cn_univadmin (10.160.120.150 – 10.160.123.253)

Printer change
Old IP printers were removed from workstations and replaced with new print queues:

Printer address: \\iscs-printq\KAd-100-Back-Ricoh-MP-3351
Printer IP: 10.160.120.225
Printer driver: PCL6 Universal v4.6
Security group: CN_Printers_KAd 100 Back Ricoh MP 3351

Printer address: \\iscs-printq\KAd-100-Front-Ricoh-MP-3351
Printer IP: 10.160.120.226
Printer driver: PCL6 Universal v4.6
Security group: CN_Printers_KAd 100 Front Ricoh MP 3351

Printer address: \\iscs-printq\KAd-100-HP-Color-LaserJet-M451DN
Printer IP: 10.160.120.232
Printer driver: Model-specific PCL6
Security group: CN_Printers_KAd 100 HP Color LaserJet M451DN

Printer address: \\iscs-printq\KAd-100-HP-Color-LaserJet-M452DN
Printer IP: 10.160.120.235
Printer driver: Model-specific PCL6
Security group: CN_Printers_KAd 100 HP Color LaserJet M452DN

Printer address: \\iscs-printq\KAd-100-HP-LaserJet-9050DN
Printer IP: 10.160.120.234
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 100 HP LaserJet 9050DN

Printer address: \\iscs-printq\KAd-100-HP-LaserJet-M401DNE
Printer IP: 10.160.120.229
Printer driver: Model-specific PCL6
Security group: CN_Printers_KAd 100 HP LaserJet M401DNE

Printer address: \\iscs-printq\KAd-100-HP-LaserJet-M602N
Printer IP: 10.160.120.233
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 100 HP LaserJet M602N

Printer address: \\iscs-printq\KAd-100-HP-LaserJet-P2015N
Printer IP: 10.160.120.228
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 100 HP LaserJet P2015N

Printer address: \\iscs-printq\KAd-100-HP-LaserJet-P3015DN
Printer IP: 10.160.120.231
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 100 HP LaserJet P3015DN

Printer address: \\iscs-printq\KAd-100-Ricoh-MP-201
Printer IP: 10.160.120.227
Printer driver: PCL6 Universal v4.6
Security group: CN_Printers_KAd 100 Ricoh MP 201

Printer address: \\iscs-printq\KAd-106-HP-LaserJet-2430TN
Printer IP: 10.160.120.224
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 106 HP LaserJet 2430TN

Printer address: \\iscs-printq\KAd-106-HP-LaserJet-4250TN
Printer IP: 10.160.120.230
Printer driver: HP Universal Printing PCL 6 (v6.0.0)
Security group: CN_Printers_KAd 106 HP LaserJet 4250TN

ONID GPO: TSS – Printer Deployment – Business Affairs
TSS GPO: Printer Deployment – Business Affairs

Resolved Issues

  • Upon arrival, 51 of 76 hosts were able to get online, the remainder have been resolved.
  • Michael Green’s port was documented but didn’t get flipped and was first to get resolved through Telecom.
  • A number of misconfigured ports were addressed with Telecom.
  • 8 printers weren’t online and were resolved by either rebooting, fixing network ports, or reconfiguring printers (switching from BOOTP to DHCP).
  • Various adjustments were made to user permissions on printers.
  • The TSS printer deployment GPO was initially pulled since users had unified accounts but we discovered some general-use and regular users who hadn’t been unified so the GPO was reinstated.
  • The whereabouts of the Ricoh 201 was unknown until after the migration and was reinstated via Group Policy for the folks that use it.
  • Jon Bickler had a hard-coded IP and was set back to DHCP.
  • CN-Lites had to be moved in Cyder. Additionally, the HP 4250 they print to had to be updated on cnlite1 & 2. Finally, cnlite1 & 2 had to be added to the firewall to allow printing.
  • Folks who RDP into ECSI were unable to print to their new print queues. One of the employees identified a workaround.
  • Connectivity to the security cams in the Cashier’s Office broke, Rich Giesige resolved this by updating some firewall rules.

Unresolved Issues

  • Max Schmidt is verifying printing from CN-Lite.
  • More details needs to be gathered about the workaround for ECSI printing.

New Windows Images with Office 2016

New Windows images are currently live for Windows 7, 8.1, and 10 LTSB. One change I made is I went ahead and replaced Office 2013 with 2016.

If you still haven’t tried out Office 2016, it’s available in the SCCM Software Center for all CN technicians here (open in IE):

https://osu-cm-iis01.oregonstate.edu/CMApplicationCatalog

You can also install it with the following command:

\\software.oregonstate.edu\software\Microsoft Office Suites\Office 2016\Office 2016 – Extracted\setup.exe /adminfile “CS – Office 2016 – Silent Install – x86.MSP”

End-user documentation is available from Microsoft here:

https://technet.microsoft.com/en-us/library/jj871004%28v=office.16%29.aspx