-
Within DeploymentWorkbench go to Deployment Shares\<YourDeploymentshare>\Task Sequences.
-
Organize the available task sequences into folders. Task sequences that aren’t in a folder can’t be restricted.
-
Within DeploymentWorkbench go to Deployment Shares\<YourDeploymentshare>\Advanced Configuration\Selection Profiles.
-
Create a new selection profile and at “Select the folders that should be included in this selection profile” select the folders below Task Sequences that should be visible for this profile.
-
Edit CustomSettings.ini, add UserID to Priority before the value Deffault under [Settings]:
[Settings] Priority=UserID, Default
-
Define a section in CustomSettings.ini in the form [userid]. Example: if the User ID is Helpdesk then the section should be [helpdesk].
-
Define the selection profile to be used for this user below this section. Example: to give helpdesk access to the Helpdesk selection profile, add the following:
[helpdesk] WizardSelectionProfile=Helpdesk
-
Create a selection profile in which no folder has been selected and place a WizardSelectionProfile=nameofemptyselectionprofile below [Default] if you want none other than the defined user IDs to have access to the task sequences.
-
Now when the user logs into the wizard in the WinPE environment, he/she sees only the task sequences that are available in the selection profile.

Source:Microsoft TechNet – MDT Forum – How to hide/show task sequence for specific users/user groups?
Category Archives: Deployment
MDT 2010 WSUS deployment Error 0×80244019
I added so as always WSUSServer=http://ward-bh01 to customsettings.ini
When the deploying the image I get de following error
The Error
Solution:
Ad the Port number to de WSUSServer address in customsettings.ini. In my case it was 8530. Because the WSUS site was running on that port number see the pictures
WSUSServer=http://ward-bh01:8530
No tags for this post.Microsoft Deployment Toolkit (MDT) 2012 Beta 1 Available
Microsoft has just released as a public beta the newest version of Microsoft Deployment Toolkit (MDT) 2012 with a few important updates:
- Supporting System Center Configuration Manager (SCCM) 2012.
- Using Lite Touch Installation (LTI), great improvements in the client side look-n-feel.
- Also for LTI, behind-the-scenes enhancements for partitioning, UEFI (Unified Extensible Firmware Interface), and user state migration.
- Some minor bugs fixed.
MDT 2012 Requirements
Same as MDT 2010:
- Windows Automated Installation Kit (WAIK) 2.0. You can download it from here.
Note: The download page indicates that the WAIK version is “1”; but don’t worry, the actual version is 2.0. - MSXML 6.0
- PowerShell.
- .Net Framework 3.5 SP1. Available for download here.
Note: Even though .Net Framework 2.5 SP1 is not a requirement for MDT 2010 installation; one of its features, User-Driven Installation (UDI), does requires the latest Microsoft Framework installed.
MDT 2012 Look-n-Feel
For what I’ve seen so far, the user experience of the Deployment Workbench console is pretty much the same.
MDT 2012 Beta 1 Download
The beta is available in this link from Microsoft Connect,
No tags for this post.Issue with MDT 2010 Update 1 and Windows AIK for Windows 7 SP1
With the release of the Windows AIK for Windows 7 SP1 supplement (see Windows AIK for Windows 7 SP1 Released for details), there is a new version 3.1 version of Windows PE available. If you plan to install this update, you need to be aware of an issue when using this with MDT 2010 Update 1.
With MDT 2010, Deployment Workbench will look for a “boot.wim” file from one of the imported operating systems that has the same build number as Windows AIK (e.g. “boot.wim” from a Windows 7 RC, build 7100, operating system to go with the Windows AIK for Windows 7 RC). If it finds a match, it will use that WIM instead. Why do we do this? Because the “boot.wim” contains the Windows Recovery Environment (Windows RE), a component that isn’t available in Windows AIK.
So let’s get a little more specific. First, some background details:
- The build number for the RTM version of Windows 7 is 6.1.7600.16385.
- The build number for Windows AIK for Windows 7, released with Windows 7 RTM, is also 6.1.7600.16385. This is stored in the registry.
- The build number for Windows 7 SP1 is 6.1.7601.17514.
- The build number for the files included in the Windows 7 AIK for Windows 7 SP1 supplement, including Windows PE 3.1 and all the Windows PE feature packs, is also 6.1.7601.17514. But since this supplement is installed by replacing files in the Windows AIK installation directory using XCOPY, the registry isn’t updated so MDT still thinks the Windows 7 RTM version (6.1.7600.16385) of Windows AIK is installed.
Now, let’s assume that you have Windows 7 RTM x86 installation files present in your deployment share, and you haven’t installed the Windows 7 AIK for Windows 7 SP1 supplement. MDT’s processing when creating a boot image will look like this:
- Is there a boot.wim available with the same version number as Windows AIK (6.1.7600.16385 = 6.1.7600.13685)? Yes, copy it to a temporary folder and mount it.
- Inject the required Windows PE optional components from the Windows AIK installation directory into this mounted boot image.
- Inject the needed MDT scripts.
- Commit the changes to the WIM file and copy it to the deployment share.
Now, install the Windows 7 AIK for Windows 7 SP1 supplement and update the deployment share:
- Is there a boot.wim available with the same version number as Windows AIK (6.1.7600.16385 = 6.1.7600.13685)? Yes (because MDT doesn’t know that Windows AIK has been updated, the registry still says it is version 6.1.7600.16385), copy it to a temporary folder and mount it.
- Try to Inject the required Windows PE feature packs from the Windows AIK installation directory into this mounted boot image. All fail, because they are for Windows PE 3.1 and won’t work with the Windows PE 3.0 boot image copied from the Windows 7 RTM files.
- Stop.
The actual error will look something like this (repeated for each Windows PE feature pack):
Deployment Image Servicing and Management tool
Version: 6.1.7600.16385
Image Version: 6.1.7600.16385
Processing 1 of 1 – Adding package WinPE-HTA-Package~31bf3856ad364e35~x86~~6.1.7601.17514
Error: 0x800f081e
The specified package is not applicable to this image.
The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
Exit code = –2146498530
DISM /Add-Package failed for component C:\Program Files\Windows AIK\Tools\PETools\amd64\WinPE_FPs\winpe-hta.cab, rc = -2146498530.
Solution:
Modify the Settings.xml file in the deployment share’s “Control” folder to tell MDT to never use the boot.wim. The settings look like this:
<Boot.x86.UseBootWim>True</Boot.x86.UseBootWim>
<Boot.x64.UseBootWim>True</Boot.x64.UseBootWim>
They should be changed to instead say:
<Boot.x86.UseBootWim>False</Boot.x86.UseBootWim>
<Boot.x64.UseBootWim>False</Boot.x64.UseBootWim>
As a result of this change, MDT will no longer use the boot.wim from the Windows 7 RTM installation files. Instead, it will always use the winpe.wim from Windows AIK. And since the Windows PE feature packs in Windows AIK should always match the winpe.wim in Windows AIK, this will always work.
Note that this will never be an issue with MDT-generated boot images used with ConfigMgr 2007, as MDT will always use the winpe.wim from Windows AIK when generating these. (ConfigMgr 2007 doesn’t yet support Windows PE 3.1, so don’t install the Windows AIK for Windows 7 SP1 supplement yet if you are using ConfigMgr.)
More info check: Issue with MDT 2010 Update 1 and Windows AIK for Windows 7 SP1 Supplement
No tags for this post.Deploy office 2010 and a previous office version together on one PC with MDT 2010
Deploy office 2010 and a previous office version together on one PC with MDT 2010. Then you need to do the following things
Needed.
- Office 2010 ISO
- Office 2010 Administrative Template files (ADM, ADMX/ADML) and Office Customization Tool
1. Make sure you have a working Office 2007 deployment. Check this How to deploy Office 2007 with MDT
2. Extract the Office 2010 ISO to the application folder on de MDT Server
2. Extract AdminTemplates_32.exe or AdminTemplates_64.exe to a folder.
3. Copy the Admin folder that you can find in the extracted folder to the Office 2010 folder that you created at step 1.
4. Run setup.exe /admin
5. Check the Screenshots for the settings ![]()
![]()
6. Save the file in Updates folder that you find in Office folder. I named the file setup.MSP
7. Create a new application without source files.
Command Line is:
setup.exe /adminfile “\\mdtservername\deploymentshare$\Applications\Microsoft Office 2010 x86\Updates\setup.msp”
MDT 2010 Automatically Move Computers to the Right OU
When I deploy client computers you have always 2 client Tasks. One for Laptops and one for Desktops.
I already blogd about joing domain. Jou can find it here. http://www.wardvissers.nl/2009/12/20/mdt-2010-join-domain/.
I had a issue joining the computers to the right ou for the two tasks.
I found a great solution to fix it.
Here is how I did it.
Open the right Task Sequence. I my case it was laptop.
Change this to: Gather local data and proces rules. Fill at Rules files customsettings.ini in.
Open Customsettings.ini
Change the following
[Settings]
Priority=Default
Properties=MyCustomProperty
to
[Settings]
Priority=TaskSequenceID, Default
Properties=MyCustomProperty
Add the following text.
[LAPTOP]
MachineObjectOU=ou=laptops,ou=ward,dc=wardvissers,dc=local
You can do this also for Desktops.
When you deploy a new computer the computer is now in the right OU. I love MDT ![]()
Advanced Deployment Scenarios using the Microsoft Deployment Toolkit 2010
I was attended on twitter on the following video’s. I watch some of them. They are really interesting
MDT The task sequence has been suspended.
The error was: The task sequence has been suspended.
LiteTouch has encountered and Environment Error (Boot into WinPE)
I had a strange problem with MDT. When I booted the in WinPE.
Rebooting and again started the WinPE image did nothing same error again.
Solution is very simple.
You have to remove two directory’s C:\_SMSTaskSequence\nul and C:\MININT
After that you can resume deploying the OS TaskSequence you want.
For sure I cleaned the Disk with Diskpart.
No tags for this post.MDT 2010 Multiple Partitions Issues & hidden Bitlocker partition
I had a new laptop where I wanted to deploy Windows 7 x64 Enterprise and walked to a bug in MDT 2010. Default config.
I configured 2 partitions to use the whole disk. See screenshot. ![]()
When I deploy the task I get the following error
He wants to format partition D. But partition D is not availably.
I ended the task and opened the PE window and started Diskpart and listed the volumes.
The strange thing was that the extended partition has the drive letter S had and it was a raw partition.
After studying ZTIDiskpart.log (X:\MININT\SMSOSD\OSDLOGS\ZTIDiskpart_diskpart.log)
I found out that there was no space left to create a 300mb partition for saving Bitlocker information.
So what did ZTIDiskpart.wsf. ZTIDiskpart.wsf gave the last partition that was created the drive letter S. This is the default letter for the Bitlocker partition. So hey wanted to format the file system with fat32. Because in my case the partition size was 200GB he cannot format the disk.
Solution:
Setting the extended partition to use 95%. Then MDT have enough space to create a 300mb hidden partition for Bitlocker.
Tags: MDT 2010, Windows, Windows 7MDT 2010 Importing automatically the right driver
Microsoft Deployment Toolkit 2010 has some nice improvements to handle drivers. I will describe how I like to manage drivers in MDT 2010.
Some time I wrote i article about how to get the Name & Model from a computer. This is very important when you want to import only the right drivers automatically.
First we have to build the ‘Out-of-Box Drivers’ folder structure and import drivers. I have subdirectories for each architecture, brand and model. This is what my folder tree looks like:
However, you can build your own structure, as long as you respect the proper model & brand (make) name of the vendors.
Build Out-of-Box Drivers tree
To build up the folder structure you have to know the model name of your hardware. To retrieve the proper computer name execute at powershell command prompt: ‘Get-WmiObject -Class win32_computersystemproduct | fl Name,Model,UUID,Identifyingnumber,Vendor’, to get the exact name WMI queries to determine the computer model. In my case the computer name is “Latitude D830”.
Now that we have drivers imported in our Deployment Share, it’s time to move on.
1. DriverGroups
DriverGroups existed in MDT 2008 already, although the MDT Team added subdirectory support in MDT 2010.
At deployment phase MDT uses WMI to query the proper computer model and only the current model drivers will be injected. In order to get this working properly, you have to use the EXACT model name in your Out-of-Box Driver tree.
Inject the correct drivers in your Task Sequence
Add a new step in your Task Sequence to inject the correct drivers. MDT will query the computer name and inject the drivers which corresponds with the computer name from the Out-of-Box folder structure, right before applying the image at deployment.
I use ‘DriverGroup_001’ as Task Sequence Variable, and Win7×64\%Make%\%Model% as value for my Windows 7 x64. You have to adapt this to your Out-of-Box tree.
As I use a DriverGroup I’ve disabled the ‘Inject Drivers’ task.
Customsettings.ini
As my Task Sequence handles everything, there isn’t anything needed here.
If you don’t like to use a new Task in your TS, you can add DriverGroup variables in customsettings.ini like this:
DriverGroup_001=%Make%\%Model%
DriverGroup_002=Printers
2. Selection Profiles
New in MDT 2010 are DriverSelectionProfiles. These are easy for new MDT admins, very straight forward and easy to use.
Overview:
First you have to create a Profile (or use one of the default profiles):
You can even select Packages and Applications, use it for “bad drivers” aka driver setup packs.
Select what drivers you want to add to the profile;
After making the profiles you can use them in your Task Sequences. The default ‘Inject Drivers’ settings are on the left, the customized one on the right:
You can add Selection Profiles for drivers/packages or whatever you want. Just add an extra step in your task sequence like above.
Customsettings.ini
As with DriverGroups you can choose to handle the DriverSelectionProfile in customsettings.ini or in your TS.
Example:
DriverSelectionProfile=Dell Latitude D520 x64
Tags: 2008, Deployment, MDT 2008, MDT 2010, Microsoft, Powershell, View, Windows, Windows 7