Disable logon during Softwaredeployment

Hi, 

seems like everyone tries to implement autologon during softwaredeployments but i wasnt able to find a solution for what im trying to do. 

Heres the scenario:

Im deploying Windows 8.1 using - unfortunately not SCCM - Frontrange DSM. After OSD+Domainjoin, the DSM Agent starts before logon and installs a set of common applications in a predefined order with multiple reboots. To make sure that those computers will not be taken to the user before completely deployed, i want to disable logon until the last application has been installed.

This way i would make sure, that our onsite support wont start customizing the clients for our users before theyre completely setup.

Any idea how to manage this? 

thanks and best regards, 

Andreas


February 12th, 2014 2:22pm

Hi Andreas,

I am not familiar with the Frontrange DSM.

In my deployment experience (I use MDT or WDS), if I get the applications installed in Audit mode on the Reference PC, and capture the image then, I can deploy the image with applications installed without any login.

Did you just add app package into like shared folder, and write the task sequence or script to install the apps after first login?

Would you please try to  get the applications installed in Audit mode on the Reference PC, and capture the image then?

This would be the better way for use to deploy system with certain apps installed.

Hope this could be helpful.

Free Windows Admin Tool Kit Click here and download it now
February 13th, 2014 12:32pm

Hi Kate, 

since our baseline is changing pretty often we cant capture fat images that already contain the applications, wed have to capture about 20 different images per month to meet our standards. 

Basically, frontrange uses WinPE4 with a DSM agent that operates during unattended windows setup. When this setup stage is done, the client reboots to full OS where the actual DSM client is installed and takes over a set of installation jobs. This could be scripts, msi or exe installations that we can arrange in the needed order, just like in SCCM tasksequences.

Wed like to place a script to disable logon right at the beginning of the "tasksequence" and another script in the end that would allow logon again. But i have no clue how i could manage to disable login. 

best regards, 

Andreas

February 17th, 2014 3:02pm

Hi,

What about using Deny logon locally GPO to block logon first? After finishing deployment, you can use another task in tasksequence to allow users to login.

The Deny log on locally specifies the users or groups that are not allowed to log into the local computer. This policy can be found in Computer Configuration > Policies > Security Settings > Local Policies > User Rights Assignment > Deny log on locally.

For your reference:

Deny and allow workstation logons with Group Policy
http://4sysops.com/archives/deny-and-allow-workstation-logons-with-group-policy/

Free Windows Admin Tool Kit Click here and download it now
February 24th, 2014 4:35pm

Hi Andreas,

you can use the "NWC-Services Logon Credential Provider", that you can download from our website (https://www.nwc-services.de/ -> Service -> Downloads) as Freeware (just a registration is needed, which will be approved manually, so it could take a day).

This credentials provider (which is just a DLL you have to copy to your system) overrides the default windows logon ui and modifies the behavior of your login screen with a few registry keys. You can enable/disable the logon textboxes and modify the large and small message texts of the login screen.

Modifications to the registry are monitored in realtime, so you can create a DSM Job-Policy which will run "on start the execution of a package" and modify the registry key for small/large text with the DSM variable %project.name% (which will store the name of the executing package).

In your "very last" DSM package you can disable the NWC Credential provider (with the reg-value "IsEnabled=0) to get back to the default windows behavior.

Hopefully this helps

Best Regards
Dave


March 17th, 2014 5:25pm

Hi Dave, 

many thanks! Blocklogin does exactly what i need. 

Best regards, 

Andreas


Free Windows Admin Tool Kit Click here and download it now
March 18th, 2014 9:44am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics