With monthly server patching, the process is currently manual due to the number of clusters and very application specific servers that is patched – including an issue with failed updates caused by Trend Officescan – and an issue that has been done manually for months.
It was time to automate this process – and without Orchestrator or SMA I had to use what I already had – a SCCM 2012 R2 Infrastructure, and the use of the Task Sequence and PowerShell.
Importing drivers into System Center Configuration Manager R2 (SCCM) is a task I do at least once a month as new models are introduced into my work environment.
In this guide I am going to guide you through a step by step method of exporting drivers from an already existing build (ie vendor supplied, OEM) or from a driver package supplied for operating system deployment purposes from a vendor, such as Hewlett Packard.
As part of being an IT Engineer at my place of employment – I work with operating system deployment and management – part of this is using the Windows DISM toolset for adding packages or drivers directly into a Windows OS WIM or boot WIM.
Here are a few useful DISM commands I have gathered and use on a monthly basis with WIM management and updates.
The following procedures will outline the installation instructions of third party Antivirus and Anti-malware tools that do include Rootkit scanning and removal. The Trend Micro utilities should be run first and if possible a virus sample collected and sent to Trend Micro. The following utilities are included in this: AVG Antivirus Free, CCleaner, ClamWin Antivirus, CWShredder, HijackThis, Malwarebytes Anti-malware, Microsoft Security Essentials, Rootkit Revealer, Spybot Search & Destroy.
I have just configured ESXi on my new Intel NUC (Intel NUC i7-5557U 3.1GHz 16GB 256GB SSD).
Due to incompatibility with ESXi-Customizer on Windows 10 – I used the now recommended: ESXi-Customizer-PS Power CLI script.
Following the instructions at the ESXi-Customizer website: http://www.v-front.de/p/esxi-customizer-ps.html with installing the VMWare Power CLI PowerShell dependencies onto my workstation (you need a register My VMWare account to download this directly from VMware).
I was able to use the following command from the directory where the PowerShell script was saved:
.\ESXi-Customizer-PS-v2.4.ps1 -v60 -vft -load sata-xahci,net55-r8168
This will make the script connect to the V-Front Online Depot and add the sata-xahci and net55-r8168 packages from there to the latest ESXi 6.0 Imageprofile.
Entirely with no user interaction it was able to download the latest v6 ESXi release and slipstream the sata-xahci drivers leaving a clean ISO I was then able to use Rufus with the default settings to deploy the ISO to my USB Flash drive which was then used to install on the Intel NUC successfully.
.NET Framework 3.5 needs the source files off the Windows Server 2012 DVD in order to install. You can do this online and without needing a restart using DISM.
1. Go to a command prompt and enter this:
dism /online /enable-feature /featurename:NetFX3 /all /Source:d:sourcessxs /LimitAccess
Note: Source should be the Windows DVD location, ie d: /Source:x if x is your DVD mount point.
Note: This is not best practice and is not recommended to do in a production environment.
Enabling remote desktop remotely can be done from an elevated command prompt. This will set your Remote Desktop settings to “Allow connections from computers running any version of Remote Desktop (less secure)”
reg add "\<servername>hklmsystemcurrentcontrolsetcontrolterminal server" /v fDenyTSConnections /t REG_DWORD /d 0
Windows 10 Technical – How to switch from Start Menu to Start Screen
1. Click the Start button
2. Right click a blank space on the menu and click properties
3. Click the Start Menu tab
4. Uncheck or check – Use the Start Menu instead of the Start Screen
5. Click Apply
Repeat steps 2 to 10 again on other OUs you would like to delegate move rights to.