Sign in
 
HomeLibraryWikiLearnGalleryDownloadsSupportForumsBlogs
Resources for IT Professionals >
> 
> 
> 
Does customsettings.ini completely override unattend.xml?

Unanswered Does customsettings.ini completely override unattend.xml?

  • Friday, October 12, 2012 5:13 PM
     
     
    Sign In to Vote
    0

    I'm using MDT 2010 update 1. I'm customizing an image of W7SP1x64 (apps and updates) then capturing it using LiteTouch.  I have deployed my custom image successfully (it joins domain, etc, using customsettings.ini) - so think of it as a reference image.

    Weeks later I have added a couple of extra apps and some more updates to the ref. image and re-captured it. However on redeployment of this new image, it doesn't join the domain. I've used the same Capture TS both times.

    I've been stumped by this behaviour for weeks - what's preventing the domain join: something in the capture, or something in the deploy? Does the unattend come in to this at all, or does customsettings override everything???

     

All Replies

  • Friday, October 12, 2012 7:05 PM
     
     
    Sign In to Vote
    0
    Check the netsetup.log in Windows\debug folder for more information about the domain join issue.
     
  • Friday, October 12, 2012 7:27 PM
     
     
    Sign In to Vote
    0

    Well I suppose it might tell me something if I could understand anything in it :)

     
  • Friday, October 12, 2012 7:37 PM
     
     
    Sign In to Vote
    0
    I mean, there are plenty of entries that reference all my domain settings. But I can't tell if anything's wrong or not....
     
  • Friday, October 12, 2012 7:39 PM
     
     
    Sign In to Vote
    0

    You can check C:\Windows\Temp\DeploymentLogs to see if there was ever any domain join referenced.

    Are you using Litetouch to deploy the image and, if so, do you manually input the domain join information in the wizard? If not, where it is included? (CS.ini, Unattend.xml, etc.)

    -Nick O.

     
  • Friday, October 12, 2012 7:57 PM
     
     
    Sign In to Vote
    0
    Domain join info is in customsettings.ini. It's the only thing I customize, other than the PC itself (I don't touch unattend.xml - I'm not even sure if it's used if you're using cs.ini...; the only time I touch the TS settings is to point the OS install to a newer .wim file.
     
  • Friday, October 12, 2012 8:02 PM
     
     
    Sign In to Vote
    0
    It's great that MS supplies these tools and there's a lot of documentation - and when it works it's great, but HMOG it's so complex that when something goes wrong it's a nightmare :( . I've been working on this on and off for months - I think I could have learned to program in Java from scratch faster than learn how to deploy in a network with MDT)
     
  • Friday, October 12, 2012 8:04 PM
     
     
    Sign In to Vote
    0
    Er, sorry for the rant. What am I looking for in the Deployment logs? - there are what look like a log for each script in the Scripts folder...
     
  • Friday, October 12, 2012 9:04 PM
     
     
    Sign In to Vote
    0

    Well, post your logs here and we can help you.

    Start by posting the bdd.log and netsetup.log

     
  • Monday, October 15, 2012 2:37 PM
     
     
    Sign In to Vote
    0

    Thank you very much. As I don't see any way to attach a text file here and the log file is too long, I've included only the bottom 100 or so lines - SMS Trace has a couple of nice red error messages that are included here in bold

    BDD.log

    ZTIGather processing completed successfully. ZTIGather 10/11/2012 1:44:05 PM 0 (0x0000)
    Microsoft Deployment Toolkit version: 5.1.1642.01 ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    The task sequencer log is located at X:\windows\TEMP\SMSTSLog\SMSTS.LOG.  For task sequence failures, please consult this log. ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Drive C: 21643404 ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Local store path = C:\MININT\StateStore ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Total used space: 21643404 ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Available space at C:\MININT\StateStore: 222552940 ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Backup can use local path ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Property USMTLocal is now = True ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Local store not permitted ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Validating connection to \\DEPLSERVER\DeploymentShare$\Captures ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Already connected to server DEPLSERVER as that is where this script is running from. ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    Beginning backup of drive C: ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    About to run command: cmd /c ""\\DEPLSERVER\DeploymentShare$\Tools\X64\imagex.exe" /capture /compress maximum C: "\\DEPLSERVER\DeploymentShare$\Captures\WIN7X64_CAP.wim" "WIN7X64_CAPCDrive" /flags PROFESSIONAL >> C:\MININT\SMSOSD\OSDLOGS\ZTIBackup_imagex.log 2>&1" ZTIBackup 10/11/2012 1:44:05 PM 0 (0x0000)
    ZTI Heartbeat: command has been running for 6 minutes (process ID 1476) ZTIBackup 10/11/2012 1:50:00 PM 0 (0x0000)
    ZTI Heartbeat: command has been running for 12 minutes (process ID 1476) ZTIBackup 10/11/2012 1:56:00 PM 0 (0x0000)
    ZTI Heartbeat: command has been running for 18 minutes (process ID 1476) ZTIBackup 10/11/2012 2:02:00 PM 0 (0x0000)
    Return code from command = 2 ZTIBackup 10/11/2012 2:03:49 PM 0 (0x0000)
    Error creating an image of drive C:, rc = 2 ZTIBackup 10/11/2012 2:03:49 PM 0 (0x0000)
    ZTIBackup COMPLETED.  Return Value = 2 ZTIBackup 10/11/2012 2:03:49 PM 0 (0x0000)
    Property BackupScriptComplete is now = YES ZTIBackup 10/11/2012 2:03:49 PM 0 (0x0000)
    ZTI ERROR - Non-zero return code by ZTIBackup, rc = 2 ZTIBackup 10/11/2012 2:03:49 PM 0 (0x0000)
    Litetouch deployment failed, Return Code = -2147467259  0x80004005 LiteTouch 10/11/2012 2:03:49 PM 0 (0x0000)
    For more information, consult the task sequencer log ...\SMSTS.LOG. LiteTouch 10/11/2012 2:03:49 PM 0 (0x0000)
    Property RetVal is now = -2147467259 LiteTouch 10/11/2012 2:03:49 PM 0 (0x0000)
    CleanStartItems Complete LiteTouch 10/11/2012 2:03:49 PM 0 (0x0000)
    About to run command: MSHTA.exe "X:\Deploy\Scripts\Wizard.hta" /definition:Summary_Definition_ENU.xml LiteTouch 10/11/2012 2:03:49 PM 0 (0x0000)
    Property definition is now = Summary_Definition_ENU.xml Wizard 10/11/2012 2:03:49 PM 0 (0x0000)
    Microsoft Deployment Toolkit version: 5.1.1642.01 Wizard 10/11/2012 2:03:49 PM 0 (0x0000)
    Not Wizard = False Wizard 10/11/2012 2:03:49 PM 0 (0x0000)
    Property WizardComplete is now = N Wizard 10/11/2012 2:03:49 PM 0 (0x0000)
    Property WizardComplete is now = Y Wizard 10/11/2012 2:37:32 PM 0 (0x0000)
    Unable to copy log to the network as no SLShare value was specified. LiteTouch 10/11/2012 2:37:32 PM 0 (0x0000)
    CleanStartItems Complete LiteTouch 10/11/2012 2:37:32 PM 0 (0x0000)
    Unregistering TSCore.dll. LiteTouch 10/11/2012 2:37:32 PM 0 (0x0000)
    About to run command: wscript.exe "X:\Deploy\Scripts\LTICleanup.wsf" LiteTouch 10/11/2012 2:37:32 PM 0 (0x0000)
    Microsoft Deployment Toolkit version: 5.1.1642.01 LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Run Command: X:\windows\system32\bcdedit.exe /delete {d22e7e91-9ee7-46eb-89d7-c5859e4302f0} /cleanup LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    BCD> The operation completed successfully. LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    BCDEdit returned ErrorLevel = 0 LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Removing BCDEdit LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Removing AutoAdminLogon registry entries LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Stripping BDD commands from unattend.xml template. LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Modified unattend.xml saved to C:\windows\panther\unattend.xml LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Checking mapped network drive. LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    testing drive Z: mapped to \\DEPLSERVER\DeploymentShare$ LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Disconnecting drive Z: mapped to \\DEPLSERVER\DeploymentShare$ LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Cleaning up C:\MININT directory. LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)
    Cleaning up TOOLS, SCRIPTS, and PACKAGES directories. LTICleanup 10/11/2012 2:37:32 PM 0 (0x0000)

     
  • Monday, October 15, 2012 2:49 PM
     
     
    Sign In to Vote
    0

    ... and this is netsetup.log: I've posted the lines from the last 2  of the 5 tries indicated by date in the log

    10/10/2012 16:34:21:702 -----------------------------------------------------------------
    10/10/2012 16:34:21:718 NetpDoDomainJoin
    10/10/2012 16:34:21:718 NetpMachineValidToJoin: 'Dell S/N'
    10/10/2012 16:34:21:718  OS Version: 6.1
    10/10/2012 16:34:21:718  Build number: 7601 (7601.win7sp1_gdr.120503-2030)
    10/10/2012 16:34:21:718  ServicePack: Service Pack 1
    10/10/2012 16:34:21:843  SKU: Windows 7 Professional
    10/10/2012 16:34:21:843 NetpDomainJoinLicensingCheck: ulLicenseValue=1, Status: 0x0
    10/10/2012 16:34:21:843 NetpGetLsaPrimaryDomain: status: 0x0
    10/10/2012 16:34:21:843 NetpMachineValidToJoin: status: 0x0
    10/10/2012 16:34:21:843 NetpJoinDomain
    10/10/2012 16:34:21:843  Machine: Dell S/N
    10/10/2012 16:34:21:843  Domain: corpdomain\JCCAD01
    10/10/2012 16:34:21:843  MachineAccountOU: (NULL)
    10/10/2012 16:34:21:843  Account: Administrator
    10/10/2012 16:34:21:843  Options: 0x23
    10/10/2012 16:34:21:858 NetpLoadParameters: loading registry parameters...
    10/10/2012 16:34:21:858 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
    10/10/2012 16:34:21:858 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
    10/10/2012 16:34:21:858 NetpLoadParameters: status: 0x2
    10/10/2012 16:34:21:858 NetpValidateName: checking to see if 'corpdomain' is valid as type 3 name
    10/10/2012 16:34:22:077 [00000474] NetpGetLsaPrimaryDomain: status: 0x0
    10/10/2012 16:34:29:471 NetpCheckDomainNameIsValid [ Exists ] for 'corpdomain' returned 0x0
    10/10/2012 16:34:29:471 NetpValidateName: name 'corpdomain' is valid for type 3
    10/10/2012 16:34:29:565 NetpJoinDomain: status of connecting to dc '\\JCCAD01': 0x0
    10/10/2012 16:34:29:565 NetpJoinDomainOnDs: Passed DC 'JCCAD01' NOT verified as DNS name '\\jccad01.corpdomain.parent'
    10/10/2012 16:34:29:580 NetpJoinDomainOnDs: Passed DC 'JCCAD01' verified as Netbios name '\\JCCAD01'
    10/10/2012 16:34:29:580 NetpLoadParameters: loading registry parameters...
    10/10/2012 16:34:29:580 NetpLoadParameters: DNSNameResolutionRequired not found, defaulting to '1' 0x2
    10/10/2012 16:34:29:580 NetpLoadParameters: DomainCompatibilityMode not found, defaulting to '0' 0x2
    10/10/2012 16:34:29:580 NetpLoadParameters: status: 0x2
    10/10/2012 16:34:29:580 NetpDsGetDcName: status of verifying DNS A record name resolution for 'jccad01.corpdomain.parent': 0x0
    10/10/2012 16:34:29:580 NetpProvisionComputerAccount:
    10/10/2012 16:34:29:580  lpDomain: corpdomain
    10/10/2012 16:34:29:580  lpMachineName: Dell S/N
    10/10/2012 16:34:29:580  lpMachineAccountOU: (NULL)
    10/10/2012 16:34:29:580  lpDcName: JCCAD01
    10/10/2012 16:34:29:580  lpDnsHostName: (NULL)
    10/10/2012 16:34:29:580  lpMachinePassword: (null)
    10/10/2012 16:34:29:580  lpAccount: Administrator
    10/10/2012 16:34:29:580  lpPassword: (non-null)
    10/10/2012 16:34:29:580  dwJoinOptions: 0x23
    10/10/2012 16:34:29:580  dwOptions: 0x40000003
    10/10/2012 16:34:30:048 NetpLdapBind: Verified minimum encryption strength on jccad01.corpdomain.parent: 0x0
    10/10/2012 16:34:30:048 NetpLdapGetLsaPrimaryDomain: reading domain data
    10/10/2012 16:34:30:048 NetpGetNCData: Reading NC data
    10/10/2012 16:34:30:048 NetpGetDomainData: Lookup domain data for: DC=corpdomain,DC=hhsc,DC=ca
    10/10/2012 16:34:30:048 NetpGetDomainData: Lookup crossref data for: CN=Partitions,CN=Configuration,DC=hhsc,DC=ca
    10/10/2012 16:34:30:048 NetpLdapGetLsaPrimaryDomain: result of retrieving domain data: 0x0
    10/10/2012 16:34:30:376 NetpGetComputerObjectDn: Cracking DNS domain name corpdomain.parent/ into Netbios on \\jccad01.corpdomain.parent
    10/10/2012 16:34:30:376 NetpGetComputerObjectDn: Crack results:  name = corpdomain\
    10/10/2012 16:34:30:376 NetpGetComputerObjectDn: Cracking account name corpdomain\Dell S/N$ on \\jccad01.corpdomain.parent
    10/10/2012 16:34:30:376 NetpGetComputerObjectDn: Crack results:  (Account already exists) DN = CN=Dell S/N,OU=Windows 7 PCs,OU=JCC Computers and Servers,DC=corpdomain,DC=hhsc,DC=ca
    10/10/2012 16:34:30:376 NetpModifyComputerObjectInDs: Initial attribute values:
    10/10/2012 16:34:30:376   objectClass  =  Computer
    10/10/2012 16:34:30:376   SamAccountName  =  Dell S/N$
    10/10/2012 16:34:30:376   userAccountControl  =  0x1000
    10/10/2012 16:34:30:376   DnsHostName  =  Dell S/N.corpdomain.parent
    10/10/2012 16:34:30:376   ServicePrincipalName  =  HOST/Dell S/N.corpdomain.parent  RestrictedKrbHost/Dell S/N.corpdomain.parent  HOST/Dell S/N  RestrictedKrbHost/Dell S/N
    10/10/2012 16:34:30:376   unicodePwd  =  <SomePassword>
    10/10/2012 16:34:30:376 NetpModifyComputerObjectInDs: Computer Object already exists in OU:
    10/10/2012 16:34:30:376   objectClass  =  top  person  organizationalPerson  user  computer
    10/10/2012 16:34:30:376   SamAccountName  =  Dell S/N$
    10/10/2012 16:34:30:376   userAccountControl  =  0x1000
    10/10/2012 16:34:30:376   DnsHostName  =  Dell S/N.corpdomain.parent
    10/10/2012 16:34:30:376   ServicePrincipalName  =  RestrictedKrbHost/Dell S/N  HOST/Dell S/N  RestrictedKrbHost/Dell S/N.corpdomain.parent  HOST/Dell S/N.corpdomain.parent
    10/10/2012 16:34:30:376   unicodePwd  =  Account exists, resetting password: <SomePassword>
    10/10/2012 16:34:30:376 NetpModifyComputerObjectInDs: Attribute values to set:
    10/10/2012 16:34:30:376   unicodePwd  =  <SomePassword>
    10/10/2012 16:34:30:391 NetpModifyComputerObjectInDs: Toggled UserAccountControl successfully
    10/10/2012 16:34:30:391 NetpEncodeProvisioningBlob: Encoding provisioning data
    10/10/2012 16:34:30:391 NetpInitBlobWin7: Constructing blob...
    10/10/2012 16:34:30:391 Blob version: 1
    10/10/2012 16:34:30:391  lpDomain: corpdomain
    10/10/2012 16:34:30:391  lpMachineName: Dell S/N
    10/10/2012 16:34:30:391  lpMachinePassword: <omitted from log>
    10/10/2012 16:34:30:391    DomainDnsPolicy:
    10/10/2012 16:34:30:391     Name: corpdomain
    10/10/2012 16:34:30:391     DnsDomainName: corpdomain.parent
    10/10/2012 16:34:30:391     DnsForestName: hhsc.ca
    10/10/2012 16:34:30:391     DomainGuid: 5a295580-67f6-49bb-ad67-c4a8a1a8ab19
    10/10/2012 16:34:30:391     Sid: S-1-5-21-97720808-1377253436-1387806299
    10/10/2012 16:34:30:391    DcInfo:
    10/10/2012 16:34:30:391     DomainControllerName: \\jccad01.corpdomain.parent
    10/10/2012 16:34:30:391     DomainControllerAddress: \\DC IP
    10/10/2012 16:34:30:391     DomainControllerAddressType: 1
    10/10/2012 16:34:30:391     DomainGuid: 5a295580-67f6-49bb-ad67-c4a8a1a8ab19
    10/10/2012 16:34:30:391     DomainName: corpdomain.parent
    10/10/2012 16:34:30:391     DnsForestName: hhsc.ca
    10/10/2012 16:34:30:391     Flags: 0xe00001fd
    10/10/2012 16:34:30:391     DcSiteName: Default-First-Site-Name
    10/10/2012 16:34:30:391     ClientSiteName: Default-First-Site-Name
    10/10/2012 16:34:30:391  Options: 0x40000003
    10/10/2012 16:34:30:391 NetpInitBlobWin7: Blob pickling result: 0
    10/10/2012 16:34:30:391 NetpEncodeProvisioningBlob: result: 0x0
    10/10/2012 16:34:30:391 ldap_unbind status: 0x0
    10/10/2012 16:34:30:391 NetpRequestOfflineDomainJoin:
    10/10/2012 16:34:30:391  dwProvisionBinDataSize: 896
    10/10/2012 16:34:30:391  JoinOptions: 0x23
    10/10/2012 16:34:30:391  Options: 0x40000003
    10/10/2012 16:34:30:391  lpWindowsPath: C:\Windows
    10/10/2012 16:34:30:391 NetpDecodeProvisioningBlob: Unpickling provisioning blob with size 896 bytes
    10/10/2012 16:34:30:391 NetpDecodeProvisioningBlob: Searching 1 blobs for supported ODJ blob, highest supported version: 1
    10/10/2012 16:34:30:391 NetpDecodeProvisioningBlob: Found ODJ blob version: 1
    10/10/2012 16:34:30:391 NetpDecodeProvisioningBlob: Selected ODJ blob version: 1
    10/10/2012 16:34:30:391 Blob version: 1
    10/10/2012 16:34:30:391  lpDomain: corpdomain
    10/10/2012 16:34:30:391  lpMachineName: Dell S/N
    10/10/2012 16:34:30:391  lpMachinePassword: <omitted from log>
    10/10/2012 16:34:30:391    DomainDnsPolicy:
    10/10/2012 16:34:30:391     Name: corpdomain
    10/10/2012 16:34:30:391     DnsDomainName: corpdomain.parent
    10/10/2012 16:34:30:391     DnsForestName: hhsc.ca
    10/10/2012 16:34:30:391     DomainGuid: 5a295580-67f6-49bb-ad67-c4a8a1a8ab19
    10/10/2012 16:34:30:391     Sid: S-1-5-21-97720808-1377253436-1387806299
    10/10/2012 16:34:30:391    DcInfo:
    10/10/2012 16:34:30:391     DomainControllerName: \\jccad01.corpdomain.parent
    10/10/2012 16:34:30:391     DomainControllerAddress: \\DC IP
    10/10/2012 16:34:30:391     DomainControllerAddressType: 1
    10/10/2012 16:34:30:391     DomainGuid: 5a295580-67f6-49bb-ad67-c4a8a1a8ab19
    10/10/2012 16:34:30:391     DomainName: corpdomain.parent
    10/10/2012 16:34:30:391     DnsForestName: hhsc.ca
    10/10/2012 16:34:30:391     Flags: 0xe00001fd
    10/10/2012 16:34:30:391     DcSiteName: Default-First-Site-Name
    10/10/2012 16:34:30:391     ClientSiteName: Default-First-Site-Name
    10/10/2012 16:34:30:391  Options: 0x40000003
    10/10/2012 16:34:30:391 NetpDoInitiateOfflineDomainJoin
    10/10/2012 16:34:30:391 NetpDoInitiateOfflineDomainJoin: Setting backup/restore privileges
    10/10/2012 16:34:30:391 NetpInitiateOfflineJoin
    10/10/2012 16:34:30:391  lpLocalRegistryPath: C:\Windows\system32\config\SYSTEM
    10/10/2012 16:34:30:391  dwOptions: 0x40000003
    10/10/2012 16:34:30:391 NetpConvertBlobToJoinState: Translating provisioning data to internal format
    10/10/2012 16:34:30:391 NetpConvertBlobToJoinState: Selecting version 1
    10/10/2012 16:34:30:391 NetpConvertBlobToJoinState: exiting: 0x0
    10/10/2012 16:34:30:391 NetpValidateFullJoinState: Validating provisioning data...
    10/10/2012 16:34:30:391 NetpValidateFullJoinState: exiting: 0x0
    10/10/2012 16:34:30:391 NetpClearFullJoinState:  Removing cached state from the registry...
    10/10/2012 16:34:30:391 NetpClearFullJoinState: Status of deleting join state key 0x2
    10/10/2012 16:34:30:391 NetpSaveFullJoinStateInternal: Injecting provisioning data into image...
    10/10/2012 16:34:30:391 NetpSaveFullJoinStateInternal: exiting: 0x0
    10/10/2012 16:34:30:391 NetpSetComputerNamesOffline: Checking for pending name changes...
    10/10/2012 16:34:30:391  SetHostName: TRUE
    10/10/2012 16:34:30:391  SetDnsDomain: TRUE
    10/10/2012 16:34:30:391  SetNetBiosName: TRUE
    10/10/2012 16:34:30:391  SetCurrentValues: TRUE
    10/10/2012 16:34:30:391 NetpSetComputerNamesOffline: Setting Hostname to Dell S/N
    10/10/2012 16:34:30:391 NetpSetComputerNamesOffline: Setting Domain name to corpdomain.parent
    10/10/2012 16:34:30:391 NetpSetComputerNamesOffline: Setting NetBios computer name to Dell S/N
    10/10/2012 16:34:30:391 NetpDoInitiateOfflineDomainJoin: status: 0x0
    10/10/2012 16:34:30:391 NetRequestOfflineDomainJoin: Successfully initiated the offline domain join
    10/10/2012 16:34:30:391 NetpJoinDomainOnDs: Setting netlogon cache.
    10/10/2012 16:34:30:407 NetpJoinDomainOnDs: status of setting netlogon cache: 0x0
    10/10/2012 16:34:30:407 NetpJoinDomainOnDs: Function exits with status of: 0x0
    10/10/2012 16:34:30:407 NetpJoinDomainOnDs: status of disconnecting from '\\JCCAD01': 0x0
    10/10/2012 16:34:30:407 NetpCompleteOfflineDomainJoin
    10/10/2012 16:34:30:407  fBootTimeCaller: FALSE
    10/10/2012 16:34:30:407  fSetLocalGroups: TRUE
    10/10/2012 16:34:30:407 NetpLsaOpenSecret: status: 0xc0000034
    10/10/2012 16:34:30:407 NetpGetLsaPrimaryDomain: status: 0x0
    10/10/2012 16:34:30:407 NetpJoinDomainLocal: NetpHandleJoinedStateInfo returned: 0x0
    10/10/2012 16:34:30:407 NetpLsaOpenSecret: status: 0xc0000034
    10/10/2012 16:34:30:469 NetpJoinDomainLocal: NetpManageMachineSecret returned: 0x0.
    10/10/2012 16:34:30:469 Calling NetpQueryService to get Netlogon service state.
    10/10/2012 16:34:30:469 NetpJoinDomainLocal: NetpQueryService returned: 0x0.
    10/10/2012 16:34:30:501 NetpSetLsaPrimaryDomain: for 'corpdomain' status: 0x0
    10/10/2012 16:34:30:501 NetpJoinDomainLocal: status of setting LSA pri. domain: 0x0
    10/10/2012 16:34:30:501 NetpManageLocalGroupsForJoin: Adding groups for new domain, removing groups from old domain, if any.
    10/10/2012 16:34:30:501 NetpManageLocalGroups: Populating list of account SIDs.
    10/10/2012 16:34:30:516 NetpManageLocalGroupsForJoin: status of modifying groups related to domain 'corpdomain' to local groups: 0x0
    10/10/2012 16:34:30:516 NetpManageLocalGroupsForJoin: INFO: No old domain groups to process.
    10/10/2012 16:34:30:516 NetpJoinDomainLocal: Status of managing local groups: 0x0
    10/10/2012 16:34:30:532 NetpJoinDomainLocal: status of setting ComputerNamePhysicalDnsDomain to 'corpdomain.parent': 0x0
    10/10/2012 16:34:30:532 NetpJoinDomainLocal: Controlling services and setting service start type.
    10/10/2012 16:34:30:532 NetpJoinDomainLocal: Updating W32TimeConfig
    10/10/2012 16:34:30:563 NetpUpdateW32timeConfig: 0x0
    10/10/2012 16:34:30:563 NetpClearFullJoinState:  Removing cached state from the registry...
    10/10/2012 16:34:30:563 NetpClearFullJoinState: Status of deleting join state key 0x0
    10/10/2012 16:34:30:563 NetpCompleteOfflineDomainJoin: status: 0x0
    10/10/2012 16:34:30:563 NetpJoinDomain: NetpCompleteOfflineDomainJoin SUCCESS: Requested a reboot :0x0
    10/10/2012 16:34:30:563 NetpDoDomainJoin: status: 0x0
    10/11/2012 13:42:23:850 -----------------------------------------------------------------
    10/11/2012 13:42:23:866 NetpUnJoinDomain: unjoin from 'corpdomain' using '(null)' creds, options: 0x0
    10/11/2012 13:42:23:866  OS Version: 6.1
    10/11/2012 13:42:23:866  Build number: 7601 (7601.win7sp1_gdr.120830-0333)
    10/11/2012 13:42:23:866  ServicePack: Service Pack 1
    10/11/2012 13:42:23:882  SKU: Windows 7 Professional
    10/11/2012 13:42:23:882 NetpUnJoinDomain: status of getting computer name: 0x0
    10/11/2012 13:42:23:882 NetpApplyJoinState: actions: 0x2b005a
    10/11/2012 13:42:24:896 NetpApplyJoinState: status of stopping and setting start type of Netlogon to 16: 0x0
    10/11/2012 13:42:24:958 NetpApplyJoinState: NON FATAL: status of removing DNS registrations: 0x0
    10/11/2012 13:42:24:958 NetpGetLsaPrimaryDomain: status: 0x0
    10/11/2012 13:42:24:958 NetpLsaOpenSecret: status: 0x0
    10/11/2012 13:42:24:974 NetpLsaOpenSecret: status: 0x0
    10/11/2012 13:42:24:989 NetpSetLsaPrimaryDomain: for 'corpdomain' status: 0x0
    10/11/2012 13:42:24:989 NetpApplyJoinState: status of setting LSA pri. domain: 0x0
    10/11/2012 13:42:25:020 NetpApplyJoinState: status of clearing ComputerNamePhysicalDnsDomain: 0x0
    10/11/2012 13:42:25:020 NetpManageLocalGroups: Populating list of account SIDs.
    10/11/2012 13:42:25:036 NetpApplyJoinState: status of removing from local groups: 0x0
    10/11/2012 13:42:25:036 NetpUpdateW32timeConfig: 0x0
    10/11/2012 13:42:25:036 NetpUnJoinDomain: status: 0x0

     
  • Monday, October 15, 2012 3:27 PM
     
     
    Sign In to Vote
    0

    The errors in BDD.log are related to capturing an image. When you deploy the image, look for ZTIDomainJoin or if checking BDD.log look in the component "ZTIDomainJoin" sections.

    As far as unattend.xml and customsettings.ini: Unattend.xml is the answer file Windows Vista and above uses during setup. It's absolutely used during deployment. CustomSettings.ini is the rules file for MDT. In a nutshell, the entries in CS.ini are "read" by the TS during the Gather phase, and then those variables are plugged into the unattend.xml. See http://deploymentbunny.com/2012/04/21/back-to-basic-customsettings-ini-explained/ for a more in-depth look at how that works.

    -Nick O.

     
  • Monday, October 15, 2012 7:12 PM
     
     
    Sign In to Vote
    0

    Thanks for the reply.

    However, on the computer in question, to which I have Deployed W7 after further customizing and capturing an existing image, there are no entries for ZTIDomainJoin.

     
  • Monday, October 15, 2012 7:27 PM
     
     
    Sign In to Vote
    0

    What does your CS.ini file look like?

    I imagine something like:

    SkipDomainMembership=YES
    JoinDomain=MYDOMAIN.COM
    DomainAdmin=DomainAdmin
    DomainAdminDomain=MYDOMAIN.COM
    DomainAdminPassword=DomainPassword

    Or the Skip part is NO, with the information being pre-populated in the Wizard.

    -Nick O.

     
  • Monday, October 15, 2012 7:38 PM
     
     
    Sign In to Vote
    0
    Yes, exactly like that
     
  • Monday, October 15, 2012 8:18 PM
     
     
    Sign In to Vote
    0

    And after a deployment, what does the BDD.log look like? If the machine has attempted to join the domain, there should be entries.

    -Nick O.

     
  • Tuesday, October 16, 2012 12:55 PM
     
     
    Sign In to Vote
    0

    One thing I'm unsure of is whether entries from previous attempts at deployment to the same machine is saved in the .bdd log - it certainly seems to be the case in the netsetup.log.

    But my present .bdd log all references the same date so I'm going to assume it's one deployment.

    The blocks below are anything I could find referencing domain joining: the last one says the domain is joined, but when the computer is finished deploying, it's not...

    Property JOINDOMAIN is now = CORPDOMAIN ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Using from [DEFAULT]: JOINDOMAIN = CORPDOMAIN ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Property DOMAINADMIN is now = Administrator ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Using from [DEFAULT]: DOMAINADMIN = Administrator ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    <Message containing password has been suppressed> ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    <Message containing password has been suppressed> ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)

    and

    Property DeploymentType is now = NEWCOMPUTER ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Property OSDNetworkJoinType is now = 0 ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Property OSDDomainName is now = CORPDOMAIN ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)
    Property OSDJoinAccount is now = \Administrator ZTIGather 10/10/2012 10:02:32 AM 0 (0x0000)

    and

    Property TaskSequenceID is now = WIN7X64 ZTIGather 10/10/2012 10:03:05 AM 0 (0x0000)
    Property DeploymentType is now = NEWCOMPUTER ZTIGather 10/10/2012 10:03:05 AM 0 (0x0000)
    Property OSDNetworkJoinType is now = 0 ZTIGather 10/10/2012 10:03:05 AM 0 (0x0000)
    Property OSDDomainName is now = CORPDOMAIN ZTIGather 10/10/2012 10:03:05 AM 0 (0x0000)
    Property OSDJoinAccount is now = \Administrator ZTIGather 10/10/2012 10:03:05 AM 0 (0x0000)

    and

    Updated C:\MININT\Unattend.xml with JoinDomain=CORPDOMAIN (value was ) ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)
    Removed //settings[@pass="specialize"]/component[@name="Microsoft-Windows-UnattendedJoin"]/Identification/JoinWorkgroup entry from C:\MININT\Unattend.xml ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)
    Removed //settings[@pass="specialize"]/component[@name="Microsoft-Windows-UnattendedJoin"]/Identification/MachineObjectOU from C:\MININT\Unattend.xml because the value was blank. ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)
    //settings[@pass="specialize"]/component[@name="Microsoft-Windows-UnattendedJoin"]/Identification/JoinWorkgroup not found in C:\MININT\Unattend.xml, unable to update. ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)
    Updated C:\MININT\Unattend.xml with DomainAdmin=Administrator (value was ) ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)
    No value found for DomainAdminDomain ZTIConfigure 10/10/2012 10:03:19 AM 0 (0x0000)

    and

    Updated C:\MININT\Unattend.xml with JoinDomain=CORPDOMAIN (value was CORPDOMAIN) ZTIConfigure 10/10/2012 10:26:09 AM 0 (0x0000)
    //settings[@pass="specialize"]/component[@name="Microsoft-Windows-UnattendedJoin"]/Identification/MachineObjectOU not found in C:\MININT\Unattend.xml, unable to update. ZTIConfigure 10/10/2012 10:26:09 AM 0 (0x0000)
    //settings[@pass="specialize"]/component[@name="Microsoft-Windows-UnattendedJoin"]/Identification/JoinWorkgroup not found in C:\MININT\Unattend.xml, unable to update. ZTIConfigure 10/10/2012 10:26:09 AM 0 (0x0000)
    Updated C:\MININT\Unattend.xml with DomainAdmin=Administrator (value was Administrator) ZTIConfigure 10/10/2012 10:26:09 AM 0 (0x0000)
    No value found for DomainAdminDomain ZTIConfigure 10/10/2012 10:26:09 AM 0 (0x0000)

    and

    Property OSDNetworkJoinType is now = 0 ZTIGather 10/10/2012 10:33:13 AM 0 (0x0000)
    Property OSDDomainName is now = CORPDOMAIN ZTIGather 10/10/2012 10:33:13 AM 0 (0x0000)
    Property OSDJoinAccount is now = \Administrator ZTIGather 10/10/2012 10:33:13 AM 0 (0x0000)
    <Message containing password has been suppressed> ZTIGather 10/10/2012 10:33:13 AM 0 (0x0000)

    and

    Property DomainJoinAttempts is now = 1 ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)
    Verifying that the computer is joined to the requested domain. ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)
    Check Win32_ComputerSystem.DomainRole = 1  For Domain: CORPDOMAIN.MINE ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)
    The computer is already a member of a domain. ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)
    ZTIDomainJoin processing completed successfully. ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)

     
  • Tuesday, October 16, 2012 3:00 PM
     
     
    Sign In to Vote
    0

    "No value found for DomainAdminDomain" is a bit alarming. Are you sure the CS.ini contains DomainAdminDomain?

    Also:

    Check Win32_ComputerSystem.DomainRole = 1 For Domain: CORPDOMAIN.MINE ZTIDomainJoin 10/10/2012 10:33:15 AM 0 (0x0000)
    The computer is already a member of a domain

    Are you capturing the image while the device is on the domain?

    -Nick O.

     
  • Tuesday, October 16, 2012 4:06 PM
     
     
    Sign In to Vote
    0

    I've always captured the image while it's joined to the domain. Since I've started having problems I've tried capturing it not joined to the domain, but it's made no difference. I think I read somewhere that it should NOT be joined to the domain, though. Why would that be?  - doesn't LTI unjoin it when capturing anyway ( then join it when deploying)?

    The "No value found for DomainAdminDomain" is odd, for sure - the value is definitely in th cs.ini file However, in following Mitch Tullochs's articles on deploying he says that when capturing it's essential to change the cs.ini to default values - then change it back to custom when deploying. The entry above might have been because I forgot to reset the cs file to its custom values - I can't tell the difference in the log file as to where one attempt ends and another begins. Although, that particular entry is near the end; if that's referring to the last attempt, it would have definitely been using the customized settings in the cs file.

    These are the default settings I use when capturing: - I never change bootstrap.ini, which also contains the domain admin credentials.
    [Settings]
    Priority=Default
    Properties=MyCustomProperty
    [Default]
    OSInstall=Y
    SkipAppsOnUpgrade=YES
    SkipCapture=NO
    SkipAdminPassword=YES
    SkipProductKey=YES

     
  • Wednesday, October 17, 2012 3:33 PM
     
     
    Sign In to Vote
    0

    So, I'm curious...does anyone know whether capturing joined/not joined to the domain makes any difference?

     
  • Wednesday, October 17, 2012 8:57 PM
     
     
    Sign In to Vote
    0

    The impression I've received from people is that it no longer matters in Windows Vista and newer. In Windows XP and older, it was considered good practice to capture images that were not joined to the domain because of possible issues related to Sysprep and GUIDs and AD.

    For better or worse, I never capture images that are on the domain.

    I came across http://technet.microsoft.com/en-us/library/cc721962(v=ws.10).aspx and thought it may be relevant to your issue. Based on what we've discussed, it seems like something is amiss with your catalog file or Unattend.xml file. 

    -Nick O.