Adding users to local administrator group stopped working in MDT 2012
-
Thursday, October 11, 2012 12:27 AM
We had set up MDT 2012 so that you get a wizard page asking you to enter the domain and user name of up to three user accounts you would like added to the local admin group of that computer during the deployment.
The page still displays, and it allows you to type in the account info and continue, but the users don't get added anymore.
The first couple of times I though that maybe the user name had been misspelled, but I carefully checked the account spelling the next time and the specified user still was not added to the local administrators group at the end of the deployment.
The deployment are marked as successful at the end with no errors shown on the final screen.
What can cause adding users through MDT to fail and is there a log that will show why this feature has started failing?
Is there some option that should be checked in the task sequences?
All Replies
-
Thursday, October 11, 2012 7:47 AM
Is this a custom wizard pane that you made before upgrading to MDT 2012?
The wizards are different now and the's an updated pane editor available.
Blog: http://scriptimus.wordpress.com
-
Thursday, October 11, 2012 12:02 PM
When entering the administrators in the wizard pane, it populates the values of the properties Administrators001, Administrators002, etc...
You should be able to see that in the BDD.log with an entry similar to 'Property Administrators001 is now = DOMAIN\USER'
These entries are processed by the Restore Groups step during the StateRestore phase of the task sequence. The Logs should show ZTIGroups processing the list and adding them.
- Marked As Answer by MyGposts Thursday, October 11, 2012 8:37 PM
-
Thursday, October 11, 2012 5:55 PM
No, this was added after MDT 2012 was installed and it worked initially.Is this a custom wizard pane that you made before upgrading to MDT 2012?
The wizards are different now and the's an updated pane editor available.
Blog: http://scriptimus.wordpress.com
-
Thursday, October 11, 2012 6:02 PM
When entering the administrators in the wizard pane, it populates the values of the properties Administrators001, Administrators002, etc...
You should be able to see that in the BDD.log with an entry similar to 'Property Administrators001 is now = DOMAIN\USER'
These entries are processed by the Restore Groups step during the StateRestore phase of the task sequence. The Logs should show ZTIGroups processing the list and adding them.
I think the Restore Groups task sequence was disabled because these are new systems and we are not migrating profiles or anything else from a previous PC. The users are starting fresh on the new PCs.
There seemed to be be to many user migration and restore related task sequences enabled by default when we are not migrating any user files or settings from previous profiles.
I will re-enable the Restore Groups task sequence and see if this solves the issue.
- Edited by MyGposts Thursday, October 11, 2012 6:03 PM
-
Thursday, October 11, 2012 8:36 PMI re-added the restore groups task sequence and it started working again.
.png)
