Formular una preguntaFormular una pregunta
 

PreguntaOSD Problems with a client with Bit Locker enabled

  • martes, 24 de noviembre de 2009 4:57Felipe_Roman Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     

    Hi:
     We have SCCM 2007 SP2 R2 in a box with W2008 R2 x64. Native Mode.
     I have a TS that works well in replace and bare metal pxe scenaries.
     Now, I have a sccm client that has bit locker enabled (TPM+PIN, recovery key on ADDS). When I advertised the TS to replace the OS, the TS was returning this error just before restart to boot on WINPE with my boot image:

    "<![LOG[Deleting a pause cookie from registry key HKLM\Software\Microsoft\SMS\Task Sequence\System Health Agent]LOG]!><time="14:37:07.789+000" date="11-23-2009" component="TSManager" context="" type="1" thread="692" file="utils.cpp:2778">
    <![LOG[kTaskSequence.DeleteValue(sComponent.c_str()), HRESULT=80070002 (e:\nts_sms_fre\sms\framework\tscore\utils.cpp,2782)]LOG]!><time="14:37:07.789+000" date="11-23-2009" component="TSManager" context="" type="0" thread="692" file="utils.cpp:2782">
    <![LOG[Failed to delete registry value HKLM\Software\Microsoft\SMS\Task Sequence\System Health Agent. Error code 0x80070002]LOG]!><time="14:37:07.789+000" date="11-23-2009" component="TSManager" context="" type="2" thread="692" file="utils.cpp:2782">
    <![LOG[Opening the task sequence key HKLM\Software\Microsoft\SMS\Task Sequence]LOG]!><time="14:37:07.789+000" date="11-23-2009" component="TSManager" context="" type="1" thread="692" file="utils.cpp:2920">
    <![LOG[Deleting the access handle from registry key HKLM\Software\Microsoft\SMS\Task Sequence\Active Request Handle]LOG]!><time="14:37:07.789+000" date="11-23-2009" component="TSManager" context="" type="1" thread="692" file="utils.cpp:2926">
    <![LOG[Stopping Task Sequence Manager service]LOG]!><time="14:37:08.148+000" date="11-23-2009" component="TSManager" context="" type="1" thread="692" file="tsmanager.cpp:487">"

     As a work around, I configured Bit Locker with Suspend Protection. Now, the client can boot in WINPE but when the TS is going to format and partition the disk, this error appears:

    "The task sequence execution engine failed executing the action (Partition Disk) in the group (Install Operating System) with the error code 2148270085
    Action output: ss paths
    Found a VDS pack
    Querying for IVdsPack
    Querying for volumes
    Found a VDS volume
    Querying for IVdsVolumeMF
    Querying for access paths
    Found a volume with access path 'D:\'
    Querying for IVdsVolume
    Querying for IVdsVolumeMF
    Checking volume 'E:' for BitLocker
    Checking volume 'X:' for BitLocker

    Command line for extension .exe is "%1" %*
    Set command line: "X:\windows\system32\diskpart.exe" /s "X:\windows\TEMP\osddiskpart.txt"
    Executing command line: "X:\windows\system32\diskpart.exe" /s "X:\windows\TEMP\osddiskpart.txt"
    Process completed with exit code 2148007941
    0, HRESULT=800c0005 (e:\nts_sms_fre\sms\client\osdeployment\osddiskpart\main.cpp,1456)
    diskpart script: ?????????????????????????????????
    Diskpart.exe STDOUT:
    Microsoft DiskPart version 6.1.7600
    Copyright (C) 1999-2008 Microsoft Corporation.
    On computer: MININT-ARRQLNF
    Diskpart.exe STDERR:
    Diskpart.exe failed (2148007941).  Script file, stdout, and stderr saved in TS log directory.
    OSDDiskPart.exe failed: 0x800c0005."

    And in adittion:

    "The task sequence manager could not successfully complete execution of the task sequence. A failure exit code of 16389 was returned."

     I have doubts about OSD with a client with Bit Locker enabled. And I can't find an answer to these errors.

     Do you know what I can do to fix my issue?
     Is it supported what I'm trying to do?

     Thanks in advance for your answers.
    Best Regards,

Todas las respuestas

  • martes, 24 de noviembre de 2009 16:08Felipe_Roman Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Good morning People.
     I have news. After the last error, the computer's OS wasn't working. So, I tried via PXE and it seems to be working.
     Had Anyone faced this problem?
    Thanks,
     
  • miércoles, 25 de noviembre de 2009 20:17Felipe_Roman Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Hello:
     Yesterday, I installed a computer, enabled Bit Locker and tried to replace the operating system with a SCCM Task Sequence. I had no success with that.
     So, I tried with PXE  and I got an error when the task sequence was formating the disk: "OSDDiskPart.exe failed: 0x800c0005". After that, the OS installation crashed and the disk, I think, was in the middle of the format.
     I tried again with PXE and the Task Sequence installed the computer successfully.
     I need to know If it's supported what I'm trying to do: Reinstalling automatically a computer with Bit Locker enabled. ¿?
     Any idea about my problem?
     If you need details, let me know.
     Thanks in advance people.
    Regards,
  • miércoles, 25 de noviembre de 2009 20:21Niall C. Brady Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    have a read of this, does it help ?

    http://technet.microsoft.com/en-us/library/bb632526.aspx
    my SCCM step by step Guides > http://www.windows-noob.com/forums/index.php?showtopic=1064
  • miércoles, 25 de noviembre de 2009 21:25Felipe_Roman Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    Hi Niall:
     Thanks for the doc.
     Yes, I had read that doc but I can't use it because with the Task Sequence I'm not able to configure TPM+PIN.
     So, I have Bit Locker enabled with other procedure, the problem is when I want to reinstall the computer with Bit Locker enabled.
     Do you understand?
    Thanks,
  • miércoles, 25 de noviembre de 2009 21:31Niall C. Brady Medallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuarioMedallas del usuario
     
    try this

    During the Install phase, directly after the "Restart to Windows PE" task, add an additional "Format and Partition Disk" task and add a condition so that it will only run if Bitlocker was detected during the State Capture phase
    my SCCM step by step Guides > http://www.windows-noob.com/forums/index.php?showtopic=1064