none
Fehler beim Erstellen eines Capture-Tasksequenzmediums RRS feed

  • Frage

  • Hallo zusammen,

    ich würde für die Bereitstellung über den SCCM gerne ein Windows-Betriebssystemabbild erfassen. Dafür wollte ich ein Capture Tasksequenzmedium erstellen. Bei der Erstellung bekomme ich folgende Fehlermeldung (ich kann leider noch keine Screenshots einfügen):

    Fehler bei der Medienerstellung. Fehlermeldung: Das System kann die angegebene Datei nicht finden.
    Weitere Details finden Sie in der Datei "CreateTsMedia.log".

    Die CreateTsMedia.log hat folgenden Inhalt:

    <![LOG[ ===============================================================]LOG]!><time="09:58:13.355-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:979">
    <![LOG[Begin media creation: ]LOG]!><time="09:58:13.357-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:980">
    <![LOG[Media: capture]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:267">
    <![LOG['Provider'=sccm.****.de]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG['Site Code'=HL0]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG['Distribution Points(s)'=SCCM.****.DE]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG['Boot Image Package ID'=HL000028]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG['Physical Media Type'=CD]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG['Media Destination'=\\sccm\Packages\capture.iso]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:208">
    <![LOG[Media label: 'Configuration Manager 2012']LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:1025">
    <![LOG[Creating media from Admin Console]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:1029">
    <![LOG[COMMAND LINE: ]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:929">
    <![LOG[CreateMedia.exe /K:capture /N:**** /P:sccm.****.de /S:HL0 /C:**** /D:SCCM.****.DE /L:Configuration Manager 2012 /B:HL000028 /T:CD /F:\\sccm\Packages\capture.iso ]LOG]!><time="09:58:13.362-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:930">
    <![LOG[Another thread has been started to create TS media]LOG]!><time="09:58:13.363-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createmedia.cpp:589">
    <![LOG[======= CreateCaptureMedia invoked =======]LOG]!><time="09:58:13.364-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createtsmedia.cpp:1207">
    <![LOG[---------------------------- CreateTsMedia ----------------------------]LOG]!><time="09:58:13.364-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createtsmedia.cpp:245">
    <![LOG[Requested output path: \\sccm\Packages\capture.iso (CD)]LOG]!><time="09:58:13.364-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createtsmedia.cpp:267">
    <![LOG[Total number of TS variables: 0]LOG]!><time="09:58:13.364-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createtsmedia.cpp:106">
    <![LOG[Temporary directory 'C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788' created, free space on drive 'C:' is 28012 MB]LOG]!><time="09:58:13.366-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="tempdirectory.cpp:87">
    <![LOG[Opened WMI namespace '\\sccm.****.de\root\SMS\site_HL0' ]LOG]!><time="09:58:13.431-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="mediafactory.cpp:924">
    <![LOG[Local computer is SCCM]LOG]!><time="09:58:13.457-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="utils.cpp:384">
    <![LOG[Package manager created successfully]LOG]!><time="09:58:13.457-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="mediafactory.cpp:408">
    <![LOG[Local computer is SCCM]LOG]!><time="09:58:13.462-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="utils.cpp:384">
    <![LOG[Creating policy manager]LOG]!><time="09:58:13.462-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="mediafactory.cpp:444">
    <![LOG[Setting up Install Toolkit]LOG]!><time="09:58:13.462-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="mediatoolkit.cpp:214">
    <![LOG[Copying package HL000028 to C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Cache]LOG]!><time="09:58:13.561-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="packagemgr.cpp:334">
    <![LOG[Retrieving info for package HL000028.4]LOG]!><time="09:58:13.562-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="packagemgr.cpp:1042">
    <![LOG[Content Library: Path='D:\SCCMContentLib', Drives='D:\,E:\,C:\']LOG]!><time="09:58:14.434-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="utils.cpp:823">
    <![LOG[Registering package HL000028.4 with content at D:\SCCMContentLib]LOG]!><time="09:58:14.662-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="packagemgr.cpp:591">
    <![LOG[VerifyContentHash: Hash algorithm is 32780]LOG]!><time="09:58:14.938-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="downloadcontent.cpp:1870">
    <![LOG[Hash value of package HL000028 is verified]LOG]!><time="09:58:18.894-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="packagemgr.cpp:494">
    <![LOG[Loaded C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\x86\DISM\wimgapi.dll]LOG]!><time="09:58:18.895-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:344">
    <![LOG[Opening image file C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Cache\HL000028\boot.HL000028.wim]LOG]!><time="09:58:18.895-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:422">
    <![LOG[Applying image 1 to volume C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Toolkit]LOG]!><time="09:58:18.980-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:613">
    <![LOG[Closing image file C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Cache\HL000028\boot.HL000028.wim]LOG]!><time="09:58:19.002-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:458">
    <![LOG[Resources file not found in toolkit. 
    Unknown error (Error: 80070002; Source: Unknown)]LOG]!><time="09:58:19.005-60" date="02-03-2014" component="CreateTsMedia" context="" type="3" thread="11788" file="mediatoolkit.cpp:173">
    <![LOG[Failed to create media generator (0x80070002)]LOG]!><time="09:58:19.005-60" date="02-03-2014" component="CreateTsMedia" context="" type="3" thread="11788" file="createtsmedia.cpp:342">
    <![LOG[CreateTsMedia failed with error 0x80070002, details='']LOG]!><time="09:58:19.005-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="createtsmedia.cpp:355">
    <![LOG[Media creation process that was started from Admin Console completed.
    ]LOG]!><time="09:58:19.037-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11040" file="createmedia.cpp:1065">
    <![LOG[CreateMedia.exe finished with error code 80070002]LOG]!><time="09:58:19.037-60" date="02-03-2014" component="CreateTsMedia" context="" type="2" thread="11040" file="createmedia.cpp:1123">
    

    Ich habe bereits dem Netzwerkzugriffskonto NTFS-Berechtigungen und Freigabeberechtigungen (jeweils Vollzugriff) erteilt, da dies vielen bei der Behebung von ähnlichen Fehlern geholfen haben soll. Bei mir ändert das an der Fehlermeldung jedoch leider nichts.

    Kennt vielleicht jemand eine Lösung für das Problem oder weiß zumindest wodurch es verursacht wird?

    Vielen Dank schon einmal für die Hilfe!

    Montag, 3. Februar 2014 12:54

Antworten

  • Es funktioniert jetzt auch mit den Tasksequenzmedien!

    Das Problem war folgendes: Ich habe damals bei aktivem McAfee-Virenscanner die Boot-Images hinzugefügt. Diese waren dann wohl unvollständig bzw. unbrauchbar.

    Die Lösung: Bei deaktiviertem / deinstallierten McAfee die Boot-Images hinzufügen und dann (bei weiterhin deaktiviertem McAfee) das Tasksequenzmedium mit dem neuen Bootimage erstellen!

    Noch einmal vielen Dank für die Unterstützung, Torsten!

    • Als Antwort markiert SCCM_ Mittwoch, 5. Februar 2014 12:25
    Mittwoch, 5. Februar 2014 12:24

Alle Antworten

  • HL000028 is verified]LOG]!><time="09:58:18.894-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="packagemgr.cpp:494"> <![LOG[Loaded C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\x86\DISM\wimgapi.dll]LOG]!><time="09:58:18.895-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:344"> <![LOG[Opening image file C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Cache\HL000028\boot.HL000028.wim]LOG]!><time="09:58:18.895-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:422"> <![LOG[Applying image 1 to volume C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Toolkit]LOG]!><time="09:58:18.980-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:613"> <![LOG[Closing image file C:\Users\ADMINI~1\AppData\Local\Temp\7\_tsmedia_11788\Cache\HL000028\boot.HL000028.wim]LOG]!><time="09:58:19.002-60" date="02-03-2014" component="CreateTsMedia" context="" type="1" thread="11788" file="wimfile.cpp:458"> <![LOG[Resources file not found in toolkit. Unknown error (Error: 80070002; Source: Unknown)]LOG]!><time="09:58:19.005-60" date="02-03-2014" component="CreateTsMedia" context="" type="3" thread="11788" file="mediatoolkit.cpp:173">


    Was immer auch genau hier nicht gefunden wird; nach Berechtigungen sieht es auf den ersten Blick nicht aus. Könnte auf ADK-Problem hindeuten. Ggfs mal mit den Sysinternals-Tools schauen, was hier nicht gefunden wird.

    Torsten Meringer | http://www.mssccmfaq.de

    Montag, 3. Februar 2014 13:07
    Beantworter
  • Danke für die schnelle Antwort.

    Ich habe mittlerweile das WAIK 8.1 neu installiert, den Virenscanner (McAfee) deinstalliert und mit dem Process Monitor die Vorgänge beim Erstellen der ISO protokolliert. Ich habe alle erfolgreichen Events ausgeblendet und nur noch den Prozess "CreateMedia.exe" in die Ausgabe einbezogen.

    Mit der Ausgabe kann ich jedoch leider nicht viel anfangen. Kann mir auch da jemand weiterhelfen?

    <eventlist>
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3001354</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\System32\wow64.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3024530</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\System32\wow64win.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3044415</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\System32\wow64cpu.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3056563</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\System32\wow64log.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3126433</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\sechost.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3156861</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\CreateTsMediaAdm.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3226133</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\imm32.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3243962</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\imm32.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3262487</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\imm32.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3359028</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\tzres.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3377478</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\tzres.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3394691</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\rpcss.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3398523</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\rpcss.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3515090</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3523388</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3531117</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3571370</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\Registration\R000000000036.clb</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3630590</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\wbem\wbemprox.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3642217</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\wbem\wbemcomn.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3655300</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\wbemcomn.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3720813</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\Globalization\Sorting\SortDefault.nls</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3789753</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\nlaapi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3811768</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\NapiNSP.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3838079</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\mswsock.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3849532</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\DNSAPI.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3862589</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\dnsapi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3909097</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\winrnr.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3919905</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\IPHLPAPI.DLL</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3933245</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\IPHLPAPI.DLL</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3942942</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\WINNSI.DLL</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3958534</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\winnsi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,3992500</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\FWPUCLNT.DLL</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4017569</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\rasadhlp.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4031455</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rasadhlp.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4065876</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\CRYPTSP.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4079821</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\cryptsp.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4105660</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4121017</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4136132</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4150793</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4167090</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4274814</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\rsaenh.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4307759</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\RpcRtRemote.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4317387</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\RpcRtRemote.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4412770</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\wbem\wbemsvc.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4484593</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\wbem\fastprox.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4496362</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\wbem\NTDSAPI.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,4509556</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\ntdsapi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,5511621</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\msxml6.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,5543281</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\de-DE\KernelBase.dll.mui</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,5561921</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\msxml6r.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,5590670</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,5592849</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:39,7029604</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,2383261</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\NO_SMS_ON_DRIVE.SMS</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,2386845</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>E:\NO_SMS_ON_DRIVE.SMS</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,2391934</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\NO_SMS_ON_DRIVE.SMS</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3143574</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\SCCMContentLib\DataLib\HL000037.5\boot.HL000037.wim</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3162667</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>D:\SCCMContentLib\DataLib\HL000037.5</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3184472</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\SCCMContentLib\DataLib\HL000037.5\boot.HL000037.wim</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3203108</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:</Path>
    <Result>ACCESS DENIED</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3205023</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3207611</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3210956</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3214617</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3218896</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3223569</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3226592</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3229679</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,3233459</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037</Path>
    <Result>NAME COLLISION</Result>
    <Detail>Desired Access: Read Data/List Directory, Synchronize, Dis, Options: Directory, Synchronous IO Non-Alert, Open Reparse Point, Attributes: N, ShareMode: Read, Write, AllocationSize: 0</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6837416</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>D:\SCCMContentLib\DataLib\HL000037.5</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6866448</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6886825</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryEAFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>NO EAS ON FILE</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6887676</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>FileSystemControl</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>OBJECTID NOT FOUND</Result>
    <Detail>Control: FSCTL_GET_OBJECT_ID</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6888088</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>FileSystemControl</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>0x80190029</Result>
    <Detail>Control: 0x901f8 (Device:0x9 Function:126 Method: 0)</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6894962</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\ntmarta.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6910374</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\ntmarta.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:41,6928372</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QuerySecurityFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>BUFFER OVERFLOW</Result>
    <Detail>Information: Owner, Group, DACL, DACL Protected</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0336635</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>ReadFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>END OF FILE</Result>
    <Detail>Offset: 156.414.729, Length: 32.767</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0342571</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0343905</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Toolkit</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0344694</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Toolkit</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Read Attributes, Dis, Options: Open Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0354651</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\msi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0372109</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Program Files (x86)\Windows Kits\8.1\Assessment and Deployment Kit\Deployment Tools\x86\DISM\wimgapi.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0376223</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\VERSION.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0380785</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\version.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0389762</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,0559114</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\WIMB376.tmp</Path>
    <Result>FILE LOCKED WITH WRITERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1501837</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\WIMB3D4.tmp</Path>
    <Result>FILE LOCKED WITH WRITERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1642940</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\en-US\KERNELBASE.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1643927</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\syswow64\en\KERNELBASE.dll.mui</Path>
    <Result>PATH NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1646571</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryOpen</Operation>
    <Path>D:\Program Files\Microsoft Configuration Manager\AdminConsole\bin\i386\netmsg.dll</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1650785</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\netmsg.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1652758</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\en-US\netmsg.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1654257</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\System32\en-US\netmsg.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1654918</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\en\netmsg.dll.mui</Path>
    <Result>PATH NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1662284</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\wbem\wmiutils.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1664432</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\wbem\en-US\wmiutils.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1665685</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\System32\wbem\en-US\wmiutils.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1666182</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\wbem\en\wmiutils.dll.mui</Path>
    <Result>PATH NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1672869</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>C:\Windows\SysWOW64\winhttp.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1674765</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\en-US\winhttp.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1676003</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\System32\en-US\winhttp.dll.mui</Path>
    <Result>NAME NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1676633</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFile</Operation>
    <Path>C:\Windows\SysWOW64\en\winhttp.dll.mui</Path>
    <Result>PATH NOT FOUND</Result>
    <Detail>Desired Access: Generic Read, Dis, Options: , Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a</Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,1682172</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>CreateFileMapping</Operation>
    <Path>D:\Program Files\SMS_CCM\ccmerrors.dll</Path>
    <Result>FILE LOCKED WITH ONLY READERS</Result>
    <Detail>SyncType: SyncTypeCreateSection, PageProtection: </Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,2288511</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,2296054</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,2307315</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Toolkit</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    
    <event>
    <ProcessIndex>197</ProcessIndex>
    <Time_of_Day>16:11:45,2313856</Time_of_Day>
    <PID>2280</PID>
    <Process_Name>CreateMedia.exe</Process_Name>
    <Operation>QueryDirectory</Operation>
    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356</Path>
    <Result>NO MORE FILES</Result>
    <Detail></Detail>
    </event>
    </eventlist></procmon>

    Vielen Dank schon mal!

    Mittwoch, 5. Februar 2014 07:03
  • Auf den ersten Blick sieht eigentlich nur das verdächtig aus:

    wenn er das Bootimage hier finden kann (was wegen des gefilterten Logs nicht zu sagen ist)

    <Path>D:\SCCMContentLib\DataLib\HL000037.5\boot.HL000037.wim</Path>
    <Result>NAME NOT FOUND</Result>

    dann könnte es daran liegen:

    <Path>C:\Users\Administrator\AppData\Local\Temp\2\_tsmedia_3356\Cache\HL000037\boot.HL000037.wim</Path>
    <Result>BUFFER OVERFLOW</Result>

    Kann man denn das boot.HL000037.wim händisch mounten?


    Torsten Meringer | http://www.mssccmfaq.de

    Mittwoch, 5. Februar 2014 07:56
    Beantworter
  • Unter D:\SCCMContentLib\DataLib\HL000037.5\ befindet sich nur eine boot.HL000037.wim.INI.

    Manuelles Kopieren der boot.HL000037.wim an den Pfad hilft leider nicht, manuell kann ich die Datei mounten.

    Mittwoch, 5. Februar 2014 08:35
  • Hast Du das Boot-Image schon einmal neu an die DPs verteilt, so dass die Version ebenfalls erhöht wird? Ansonsten gehen mit auf die Ferne die Ideen aus.

    Torsten Meringer | http://www.mssccmfaq.de

    Mittwoch, 5. Februar 2014 08:58
    Beantworter
  • Habe ich versucht. Die Version erhöht sich, die boot.wim ist trotzdem nicht unter D:\SCCMContentLib\DataLib\HL000037.6\ zu finden.

    Ich verzweifel langsam...

    Gibt es noch andere Möglichkeiten, eine angepasste OS-Installation zu erfassen und über den SCCM zu verteilen?


    • Bearbeitet SCCM_ Mittwoch, 5. Februar 2014 09:55
    Mittwoch, 5. Februar 2014 09:55
  • Eine andere Möglichkeit ist, das Build & Capture komplett mit ConfigMgr durchzuführen und nicht nur eine bestehende Windows-Installation zu capturen.

    Torsten Meringer | http://www.mssccmfaq.de

    Mittwoch, 5. Februar 2014 10:13
    Beantworter
  • Dann versuche ich mein Glück erst mal damit.

    Vielen Dank für die Hilfe!

    Mittwoch, 5. Februar 2014 10:36
  • Es funktioniert jetzt auch mit den Tasksequenzmedien!

    Das Problem war folgendes: Ich habe damals bei aktivem McAfee-Virenscanner die Boot-Images hinzugefügt. Diese waren dann wohl unvollständig bzw. unbrauchbar.

    Die Lösung: Bei deaktiviertem / deinstallierten McAfee die Boot-Images hinzufügen und dann (bei weiterhin deaktiviertem McAfee) das Tasksequenzmedium mit dem neuen Bootimage erstellen!

    Noch einmal vielen Dank für die Unterstützung, Torsten!

    • Als Antwort markiert SCCM_ Mittwoch, 5. Februar 2014 12:25
    Mittwoch, 5. Februar 2014 12:24