/build/static/layout/Breadcrumb_cap_w.png

K2000 - 3.6 Post-Install Tasks

Few questions regarding post-install tasks on our fresh 3.6 box:

  1. The machine deploys the WIM, boots into Windows and starts post-install tasks. It reboots almost immediately. It didn't do this before, and now has wasted 1 of my auto-logins I set. It looks like it's disabling UAC by default now? I don't have a script for this, but it shows Disable UAC, Run DPInst as the 2 tasks before rebooting. Why are these running? And why does it reboot? I don't want to modify my WIM image for this now, as it never did this prior to 3.6
  2. I have some very long scripts being deployed post-install (SMART Notebook software). If I let the machine sit for a while, the monitor goes black. At that point, the mouse completely dies. The keyboard will wake the machine, but the mouse doesn't do anything after that.
  3. Last step is to enable UAC? Why? I want this off. It's off as part of my WIM image, and it's set in GPO to set it as off. Why is KACE forcing UAC off, then back on for me? 

 

Asked 10 years ago 8212 views
5 Comments   [ + ] Show comments
  • The enable and disable UAC looks like a new steps, and was an issue for us for a minute. However we came up with a task before that to modify the KACE UAC vbs script which is sent down during install, basically removing lines from the VBS.

    Does one of your tasks have reboot set on it after windows is installed? - LBarclay 10 years ago
  • I think the UAC steps may have always been there but are more "visible" with the new task engine. Your policies will still take effect after the imaging process is completed and handed off. Most users are needing some tweaks with the new engine. I never needed an autologon before the upgrade but now I need at least one to keep it "hands off". - jegolf 10 years ago
  • I'm using WIM, not a scripted install. I've always used this as our master Win7x86 master image, and autologin set to 2. First time, it will go in and install all post-install tasks, rename PC, then restart. It will auto-login to Windows the second time, and join the domain and finish a few other steps. Now, it's reboot before almost any of the post-install tasks begins, and thus eliminating an auto login count. - sfigg 10 years ago
  • Why not just change your auto login count to one more then? Or do you simply want to eliminate that initial reboot? - LBarclay 10 years ago
  • I would rather eliminate that reboot, as it's a WIM that is already sysprepped, and I don't see any easy way to add another auto-login count. - sfigg 10 years ago
    • Can you just add to the count in the registry as a post install? - dugullett 10 years ago

Answers (2)

Posted by: cserrins 10 years ago
Red Belt
0

To address the confusion with disable/enable UAC, we created this knowledgebase article:

http://www.kace.com/support/resources/kb/solutiondetail?sol=121713

Corey
Lead T3 Enterprise Solutions Consultant, K2000

Posted by: dugullett 10 years ago
Red Belt
0

As far as I know disabling the UAC it to get the post install tasks to run. It reenables at the end, but I do not think it affects what your .xml, or GPOs are set to. 

For the machine going to sleep I use this as a post install bat script to change the power settings. My GPO will then change them once it joins the domain.

POWERCFG -SETACTIVE 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
POWERCFG -X -monitor-timeout-ac 120
POWERCFG -X -disk-timeout-ac 120
POWERCFG -X -standby-timeout-ac 120
POWERCFG -H OFF 

I also kill explorer.exe because I also have long post installs. During those installs users have full access to the machine.

@echo offtaskkill /IM Explorer.exe /F 

As part of my last task I stop the service for my anti-virus. Even though I have an exception for cleanup.exe, it still slows the image down tremendously. It will start back up after the reboot.

NET STOP "SOPHOS AGENT"NET STOP "SAVService"NET STOP "SAVAdminService"
Comments:
  • Hi,

    I believe you can also setup a lockscreen task which is ideal during post installation tasks. This way you wouldn't need to disable explorer.exe. Also, is there a way you can install your sophos agent as the last install before the cleanup task - nlieschke 10 years ago
    • Wouldn't locking the screen defeat the purpose of having the task engine? Sophos is the last task I have. I include a two minute timeout to give it time to communicate with the AV server. These tasks work perfect for me. - dugullett 10 years ago
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ