Mike S

I finally got it working correctly. I re-installed all of the components used and it started "working" again. I am noticing that not all applications work correctly, even though they are fully functional through the Software Library. I'll have to figure that one out later. Thanks again Peter. Next time I am in Holland, I will have to buy you a drink.

The only thing I could identify is the 2 401 codes (see below). Nothing is highlighted in yellow or red other than what is shown in the previous post. The damn thing just quit working...how strange. Here are the log entries for the powershell script: The execution scope for running the powershell script is specified not to verify the signature of the scripts. This is unsafe and potentially risk running malicious scripts. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Sending warning status message RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting URL = http://xx.xxx.xx.xx, Ports = 80,443, CRL = false RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting Server Certificates. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting Authenticator. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Set authenticator in transport RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting Media Certificate. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Sending StatusMessage RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting message signatures. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting the authenticator. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 CCM_POST /ccm_system/request RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Request was successful. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Powershell path: C:\Windows\System32\WindowsPowerShell\v1.0\ RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) ResolveSource flags: 0x00000000 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) SMSTSPersistContent: . The content for package DOR0009C will be persisted RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) DownloadOnDemand flag is true. Attempting to download content locally for Package DOR0009C. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Locations: Multicast = 0, HTTP = 1, SMB = 0. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Package Flags: 0x01000000 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Multicast is not enabled for the package. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Trying http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0009C. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) GetDirectoryListing() entered RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Initializing HTTP transport. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting URL = http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0009C. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Address=http://xx.xxx.xx.xx, Scheme=http, Object=/SMS_DP_SMSPKG$/DOR0009C, Port=80. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Setting Authenticator. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Set authenticator in transport RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) WinHttp credentials set RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 PROPFIND /SMS_DP_SMSPKG$/DOR0009C RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) 401 - Unsuccessful with anonymous access. Retrying with context credentials. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Using thread token for request RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Request was successful. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) DAV response string is: <?xml version="1.0" encoding="utf-8" ?><D:multistatus xmlns:D="DAV:"><D:response><D:href>http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/sccm?/DOR0009C/</D:href><D:propstat><D:status>HTTP/1.1 200 OK</D:status><D:prop><D:getcontenttype/><D:supportedlock/><D:getetag/><D:creationdate/><D:iscollection>1</D:iscollection><D:resourcetype><D:collection/></D:resourcetype><D:ishidden>0</D:ishidden><D:displayname>http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/sccm?/DOR0009C/</D:displayname><D:getlastmodified></D:getlastmodified><D:getcontentlanguage/><D:getcontentlength>0</D:getcontentlength></D:prop></D:propstat></D:response><D:response><D:href>http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0009C/sccm?/GetApplications.ps1</D:href><D:propstat><D:status>HTTP/1.1 200 OK</D:status><D:prop><D:getcontenttype/><D:lockdiscovery/><D:supportedlock/><D:getetag/><D:getcontentlanguage/><D:iscollection>0</D:iscollection><D:creationdate/><D:resourcetype/><D:ishidden>0</D:ishidden><D:displayname>http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0009C/sccm?/GetApplications.ps1</D:displayname><D:getlastmodified>Fri, 06 Jun 2014 14:40:24 GMT</D:getlastmodified><D:getcontentlength>2448</D:getcontentlength></D:prop></D:propstat></D:response></D:multistatus> RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) List of files to be downloaded RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) File: http://xx.xxx.xx.xx:80/SMS_DP_SMSPKG$/DOR0009C/sccm?/GetApplications.ps1 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) GetDirectoryListing() successfully completed RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Succeeded loading resource DLL 'C:\WINDOWS\CCM\1033\TSRES.DLL' RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) 401 - Unsuccessful with anonymous access. Retrying with context credentials. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Downloading file /SMS_DP_SMSPKG$/DOR0009C/sccm?/GetApplications.ps1 range 0-2447 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Downloaded file from http://xx.xxx.xx.xx:80/SMS_DP_SMSPKG$/DOR0009C/sccm?/GetApplications.ps1 to C:\_SMSTaskSequence\Packages\DOR0009C\GetApplications.ps1 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) VerifyContentHash: Hash algorithm is 32780 RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Content successfully downloaded at C:\_SMSTaskSequence\Packages\DOR0009C. RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Resolved source to 'C:\_SMSTaskSequence\Packages\DOR0009C' RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Command line for extension .exe is "%1" %* RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Set command line: Run Powershell script RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Working dir 'C:\_SMSTaskSequence\Packages\DOR0009C' RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Executing command line: Run Powershell script RunPowerShellScript 6/6/2014 12:55:12 PM 1324 (0x052C) Process completed with exit code 0 RunPowerShellScript 6/6/2014 12:55:19 PM 1324 (0x052C) Command line returned 0 RunPowerShellScript 6/6/2014 12:55:19 PM 1324 (0x052C) ReleaseSource() for C:\_SMSTaskSequence\Packages\DOR0009C. RunPowerShellScript 6/6/2014 12:55:19 PM 1324 (0x052C) reference count 1 for the source C:\_SMSTaskSequence\Packages\DOR0009C before releasing RunPowerShellScript 6/6/2014 12:55:19 PM 1324 (0x052C)

I rolled back to the working configuration I had a couple of days ago. Now, I am finding that this no longer works. I deleted everything and started over from scratch, hoping that my tinkering with things was what caused the problem. Everything is correct as far as I can tell, and the TS executes correctly up until the "Install Applications" sequence. The only error generated points towards the base variable not having the specified basename of "APPId". I double checked the script and it is there. I have not changed anything for the application. I am at a loss since the log file tells me nothing other than the Env variable is wrong. What could possibly cause this irritating "feature" (I call all Microsoft problems that in an effort to ease the pain that often accompanies them)

Since I have about 50 AD groups to configure, your script was a welcome relief. We are hoping to have a single OSD TS that will install applications based on user collections created using these AD memberships. Each user collection will have approximately 7 or 8 applications deployed to them. I have got to talk my boss into sending me to a powershell class.

I am running into a rather interesting issue. When I add a new deployment to the user collection, the process fails. Additionally, when I add a second user collection to the container, the process also fails. The log looks good until the following error appears: No Env variable with specified basename APPId and suffix '01' is found. No applications installed. The sequence then aborts with an 80004004 code. The second deployment is configured exactly like the first one (except for the application, of course). Once I remove the deployment and the second user collection, the TS runs just fine. Is there a trick to allowing multiple application to be deployed to the same user collection that i am missing? The same goes for having multiple user collections in the same parent container (in this case, I am using "Applications" as the parent container). Doing more research, but it can't hurt to ask a guru.

After testing this a couple of times, I decided to attempt using a collection based on a security group instead of individual users assigned to the group. The user set during the OSD deployment was a member of the security group assigned to the user collection. When I executed the OSD, it failed as soon as the get/install applications TS started. Can the automated process you developed be implemented with security groups, or will I need to ensure that each user be added to the correct application collection? My guess is that since the affinity is looking for a specific user to belong to a group, when a security group is used to define multiple members, the affinity does not see the user as being a member. It only sees the security group as the member and therefore fails. I hope I explained that correctly. **EDIT** I think I have it figured out, I added a query rule to add users individually based on the AD group membership. Thanks again

I have fixed the above "problem". It seems that I forgot to check the little box in the application properties under the "General Information" tab that allows the application to be installed from the Install Application task sequence action without being deployed. I tested everything again and it worked like a charm (after about 40 attempts). I have got to learn more about powershell. Quick question, is there a limit to the number of applications that can be installed using this method? I know that if a manual list is used, only 8 applications can be installed per step. Wondering if it is different for dynamic lists? Thank you Peter for all of your assistance. As time permits, I will try to piece together a detailed guide on how to do this. This is an excellent way to deploy user-specific software during the OSD.

You were correct, once I added the domain computers to the read-only analyst role, things ran smoother. However, the TS failed during the Install Applications TS. Do I need to ensure that the box is ticked under Deployment settings to enable "Pre-deploy software to the user's primary device"? Here is a snippet from the logfile: Retrieving Policy Assignments: InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) assignmentList.size() > 0, HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\installapplication\dautils.cpp,452) InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) No matching policy assignments received. InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) Policy download failed, hr=0x80004005 InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) daUtil.DownloadPolicies(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\installapplication\dainstaller.cpp,295) InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) Successfully cleared App model names from TS env. InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) daInstaller.Execute(), HRESULT=80004005 (e:\nts_sccm_release\sms\client\osdeployment\installapplication\main.cpp,260) InstallApplication 6/3/2014 3:39:11 PM 1548 (0x060C) Process completed with exit code 2147500037 TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) !--------------------------------------------------------------------------------------------! TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Failed to run the action: Install Applications. Unspecified error (Error: 80004005; Source: Windows) TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) MP server http://xx.xxx.xx.xx. Ports 80,443. CRL=false. TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Setting authenticator TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Set authenticator in transport TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Sending StatusMessage TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Setting message signatures. TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Setting the authenticator. TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 CCM_POST /ccm_system/request TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Request was successful. TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Set a global environment variable _SMSTSLastActionRetCode=-2147467259 TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Clear local default environment TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Let the parent group (Install User Applications) decides whether to continue execution TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) The execution of the group (Install User Applications) has failed and the execution has been aborted. An action failed. Operation aborted (Error: 80004004; Source: Windows) TSManager 6/3/2014 3:39:11 PM 1912 (0x0778) Failed to run the last action: Install Applications. Execution of task sequence failed. Unspecified error (Error: 80004005; Source: Windows) TSManager 6/3/2014 3:39:11 PM 1912 (0x0778)

Almost there. The TS "Install Applications" started to run this time. Unfortunately, it failed. I think it is due to incorrect permissions... Get-WmiObject : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESS RunPowerShellScript 6/3/2014 9:00:08 AM 1908 (0x0774) DENIED)) RunPowerShellScript 6/3/2014 9:00:08 AM 1908 (0x0774) At C:\_SMSTaskSequence\Packages\DOR0008C\GetTargetedApplications_v0_9.ps1:21 ch RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) ar:34 RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) + $PrimaryUser = (Get-WmiObject <<<< -ComputerName $SiteServer -Class SMS_ RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) UserMachineRelationship -Namespace root\SMS\Site_$SiteCode -Filter "ResourceNam RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) e='$ResourceName'").UniqueUserName RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) + CategoryInfo : NotSpecified: ( [Get-WmiObject], UnauthorizedA RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) ccessException RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) + FullyQualifiedErrorId : System.UnauthorizedAccessException,Microsoft.Pow RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) erShell.Commands.GetWmiObjectCommand RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) RunPowerShellScript 6/2/2014 2:44:19 PM 2188 (0x088C) This appeared as well: No Env variable with specified basename APPId and suffix '01' is found. No applications installed. InstallApplication 6/2/2014 2:44:20 PM 2280 (0x08E8) Are there special permissions required for scripts like this to work? Again, excuse my ignorance, but I am flying blind when it comes to scripting and powershell stuff.

I see clearer now. Scripting is not my strong suit. So my parameters should look like this: param ( [string]$ResourceName, [string]$SiteCode="DOR", [string]$SiteServer="SCCM2012DOR", [string]$Container="Applications" ) The $ResourceName is defined in the TS step "GetApplications"...correct?

Found the SMSTS.log... The lines indented and in bold font are the errors that appeared. [ OSDRunPSScript.exe ] RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Running powershell script: 'GetTargetedApplications_v0_9.ps1'(PkgID: DOR0008C) with execution policy: 'Bypass' RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) The execution scope for running the powershell script is specified not to verify the signature of the scripts. This is unsafe and potentially risk running malicious scripts. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Sending warning status message RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting URL = http://xx.xxx.xx.xx, Ports = 80,443, CRL = false RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting Server Certificates. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting Authenticator. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Set authenticator in transport RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting Media Certificate. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Sending StatusMessage RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting message signatures. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting the authenticator. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 CCM_POST /ccm_system/request RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Request was successful. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Powershell path: C:\Windows\System32\WindowsPowerShell\v1.0\ RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) ResolveSource flags: 0x00000000 RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) SMSTSPersistContent: . The content for package DOR0008C will be persisted RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) DownloadOnDemand flag is true. Attempting to download content locally for Package DOR0008C. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Locations: Multicast = 0, HTTP = 1, SMB = 0. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Package Flags: 0x01000000 RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Multicast is not enabled for the package. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Trying http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0008C. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) GetDirectoryListing() entered RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Initializing HTTP transport. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting URL = http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/DOR0008C. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Address=http://xx.xxx.xx.xx, Scheme=http, Object=/SMS_DP_SMSPKG$/DOR0008C, Port=80. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Setting Authenticator. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Set authenticator in transport RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) WinHttp credentials set RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 PROPFIND /SMS_DP_SMSPKG$/DOR0008C RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) 401 - Unsuccessful with anonymous access. Retrying with context credentials. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Using thread token for request RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) Request was successful. RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) DAV response string is: <?xml version="1.0" encoding="utf-8" ?><D:multistatus xmlns:D="DAV:"><D:response><D:href>http://REVIMAGEDOR.revenue.wi.gov/SMS_DP_SMSPKG$/sccm?/DOR0008C/</D:href><D:propstat><D:status>HTTP/1.1 200 OK</D:status><D:prop><D:getcontenttype/><D:supportedlock/><D:getetag/><D:creationdate/><D:iscollection>1</D:iscollection><D:resourcetype><D:collection/></D:resourcetype><D:ishidden>0</D:ishidden><D:displayname>http://xx.xxx.xx.xx/SMS_DP_SMSPKG$/sccm?/DOR0008C/</D:displayname><D:getlastmodified></D:getlastmodified><D:getcontentlanguage/><D:getcontentlength>0</D:getcontentlength></D:prop></D:propstat></D:response><D:response><D:href>http://xx.xx.xx.xx/SMS_DP_SMSPKG$/DOR0008C/sccm?/GetTargetedApplications_v0_9.ps1</D:href><D:propstat><D:status>HTTP/1.1 200 OK</D:status><D:prop><D:getcontenttype/><D:lockdiscovery/><D:supportedlock/><D:getetag/><D:getcontentlanguage/><D:iscollection>0</D:iscollection><D:creationdate/><D:resourcetype/><D:ishidden>0</D:ishidden><D:displayname>http://xx.xx.xx.xx/SMS_DP_SMSPKG$/DOR0008C/sccm?/GetTargetedApplications_v0_9.ps1</D:displayname><D:getlastmodified>Mon, 02 Jun 2014 15:02:26 GMT</D:getlastmodified><D:getcontentlength>2433</D:getcontentlength></D:prop></D:propstat></D:response></D:multistatus> RunPowerShellScript 6/2/2014 11:36:34 AM 1920 (0x0780) List of files to be downloaded RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) File: http://xx.xxx.xx.xx:80/SMS_DP_SMSPKG$/DOR0008C/sccm?/GetTargetedApplications_v0_9.ps1 RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) GetDirectoryListing() successfully completed RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Succeeded loading resource DLL 'C:\WINDOWS\CCM\1033\TSRES.DLL' RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) 401 - Unsuccessful with anonymous access. Retrying with context credentials. RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Downloading file /SMS_DP_SMSPKG$/DOR0008C/sccm?/GetTargetedApplications_v0_9.ps1 range 0-2432 RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Downloaded file from http://xx.xxx.xx.xx:80/SMS_DP_SMSPKG$/DOR0008C/sccm?/GetTargetedApplications_v0_9.ps1 to C:\_SMSTaskSequence\Packages\DOR0008C\GetTargetedApplications_v0_9.ps1 RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) VerifyContentHash: Hash algorithm is 32780 RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Content successfully downloaded at C:\_SMSTaskSequence\Packages\DOR0008C. RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Resolved source to 'C:\_SMSTaskSequence\Packages\DOR0008C' RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Command line for extension .exe is "%1" %* RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Set command line: Run Powershell script RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Working dir 'C:\_SMSTaskSequence\Packages\DOR0008C' RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Executing command line: Run Powershell script RunPowerShellScript 6/2/2014 11:36:35 AM 1920 (0x0780) Process completed with exit code 1 RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) Unable to find type [%_SMSTSMachineName%]: make sure that the assembly containi RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) ng this type is loaded. RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) At C:\_SMSTaskSequence\Packages\DOR0008C\GetTargetedApplications_v0_9.ps1:12 ch RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) ar:26 RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) + [%_SMSTSMachineName%] <<<< $ResourceName, RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) + CategoryInfo : InvalidOperation: (%_SMSTSMachineName%:String) [ RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) ], RuntimeException RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) + FullyQualifiedErrorId : TypeNotFound RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) Command line returned 1 RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) ReleaseSource() for C:\_SMSTaskSequence\Packages\DOR0008C. RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) reference count 1 for the source C:\_SMSTaskSequence\Packages\DOR0008C before releasing RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) Released the resolved source C:\_SMSTaskSequence\Packages\DOR0008C RunPowerShellScript 6/2/2014 11:36:41 AM 1920 (0x0780) Process completed with exit code 1 TSManager 6/2/2014 11:36:41 AM 2264 (0x08D8) !--------------------------------------------------------------------------------------------! TSManager 6/2/2014 11:36:41 AM 2264 (0x08D8) Failed to run the action: Get Applications. Incorrect function. (Error: 00000001; Source: Windows) TSManager 6/2/2014 11:36:41 AM 2264 (0x08D8) MP server http://xx.xxx.xx.xx. Ports 80,443. CRL=false. TSManager 6/2/2014 11:36:41 AM 2264 (0x08D8) Setting authenticator TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Set authenticator in transport TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Sending StatusMessage TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Setting message signatures. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Setting the authenticator. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 CCM_POST /ccm_system/request TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Request was successful. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Set a global environment variable _SMSTSLastActionRetCode=1 TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Clear local default environment TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Let the parent group (Install User Applications) decides whether to continue execution TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) The execution of the group (Install User Applications) has failed and the execution has been aborted. An action failed. Operation aborted (Error: 80004004; Source: Windows) TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Failed to run the last action: Get Applications. Execution of task sequence failed. Incorrect function. (Error: 00000001; Source: Windows) TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) MP server http://xx.xxx.xx.xx. Ports 80,443. CRL=false. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Setting authenticator TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Set authenticator in transport TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Sending StatusMessage TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Setting message signatures. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Setting the authenticator. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) CLibSMSMessageWinHttpTransport::Send: URL: xx.xxx.xx.xx:80 CCM_POST /ccm_system/request TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Request was successful. TSManager 6/2/2014 11:36:42 AM 2264 (0x08D8) Launching command shell. OSDSetupHook 6/2/2014 11:36:49 AM 2340 (0x0924) executing command: C:\WINDOWS\system32\cmd.exe /k OSDSetupHook 6/2/2014 11:36:49 AM 2340 (0x0924) executed command: C:\WINDOWS\system32\cmd.exe /k OSDSetupHook 6/2/2014 11:36:49 AM 2340 (0x0924) Execution::enExecutionFail != m_eExecutionResult, HRESULT=80004005 (e:\nts_sccm_release\sms\client\tasksequence\tsmanager\tsmanager.cpp,923) TSManager 6/2/2014 11:51:56 AM 2264 (0x08D8) Task Sequence Engine failed! Code: enExecutionFail TSManager 6/2/2014 11:51:56 AM 2264 (0x08D8) **************************************************************************** TSManager 6/2/2014 11:51:56 AM 2264 (0x08D8) Task sequence execution failed with error code 80004005 TSManager 6/2/2014 11:51:56 AM 2264 (0x08D8) Cleaning Up. TSManager 6/2/2014 11:51:56 AM 2264 (0x08D8)

I have created a folder in User Collections called Applications. This sub-folder will contain all of the user collections for applications. For the container variable in the script, I used Applications as the variable. Is this sufficient, or do I need to define a specific path that directs the script to this container? It appears that there is more to this. The TS just failed with the error code 0x00000001. I am trying to find the logs now to see what went wrong.

Does anyone have some sort of tutorial on how to do this? I have not figured out why I cannot get this to work. After 2 weeks of futility, I am ready to give up on this.

hmmm, something went wrong. I am going to chalk the failure up to not knowing anything about powershell and how to use scripts in a TS. I am hoping that I can figure this out. Again, any advice i can get is greatly appreciated. I am running SCCM 2012 on a 2008 R2 server with a local instance of SQL 2012. When the OSD TS loads via boot media, I am prompted to enter in a primary user for the machine being loaded. This is accomplished using the SMSTSUdaUsers variable that I have pre-defined in the boot image. This part works. The deployment works fine until the powershell script executes. I followed the instructions (I think) correctly. I created a package for the script with no program. It has been distributed correctly to my distribution points. I have created a separate folder called "Software Applications" within the Applications node and populated it with my Firefox application (see app_container attachment). I have tested the application to ensure that it works correctly. Script Parameters: param ( [%_SMSTSMachineName%]$ResourceName, [DOR]$SiteCode, [sCCM2012DOR.fqdn]$SiteServer, (is the fqdn required here?) [software Applications]$Container ) TS Steps: (see attached files, get_apps executes powershell, install_apps installs them) Every thing executes fine up to the powershell step. Then the system hangs for a few seconds and reboots. The user affinity is set correctly, but firefox is not installed. Once rebooted and the config manager starts communicating, firefox is loaded based on the user group setting assigned to the primary user. I do not have any logs at the moment as I am running another test, but I think my setup is causing the issues at hand. What am I doing wrong here? I have a gut feeling it is something very simple. Thanks again, Mike

Got it. Since I plan on implementing this script for all devices, can I use %_SMSTSMachineName% as the ResourceName?

Your link looks very promising. Would I need to import affinity associations prior to trying something like this or can i stick with entering a user affinity upon execution of the image TS? I have already added the SMSTSUdaUsers variable to my boot image and am currently testing it out. It prompted me for a primary user so i am crossing my fingers. Being a little slow, could you explain the $ResourceName and $Container variable for your script a little more. I am going to assume that the "Get Applications" TS step shown in the illustration is where the powershell script is configured. Great info...Thanks again for the ideas.

I am doing some recon on the possibility of determining user/device affinity during image deployment via a task sequence. I would like to know if it is even possible to establish affinity during the imaging process? This could be automatic or manual (through the use of input field prompts during the TS). Provided this is possible, this could simplify the installation of existing applications that are already installed based on user enrollment in certain security groups. It will also eliminate the need to create additional packages and task sequences since applications do not run (at least I haven't figured out how to do this) during a task sequence. We are running a single SCCM 2012 primary site with WSUS and SCOM. Nothing else is configured/needed at the moment. Basically, I want to do the following: Start TS deployment Input/establish user affinity Finish image deployment (base image, user profile, etc.) Finished machine is added to correct user group based on affinity set in step 2 above. Required software for user group is installed. Machine deployed to user. Voila'...finshed. It seems simple enough, but with the many "features" Microsoft has included with their products, I have my reservations. I don't want to spin my wheels trying to figure this out on my own, so I thought I would ask here first to see if this is even feasible. Thanks in advance, Mike

I have figured out how to configure the SQL Server 2012 to install. Using the variables outlined in my configuration file, I appended them to the installation program. No more configuration file needed. Brian, Thanks for the tip about the response file pointing to the UNC path. Not as clean as I would have hoped, but it works like a charm for those pesky Oracle installations. Peter, I was asking a general question as I was only looking for general information.

I am trying to locate a guide on how to create an application within SCCM 2012 that will successfully deploy SQL Server 2012 Enterprise. Since we use a response file, I have only found success in deploying the software is through the use of a task sequence. I would prefer to use an application to deploy SQL Server 2012 due to the features. I am having similar issues with certain Oracle products as well. It seems that deploying software (for me at least) is somewhat problematic when response files are involved using anything other than a task sequence. If anyone has any tips or pointers, I would greatly appreciate it.

I have resolved my issue with automating diskpart. I ended up creating a menu-based batch file that runs before the task sequence begins. This way we can run specific diagnostic tools on the disk before the task sequence is initiated. When finished, the command window is closed and the task sequence runs. To accomplish this, all I did was mount the boot.wim file, then I edited the winpeshl.ini file to load the batch file before TSBootShell.exe. Problem solved. Thanks to all of you who provided me with insight as to where to start. Mike

Thanks for the detailed info...it looks very promising. One last question, I do not have TSconfig.ini in my boot.wim file. Can I simply create one? If so, do I place it in the root of the .wiom file (x:\)? Thanks again, Mike

I must not be wording my posts correctly... The diskpart has to be executed before I can begin execution of the actual OS Task Sequence. Otherwise, the encrypted HDD cannot be written to. This is why i want to execute the diskpart before anything else. There are the steps needed in order: 1. Boot from flash drive 2. Run (automatically) diskpart with configuration txt file to remove the encrypted partion and format ntfs 3. When diskpart is finished, winPE starts 4. The Task Sequence Wizard appears. 5. Click the "Next" button 6. Confirmation Window appears 7. OS deployment TS then begins. I have tried to incorporate diskpart into the task sequence without any luck. The encrypted disk prevents the TS .wim file from writing to it. Therefore, diskpart must be executed before winPE actually starts.

I have tried that. The problem is that the disk is encrypted and cannot be written to until diskpart is run. What I have to do currently is boot into winPE using the flash drive, press F8 for the command window then manually run the diskpart command. What I wanted to do is boot into winPE, run the diskpart automatically, then continue with the OS deployment. I was able to partially succeed. I mounted the boot.wim from the bootable media and added "run=diskpart /s diskpart.txt" to tsbootshell.ini file located in sms\bin\x64. WinPE started to load, automatically ran the diskpart command then rebooted the PC. Once the reboot was completed, all that was displayed on the screen was BOOTMGR is missing. Not quite sure yet what I am missing. I use diskpart because it only take a few seconds to complete. It will remove the encrypted disk partitions very nicely. The DoD 7 pass takes far too long to finish.

I have a semi-quick question. How can I implement an automated solution that executes the diskpart command before the TS begins? We maintain quite a few enctrypted laptops in my organization. As a result, no deployments will run until we perform diskpart. I already have a correct script file in place that will automate the commands needed. What I would like is to automate the actual diskpart command. Currently, once I boot using a USB flash drive, I have to press F8 to get the command window, I then have to switch to the root of the flash drive and type diskpart /s diskpart.txt. I would like this process to be automatic once I boot using the flash drive. How can I do this? Thanks, Mike

I did. The target PC has was given the correct permissions to the stored .mig file on the server. One thing I did notice was that the .mig file could not be accessed without a password. Could this be the root cause of the failure? Also, do I have to run the capture TS separate from the restore TS or can they be combined into one TS? In other words, if I combine the two, will the TS look for the source PC, pull the profile and store it on the share then install the O/S and restore the profile on the target all in one step? (I think I worded that correctly)