Search the Community

As the title suggests: I'm looking for guidance on how to wipe the MBR via Task Sequence during an OSD. Any suggestions? We use Symantec Encryption Desktop (aka PGP) and it adds a bootguard to the MBR which needs to be cleared out (we need to wipe the MBR) in order for the machines to boot successfully. If I boot a Win8.1 amd64 ISO, select Repair > Advanced > Command Prompt > Run bootrec.exe /fixmbr, it works fine and corrects the issue so I thought "Why not add bootrec to our amd64 WinPE.wim?" I copied what I thought were the necessary files into our amd64 winpe.wim, based on the following sites: https://channel9.msdn.com/forums/TechOff/456721-Windows-PE-with-BOOTRECEXE/ http://gregwoods.co.uk/2010/04/creating-a-winpe-boot-dvd-for-disk-cloning/ http://www.audiodude.nl/?p=1217 I even pulled in the MUI's from WinSxS into the WIM And although it appears to run successfully, it executes and produces no errors, it doesn't seem to actually be doing anything as the problem persists on a reboot. Running bootrec /fixmbr and/or bootrec /fixboot multiple times in our amd64 WinPE media doesn't work; but booting a amd64 Win8.1 ISO and running bootrec /fixmbr once works. I've tried the following with no positive results: Creating a diskpart script to sel dis 0 and clean isn't sufficient; doesn't wipe the MBR Converting the disk to GPT then back to MBR, but prior to the format & partition step, will remove bootguard. HOWEVER, it causes the TS to fail once it gets into Windows with the following error: "Wizard Error: Unable to find the SMS Task Sequencer. The deployment will not proceed." I've tried doing this two ways, and while it clears the MBR, I get the 'Wizard Error' above. 1) Via a Task Sequence step that runs a diskpart script (again, prior to the format & partition step), and 2) Adding 'oUtility.RunCommandWrite oExec, "CONVERT GPT NOERR"' to around line 340 of the ZTIDiskPart script. Symantec says that uninstrumenting the drive should correct this, but you cannot uninstrument an encrypted disk and the decryption process takes way too long. (About 24 hours) Secure wiping the disk (e.g.: via WipeDisk, DBAN) works but takes way too long. (Several hours) Thoughts?