Password Protect a Task Sequence?

[thadkew]

I have successfully set up our environment to PXE (thanks to Anyweb's many guides) and have the boot media set to use a password to get to the list of available Task Sequences, but I was wondering if there were a way to password protect a task sequence that is selected.

For example: anyone can select the task to deploy Windows XP or Windows7, however, if someone selects Windows Server 2008, something will prompt for another password and the sequence will fail if it's not correct.

 

Does that make any sense or is it possible?

 

Thanks in advance!

[Tjindarr]

Is there anyway to change the pass.wsf so that when you type the password its not in cleartext but in *******?

[anyweb]

good question, how about this http://www.msfn.org/board/topic/126348-something-to-ask/

[pollewops]

A way to display the passwords using "dots" is by using a HTA instead of a WSF file.

 

See my used scripts in the attachment.

 

PromptForPassword.zip

[Tjindarr]

how would i go about implementing this into a task sequence?

is it as easy as the one above?

 

 

A way to display the passwords using "dots" is by using a HTA instead of a WSF file.

 

See my used scripts in the attachment.

 

PromptForPassword.zip

[Tjindarr]

how would i go about implementing this into a task sequence?

is it as easy as the one above?

 

Nevermind got it sorted Thanks pollewops for an awsome script.

And anyweb for the "how to display hta" guide

[silverSl!DE]

just one dump question: how do i create the MDT toolkit files package?

[anyweb]

1. integrate mdt 2010 update 1 with configmgr, go through the wizard in task sequences to create a Microsoft Deployment Toolkit task sequence, easy. done.
   

[ogeccut]

Thanks guys, this works great. However........Lets say a user inputs a wrong password.....and we shutdown!!!! Then a user boots again and.....i am guessing wrong password is saved in MININT directory on the local drive and there will be no more prompt to enter a password.

 

I am going to try to edit the script to delete MININT right before the shutdown from shutdown.wsf.

[ogeccut]

I tested and got this working this in MDT:

 

<job id="setEnv">

<script language="VBScript" src="..\ZTIUtility.vbs"/>

<script language="VBScript">

 

Dim oTSProgressUI

'set oTSProgressUI = CreateObject("Microsoft.SMS.TSProgressUI")

'oTSProgressUI.CloseProgressDialog()

 

 

' Clean up any existing C:\MININT directory

If oFSO.FolderExists("C:\MININT") then

On Error Resume Next

oFSO.DeleteFolder "C:\MININT", true

On Error Goto 0

End If

 

' Clean up any existing C:\_smstasksequence directory

If oFSO.FolderExists("C:\_smstasksequence") then

On Error Resume Next

oFSO.DeleteFolder "C:\_smstasksequence", true

On Error Goto 0

End If

 

On error resume next

Dim fso, WShell, oFile

Set WShell = CreateObject("WScript.Shell")

Set fso = CreateObject("scripting.filesystemobject")

 

scriptroot = oEnvironment.Item("SCRIPTROOT")

 

MsgBox "Please click OK to shutdown the computer.",0, "Task Sequence Aborted"

WShell.Run "wpeutil shutdown",0, True

 

</script>

</job>

 

 

 

[SaiTech]

Hi,

 

Would it be possible to use an AD account to protect the TS and or the FrontEnd?

/PS