Migrate from XP to 7 with PointSec/Checkpoint FDE

[cochrane88]

Hello,

 

I was hoping someone could help point me in the right direction. We are using SCCM 2007 and UDI Toolkit 12 to deploy new WIndows 7 machines through a task sequence. We are now trying to migrate from XP to Windows 7 using USMT 4.0.

 

We are trying to do this through the PE environment. We have it successfully doing a scan state, however we run into issues when applying the new OS. I'll mention at this point we have PointSec full disk encryption running on these devices.

 

If we do the scanstate and use the task sequence option to format and partition the disk. It fails as it says the files are protected, these are the ones protected by USMT. So all the xml files, working directory. I think it also protects areas such as boot.

 

I've tried calling a disk part myself and doing a clean, delete of volumes and re-creating them. It then allows it to install the OS, however whenever it does its first reboot it says no OS is present. When I run diskpart its changed the volume to RAW and you cannot access the data.

 

I've tried various combinations on running both types of formats/partitions cleans etc..

 

One thing I cannot make sense of is that we use the task sequence format and partition when we don't need to save data. So this just blows away XP with encryption and puts on Windows 7, i've tried using this same command but it doesn't have the same effect.

 

Anyone able to help please?

Thanks,

Andy

[Peter van der Woude]

Are you saving your captured data (via USMT) on your local drive? If so, then that's the reason why you can't format the drive.

[cochrane88]

No we are using USMT to capture data and store it on the server. The files it says are protected are the xmls used for the scan state and the local working directory. I believe it also references other area such a boot and system32.

[cochrane88]

Thanks for the reply Peter, but afraid thats not the case.

 

Does anyone have an ideas to get around this? At the moment i've hit a dead end.

 

Thanks,

Andy

[Peter van der Woude]

It's probably PointSec that's in your way... have you seen this post: http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/74231add-1602-4851-bb47-b25e7f468773/

[cochrane88]

Thanks Peter, I believe I have seen this post. I'll check the pointsec links when in the office tmrw.

 

As an aside question is there anyway to unprotect the files USMT protects?