Deployment – Page 2 – SCCMOG

13th July 2018

Disable RDP Windows 10 PowerShell Script Configuration Baseline SCCM

So I was setting up a KIOSK environment using Windows 10 1709 for a client recently and we wanted to take the route of applying as few GPOs as possible (as it should be in 2018)!

Ensuring that this stayed disabled was something that we decided to deploy using ConfigMgr Configuration Baselines.

So the Check compliance script is as follows:

##################################################################################################################
#
#  Author: Richie Schuster - C5 Alliance - SCCMOG.com
#  Date:   06/07/2018
#  Script: Action-CheckRDPCompliance.ps1
#  Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-CheckRDPCompliance.ps1
#
##################################################################################################################

#Variables
$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"
$TSRegProperty = "fDenyTSConnections"
$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
$RDPTcpRegProperty = "UserAuthentication"

#Set initial values
$TSSet = $True
$RDPTCPSet = $True
$RDPUserinTCPReturn = $True
$RDPUserinUDPReturn = $True
$RDPShadinTCPReturn = $True

#Test fDenyTSConnections state
$TSReturn = (Get-ItemProperty -Path $TSRegPath -Name $TSRegProperty -ErrorAction SilentlyContinue).fDenyTSConnections
If ($TSReturn -eq 1) {
    $TSSet = $false
}

#Test RDP-TCP State
$RDPTCPReturn = (Get-ItemProperty -Path $RDPTcpRegPath -Name $RDPTcpRegProperty -ErrorAction SilentlyContinue).UserAuthentication
If ($RDPTCPReturn -eq 0) {
    $RDPTCPSet = $false
}

#Get Firewall states
$RDPUserinTCPReturn = (Get-NetFirewallRule -Name $RDPUserinTCP -ErrorAction SilentlyContinue).Enabled
$RDPUserinUDPReturn = (Get-NetFirewallRule -Name $RDPUserinUDP -ErrorAction SilentlyContinue).Enabled
$RDPShadinTCPReturn = (Get-NetFirewallRule -Name $RDPShadinTCP -ErrorAction SilentlyContinue).Enabled

#Evaluate and report
If (!($RDPUserinTCPReturn) -and ($RDPUserinUDPReturn) -and ($RDPShadinTCPReturn) -and ($TSSet) -and ($RDPTCPSet)) {
    Write-Host "Compliant!"
}

##################################################################################################################

##################################################################################################################

# Author: Richie Schuster - C5 Alliance - SCCMOG.com

# Date: 06/07/2018

# Script: Action-CheckRDPCompliance.ps1

# Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-CheckRDPCompliance.ps1

##################################################################################################################

#Variables

$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"

$TSRegProperty = "fDenyTSConnections"

$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"

$RDPTcpRegProperty = "UserAuthentication"

#Set initial values

$TSSet = $True

$RDPTCPSet = $True

$RDPUserinTCPReturn = $True

$RDPUserinUDPReturn = $True

$RDPShadinTCPReturn = $True

#Test fDenyTSConnections state

$TSReturn = (Get-ItemProperty -Path $TSRegPath -Name $TSRegProperty -ErrorAction SilentlyContinue).fDenyTSConnections

If ($TSReturn -eq 1) {

$TSSet = $false

}

#Test RDP-TCP State

$RDPTCPReturn = (Get-ItemProperty -Path $RDPTcpRegPath -Name $RDPTcpRegProperty -ErrorAction SilentlyContinue).UserAuthentication

If ($RDPTCPReturn -eq 0) {

$RDPTCPSet = $false

}

#Get Firewall states

$RDPUserinTCPReturn = (Get-NetFirewallRule -Name $RDPUserinTCP -ErrorAction SilentlyContinue).Enabled

$RDPUserinUDPReturn = (Get-NetFirewallRule -Name $RDPUserinUDP -ErrorAction SilentlyContinue).Enabled

$RDPShadinTCPReturn = (Get-NetFirewallRule -Name $RDPShadinTCP -ErrorAction SilentlyContinue).Enabled

#Evaluate and report

If (!($RDPUserinTCPReturn) -and ($RDPUserinUDPReturn) -and ($RDPShadinTCPReturn) -and ($TSSet) -and ($RDPTCPSet)) {

Write-Host "Compliant!"

}

##################################################################################################################

Ok, so now the check script is out the way, here is the remediation script:

##################################################################################################################
#
#  Author: Richie Schuster - C5 Alliance - SCCMOG.com
#  Date:   06/07/2018
#  Script: Action-RemediateRDPCompliance.ps1
#  Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-RemediateRDPCompliance.ps1
#
##################################################################################################################

#Variables
$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"
$TSRegProperty = "fDenyTSConnections"
$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
$RDPTcpRegProperty = "UserAuthentication"

#Remediate and Block RDP
Set-ItemProperty $TSRegPath -Name $TSRegProperty -Value 1 -Force
Set-ItemProperty $RDPTcpRegPath -Name $RDPTcpRegProperty -Value 0 -Force
Disable-NetFirewallRule -DisplayGroup "Remote Desktop"

#The End :)
##################################################################################################################

##################################################################################################################

# Author: Richie Schuster - C5 Alliance - SCCMOG.com

# Date: 06/07/2018

# Script: Action-RemediateRDPCompliance.ps1

# Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-RemediateRDPCompliance.ps1

##################################################################################################################

#Variables

$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"

$TSRegProperty = "fDenyTSConnections"

$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"

$RDPTcpRegProperty = "UserAuthentication"

#Remediate and Block RDP

Set-ItemProperty $TSRegPath -Name $TSRegProperty -Value 1 -Force

Set-ItemProperty $RDPTcpRegPath -Name $RDPTcpRegProperty -Value 0 -Force

Disable-NetFirewallRule -DisplayGroup "Remote Desktop"

#The End :)

##################################################################################################################

As Always scripts are as is, and if you do use them remeber where you got them from 😉

If you would like to see the setup of this baseline let me know in the comments below.

Cheers,

SCCMOG

14th June 201815th June 2018

OSD Task Seqeunce High Performance – Native PowerCFG – VBS – MDT -SCCM

So like a lot of ConfigMgr Admins out there I strive to produce the fastest and most robust task sequences I can. This obviously led me down the path of configuring the Power Settings on the OS during deployment and capture phases.

The issue that I found is probably like many of you have and that is that it requires exporting the native “PowerCFG.exe” from each version of the OS that you would like to dynamically change the power configuration during Operating System Deployment.

So Jack and I were discussing why… in short… do we not use the “PowerCFG.exe” that is is already in the OS that we are configuring. Anyway after a little persuasion we came up with this little beauty of a script. This script will also create a CMTrace “Log” using its name in the Log folder that is currently in use in the Task sequence.

Setup is simple:

MDT Setup

For MDT just place it into the Scripts folder of you “Deployment Share”.”

Deployment Share Root

"<YourDeploymentShareDrive>:\<DeploymentShareRoot>\Scripts\Set-PowerCFG.wsf"

1

"<YourDeploymentShareDrive>:\<DeploymentShareRoot>\Scripts\Set-PowerCFG.wsf"
You can then call this during any stage of you Reference image capture i.e. WinPE or full OS phase to set the power cfg with these below Command Lines:

MDT High Performance

"%ScriptRoot%\Set-PowerCFG.wsf" /High

1

"%ScriptRoot%\Set-PowerCFG.wsf" /High

MDT Balanced Performance Profile

"%ScriptRoot%\Set-PowerCFG.wsf" /Bal

1

"%ScriptRoot%\Set-PowerCFG.wsf" /Bal

SCCM Setup

For SCCM you must be using the MDT integration (if you’re not… Start now!), you can make it work without it but I will not cover that here.
Find your current MDT Toolkit Package that is associated with the Task Sequence you would like to configure power settings in.
Open the “Source” location of your toolkit package, then open the scripts folder.

Once inside the scripts folder copy the “Set-PowerCFG.wsf” into it.

- Now, update the Package in ConfigMgr.
- Next we need to add the step to the task sequence. It must go after the “Use Toolkit Package” step in the task sequence. (If you have a reboot and remember to add another use “Toolkit package”.)
- Create a new “Run Command Line Step” and add one of the below commands.

cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /High

1	cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /High

cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /Bal

1	cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /Bal

And that is it. Your Task sequence will now set the Power Configuration Profile using the current OS’s native “Powercfg.exe”

Anyway as always, script is provided as is and if you do mod it, there is a line to add your name.

The Script:

<job id="Set-PowerCFG">
<script language="VBScript" src="ZTIUtility.vbs"/>
<script language="VBScript">
 
' //***************************************************************************
' // ***** Script Header *****
' //
' // Solution: Solution Accelerator for Microsoft Deployment
' // File: Set-PowerCFG.wsf
' // Requirements: ZTIUtility.vbs Must be located in the same folder id running from ConfigMGR.
' // Author: SCCMOG Richie Schuster - SCCMOG.com
' // Moddedby: YOURNAMEHERE
' // Date: 21/03/2018
' // Purpose:  Script sets power profile during OS deployment - Can be run in WinPE or full OS.
' //
' // Usage: cscript Set-PowerConfig.wsf [/High] - Sets high performance | [/Bal] - Sets balanced performance. [/debug:true] 
' //
' // Customer Build Version: 1.0.0
' // Customer Script Version: 1.0.0
' // Customer History:
' //
' // ***** End Header *****
' //***************************************************************************
 
'//----------------------------------------------------------------------------
'//
'// Global constant and variable declarations
'//
'//----------------------------------------------------------------------------
 
'Option Explicit
Dim strPwrBalanced	: strPwrBalanced	= "381b4222-f694-41f0-9685-ff5bb260df2e"
Dim strPwrHighPerf	: strPwrHighPerf	= "8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c"
Dim strPwrCFGexe	: strPwrCFGexe		= "powercfg.exe"
Dim strPwrCFGswitch : strPwrCFGswitch	= " /S "
Dim strPwrCFGFolder : strPwrCFGFolder	= "PowerCFG"
Dim strWmessage		: strWmessage		= "Please enter one or more arguments 'E.G : /High for High Performance Profile' or '/Bal for Balanced Profile'"
Dim strWindir		: strWindir			= oShell.ExpandEnvironmentStrings("%Windir%")
Dim strSysWow64		: strSysWow64		= "SysWOW64"
Dim strSystem32		: strSystem32		= "System32"

Dim  PowerCFG, strPwrProfile, strPwrProfileLog, ostrCMD, iRetVal
 
'//----------------------------------------------------------------------------
'// End declarations
'//----------------------------------------------------------------------------

'//----------------------------------------------------------------------------
'// Main routine
'//----------------------------------------------------------------------------
'Begin
oLogging.CreateEntry "Beginning Set-PowerCFG 1.0.0", LogTypeInfo
oLogging.CreateEntry "Active Log Path: " & oUtility.LogPath, LogTypeInfo

'Take Script Args
oLogging.CreateEntry "Getting set Arguments...", LogTypeInfo
If Not WScript.Arguments.Count >= 1 Then
	oLogging.ReportFailure strWmessage, iError
End If 
If WScript.Arguments.Named.Exists("High") Then 
	strPwrProfile = strPwrHighPerf
	strPwrProfileLog = "High"
	oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo
ElseIf WScript.Arguments.Named.Exists("Bal") Then 
	strPwrProfile = strPwrBalanced
	strPwrProfileLog = "Balanced"
	oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo
Else
	oLogging.ReportFailure strWmessage, iError
End If

'OS Info for Log
oLogging.CreateEntry "Getting information on Operating System", LogTypeInfo
oLogging.CreateEntry "OS Name: " & oEnvironment.Item("OSVERSION"), LogTypeInfo
oLogging.CreateEntry "OS Version: " & oEnvironment.Item("OSCURRENTVERSION"), LogTypeInfo
oLogging.CreateEntry "OS Architecture: " & oEnvironment.Item("Architecture"), LogTypeInfo

'Get OS Arch and set folder to run powerCFG from.
If oEnvironment.Item("Architecture") = "X86" Or oEnvironment.Item("_SMSTSInWinPE") = "true" Or oEnvironment.Item("OSVERSION") = "WinPE" Then
	strPwrCFGFolder = strSystem32
	oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo
Elseif oEnvironment.Item("Architecture") = "X64" Then
	strPwrCFGFolder = strSysWow64
	oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo
Else
	oLogging.ReportFailure "Machine Architecture not supported.", iError
End If

'Setting PowerCFG Location
strCMD = strWindir &  "\" & strPwrCFGFolder & "\" & strPwrCFGexe

'Logging Command
oLogging.CreateEntry "PowerCFG Location set to: " & strCMD, LogTypeInfo
oLogging.CreateEntry "Testing Location Available..." & strCMD, LogTypeInfo
iRetVal = oFso.FileExists(strPath)

If iRetVal = Success Then
	oLogging.CreateEntry "Found PowerCFG.exe at Location: " & strCMD, LogTypeInfo
	strCMD =  Chr(34) & strCMD &  Chr(34)
	oLogging.CreateEntry "Building Command to be run", LogTypeInfo
	strCMD = strCMD & strPwrCFGswitch & strPwrProfile
	oLogging.CreateEntry "Final Command to be run: " & strCMD, LogTypeInfo
	'Run PowerCFG
	iRetVal = oUtility.RunWithHeartbeat(strCMD)
	If iRetVal = Success Then
		oLogging.CreateEntry "Successfully set " & strPwrProfileLog & " Performance profile.", LogTypeInfo
		oLogging.CreateEntry "Set-PowerCFG 1.0.0 Complete...", LogTypeInfo
	Else
		oLogging.ReportFailure "Failed to set " & strPwrProfileLog & " Performance profile.", iError
	End If
Else
	oLogging.ReportFailure "Failed to find path: " & strCMD, iError
End If

	</script>
</job>

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

' //***************************************************************************

' // ***** Script Header *****

' //

' // Solution: Solution Accelerator for Microsoft Deployment

' // File: Set-PowerCFG.wsf

' // Requirements: ZTIUtility.vbs Must be located in the same folder id running from ConfigMGR.

' // Author: SCCMOG Richie Schuster - SCCMOG.com

' // Moddedby: YOURNAMEHERE

' // Date: 21/03/2018

' // Purpose: Script sets power profile during OS deployment - Can be run in WinPE or full OS.

' //

' // Usage: cscript Set-PowerConfig.wsf [/High] - Sets high performance | [/Bal] - Sets balanced performance. [/debug:true]

' //

' // Customer Build Version: 1.0.0

' // Customer Script Version: 1.0.0

' // Customer History:

' //

' // ***** End Header *****

' //***************************************************************************

'//----------------------------------------------------------------------------

'//

'// Global constant and variable declarations

'//

'//----------------------------------------------------------------------------

'Option Explicit

Dim strPwrBalanced : strPwrBalanced = "381b4222-f694-41f0-9685-ff5bb260df2e"

Dim strPwrHighPerf : strPwrHighPerf = "8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c"

Dim strPwrCFGexe : strPwrCFGexe = "powercfg.exe"

Dim strPwrCFGswitch : strPwrCFGswitch = " /S "

Dim strPwrCFGFolder : strPwrCFGFolder = "PowerCFG"

Dim strWmessage : strWmessage = "Please enter one or more arguments 'E.G : /High for High Performance Profile' or '/Bal for Balanced Profile'"

Dim strWindir : strWindir = oShell.ExpandEnvironmentStrings("%Windir%")

Dim strSysWow64 : strSysWow64 = "SysWOW64"

Dim strSystem32 : strSystem32 = "System32"

Dim PowerCFG, strPwrProfile, strPwrProfileLog, ostrCMD, iRetVal

'//----------------------------------------------------------------------------

'// End declarations

'//----------------------------------------------------------------------------

'// Main routine

'//----------------------------------------------------------------------------

'Begin

oLogging.CreateEntry "Beginning Set-PowerCFG 1.0.0", LogTypeInfo

oLogging.CreateEntry "Active Log Path: " & oUtility.LogPath, LogTypeInfo

'Take Script Args

oLogging.CreateEntry "Getting set Arguments...", LogTypeInfo

If Not WScript.Arguments.Count >= 1 Then

oLogging.ReportFailure strWmessage, iError

End If

If WScript.Arguments.Named.Exists("High") Then

strPwrProfile = strPwrHighPerf

strPwrProfileLog = "High"

oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo

ElseIf WScript.Arguments.Named.Exists("Bal") Then

strPwrProfile = strPwrBalanced

strPwrProfileLog = "Balanced"

oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo

Else

oLogging.ReportFailure strWmessage, iError

End If

'OS Info for Log

oLogging.CreateEntry "Getting information on Operating System", LogTypeInfo

oLogging.CreateEntry "OS Name: " & oEnvironment.Item("OSVERSION"), LogTypeInfo

oLogging.CreateEntry "OS Version: " & oEnvironment.Item("OSCURRENTVERSION"), LogTypeInfo

oLogging.CreateEntry "OS Architecture: " & oEnvironment.Item("Architecture"), LogTypeInfo

'Get OS Arch and set folder to run powerCFG from.

If oEnvironment.Item("Architecture") = "X86" Or oEnvironment.Item("_SMSTSInWinPE") = "true" Or oEnvironment.Item("OSVERSION") = "WinPE" Then

strPwrCFGFolder = strSystem32

oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo

Elseif oEnvironment.Item("Architecture") = "X64" Then

strPwrCFGFolder = strSysWow64

oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo

Else

oLogging.ReportFailure "Machine Architecture not supported.", iError

End If

'Setting PowerCFG Location

strCMD = strWindir & "\" & strPwrCFGFolder & "\" & strPwrCFGexe

'Logging Command

oLogging.CreateEntry "PowerCFG Location set to: " & strCMD, LogTypeInfo

oLogging.CreateEntry "Testing Location Available..." & strCMD, LogTypeInfo

iRetVal = oFso.FileExists(strPath)

If iRetVal = Success Then

oLogging.CreateEntry "Found PowerCFG.exe at Location: " & strCMD, LogTypeInfo

strCMD = Chr(34) & strCMD & Chr(34)

oLogging.CreateEntry "Building Command to be run", LogTypeInfo

strCMD = strCMD & strPwrCFGswitch & strPwrProfile

oLogging.CreateEntry "Final Command to be run: " & strCMD, LogTypeInfo

'Run PowerCFG

iRetVal = oUtility.RunWithHeartbeat(strCMD)

If iRetVal = Success Then

oLogging.CreateEntry "Successfully set " & strPwrProfileLog & " Performance profile.", LogTypeInfo

oLogging.CreateEntry "Set-PowerCFG 1.0.0 Complete...", LogTypeInfo

Else

oLogging.ReportFailure "Failed to set " & strPwrProfileLog & " Performance profile.", iError

End If

Else

oLogging.ReportFailure "Failed to find path: " & strCMD, iError

End If

</script>

</job>

Cheers,

SCCMOG

18th May 201818th May 2018

Set static IP on VM Pre LiteTouch in WinPE – MDT VBScript

I was working on a client site last year and setting them up a reference image task sequence for Windows 10. The VMs that I was working with were hosted in a subnet that did not have DHCP configured. This gave me the issue of configuring the IP statically on the VM that was used to build and capture the reference image BEFORE light touch is launched. So I wrote this little script (with google’s help) to grab the MAC address of the virtual NIC that had been initialised on the VM, match it to a variable and set the IP accordingly to the adaptor by referencing its name.

To implement this script into your MDT boot image there are a couple of steps that have to be performed. The first is to tell the boot image to run it beofre litetouch is called! To do this we have to place an updated Unattend.xml into the boot image.

Thankfully MDT has a proccess for adding extrafiles to your bootimage.
But firtly, we need to get sort out the script and xml.
So…

Create a folder called “Static IP”.

Then copy and paste the XML code from below into a text document and save it in the Static IP folder called “Unattend.xml”.

NOTE: This XML has been built to work with x64 boot images and x86.)

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="windowsPE">
        <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <RunSynchronous>
                <RunSynchronousCommand wcm:action="add">
                    <Description>Set Static IP VM Based</Description>
                    <Order>1</Order>
                    <Path>cscript.exe x:\Set-WinPE-StaticIP.vbs</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Description>MDT</Description>
                    <Path>wscript.exe X:\Deploy\Scripts\LiteTouch.wsf</Path>
                    <Order>2</Order>
                </RunSynchronousCommand>
            </RunSynchronous>
        </component>
        <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <RunSynchronous>
                <RunSynchronousCommand wcm:action="add">
                    <Description>Set Static IP VM Based</Description>
                    <Order>1</Order>
                    <Path>cscript.exe x:\Set-WinPE-StaticIP.vbs</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Path>wscript.exe X:\Deploy\Scripts\LiteTouch.wsf</Path>
                    <Order>2</Order>
                    <Description>MDT</Description>
                </RunSynchronousCommand>
            </RunSynchronous>
        </component>
    </settings>
</unattend>

<?xml version="1.0" encoding="utf-8"?>

<Description>Set Static IP VM Based</Description>

<Path>cscript.exe x:\Set-WinPE-StaticIP.vbs</Path>

</RunSynchronousCommand>

<Path>wscript.exe X:\Deploy\Scripts\LiteTouch.wsf</Path>

</RunSynchronousCommand>

</RunSynchronous>

</component>

<Description>Set Static IP VM Based</Description>

<Path>cscript.exe x:\Set-WinPE-StaticIP.vbs</Path>

</RunSynchronousCommand>

<Path>wscript.exe X:\Deploy\Scripts\LiteTouch.wsf</Path>

</RunSynchronousCommand>

</RunSynchronous>

</component>

</settings>

</unattend>

Now open notepad again, copy and paste the VBscript from below and then save it as “Set-WinPE-StaticIP.vbs” into the “Static IP” Folder.

Now identify the MAC address of the VM(s) you will be targeting as this is what the script identifies the machine with, and place them into the MAC address variable fields (strRefVM1 & strRefVM2).

Now populate the IPs as required.

At this point is up to you to find the description of the network adaptor as this is used to grab the MAC address. I have supplied the two that I usually see for HyperV and VMware VMs but it is always best to check!

So boot up your current MDT Boot ISO and grab the description from the network adaptor that has been initialised by running an “Ipconfig /all”.
Now copy and paste it into the variable value for “strNetworkAdapter” or just uncomment the one you require.
And finally comment out the Ethernet name (strEthName) that does NOT apply to your environment. For example if you are running Hyper V VMs comment out the VMware line and vice versa.

'====================================================
'Author: Richie Schuster C5 Alliance
'Date  : 19-09-2017
'Info  : Script sets IP address in WinPE for MDT by Machine MAC
'====================================================

'Variables and Const
Dim strMAC
Const strMachineName = "."
Const strNetworkAdapter = "Intel(R) 82574L Gigabit Network Connection" 'Vmware
'Const strNetworkAdapter = "Intel 21140-Based PCI Fast Ethernet Adapter (Emulated)" 'HyperV
Const strRefVM1 = "00:0C:29:8B:7C:AD"
Const strRefVM2 = "00:0C:29:8B:7C:A2"
Const strDNS1 = "10.193.0.1"
Const strDNS2 = "10.193.0.2"
Const strGW = "10.193.16.254"
Const strSubNet = "255.255.255.0"
Const strRefVM1ip = "10.193.16.15"
Const strRefVM2ip = "10.193.16.16"
Const strEthName = "Ethernet0" 'VMWare
'Const strEthName = "Ethernet" 'HyperV

'Create Shell object
Set objShell = WScript.CreateObject("WScript.Shell")

'Run Sub to get MAC of machine
getMAC strMachineName

'Echo the MAC
Wscript.Echo "Machine MAC Address: " & strMAC

'Check which machine it is and then set IP and DNS servers accordingly
If strMAC = strRefVM1 Then
   WScript.Echo "Reference Machine 1 found. Setting IP..."
	Return = objShell.Run("cmd.exe /c netsh int ipv4 set address name=" & strEthName & " static " & strRefVM1ip & " " & strSubNet & " " &  strGW & " 1", 1, true)
	Return = objShell.Run("cmd.exe /c netsh interface ipv4 set dns " & strEthName & " static " & strDNS1, 1, true)
	Return = objShell.Run("cmd.exe /c netsh interface ipv4 add dnsserver name=" & strEthName & " address=" & strDNS2 & " index=2", 1, true)
ElseIf strMAC = strRefVM2 Then
   WScript.Echo "Reference Machine 2 found. Setting IP..."
	Return = objShell.Run("cmd.exe /c netsh int ipv4 set address name=" & strEthName & " static " & strRefVM2ip & " " & strSubNet & " " &  strGW & " 1", 1, true)
	Return = objShell.Run("cmd.exe /c netsh interface ipv4 set dns " & strEthName & " static " & strDNS1, 1, true)
	Return = objShell.Run("cmd.exe /c netsh interface ipv4 add dnsserver name=" & strEthName & " address=" & strDNS2 & " index=2", 1, true)
Else
   WScript.Echo "Machine not Configured for Static IP in script."
End If

'Sleep to allow for machine to correctly connect.
WScript.Sleep(10000)

Sub getMAC(strComputer)

	Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
	Set colItems = objWMIService.ExecQuery _
		("Select * From Win32_NetworkAdapterConfiguration Where Description = '" & strNetworkAdapter & "'")

	For Each objItem in colItems
		strMAC = objItem.MACAddress
	Next
End Sub

'====================================================

'Author: Richie Schuster C5 Alliance

'Date : 19-09-2017

'Info : Script sets IP address in WinPE for MDT by Machine MAC

'====================================================

'Variables and Const

Dim strMAC

Const strMachineName = "."

Const strNetworkAdapter = "Intel(R) 82574L Gigabit Network Connection" 'Vmware

'Const strNetworkAdapter = "Intel 21140-Based PCI Fast Ethernet Adapter (Emulated)" 'HyperV

Const strRefVM1 = "00:0C:29:8B:7C:AD"

Const strRefVM2 = "00:0C:29:8B:7C:A2"

Const strDNS1 = "10.193.0.1"

Const strDNS2 = "10.193.0.2"

Const strGW = "10.193.16.254"

Const strSubNet = "255.255.255.0"

Const strRefVM1ip = "10.193.16.15"

Const strRefVM2ip = "10.193.16.16"

Const strEthName = "Ethernet0" 'VMWare

'Const strEthName = "Ethernet" 'HyperV

'Create Shell object

Set objShell = WScript.CreateObject("WScript.Shell")

'Run Sub to get MAC of machine

getMAC strMachineName

'Echo the MAC

Wscript.Echo "Machine MAC Address: " & strMAC

'Check which machine it is and then set IP and DNS servers accordingly

If strMAC = strRefVM1 Then

WScript.Echo "Reference Machine 1 found. Setting IP..."

Return = objShell.Run("cmd.exe /c netsh int ipv4 set address name=" & strEthName & " static " & strRefVM1ip & " " & strSubNet & " " & strGW & " 1", 1, true)

Return = objShell.Run("cmd.exe /c netsh interface ipv4 set dns " & strEthName & " static " & strDNS1, 1, true)

Return = objShell.Run("cmd.exe /c netsh interface ipv4 add dnsserver name=" & strEthName & " address=" & strDNS2 & " index=2", 1, true)

ElseIf strMAC = strRefVM2 Then

WScript.Echo "Reference Machine 2 found. Setting IP..."

Return = objShell.Run("cmd.exe /c netsh int ipv4 set address name=" & strEthName & " static " & strRefVM2ip & " " & strSubNet & " " & strGW & " 1", 1, true)

Return = objShell.Run("cmd.exe /c netsh interface ipv4 set dns " & strEthName & " static " & strDNS1, 1, true)

Return = objShell.Run("cmd.exe /c netsh interface ipv4 add dnsserver name=" & strEthName & " address=" & strDNS2 & " index=2", 1, true)

Else

WScript.Echo "Machine not Configured for Static IP in script."

End If

'Sleep to allow for machine to correctly connect.

WScript.Sleep(10000)

Sub getMAC(strComputer)

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colItems = objWMIService.ExecQuery _

("Select * From Win32_NetworkAdapterConfiguration Where Description = '" & strNetworkAdapter & "'")

For Each objItem in colItems

strMAC = objItem.MACAddress

End Sub

Now open MDT and right click your deployment share and click “properties”.

Now select the “Windows PE” tab.

For each boot image you require the static IPs to be set click browse on the “Extra directory to add” field and import the “Static IP” folder.

Next click Apply.

Now right click the deployment share and update your boot images.

And thats it! Mount the ISO on your VM and hey presto…. no more IP issues! 🙂

18th May 2018

Set IP during Task Sequence PowerShell – SCCM ConfigMgr MDT

So this Is an older script of mine that I developed for a client to receive variables from a task sequence and then assign the IP of the machine based off the variables. This specfic client set the IP variables on the actual Machine object in SCCM so that during the task sequence it would pull the machine specific IP details. Their Task seqeunce was running only ConfigMgr tasks but this could quite easily be re-used for a ConfigMgr / MDT task sequence using the custom settings or database to set the IP Variables.

As always this is as is, the usage is defined in the script header and if you do use it please remember to use the modded by field 🙂

############################################################################
#Author   : Richie Schuster C5 - SCCMOG.com
#ModdedBy : Your Name here....
#Date     : 23/06/2017
#Script   : Set-MachineNetworkConfiguration.ps1
#Usage    : Set-MachineNetworkConfiguration.ps1 -IPAdress %IPAddress% -Subnet %SubMask% -Gateway %GateWay% 
#         : -DNS1 %DNS1% -DNS2 %DNS2%
#         : There is also a Switch -RevDNSAuto that allows for the DNS to be auto set on revert or not.
#Info     : This script has been created to auto configure Network information during OSD using OSD Variables
#         : or using strings.
############################################################################

param (
[string]$IPAddress,
[string]$Subnet,
[string]$Gateway,
[string]$DNS1,
[string]$DNS2,
[string]$PrimarySiteServer,
[switch]$RevDNSAuto
)

<##Testing Variables
[string]$IPAddress = "192.82.33.149"
[string]$Subnet = "255.255.255.0"
[string]$Gateway = "192.82.33.1"
[string]$DNS1 = "192.82.33.244"
[string]$DNS2 = "192.82.34.244"
[string]$PrimarySiteServer = "192.82.33.11"
[switch]$RevDNSAuto = $false

#Variables
$REVDNS1 = "192.82.1.22"
$REVDNS2 = "192.82.1.22"
#Create Task Sequence Variable Play!
$TSENV = New-Object -COMObject Microsoft.SMS.TSEnvironment

#Function to set IP Address - Credit "Petervanderwoude.nl"
function Set-StaticIPAddress ($IPAddress, $Subnet, $Gateway, $DNS1, $DNS2) {
    $NewNetworkConfig = Get-WmiObject Win32_NetworkAdapterConfiguration -Filter "IpEnabled = 'True'"
    $NewNetworkConfig.EnableStatic($IPAddress, $Subnet)
    $NewNetworkConfig.SetGateways($Gateway, 1)
    $NewNetworkConfig.SetDNSServerSearchOrder(@($DNS1, $DNS2))
}

#Set new Configuration
Set-StaticIPAddress $IPAddress $Subnet $Gateway $DNS1 $DNS2
#Sleep to take wait effect
sleep -Seconds 10
#Test Connection
If (Test-Connection -ComputerName $PrimarySiteServer -Count 10) {
    #If connection succeded...
    Write-Host "Configuration Succeeded!" -ForegroundColor Green
    #Set Task seqeunce Variable to False
    $TSENV.Value("NetworkConfig") = "Static"
    #Exit 0
}
Else {
    #If connection failed...
    Write-Host "Configuration Failed! Setting back to DHCP!" -ForegroundColor Yellow
    #Set Task seqeunce Variable to False
    $TSENV.Value("NetworkConfig") = "DHCP"
    #Get current IP settings swap to DHCP
    $CurrentNetworkConfig = Get-WmiObject Win32_NetworkAdapterConfiguration -Filter "IPEnabled = 'True'"
    #Set DNS Servers check switch
    If ($RevDNSAuto -ne $true) {
        #Set DNS to specified variable values
        $CurrentNetworkConfig.SetDNSServerSearchOrder(@($REVDNS1,$REVDNS2))
    }
    Else {
        #Set DNS to Auto
        $CurrentNetworkConfig.SetDNSServerSearchOrder()
    }
    #Enable DHCP
    $CurrentNetworkConfig.EnableDHCP()
    #Wait for configuration to complete
    Sleep -Seconds 10
    #Exit 0
}
######################################################################################

############################################################################

#Author : Richie Schuster C5 - SCCMOG.com

#ModdedBy : Your Name here....

#Date : 23/06/2017

#Script : Set-MachineNetworkConfiguration.ps1

#Usage : Set-MachineNetworkConfiguration.ps1 -IPAdress %IPAddress% -Subnet %SubMask% -Gateway %GateWay%

# : -DNS1 %DNS1% -DNS2 %DNS2%

# : There is also a Switch -RevDNSAuto that allows for the DNS to be auto set on revert or not.

#Info : This script has been created to auto configure Network information during OSD using OSD Variables

# : or using strings.

############################################################################

param (

[string]$IPAddress,

[string]$Subnet,

[string]$Gateway,

[string]$DNS1,

[string]$DNS2,

[string]$PrimarySiteServer,

[switch]$RevDNSAuto

)

<##Testing Variables

[string]$IPAddress = "192.82.33.149"

[string]$Subnet = "255.255.255.0"

[string]$Gateway = "192.82.33.1"

[string]$DNS1 = "192.82.33.244"

[string]$DNS2 = "192.82.34.244"

[string]$PrimarySiteServer = "192.82.33.11"

[switch]$RevDNSAuto = $false

#Variables

$REVDNS1 = "192.82.1.22"

$REVDNS2 = "192.82.1.22"

#Create Task Sequence Variable Play!

$TSENV = New-Object -COMObject Microsoft.SMS.TSEnvironment

#Function to set IP Address - Credit "Petervanderwoude.nl"

function Set-StaticIPAddress ($IPAddress, $Subnet, $Gateway, $DNS1, $DNS2) {

$NewNetworkConfig = Get-WmiObject Win32_NetworkAdapterConfiguration -Filter "IpEnabled = 'True'"

$NewNetworkConfig.EnableStatic($IPAddress, $Subnet)

$NewNetworkConfig.SetGateways($Gateway, 1)

$NewNetworkConfig.SetDNSServerSearchOrder(@($DNS1, $DNS2))

}

#Set new Configuration

Set-StaticIPAddress $IPAddress $Subnet $Gateway $DNS1 $DNS2

#Sleep to take wait effect

sleep -Seconds 10

#Test Connection

If (Test-Connection -ComputerName $PrimarySiteServer -Count 10) {

#If connection succeded...

Write-Host "Configuration Succeeded!" -ForegroundColor Green

#Set Task seqeunce Variable to False

$TSENV.Value("NetworkConfig") = "Static"

#Exit 0

}

Else {

#If connection failed...

Write-Host "Configuration Failed! Setting back to DHCP!" -ForegroundColor Yellow

#Set Task seqeunce Variable to False

$TSENV.Value("NetworkConfig") = "DHCP"

#Get current IP settings swap to DHCP

$CurrentNetworkConfig = Get-WmiObject Win32_NetworkAdapterConfiguration -Filter "IPEnabled = 'True'"

#Set DNS Servers check switch

If ($RevDNSAuto -ne $true) {

#Set DNS to specified variable values

$CurrentNetworkConfig.SetDNSServerSearchOrder(@($REVDNS1,$REVDNS2))

}

Else {

#Set DNS to Auto

$CurrentNetworkConfig.SetDNSServerSearchOrder()

}

#Enable DHCP

$CurrentNetworkConfig.EnableDHCP()

#Wait for configuration to complete

Sleep -Seconds 10

#Exit 0

}

######################################################################################