Now the problem I discovered with deploying an OS using SCCM 2007, is that there are a few vital steps that must be performed if you do not have DHCP enabled in your environment. What I found was that I was able to configure a static IP address when you boot using a SCCM created boot media. This screen is shown below.

However, once the image is applied and the computer reboots then the network settings are lost and the task sequence does not complete successfully. After searching through the internet for answers, I found quite a few people with this issue. Majority of the techs that came across this issue created custom scripts to prompt users or to capture the network settings during the WINPE phase. Although this was a great idea I wasn’t totally convinced that this was the only answer so I searched some more. What I found was that you can set Task Sequence Variables on a computer object residing in a collection in SCCM 2007. To do this go to the computer object in a collection, right click and select Properties. Then click on the Variables tab and shown below.

Using the following Task Sequence Variables, you will be able to configure the network settings and these will be applied when using the “Apply Network Settings” Task Sequence action in your Task Sequence.

OSDAdapter0MacAddress = MAC Address of the NIC you want to configure
OSDAdapterCount = How many NICS you want to configure (in this case just the 1)
OSDAdapter0EnableDHCP = false (make sure this is false)
OSDAdapter0IPAddressList = IP address
OSDAdapter0Subnetmask = Subnet Mask
OSDAdapter0Gateways = Gateway
OSDAdapter0DNSServerList = DNS Servers (seperate using commas if you have more then 1)

This will only work if you prepopulate the computer object in SCCM. It will not work when deploying to unknown computers. In these cases a custom script will have to be used.

WdsClient: An error occurred while obtaining an IP address from the DHCP server. Please check to ensure that there is an operationgal DHCP Server on this network segment.

To resolve this issue you will need to enable spanning-tree portfast on your switch. To do so you can run the following commands on your cisco switch.

Switch1(config)#interface “interface name”
Switch1(config)#spanning-tree portfast

To enable spanning-tree portfast on all interface use the following command

Switch1(config)#spanning-tree portfast default

Note: This will enable portfast by default on all interfaces. You will have to disable portfast explicitly on switched ports eading to hubs, switches and bridges as they may create temporary bridging loops.

Here are some steps that you can follow if you need to inject drivers to your wim file

1.  Install Microsoft Core XML Services (MSXML) 6.0, download link
2. Install Windows Automated Installation Kit (WAIK), download link
3. Once you have installed Windows Automated Installation Kit, navigate to the C:\Program Files\Windows AIK\Tools\x86 folder, right-click wimfltr.inf and Select Install.
4. Create a folder D:\VistaMount
5. Run cmd – command line
6. cd C:\Program Files\Windows AIK\Tools\x86
7. Mount wim file with the following command, imagex /mountrw “source location\wim file” 2 d:\vistamount

Note:  Make sure that you use the 2 in the command to specify the second image of the boot.wim file.  If you don’t, you may recieve problems with detecting the network drivers when booting into WinPE.  This is a known problem with the new HP DC7900 Desktops.

8. Download the drivers from the manufacturer and extract them to D:\drivers
9. Run cmd – command line
10. cd C:\Program Files\Windows AIK\Tools\PETools
11. peimg /inf=”driver source location\inf file” d:\vistamount
12. unmount and save changes to wim file with following command, imagex /unmount /commit d:\vistamount

Note: Make sure you use the /commit parameter to ensure that changes are saved to the wim file.

error 28: insufficient space to grow this volume with its guarantee enabled

Make sure that you have enough available space on the volume by running the df -h command. Once you have determined that you have enough space to grow your LUN then you need to run the following command, vol options ‘LUN NAME’.

Have a look at the results and check to see if you can find guarantee=volume. If you can then you will need to change this value to none by running this command vol options ‘LUN NAME’ guarantee none. Run the vol options ‘LUN NAME’ again and now you will see guarantee=none, you can now resize the LUN in Storevault Manager.

Ensure that you change the setting back to gurantee=volume by running the following command vol options ‘LUN NAME’ guarantee volume

TITLE: Microsoft SQL Server Management Studio
——————————

Failed to retrieve data for this request. (Microsoft.SqlServer.SmoEnum)

For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&LinkId=20476

——————————
ADDITIONAL INFORMATION:

The SQL server specified in SSIS service configuration is not present or is not available. This might occur when there is no default instance of SQL Server on the computer. For more information, see the topic “Configuring the Integration Services Service” in Server 2005 Books Online.

Login timeout expired
An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections.
Named Pipes Provider: Could not open a connection to SQL Server [2]. (MsDtsSrvr)

——————————

Login timeout expired
An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections.
Named Pipes Provider: Could not open a connection to SQL Server [2]. (Microsoft SQL Native Client)

Check the following,

1. Launch SQL Server Configuration Manager
2. Check that the SQL Server Integrated Services is running and that the Log On As account is an Active Directory account with correct permissions.
3. Under SQL Server 2005 Network Configuration make sure Names Pipes is enabled for the SQL instance.

If you have multiple instance then you may need to change the MsDtsSrvr.ini.xml to state the default instance.

The registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTS\ServiceConfigFile specifies the location and name for the configuration file that Integration Services service uses. The default value of the registry key is C:\Program Files\Microsoft SQL Server\90\DTS\Binn\ MsDtsSrvr.ini.xml. You can update the value of the registry key to use a different name and location for the configuration file.

In the configuration file, go to . and replace the . with ServerName\InstanceName

Now secondly if you are using the @query parameter then you need to make sure that you specify the database where you would like the query to run. You can do this by using the @execute_query_database parameter. If you do not do this then you will receive an invalid object name error.

Example:

EXEC msdb.dbo.sp_send_dbmail
@recipients = ‘youremail@domain.com‘,
@subject = ‘Subject‘,
@profile_name = ‘DBMail Profile Account Name‘,
@query = ‘your query‘
@execute_query_database = ‘database you would like to query‘,
@body = ‘your message here or you can leave out if you don’t want anything other then the query in the body‘,
@attach_query_result_as_file = 0 or 1;

Another thing to remember is if you want the query result to be displayed in the body and not as a file attachement then make sure you use the @attach_query_result_as_file parameter and set the value to 0. If you would like to send it as a file attachment then you will need to set the value as 1.

*****BACKUP DETAIL SUMMARY*****

Backup group set #1:

Backup SG [First Storage Group] Error: VSS API Error Description: VSS_E_PROVIDER_VETO

*****BACKUP RESULT SUMMARY*****

Backup group set #1:

Backup SG [First Storage Group]: Failed

Backup failed.

Error Code: 0×80042306

VSS API Error Description: VSS_E_PROVIDER_VETO

You will need to make sure that you have enough space on the LUN that you are trying to back up.  Check your event log and see if you have an error from Snapdrive stating the following error – error code = 0x004032f,  Error description: No space left on device.  If so then you will need to do the following.

Telnet to you filer and run the following command  > df -h

This will give you a list of all your LUN’s and the amount of capicity you have left.  Look for the LUN that you’re trying to backup and see if the capacity is 100%.  If this is the case then you will need to autosize the LUN so that it can grow according to rate of change.  To do this run the following command > vol autosize ‘LUN name’ -m ‘(SIZE eg.40g)’ -i  (SIZE eg. 10g).  The command -m sets the size limit and -i sets the growth increments.  So for example if you wanted to set your LUN to grow to 100GB in increments of 10GB then the following command would be > vol autosize ‘LUN name’ -m 100g -i 10g

Here is a good article on managing data growth on a LUN.

Launch regedit

Go to HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\SafeMode\Components

Change value of DeskHtmlVersion REG_DWORD 0×00000110(272) to decimal 0

Close regedit and log off

When you log back in the problem should be fixed

Install Internet Authentication Service

If you have not installed Internet Authentication Service (IAS)  then you will need to install it by going to Add and Remove Programs, Click on Add/Remove Windows Components – Networking Services – Details – - Select Internet Authentication Service Then Click Next.

Once installed you will need to configure your Checkpoint Firewall and IAS.

Configure the Checkpoint Firewall

1. Launch Checkpoint SmartDashboard.
2. Go to Network Objects – Select Nodes – Right Click select New Node then select HOST – Give it the name and IP address of your IAS Server and then Click OK
3. Go to Services – Click on UDP – Right Click and Select UDP – Give it a Name ‘RADIUS_IAS’ – Add Comment – In Port Field type 1812 – Click OK.
4. Create new Firewall traffic rule:                                                                                                                                                                                                                Source = Checkpoint Firewall                                                                                                                                                                                                              Destination = IAS Server (The Host that you created in step 1)                                                                                                                                                    Service = RADIUS_IAS (Service you created in Step 2)                                                                                                                                                                  Action = Accept                                                                                                                                                                                                                                              Comment = Radius authentication for VPN access
5. Go to Servers and OPSEC Application – Servers – RADIUS – Right Click and Select New RADIUS – Name = RADIUS_Srv – Host = Your IAS Server (The Host that you created in step 1) – Service = RADIUS_IAS (Service you created in Step 2) Shared Secret = Enter a password and make sure you remember this as you will need this later on. – Version = RADIUS Ver. 1.0 Compatible – Protocol = PAP – Priority = 1.

Configure Internet Authentication Service

1. Launch IAS
2. Right Click on RADIUS Clients and Slect New RADIUS Client then type in Friendly Name ‘Checkpoint’ and in the Address type in IP of your Checkpoint Firewall.  Leave Client-Vendor as RADIUS Standard and in the Shared Secret type in the Shared secret that you chose earlier. Click Finish
3. Right Click on Remote Access Policies and Select New Remote Access Policy then click Next and type in the Policy Name ‘VPN Access’ then Click Next.
4. Select VPN and then click Next
5. Click Add and Add the Active Directory Group that you have created for VPN Users
6. Leave Microsoft Encryption Authentication Version 2 (MS-CHAP) ticked and Click Next.
7. Only tick Strongest Encryption then click Next.
8. Click Finish.
9. Now double click on the Policy that you just created  ‘VPN Access’ and click on Edit Profile.
10. Now click on Authentication Tab, now untick Microsoft Encryption Authentication Version 2 (MS-CHAP) and tick Unencrypted authentication (PAP, SPAP) and click OK.
11. Now Right Click on Internet Authentication Service and Register Server in Active Directory
12. Right Click on Internet Authentication Service Start Service

So it should look like this under # Generic IE Settings,

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKCU\Software\Microsoft\Internet Explorer\Main
HKCU\Software\Microsoft\Internet Explorer\Desktop\Components
HKCU\Software\Microsoft\Internet Explorer\IntelliForms
HKCU\Software\Microsoft\Internet Explorer\TypedURLs
HKCU\Software\Microsoft\Internet Explorer\New Windows
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings