@kayotte said in Lenovo Thinkpad E14 Gen 2 Issues:

I noticed that now deploying old images on old laptops is also having this same problem not joining the domain. Is it possible that the fog update I ran could’ve changed something?

It’s probably best you open a new topic for this as it doesn’t seem to be related to the issue you had before. Please grab the fog-client log file (C:\fog.log) and post that (upload to a file share). I am pretty sure we’ll find why it doesn’t join in there. As well you might also add more information on details like sysprep or what else you do to prepare your image.

@blu3h4t I see a lot of references here, but I’m not sure what your problem is.

I can tell you from the start that FOG doesn’t support secure booting (generally). To image with FOG you need to have secure boot disabled.

So if you are having a secure boot processing issue inside windows that isn’t a FOG thing.

@jclumbo33 said in Can't get UEFI to PXE boot:

You are correct, the VLAN that it works on uses a /16 subnet. That’s interesting, so we could potentially be screwed without redoing our network then?

I am not saying your network is at fault. I might be partly causing what you see but in fact it would be a firmware issue. Before you even think about redoing your network I suggest you setup a test VLAN where you can try out if non-default subnet masks are actually causing this problem.

Here’s an idea of maybe a workaround? Our fog server is running in Hyper-V. If I add a NIC to the VM and put it on each VLAN we need, then point the DHCP options to the new IP address on the same VLAN, would that potentially act as a work around? And is that even possible to configure fog with multiple NICs like that? Just a thought.

Not a good idea. FOG needs a specific network interface and IP to be able to properly work.

@gooses ok a couple of things here.

WDS uses proxydhcp requests. The is only relevent if your wds server is sending this boot information to your fog environment. This would be managed by your dhcp-helper service on your subnet router. If you are pxe booting into FOG OK then you can ignore this bit, I’m only posting it because I have seen conflicts with wds/sccm/fog in the same environment. This is because proxydhcp overrides dhcp option 66 and 67.

Now to pxe boot bios based computers you would setup dhcp option 67 to be undionly.kpxe. For uefi systems you would setup dhcp option 67 to be ipxe.efi or snponly.efi. You can not boot a bios based computer with a uefi boot loader, the same is true for booting a uefi based computer with a bios boot loader (which i’m guessing is the root of your issue).

The FOG Project also has a wiki page that describes how to configure a windows 2012 or later dhcp server to support dynamic pxe booting of both uefi and bios based computers. https://wiki.fogproject.org/wiki/index.php/BIOS_and_UEFI_Co-Existence#Using_Windows_Server_2012_.28R1_and_later.29_DHCP_Policy

The other option is to install dnsmasq on your fog server and let the fog server send out pxe boot info (only) on your imaging network. In this role your main dhcp server still issues IP addresses, just the pxe boot info comes from the fog server: https://forums.fogproject.org/topic/12796/installing-dnsmasq-on-your-fog-server One possible use case for dnsmasq is if you have a dhcp server that can’t be modified or one that doesn’t support dhcp dynamic pxe booting.

@sebastian-roth Hi there
we’ve done some testing and found that non resizeable seems to move between different size disks and puts the partition size back to 200gb

i think this should do the trick

@it-walrus said in Window 10 will not boot after image:

The computer restarted unexpectedly or encountered an unexpected error.

I have seen this quite a while ago if the installation of a driver or something else causes widows to reboot out of order. I can tell you this can be a PAIN to try to debug. The problem typically had nothing to do with FOG, but something I did to the image, fog just faithfully duplicated the image.

There are logs you can look at to see exactly where imaging has failed. When you are at the screen that says windows unexpectedly restarted you can hit a hot key combination to get a command window (maybe alt-f10 but check because its been about 6 years since I caused that issue). From the command window you can open notepad and then look at the imaging log files (google the location of these files too).

@hsikkema said in newbie: imaging:

Are you saying that I should NOT run sysprep at all once I have the system setup

No you should run sysprep if you want to deploy one mother image to many target systems. What I’m saying is that sysprep and windows 10 work a bit differently then sysprep and win7. Where in windows 7 you could setup the system exactly like you wanted it and clone it to many systems. With win10 M$ says, <snark> they know better than you </snark>. Where OOBE will reset somethings that you setup during the creation of the golden image. So if you set the system one way in the golden image and then once deployed the values are reset blame it on Microsoft. To get around this system reset you can fix it again using the setupcomplete.cmd file (google it) and setting in the unattend.xml file. You need sysprep to reset the system guid and some other settings used by management programs. Also to prepare the system for deploying to different hardware platforms.

I say this with some hesitation because I understand the meanings, but if you have a golden image on a Dell 9410 and you will clone that image to other 9410s you really don’t “need” to sysprep the image. This is because all of the hardware drivers needed for the target system are already on the computer. But lets say you wanted to deploy that Dell 9410 image to a Lenovo thinkpad? In this case you MUST sysprep the system.

Imaging is a ballancing act between what microsoft things you need, plus settings in the unattend.xml file and then finally corrections you might need to make in the setupcomplete.cmd file or the firstrun commands in the unattend.xml file. Imaging Windows computers is a bit of a black art and this is all before you get FOG imaging in the picture.

Thanks, you can mark this as solved. Updated client worked beautifully. Thank you all so much!!

@amher17 said in Windows 10 iso:

Im trying to deploy windows 10 OOBE with fog. I have been having problems with sysprepped images. It wont enable bitlocker in the microsoft Intune OOBE.

This sounds like you have been successful booting windows 10 with FOG how are you doing this right now? Is the target computer in uefi mode?

@kevinnew22 said in Error trying to restore GPT partition tables (restorePartition TablesAndBootLoaders):

understood, the release of the new version will be when more or less? I can help with something?

Can’t give you a date as we don’t have a fixed plan for new releases. Not great but that’s the way it is right now. Hardly anyone has time to work much on FOG and so things are going very slowly. You are more than welcome to join in an help us push this forward. See my post in the forums. Please send me a private message if you are keen to get involved and I am sure we have something for you! Looking forward to hear from you.

@louvet-christophe Can you please take a picture of the error on screen and post that here in the forums?

I forgot to isntall the client it’s working now sorry !

@tom-elliott J’essaie d’avoir un espace de stockage supplémentaire pour FOG, en créant un nouveau nœud de stockage.

Est-ce possible de stocker des images sur un poste Windows 10 pro dans un dossier partagé?
Est-ce obligatoire d’utiliser Windows Serveur pour stocker des images?
Doit on utiliser un NAS?
Si vous avez des procédures?

Merci pour votre réponse.

@librarymark I came accross the same error here with a different software that does the same. Couldn’t fix it but I see you managed to fix it and I don’t mind to use RRRx instead of Radix.

Can you walk me through this please? My FOG server is set to undionly.kpxe as far as I know (last time I checked this was long ago). Do I need to change it in /etc/dnsmasq.d/ltsp.conf

@george1421 great! by habit we turn secure boot off. i have someone looking into attempting to capture in a while to see what we get. thanks for all of your help so far.

@nockdown You might check the UEFI/BIOS firmware settings to see if you can disable the automatic boot order switch. Or maybe even contact Asrock to see what they can offer.

@Almeida The fog-client service runs as SYSTEM user by default. Not sure if that has enough access rights to run bcdedit. Search the forum for “psexec” to find a topic explaining how to use PsExec to test-run commands under the SYSTEM user account.

@jacyjacy77 While I realize this won’t help you, I do find this entreging from a secops perspective. So the bad actors were able to compromise the cloud hosting provider, compromise the command and control function to reset the devices. This is just a postmortum question, but can you manage these devices without a cloud account? Is there local management features? If you can manage them locally, the simple security fix is to assign a static IP address and subnet mask to this device but don’t set a gateway address. The device will not know how to leave your local network. There will be no chance for it to access the cloud controller or receive external commands. That way the device should remain functionally locally and not have the risk of external compromise. Firmware updates haven’t been issued since 2015 so unless WD fix this hole with a firmware update that probably the easiest and most assured way to keep using this device if you are so inclined.

Bonjour, @tallier

Pensez à écrire en anglais sur ce forum (en attendant un sous-forum français). Deepl est votre ami pour la traduction https://www.deepl.com/translator

Pour déployer un serveur Windows, je mettrai Windows Other au niveau de l’image.

Traduction Deepl :
Think of writing in English on this forum (while waiting for a French sub-forum). Deepl is your friend for translation https://www.deepl.com/translator

To deploy a Windows server, I will put Windows Other at the image level.