We have find a workaround who works at now.
For Dell or HP in BIOS need to active Secure Boot in “Audit Mode” or “Client Keys”.
This is not secure but allow to use FOG Pxe and Windows 11.
Hope stay like this in the future
Posts made by Florent
-
RE: FOG compatibility with Secure Boot on?
-
RE: FOG Project call for engagement
@jmeyer
We often ear that on FOG need many images for brand or model.
But here we use only 1 image for each OS (Windows, Linux).
And on postdownload scripts, we do all the others operations. For example wget of the WAPT Agent who is installed then by the Windows SetupComplete or Sysprep, personalize the sysprep in terms of this or that parameter.
Idem for drivers, bitlocker etc.
And our Windows image is only a fresh install of Windows 10, easy to update.Here the most worry is about Windows 11 and Secure Boot.
-
RE: FOG compatibility with Secure Boot on?
@george1421
This worry me about this news for Windows 11.
Is it the end of FOG to deploy Windows in the next year. I hope not -
RE: How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
@junkhacker interesting, even if i don’t understant all the concept
-
RE: How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
@george1421 Thanks, i will wait this update to test this, maybe when rollout i ask help
Have a good day -
RE: How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
@junkhacker Limit access by IP is not sufficient for my case, Because users can access in the NFS xith their windows
-
RE: How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
@george1421 In the next FOG version it will be NFSv4 ?
-
RE: How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
@junkhacker Hello, thanks for your answer.
It would be nice if in the future next version we can have this kind of functionnality.
I thought too for example a certificate on the FOSS and only FOSS can access this folder(s), but i don’t know how i can do this -
How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
Hello,
How to secure postinstall/postdownload/sysprep scripts folder (NFS) ?
Because, everything that is in /images/postdownloadscripts is accessible by everyone with NFS (on Windows 10 for example).
Have you best practice to protect this ?
Or possible to restrict access only to FOSS (the linux pxe loaded) ? -
RE: FOG Project call for engagement
@tom-elliott
Big customers for me is institution or business who can donate this amount to support FOG.
I was thinking a bit more “big customers” who use FOG all days ~100. Maybe I aimed wide.
But you are right it’s just donation, and not bind for all years. -
RE: FOG Project call for engagement
@tom-elliott Maybe the Paypal donation can be a problem for professional.
Here the payment service can’t pay on Paypal. Need a purchase order. This is why we never donate, if i remember i say this in old forum topic few years ago.
If big customers just donate 1000$ by year, think it will be enough to remunerate 2 developers full time on FOG.
Hope FOG can continue to be the beautiful product we use all days. -
RE: FOG Project call for engagement
@sebastian-roth Don’t think it’s letter university.
-
RE: FOG Project call for engagement
Hi,
I would like to help but not have the level and knowledge.
We would like to donate but our University can’t use payment by Paypal to support FOG Project.
Hope fin people to contribuate. -
RE: Windows 10 changed the boot order !!
Merci je testerais cela un de ces jours.
-
RE: Windows 10 changed the boot order !!
@tanguy Salut, Peux tu partager le code utilisé ?
-
RE: Windows 10 changed the boot order !!
@tanguy Ah oui compliqué alors.
Chez nous une solution de contournement que nous avons trouvé est de positionner le wakeonlan sur “boot on pxe” mais ça revient au meme il faut une methode pour le propager sur vos divers modèles de plusieurs marques.
Pour les snapins il faut juste avoir un agent FOG installé sur les PC concernés, et que sur les Host dans FOG snapins soit coché -
RE: Windows 10 changed the boot order !!
@tanguy If it’s Dell manufacturer you can use CCTK config tool to modify boot order
-
RE: Wake on lan difference between basic tasks and power management ?
@florent
Sorry i found the problem, i think it’s bad value on the mysql table.
I go to the powerManagement table and see line like this with “-” :
0 8 - * wol 0
I have deleted this line and restart FOGScheduler, after it’s ok[03-04-21 5:08:23 pm] * Found a wake on lan task that should run. [03-04-21 5:08:23 pm] | Task sent to XXX
It’s resolved for me
-
RE: Wake on lan difference between basic tasks and power management ?
@sebastian-roth My log is weird :
[03-04-21 1:54:23 pm] Interface Ready with IP Address: 127.0.0.1 [03-04-21 1:54:23 pm] Interface Ready with IP Address: 127.0.1.1 [03-04-21 1:54:23 pm] Interface Ready with IP Address: xx.xx.xx.xx [03-04-21 1:54:23 pm] Interface Ready with IP Address: fog.mydomain.fr [03-04-21 1:54:23 pm] * Starting TaskScheduler Service [03-04-21 1:54:23 pm] * Checking for new items every 60 seconds [03-04-21 1:54:23 pm] * Starting service loop [03-04-21 1:54:23 pm] * Sending 1 wake on lan request. [03-04-21 1:54:23 pm] * 1 total mac attempting to wake up. [03-04-21 1:54:23 pm] * 601 tasks found.
and the last line (line 562) is this, nothing happen at the time i have schedule wake on lan :
[03-04-21 1:54:24 pm] * Task run time: Tue, 09 Mar 2021 07:30:00 +0100
This morning i have try to restart FOGScheduler service but change nothing.