Posts made by x23piracy

x23piracy

Hi,

i forgot something, when working with computers that have embedded license into bios i use the following method to activate them:

@echo off
for /f "tokens=*" %%i in ('%cd%\oemkey') do set oemkey=%%i
cscript %systemroot%\system32\slmgr.vbs /ipk %oemkey% >nul
cscript %systemroot%\system32\slmgr.vbs /ato >nul
exit

I’ve packed that into a 7z self extracting binary that execute the batch as snapin

oemkey.exe is a binary i found in the net it reads the windows key from bios
I can share the binary if needed.

If you have OEM license simply input the key into desired field within host management:

alt text

Regards X23

x23piracy

Hi,

i would like to explain the way i sysprep, reimage Windows 10 OEM in Steps:

First of all Windows 10 OEM Version does not autoexecute SetupComplete.cmd, therefore i use FirstLogonCommands within unattend.xml to workaround that issue

Here is my unattend.xml:

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="windowsPE">
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SetupUILanguage>
<UILanguage>de-DE</UILanguage>
</SetupUILanguage>
<InputLocale>0407:00000407</InputLocale>
<SystemLocale>de-DE</SystemLocale>
<UILanguage>de-DE</UILanguage>
<UILanguageFallback>de-DE</UILanguageFallback>
<UserLocale>de-DE</UserLocale>
</component>
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DiskConfiguration>
<Disk wcm:action="add">
<CreatePartitions>
<CreatePartition wcm:action="add">
<Order>1</Order>
<Type>Primary</Type>
<Size>100</Size>
</CreatePartition>
<CreatePartition wcm:action="add">
<Extend>true</Extend>
<Order>2</Order>
<Type>Primary</Type>
</CreatePartition>
</CreatePartitions>
<ModifyPartitions>
<ModifyPartition wcm:action="add">
<Active>true</Active>
<Format>NTFS</Format>
<Label>System Reserved</Label>
<Order>1</Order>
<PartitionID>1</PartitionID>
<TypeID>0x27</TypeID>
</ModifyPartition>
<ModifyPartition wcm:action="add">
<Active>true</Active>
<Format>NTFS</Format>
<Label>OS</Label>
<Letter>C</Letter>
<Order>2</Order>
<PartitionID>2</PartitionID>
</ModifyPartition>
</ModifyPartitions>
<DiskID>0</DiskID>
<WillWipeDisk>true</WillWipeDisk>
</Disk>
</DiskConfiguration>
<ImageInstall>
<OSImage>
<InstallTo>
<DiskID>0</DiskID>
<PartitionID>2</PartitionID>
</InstallTo>
<InstallToAvailablePartition>false</InstallToAvailablePartition>
</OSImage>
</ImageInstall>
<UserData>
<AcceptEula>true</AcceptEula>
<FullName>admin</FullName>
<Organization>Company Group</Organization>
</UserData>
<EnableFirewall>true</EnableFirewall>
</component>
</settings>
<settings pass="offlineServicing">
<component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<EnableLUA>false</EnableLUA>
</component>
</settings>
<settings pass="generalize">
<component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SkipRearm>1</SkipRearm>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0407:00000407</InputLocale>
<SystemLocale>de-DE</SystemLocale>
<UILanguage>de-DE</UILanguage>
<UILanguageFallback>de-DE</UILanguageFallback>
<UserLocale>de-DE</UserLocale>
</component>
<component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SkipAutoActivation>true</SkipAutoActivation>
</component>
<component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<CEIPEnabled>0</CEIPEnabled>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<WindowsFeatures>
<ShowMediaCenter>false</ShowMediaCenter>
<ShowWindowsMail>false</ShowWindowsMail>
</WindowsFeatures>
<ShowWindowsLive>false</ShowWindowsLive>
<DoNotCleanTaskBar>true</DoNotCleanTaskBar>
<BluetoothTaskbarIconEnabled>false</BluetoothTaskbarIconEnabled>
<ComputerName>COMPANY-PC</ComputerName>
<CopyProfile>true</CopyProfile>
</component>
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<BlockPopups>yes</BlockPopups>
<CompanyName>Company</CompanyName>
<Home_Page>http://www.google.de</Home_Page>
<DisableFirstRunWizard>true</DisableFirstRunWizard>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<AutoLogon>
<Password>
<Value>password</Value>
<PlainText>true</PlainText>
</Password>
<Enabled>true</Enabled>
<LogonCount>1</LogonCount>
<Username>Username</Username>
</AutoLogon>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Work</NetworkLocation>
<SkipUserOOBE>true</SkipUserOOBE>
<SkipMachineOOBE>true</SkipMachineOOBE>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
<UserAccounts>
<LocalAccounts>
<LocalAccount wcm:action="add">
<Password>
<Value>password</Value>
<PlainText>true</PlainText>
</Password>
<Description></Description>
<DisplayName>Username</DisplayName>
<Group>Administrators</Group>
<Name>Username</Name>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
<RegisteredOrganization>Company Group</RegisteredOrganization>
<RegisteredOwner>admin</RegisteredOwner>
<DisableAutoDaylightTimeSet>false</DisableAutoDaylightTimeSet>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<Description>SetupComplete</Description>
<Order>1</Order>
<CommandLine>C:\Windows\Setup\Scripts\SetupComplete.cmd</CommandLine>
<RequiresUserInput>false</RequiresUserInput>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Description>Control Panel View</Description>
<Order>2</Order>
<CommandLine>reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v StartupPage /t REG_DWORD /d 1 /f</CommandLine>
<RequiresUserInput>false</RequiresUserInput>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Description>Control Panel Icon Size</Description>
<Order>3</Order>
<CommandLine>reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v AllItemsIconView /t REG_DWORD /d 1 /f</CommandLine>
<RequiresUserInput>false</RequiresUserInput>
</SynchronousCommand>
</FirstLogonCommands>
<TimeZone>W. Europe Standard Time</TimeZone>
</component>
</settings>
</unattend>

To remove any Windows 10 Apps except Store and Calculator i use:

Get-AppxPackage -AllUsers | where-object {$_.name –notlike “*store*” -And $_.packagename –notlike “*culator*”} | Remove-AppxPackage
Get-appxprovisionedpackage –online | where-object {$_.packagename –notlike “*store*” -And $_.packagename –notlike “*culator*”} | Remove-AppxProvisionedPackage -online

Download latest Windows 10 Pro OEM ISO by MS MEdia Creation Tool
Install it to a VM (i use Virtual Box)
After first reboot when the assistant ask you for express settings or with 1703 the inital language question goto admin mode with pressing STRG (CTRL) + SHIFT +F3
When entering the Admin mode close the Sysprep Window and start customizing windows and install your software and do your tweaks
Now to sysprep i use the following Script:

@echo off
delprof2 /q /id:retsch /i
NET USER retsch /DELETE
powercfg -h off
rem C:\Support\Tools\Shutup\OOSU10.exe ooshutup10.cfg /quiet
del /F c:\windows\system32\sysprep\panther\setupact.log
del /F c:\windows\system32\sysprep\panther\setuperr.log
del /F c:\windows\system32\sysprep\panther\ie\setupact.log
del /F c:\windows\system32\sysprep\panther\ie\setuperr.log
del /F "C:\Program Files (x86)\FOG\fog.log"
del /F "C:\Program Files (x86)\FOG\token.dat"
rem "C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe"
copy SetupComplete.cmd C:\Windows\Setup\scripts\ /Y
copy unattend.xml C:\Windows\System32\Sysprep /Y
reg import C:\Support\Tools\ResetERAgentUUID.reg
net stop FOGService
sc config FOGService start= disabled
sc config EraAgentSvc start= disabled
cleanmgr /sagerun:1
defrag c:
c:\windows\system32\sysprep\sysprep.exe /oobe /generalize /shutdown /unattend:c:\windows\system32\sysprep\unattend.xml

My SetupComplete.cmd look like:

del C:\Windows\System32\Sysprep\unattend.xml
sc config FOGService start= auto
net start FOGService
del C:\Windows\Setup\Scripts\SetupComplete.cmd

After executing this Windows will be sysprepped and shutdown after that, you can image now
When i need to rework that image i deploy it to a vm again and use the following to enter audit mode again:

@echo off
c:\windows\system32\sysprep\sysprep.exe /audit /reboot

If anyone is asking himself what i do with:

delprof2 /q /id:username /i
NET USER username /DELETE

This deletes the user i create with unattend.xml to workaround the problem with setupcomplete.cmd, i use firstlogoncommands to execute the script when the first user logon happens, to clean this i remove the profile and username before i sysprep because the user will be recreated from unattend.xml, as you can see in the unattend.xml there is 1 autologon for that user, else setupcomplete.cmd will not be executed.

The good thing is this user can persist on the machine after deployment because it’s our local admin account on that machine additional to the locked local admin account.

The System will automatically reboot when fog client has joined the machine into the domain, so the machine will finish with a logon screen not with a logged in user

Good luck

Regards X23

x23piracy

@captjoekpr http://stackoverflow.com/questions/19322345/how-do-i-change-the-default-index-page-in-apache

x23piracy

Hi,

try this style:

FOR /F "tokens=4 skip=3" %%i IN ('REG QUERY "HKLM\Software\Firma\Produkt" /ve') DO SET Pfad=%%i```

x23piracy

@Joe-Schmitt when i try to access fog (ootb) via https i get:

alt text

x23piracy

Hi,

is this planned for 2.0?

Regards X23

x23piracy

Hi,

there are popular tools out there, PDQ Inventory or Spiceworks that can extract the Windows Keys from the Registry.
Is there a way to extend the FOG Client to read the Keys and Report it back to FOG so it can add it automatically to the host?

Maybe the popular tool Produkey from Nirsoft can be used for this: http://www.nirsoft.net/utils/product_cd_key_viewer.html

ProduKey.exe /WindowsKeys 1 /OfficeKeys 0 /IEKeys 0 /SQLKeys 0 /ExchangeKeys 0 /ExtracEdition 0 /sjson key.json

[

{
"Product Name":"Windows 10 Pro",
"Product ID":"00330-80000-00000-AA447",
"Product Key":"XXXXX-XXXXX-XXXXX-XXXXX-XXXXX",
"Installation Folder ":"C:\\Windows",
"Service Pack":"",
"Computer Name":"XXX",
"Modified Time":"10.03.2017 17:05:21"
}

]

FOG Client, could check this once a day and report the product key back to the fog db.

Could be really useful when updating older Windows 7 Clients to Windows 10, i could rollout the FOG Client to that machines for example with PDQ Deploy, then i will recieve current Windows 7 Key and can Deploy Windows 10

I have also a binary to read out the Windows 8/8.1/10 key from bios: http://xup.in/dl,10366557

I am using it with the following script to deploy it as snapin, that way all bios embedded keys will be activated after deployment

@echo off
for /f "tokens=*" %%i in ('%cd%\oemkey') do set oemkey=%%i
cscript %systemroot%\system32\slmgr.vbs /ipk %oemkey% >nul
cscript %systemroot%\system32\slmgr.vbs /ato >nul
exit

Alternative with Administrative Powershell (only BIOS Keys):

(Get-WmiObject -query 'select * from SoftwareLicensingService').OA3xOriginalProductKey

Regards X23

x23piracy

Hi,

what if i install certbot and create a ssl certificate and force http > https,
i guess this will mess everything up? What about Storage Nodes? @tom-elliott @george1421 @Wayne-Workman

The FOG Client is using its own certificate so that communication is separated from the webif itself but i really would like to know if this will work? Which Communication is been done between the FOG Server and its Storage Nodes over http?

x23piracy

https://blog.mozilla.org/security/2017/01/20/communicating-the-dangers-of-non-secure-http/

enter about:config into the firefox address bar (confirm the info message in case it shows up) & search for the preference named security.insecure_field_warning.contextual.enabled. double-click it and change its value to false.

What about SSL support?

x23piracy

Why do need to boot from usb stick? There is a usb network card available that supports pxe.
here: https://forums.fogproject.org/post/84600

x23piracy

Hi,

i hardly recommend PDQ Deploy for easy deployments if you hate GPO’s
Also the way with ORCA is possible but for what you have a switches for cli.

alt text

I have it licensed to pro mode but simple deployments can also be done in free mode.
PDQ Deploy is very powerful, take a look

PDQ has AD integration and can also suck hosts from Spiceworks.

Regards X23

x23piracy

apache log?
try to rerun the installer, does it help?

Regards X23

x23piracy

@Wayne-Workman said in Image pulling location displayed:

They said they are currently working on release 0.3.x and once this is done, they can look into this feature request.

Lovely

x23piracy

@Tom-Elliott said in Images From 1.2 not working on 1.3:

@x23piracy no touching MBR.

do you have an idea while reading through that thread? the encryption software is maybe the prob?
@Grizzly could you compare partition layouts between working and not working after deployment?

x23piracy

@Grizzly said in Images From 1.2 not working on 1.3:

Sorry. I’ll try to provide some more information. The picture attached is what it says when it’s done imaging. After that it reboots but tries to load our encryption software which isn’t apart of the base images. After it tries to load the encryption software the computer just reboots.

ok and that worked before? the only difference is the fog version?
have you changed from bios to efi or vice versa?
@tom-elliott is fog in newer versions > 1.2.0 touching the mbr in some way?

Regards X23

x23piracy

@bootsnspurs said in Trying to add clonezilla to PXE Menu!:

@george1421 This code worked for me. Thank you.

Thanks Tom also.

please mark as solved

x23piracy

old but maybe still working
https://forums.fogproject.org/topic/1811/how-to-setup-a-fog-storage-node-without-installing-fog

x23piracy

Hi,

if you say they complete, what are the computer is doing after they reboot after imaging? Do you see an os loading screen? Bluescreen? What happens more details please. Have you been sitting in front of one of the computers you tried to deploy?

Regards X23

x23piracy

Server

FOG Version: RC10

Hi,

i need the ability to create an image from a machine and then the user should deploy that when ever he wants by simple booting from network a choose the image from the quick image entry but fog is showing all images to the client.

Is there a way to only show one specific image to a specific client?

If possible without any logon to an advanced menu or something, if that is not possible i can create a fog mobile account.
Currently the client is a registered host, if possible i would also like to have that without registered host.

Regards X23

x23piracy

@PDQ i love your employers, drinking at work are you even allowed to smoke? Do you have jobs to offer?.. just joking