Jump to content

<COPYPROFILE> and network accounts....


Guest ji3yrd

Recommended Posts

Guest ji3yrd

Using a newly installed OS, I've customized a default profile using the Administrator account and used the <copyprofile> in sysprep to successfully move it over to the Default user account. I then moved forward and added the machine to the domain to log on as a domain admin account used to create images - our "Image" account. From there, I connected to the network resources to add what needed to be added and then removed the machine from the domain and logged into the Administrator account.... here is where I think I am running into an issue. When the machine is joined to the domain, the default domain policy changes the Administrator account to another name. This is done for security and uniformity throughout the organization for desktops and servers alike and cannot be changed. I believe that it is this step that is throwing me the curve ball. When I run my unattend.xml that copies the profile, I now get an error during the specialized pass (as per the error). I'm using the same xml as the first time around with rearm value set to 1. The only thing that is different that I can think of is the following:

1. The "Image" account has been deleted from the Users folder.

2. It was joined and disjoined from the domain.

3. The Administrator account name was changed, but the account folder in Users is still "Administrator" as well as other registry entries.

<?xml version="1.0" encoding="utf-8"?>

<unattend xmlns="urn:schemas-microsoft-com:unattend">

<settings pass="specialize">

<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<RunSynchronous>

<RunSynchronousCommand wcm:action="add">

<Order>1</Order>

<Path>net user administrator /active:yes</Path>

</RunSynchronousCommand>

</RunSynchronous>

</component>

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<Themes>

<DesktopBackground>c:\corpsoft\pra.bmp</DesktopBackground>

<ThemeName>pra</ThemeName>

<DefaultThemesOff>false</DefaultThemesOff>

</Themes>

<CopyProfile>true</CopyProfile>

<TimeZone>Central Standard Time</TimeZone>

<DoNotCleanTaskBar>true</DoNotCleanTaskBar>

<ComputerName> </ComputerName>

</component>

</settings>

<settings pass="oobeSystem">

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<AutoLogon>

<Password>

<Value>TgAwAHQANgA0AGIAMQB0ACEAUABhAHMAcwB3AG8AcgBkAA==</Value>

<PlainText>false</PlainText>

</Password>

<Enabled>true</Enabled>

<LogonCount>1</LogonCount>

<Username>Administrator</Username>

</AutoLogon>

<OOBE>

<HideEULAPage>true</HideEULAPage>

<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>

<NetworkLocation>Work</NetworkLocation>

<ProtectYourPC>3</ProtectYourPC>

</OOBE>

<UserAccounts>

<AdministratorPassword>

<Value>TgAwAHQANgA0AGIAMQB0ACEAQQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>

<PlainText>false</PlainText>

</AdministratorPassword>

<LocalAccounts>

<LocalAccount wcm:action="add">

<Password>

<Value>TgAwAHQANgA0AGIAMQB0ACEAUABhAHMAcwB3AG8AcgBkAA==</Value>

<PlainText>false</PlainText>

</Password>

<Description>placeholder admin account</Description>

<DisplayName>sysprep</DisplayName>

<Group>users</Group>

<Name>sysprep</Name>

</LocalAccount>

</LocalAccounts>

</UserAccounts>

<ShowWindowsLive>false</ShowWindowsLive>

<DoNotCleanTaskBar>true</DoNotCleanTaskBar>

</component>

<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<InputLocale>en-us</InputLocale>

<SystemLocale>en-us</SystemLocale>

<UILanguage>en-us</UILanguage>

<UILanguageFallback>en-us</UILanguageFallback>

<UserLocale>en-us</UserLocale>

</component>

</settings>

<settings pass="generalize">

<component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<SkipRearm>1</SkipRearm>

</component>

</settings>

<cpi:offlineImage cpi:source="catalog:d:/sources/install_windows 7 enterprise.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

</unattend>

 

Continue reading...

Link to comment
Share on other sites

  • Replies 0
  • Created
  • Last Reply

Popular Days

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


×
×
  • Create New...