WDS Autoapprove question

Hye boys and girls,

I've been in the process of testing WDS for future enrollment throughout our infrastructure. At present i ahve everything working the way i want it, image done, answer file done all applicatione etc working when dragging images down etc etc

I have it set to ask for admin approval on unknown devices , so when pxe booting i have to approve / deny the device that is trying to request use of the wds server... once a laptop has been approved and added to AD all future attempts PXE booting are automatically approved. i would like this to not approve any devices even ones approved in the past. I have used the WDSUTIL /Delete-autoadddevices /devicetype:approveddevices to delete records within the database of past approved devices however the device is still in AD and will therefore still be approved.. if i delete the device from AD it will then ask for approval again.

In my current enviroment if i was to enrol this out to our domain, all computers would have a computer in AD already so would automatically approve should a user plug his laptop into the network and pxe boot.. i would like it to ask for approval even though they are in AD. is there a way to do this?

I have thought of putting permissions onto the images so that only domain admins are authorised to use them, then when we need to use the wds server to wipe and load a users computer add them to the permissions for the time of the deployment or have reject all devices set, and change this to accept approved devices when the deployment is needed. but would be great if we could get it to just ask for approval everytime anyone tries to connect being within AD or not.

Thanks for any comments / suggestions

Continue reading...