Frequently Asked Questions

« Previous
How do I configure IPMI for remote management?
Next »
What do the different symbols in BlueCat mean?

windows ubuntu macos xibo network zenworks android storage



34. How does the reinstallation of Windows computers work at BMC-IT?

See also: What is the BMC-IT computer platform and how does it work?

These are instructions for installing Windows 7/8.1/10 x64 Enterprise via MDT 2013.

  1. Prepare installation
    1. Create USB flash drive
    2. Configuration for network boot
    3. Configuration of router filter
    4. Permissions for autojoin domain
    5. Hardware support
  2. Configure BIOS
  3. Starting install via USB flash drive
  4. Starting install via network
  5. Clearing partitions
  6. Continue with installing
    1. Select task sequence
    2. Fill in computer name and join domain
    3. Select applications
    4. Wait while installing
    5. Administrator password

Prepare installation

Create USB flash drive

  1. Get access to the installation directory through User-AD group bmc-autoadmin-group. Mail a mail to BMC-IT (helpdesk@bmc.uu.se) with your username and what you want.
  2. Get one or several 32 GB USB flash drives.
  3. Login on a Windows 10 machine with USB-ports as administrator.
    IMPORTANT: DO NOT HAVE A NETWORK DRIVE MAPPED TO G: H: I: OR J:!
  4. Insert the USB flash drives (max 4 at the same time) in Windows 7 machine.
  5. Start a command prompt as administrator cmd (use CTRL and SHIFT to run as administrator from the prompt in the start menu)
  6. Run command: net use n: \\uuit-nasutus.its.uu.se\BMCIT-Common /user:user\account and login using your university account and password A.
  7. Run command: \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\scripts\MDT_FormatUSB.cmd \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\MDT-MediaMT

    This will format and erase all USB flash drives inserted in machine!

  8. Wait a long time. The faster the USB flash drives the better.
  9. Done!

Update USB flash drive

  1. If you already have done the above steps on a USB flash drive, you can choose to only update the USB flash drive by running command: \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\scripts\MDT_FormatUSB.cmd \\uuit-nasutus.its.uu.se\BMCIT-Common\MDT\MDT-MediaMT sync
    This will not format, just update the sticks with changed files.

Configuration for Network boot

For Windows DHCP it looks like this:


For ISC dhcpd it looks like this: from dhcpd.conf (this is using the central tftp.its.uu.se server)

 filename "bmc/pxelinux.0";
 next-server "130.238.7.37";
/tftpboot/pxelinux.cfg/default (already done)
PROMPT 1
TIMEOUT 100
DEFAULT l
DISPLAY msgs/boot.msg

LABEL l
      MENU LABEL ^Local Boot (default)
      LOCALBOOT 0

LABEL mdt
  MENU LABEL Windows MDT LiteTouchPE x64
  KERNEL memdisk
  APPEND iso initrd=LiteTouchPE_x64.iso raw

/tftpboot/msgs/boot.msg (already done)
Displaying tftp://tftp.its.uu.se/bmc/msgs/boot.msg from 130.238.7.37

 l        Local Boot (default)
 mdt      Windows 7 Enterprise x64 (LiteTouchPE x64 MDT)

Pxelinux is coming from syslinux.org. It is included in most Linux-distributions.

The LiteTouchPE_x86.iso is located at \\BMCIT-Common.files.its.uu.se\BMCIT-Common\MDT\Boot\LiteTouchPE_x64.iso

Configuration of router filter

TFTP is using UDP. The request to the TFTP-server is sent on port 69/udp from any port. The TFTP-server at tftp.its.uu.se (130.238.7.37) is using UDP source ports 6900-6999 for responding.

Open up UDP, both directions, from host 130.238.7.37 to your clients. Usually this is all of your subnets. Send a request for this to netsupport@its.uu.se.

Permissions for autojoin domain

The account USER\bmc-autoadmin-mdt must at least have permission to Create Computer objects in the correct OU to be able to join automatically.

Hardware support

MDT 2013 based on Windows 10 have these requirements:

  • 64-bit CPU
  • 4 GB RAM recommended. It may work with 2 GB RAM but very slow.
  • Support for the PrefetchW-feature in the CPU.

Microsoft has for Windows 8.1 dropped support for CPUs without the PrefetchW-feature. This includes the Pentium D 8xx CPUs hich are used in for example many Dell Optiplex GX620 desktops. So even if they have 4 GB RAM they cannot run the installation.

Some other Dell Optiplex with the slightly faster Intel Pentium D 9xx are working fine.

Check model with wmic csproduct get vendor, version

Configure BIOS

  1. Press F12 or F10 or whatever to enter BIOS. It depends on the computer model.

  2. To use UEFI-mode and install from USB flash drive, select:
    - Secure boot: OFF
    - SATA mode: AHCI (not RAID)
    - UEFI boot order: Deselect USB flash drive

  3. To use Legacy-mode and install from network, select:
    - Legacy option ROMs: ENABLED
    - Secure boot: OFF

Starting install via USB flash drive

  1. Press F12 or F10 or whatever it is to be able to select boot source. It depends on the computer model.
  2. Choose to boot via USB. Some older machines might be limited to boot from an USB2-port. USB3 might not work on older machines.
  3. Continue with installing.

Starting install via network

  1. Press F12 when starting machine to boot via Network. If the Network adapter do not show PXE-booting may have to be enabled in BIOS.
  2. Choose MDT-server by typing M D T M T and pressing ENTER

  3. This will boot the netinstallation ISO over TFTP.
    If it do not work, boot via USB flash drive instead.
  4. Enter your username and password A to connect to network share. (Use your normal username and not _username) If you do not have access, ask helpdesk@bmc.uu.se to add you to the group USER\bmc-autoadmin-mdt which will grant you read-only access.

  5. Continue with installing.

Clearing partitions

If the installation stops because of a previous installation attempt or if something else is weird with the partition table, previously created partitions may be cleared manually.
  1. Press F8 during installation to start a command prompt
  2. diskpart
  3. sel dis 0
  4. cle
  5. exit
Diskart can also be used for unmounting a drive:
  1. Press F8 during installation to start a command prompt
  2. diskpart
  3. list volume
  4. sel dis 0
  5. remove all dismount
  6. exit

Continue with installing

  1. Select task sequence:
    • W10E is the normal Win10 Enterprise x64 deploy.

  2. Fill in computer name. The new computer name standard is first three letters for institution, then a dash and the computer serial number. The serial number is automatically read from the computer BIOS.
    USER\bmc-autoadmin-for-mdt must be given privileges to create new computer accounts in the USER-AD.

  3. Select what applications or other packages to install during installation:

  4. Wait up to two hours, but normally 20-30 minutes while the computer is running MDT for installing OS and applications.
  5. For computers in USER-AD at BMC the local administrator password is set by a GPO to a unique hash for each computer. Any locally set password will be overwritten.

    Without the GPO SetLocalPassAsMD5 the password will be set to bytgenast which means that you are responsible to CHANGE PASSWORD when the installation is done.

    Currently the algorithm looks like this: The serial number is upper case, cut to 11 characters, and padded by zeroes until 12 characters length, and then a secret password is added. The following works at the command line at macOS or Linux to create the password.

    macOS:

    echo -n SERIAL000000SECRET | md5 | head -c 12

    Scientific Linux, Ubuntu etc:

    echo -n SERIAL000000SECRET | md5sum | head -c 12




 

This entry mdt was last modified 2018-03-16

   

This documentation is covered by GNU Free Documentation License.