Troubleshoot Operating System Deployment

Operating System Deployment (OSD) is a very commonly used feature of Configuration Manager. It provides administrators with the necessary tools to create operating system images that can be deployed to computers. OSD troubleshooting can be a complicated process. There are so many different components and technologies working together to provide the solution:

  • Windows Automated Installation Kit (AIK)
  • Windows Assessment and Deployment Kit (ADK) (replacement for AIK)
  • Microsoft Deployment Toolkit (MDT)
  • Windows Deployment Services (WDS)
  • TCP/IP Networking

Network installation of OS images is a very popular deployment method. It leverages Windows Deployment Services and ADK to provide a Pre-Execution environment, which allows for remote deployment of Windows images. Technicians press F12 to initiate the deployment. It's very common to use the concept of Unknown Computers to support bare metal deployments. When you enable unknown computer support, any unknown computer can PXE boot and deploy the OSD image (note that it is useful to protect this feature with a password). If you disable this option, you can use Import Computer Information to prestage your computer for the OS deployment. OSD can be difficult to implement and there is a lot that can go wrong.

Troubleshooting steps

As previously stated, this is a complicated process. It is impossible to include all scenarios and error codes that you might encounter. Details of some useful troubleshooting steps are provided in the following table. Further details are provided in the following sections:

Component

Troubleshooting Step

IP Helper/DHCP Options

PXE broadcasts are not routable. If the client and PXE-enabled DP are on different subnets, you must have a method to route the PXE requests to the DP. Have you configured a solution? IP Helpers are the preferred and Microsoft-supported method. See the IP Helper/DHCP options section in this chapter for more details.

Network Access Account

You must configure a network access account to use OSD in Configuration Manager. Clients use this account when they access a DP to download content required for a task sequence.

If you did not configure a Network Access account, you might see the following error: 0x80070002 = The system cannot find the file specified.

Task sequence log files

SMSTS.log records all the task sequence activity on the client and is the first place to look for information.

Note that you will find this log file in different locations depending on the stage of the process.

  • WinPE, before Hard Disk Drive format: X:WindowsTempSMSTSLog
  • WinPE, after HDD format: C:\_SMSTaskSequenceLogs
  • Full OS, after Configuration Manager agent installed: C:WindowsCCMLogsSmstslog
  • Full OS, task sequence complete: C:WindowsCCMLogs
  • Setupact.log is the Windows installation log file. It can help you to troubleshoot installation failures. The file is located on the client (C:Windowspanther).
 

By default, the maximum size of SMSTS.log file is 1 MB. Use the SMSTS.ini file to increase the LogMaxSize parameter. Then use DISM to add the SMSTS.ini file to the boot image.

 

Note that CMTrace is now included in the Configuration Manager boot images. You can use it to easily read log files while in Windows PE.

Status messages

See detailed task sequence steps through queries or reports. The following reporting categories are available using the Monitoring workspace of the console:

  • Task Sequence—Deployment Status
  • Task Sequence—Deployments
  • Task Sequence—Progress
  • Task Sequence—References

See the Task Sequence Reports section in this chapter for more details.

Boot image

Modify the properties of your boot images to enable command support. This allows you to use F8 to open a command shell at any time during the task sequence, including while in Windows PE. Note that this should be for testing only as it is considered a security issue in production.

 

The OSDImageproperties.log file records activity and changes to boot images.

 

Both x86 and x64 boot images must be available on the PXE-enabled DP(even if one of them is not required for your task sequences).

 

Have you selected Deploy this boot image from the PXE-enabled distribution point in the Data Source tab of the boot image properties? This is required for both x86 and x64 boot images.

Target computer

Note that it may be necessary to access the BIOS and enable PXE support for the Network Interface card.

 

Verify network connectivity using the ipconfig command (use F8 in Windows PE). Did the computer receive an IP address? Can you ping the Primary Site Server and DP?

 

If the target computer does not have network connectivity, you will most likely have to import the network interface card driver into the Configuration Manager catalog and add the driver to the boot image. See the Network Interface Card driver section in this chapter for more details.

 

Examine the SMSPXE.log (found on DP) file for a client request from the MAC address of your test computer. Verify that the computer receives a boot image.

PXE error

Failed To Download Policy (Code 0x80004005). The PXE certificate stored in the Configuration Manager site database may have been expired. The Time and Date settings of the computer (BIOS) may be incorrect.

Drivers

You can find activity relating to updating or importing drivers in the Drivercatalog.log file.

Unknown computers

Are you are deploying OS to unknown computers? Have you enabled Unknown Computer Support on the DP? Search for duplicate MAC addresses.

 

The computer receives the PXE boot file: abortpxe.com error message. This means that there is no task sequence deployment for that device. Possible reasons:

  • You haven't deployed a task sequence to Unknown Computers.
  • You had a previous failed attempt and the computer is now Known. Delete Unknown computers from All Devices.
  • Check for duplicate computers (report).
  • Duplicate SMBIOS GUID (see the Duplicate SMBIOS GUID section in this chapter).

Task sequence

When you deployed the task sequence, did you make the deployment available to PXE (this is not the default option)?

 

Check the References tab—is all content available on the DP?

 

Verify that you are correctly partitioning the disk and that you are applying the OS image to the correct partition.

0x80070070 = There is not enough space on the disk

This is a common error and it can mean that you are trying to deploy the Windows image to the incorrect partition.

WDS issues

The WDS Server service may not be started (see the Windows Deployment Services issues section in this chapter).

OS deployed to D: drive

Add the OSDPreserveDriveLetter variable with the value False before the Apply Operating System task.

MDT integration

Additional server logging features are available (for example, SLShare, which copies log files centrally to a fileshare).

 

Enable real-time monitoring of deployments.

Offline servicing

Offline servicing allows you to inject updates into an OSD image file. Servicing activity is recorded in the OfflineServicingMgr.log file.

IP Helper/DHCP options

Often you have to configure the environment to allow administrators to install operating systems on computers across the network. You need some means of allowing these computers to network boot by downloading boot images from a PXE-enabled DP(WDS server). This is easy if the computer and the WDS server are on the same subnet. The computer automatically finds the WDS server and downloads the boot image. However, the solution has to be configured to work when the computer and the WDS server are on different subnets. Some of this configuration is beyond the remit of the Configuration Manager administrator and should be carried out by the Network Administrator.

DHCP options 66 and 67 can be configured so that a PXE client can locate the WDS server and boot images. This allows a computer to boot into Windows PE. Options 66 and 67 can be configured at the server or individual scope level.

  • Option 66 is configured with the name or IP address of the WDS server.
  • Option 67 is configured with a filename (SMSBootx64wdsnbp.com).

However, the fact that DHCP options can only be configured to find a single file can cause issues in certain cases, especially with newer Unified Extensible Firmware Interface (UEFI) computers. DHCP options are not recommended for this and other reasons. Other reasons include:

  • Configuring an IP Helper on a router or layer 3 switch provides a much more reliable solution than using DHCP options.
  • Using DHCP options prevents load balancing via multiple WDS servers.
  • DHCP options can be configured with only a single WDS server. There is no possibility of a highly available solution.
  • Clients may bypass the Windows Deployment Services answer settings.

IP Helpers (this is a Cisco term) are a much better solution to configure for network installations. They are also very easy to configure. It's quite possible that you already have IP Helpers in your network to relay DHCP requests to the DHCP server on a different subnet.

Following is an example of an IP Helper configuration on a layer 3 Cisco switch:

interface Vlan10
ip address 172.16.112.254 255.255.255.0
ip helper-address 172.16.1.1
End

This allows PXE requests from client computers in 172.16.112.0/24 subnet to find the PXE-enabled DP (172.16.1.1). See that the one-filename limitation does not apply here.

Network Interface Card drivers

You've tried to network boot a computer but you are unable to receive an IP address. It's likely that you will need to import a Network Interface Card driver for this computer into Configuration Manager and add this driver to the boot images. But what driver do you need to import?

The driver should be based on the installed WinPE version (which is based on the AIK/ADK version), regardless of what operating system you want to deploy.

WinPE version

AIK/ADK version

NIC driver equivalent

3.0

WAIK 2.0

Windows 7

3.1

WAIK Supplement for W7 SP1

Windows 7 SP1

4.0

ADK 8.0

Windows 8

5.0

ADK 8.1

Windows 8.1

5.1

ADK 8.1 with update

Windows 8.1 update

10.0

ADK 10

Windows 10

Finding the right NIC driver can be a trial and error process. It's better to be sure that it will work before you import and add to the boot image. Use drvload.exe while in Windows PE to test the driver. After you add the driver, use ipconfig to verify IP addressing and test connectivity using PING.

An example of drvload syntax is as follows:

  • drvload.exe E:NICmynic.inf (DRVLOAD tool temporarily adds this driver from flash drive to the WinPE boot image)
  • drvload.exe /? (displays usage information)

When you are satisfied that you have the correct driver, you can import to Configuration Manager and add to boot images.

Note

Remember that only mass storage and network interface card drivers should be added to boot images.

Duplicate SMSBIOS GUID

If your solution supports Unknown Computers and there is no deployment available for your bare metal deployment, it could be that some of your new computers have duplicate SMSBIOS GUIDs. This GUID is configured by the vendor. If you have duplicates, you should contact the vendor for support. They may be able to provide you with a tool to reset the GUID.

You could also apply a registry change (BannedGuids) to your WDS server to prevent the detection of the duplicate GUIDs. This is not officially supported and would not be the preferred method of resolving this problem:

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWDSServer
ProvidersWDSPXE]
Value: BannedGuids
Type: REG_MULTI_SZ
Data: <The duplicate GUIDs>

Windows Deployment Services issues

WDS is automatically installed when you enable PXE on a DP in Configuration Manager 2012. You can install WDS in advance of enabling PXE but you should not configure it. Configuration Manager will configure PXE for you. This is a common mistake.

On occasions, the WDS Server service will not start. It may be necessary to disable PXE and uninstall WDS as follows:

  1. Disable PXE on the DP.
  2. Verify that WDS has been automatically uninstalled.
  3. Reboot the server to complete the WDS uninstall.
  4. Delete the RemoteInstall folder.
  5. Delete all files from the C:WindowsTemp folder.
  6. Enable PXE on the DP.
  7. Verify that WDS has been automatically installed.
  8. Reboot the server to complete the WDS installation.
  9. Verify that the RemoteInstall folder exists and that the smsboot folder is populated.
..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.224.62.105