CustomSettings.ini Issue

Question

All,
Here is a customsettings.ini file I have been working on.  We would like the two laptops to be encrypted using bitlocker and then to store the code in AD, however I keep getting the bitlocker wizard window appear for all 4 machines when going through
the initial wizard and it is set to the default of not encrypting.  Can anyone advise as to where I am going wrong with this.
[Settings]
Priority=TaskSequenceID, Default
Properties=MyCustomProperty
[001]
DriverGroup001=Lenovo_M73
DriverSelectionProfile=nothing
BDEInstallSuppress=YES
SkipBitLocker=YES
[002]
MandatoryApplications001={77d768d5-2fcf-46f7-9c45-bc2b5527753f}
DriverGroup001=Dell_E6440
DriverSelectionProfile=nothing
BDEInstallSuppress=NO
BDEDriveLetter=S:
BDEDriveSize=300
BDEInstall=TPM
BDERecoveryKey=AD
[003]
DriverGroup001=Optiplex_7010
DriverSelectionProfile=nothing
BDEInstallSuppress=YES
SkipBitLocker=YES
[004]
DriverGroup001=Lenovo_T440
DriverSelectionProfile=nothing
BDEInstallSuppress=NO
BDEDriveLetter=S:
BDEDriveSize=300
BDEInstall=TPM
BDERecoveryKey=AD
[Default]
OSInstall=Y
SkipCapture=NO
SkipAdminPassword=YES
SkipProductKey=YES
SkipApplications=YES
SkipComputerBackup=NO
SkipLocaleSelection=YES
UILanguage=en-US
InputLocale=en-GB
SystemLocale=en-GB
UserLocale=en-GB
KeyboardLocale=en-gb;0809:00000809
SkipTimeZone=YES
Timezone=085
Timezonename=GMT Standard Time
SkipUserData=YES
_SMSTSORGNAME=xxxxxxxx
Administrators001=xxx.xxxxx\Domain Admins
SkipDomainMembership=NO
MachineObjectOU=OU=BitlockerTestMachines,OU=computers.hdc,DC=xxxx,DC=xxxxx
JoinDomain=xxxxx.local
DomainAdmin=xxxxxxx
DomainAdminPassword=xxxxxx
DomainAdminDomain=xxx.xxxxx
MandatoryApplications001={fdd87302-919c-466a-ab6b-75f1bbd63a9d}
MandatoryApplications002={84a4267e-3fd5-4596-a2b2-f9d7540e1fce}
MandatoryApplications003={d807ab54-ab4d-4125-8d43-c6256398e6c4}
WSUSServer=http://WSUS3:8530
 Many Thanks

Answer 1

I don't typically recommend putting specific settings keyed off of TaskSequenceID for the reasons you are coming across now. Instead I recommend working around the issue.
See Johan's Guide:
http://www.deployvista.com/tabid/36/EntryID/139/language/en-US/Default.aspx
For your specific question, there are two options:
1. Add a step into the task sequence to import settings from a specific ini file per Task Sequence:
    cscript.exe %scriptRoot%\ztigather.wsf /LocalOnly /inifile:%scriptRoot%\..\control\%TaskSequenceID%\MyCS.ini
2. Additionally, when I want to *force* custom settings for form factor type I've used the following:
[Settings]
Priority=UUID, Role, Default
[Default]
SubSection=ISVM-%ISVM%-%ISLaptop%
[ISVM-True-False]
; Bitlocker is not supported on Virtual Machines
SkipBitlocker=YES
OSDBitLockerMode=NONE
BdeInstallSuppress=YES
[ISVM-False-False]
; Desktops are not required to have bitlocker
OSDBitLockerMode=NONE
BdeInstallSuppress=NO
[ISVM-False-True]
; Laptops are required to have bitlocker TPM + Pin
OSDBitLockerMode=TPM
BdeInstallSuppress=NO
Keith Garner - keithga.wordpress.com