PXE and MDT

I am trying to get PXE to find my WDS server and having a tough day. My DCHP server and WDS are separate boxes but on the same subnet. I have added the options in the DCHP for 66 and 67 and also ensured WDS is listening for all requests. I
also added the lite touch images and still the machines are not picking up the boot sequence.
Any one have an idea.

Also just to answer the laptop is picking up the DHCP server just fine, just cant get to the image. Ensured WDS is on and started as well.

Similar Messages

I can not install Waik and mdt on server 2012 so that i can deploy windows 7 please may you help me?

i can not install Waik and mdt on server 2012 so that i can deploy windows 7 on target machine, i have downloaded mdt Waik i got error saying you must install frame 2.0 which needs also adk windows 8. i am using hyper machine.
thank you

Hi Warsame12,
It is worth mentioning that don’t use IPV6 PXE, Windows 7 doesn’t support WDS 2012 deployment over IPv6 PXE. If IPv6 PXE boot is enabled and a
Windows 7 installation is selected, a blank screen will appear and Setup will not run.
The related KB:
Windows 7 client deployment over IPv6 PXE network boot does not work.
http://support.microsoft.com/kb/2803741
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Deploy UDI Windows 10 with SCCM 2012 R2 and MDT 2013 Update 1

Hi,
Trying use "User-Driven Installation" with
SCCM 2012
R2 CU4 and MDT
2013 Update 1 for deploy Windows
10.
Created MDT Task Sequences with
template "Client Task sequence"
and Deployment Method "User-Driven Installation".
When I try to deploy I have error like:
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Part smsts.log
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Expand a string: WinPEandFullOS TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: smsswd.exe /run: cscript "%deployroot%\scripts\ztierrormsg.wsf" TSManager 22.04.2015 11:36:57 1160 (0x0488)
[ smsswd.exe ] InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
PackageID = '' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
BaseVar = '', ContinueOnError='' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ProgramName = 'cscript "C:\_SMSTaskSequence\WDPackage\scripts\ztierrormsg.wsf"' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
SwdAction = '0001' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Set command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Working dir 'not set' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Executing command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft (R) Windows Script Host Version 5.12 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Copyright (C) Microsoft Corporation. All rights reserved. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft Deployment Toolkit version: 6.3.8216.1000 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
The task sequencer log is located at X:\WINDOWS\TEMP\SMSTSLog\SMSTS.LOG. For task sequence failures, please consult this log. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the action: Error in the task sequence.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionRetCode=5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 22.04.2015 11:36:57 1160 (0x0488)
Clear local default environment TSManager 22.04.2015 11:36:57 1160 (0x0488)
Let the parent group (Gather Logs and StateStore on Failure) decides whether to continue execution TSManager 22.04.2015 11:36:57 1160 (0x0488)
The execution of the group (Gather Logs and StateStore on Failure) has failed and the execution has been aborted. An action failed.
Operation aborted (Error: 80004004; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: X:\WINDOWS\system32\cmd.exe /k TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
The command completed successfully. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
Successfully launched command shell. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)

MDT Updates for Windows 10 Technical Preview Build 10041
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Пометить как ответ".
http://zalozny.com.ua

Sccm 2012 migration and MDT

In our current environment we have sccm 2007 and MDT 2013 separate to deploy workstation OS images. We have MDT just referencing SCCM package ID's (package path on the DP) to install applications during the build process.
We are currently migrating to SCCM 2012 and because the DP folder structure has changed now - i.e. 'SCCMContentLib' can we still use MDT separately and reference the 'DataLib' directory in MDT or is the best option to fully integrate MDT in SCCM?

Hi,
The following two blog could help you to understand SCCMContentLib structure.
An adventure in the sccmcontentlib - single instance store
http://blogs.technet.com/b/hhoy/archive/2012/05/31/an-adventure-in-the-sccmcontentlib-single-instance-store.aspx
Understanding the Configuration Manager Content Library
http://blogs.technet.com/b/configmgrteam/archive/2013/10/29/understanding-the-configuration-manager-content-library.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

WDS and MDT

I setup my WDS and MDT Deployment and the image booms out at TFTP and never gets to the menu screen.

Hi dektame,
Some required information are needed for us to help you. A screen shoot would be appreciated.
By the way, if you mean you stuck in TFTP step, you need check if imported right boot image to WDS.
Regards
D. Wu
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Software Deployment Manager - runtime workbench and mdt service

Hi Experts,
I undeployed certain service for PI 7.0 particularly on for rwb and mdt specifics. I was seeing some errors when opening the the runtime workbench. So I was thinking of undeploying it and redeploy it again..After I undeployed the service, and was looking at directory to redeploy it, I couldn't find the rwb and mdt folder. Any one have an idea where is it located or could I download it at marketplace and deploying it again? Thanks!

Hi
Probably the best thing to do is download and deploy the XIAFC, XIAF and XITOOLS patches. These will contain the rwb and mdt components. After deploying these 3 patches the system should be back to normal.
Regards
Mark

DomainOUList.xml and MDT 2013

Having issues using DomainOUList.xml with MDT 2013 it worked fine with MDT 2012 U1. Is there something else I must do?
If this post is helpful please click "Mark for answer", thanks! Kind regards

I don't think that the DomainOUList.xml changed much between MDT 2012 U1 and MDT 2013 (or between MDT 2008 and MDT 2010, and MDT 2012 for that matter).
IF you did an upgrade from a previous version of MDT, watch out, some of the script files may be out of sync. Try a new share to be sure.
Keith Garner - Principal Consultant [owner] -
http://DeploymentLive.com
Keith,
I agree with you, as the process should work the same. I was using the DomianOuList.xml successfuly in a MDT 2012 U1 with WAIK envirorment, and then performed a upgrade to MDT 2013 with ADK. I have created a new deploymentshare and I am still getting the
same error. Just like in the past here is the DomianOuList.xml.
<?xml version="1.0" encoding="utf-8"?>
<DomainOUs>
<DomainOU value= "OU=Win7-VPC,OU=Workstations,OU=Minneapolis Service Region,DC=Corp,DC=xxxxxxx,DC=com">Minneapolis</DomainOU>
<DomainOU value= "OU=Win7-VPC,OU=Workstations,OU=Denver Service Region,DC=Corp,DC=xxxxxxxy,DC=com">Denver</DomainOU>
<DomainOU value= "OU=Win7-VPC,OU=Workstations,OU=Eau Claire Service Region,DC=corp,DC=xxxxxxx,DC=com">Eau Claire</DomainOU>
<DomainOU value= "OU=Win7-VPC,OU=Workstations,OU=Amarillo Service Region,DC=corp,DC=xxxxxxx,DC=com">Amarillo</DomainOU>
</DomainOUs>
If this post is helpful please click "Mark for answer", thanks! Kind regards

Installing Windows ADK and MDT 2013 without Internet

Hi
I have Windows 8.1 Update 64 bit
on a computer without Internet.
I would like to install Windows ADK
and MDT 2013. What's the proper procedure to
do this?
Thanks
Bye
Balubeto

You need to download the pieces from an internet-connected machine. They can they be copied (USB or whatever) to any machine, even those without an internet connection, to do an installation.
To get the necessary ADK pieces, download ADKSETUP.EXE and run it on the internet-connected machine. It will offer an option to download all the rest of the ADK pieces (make sure you select the right components) into a folder you specify.
The MDT installation is a single MSI file.
Thanks,
-Michael Niehaus
Senior Product Marketing Manager, Windows Deployment
http://blogs.technet.com/mniehaus
[email protected]

Windows ADK and MDT 2013 components

Hi
I noticed that Windows ADK is
installed in its 32 bit version even though I have
Windows 8.1 Update 64 bit.
It is correct?
Then, I installed MDT 2013
64 bit.
Now, where can I find a detailed description
about the components of this MDT?
Having to customize, deploy and create some
DVDs of Windows 8.1 Update
32/64 bit, what components
should I download?
Thanks
Bye
Balubeto

Yes, there are some weird historical reasons why the AIK goes to "\Program Files (x86)" and MDT goes to "\Program Files". Don't over think it too much, yes it's confusing.
Some recommendations (what I install on my machine):
Your deployment Server box should be running Windows Server 2008 R2 x64 or Server 2012 x64.
You should be deploying only Windows 7 or newer (Windows 8.1) or Server 2008 R2 or newer (2012)
Use the latest AIK
http://www.microsoft.com/en-us/download/details.aspx?id=39982 the ADK is platform agnostic, it will install on x86 or x64, but of course your server should only be x64
Install the latest MDT 2013
http://www.microsoft.com/en-us/download/details.aspx?id=40796 x64 version.
MDT documentation *.chm is in the MDT install directory.
AIK documentation *.chm is in the ADK install directories.
Keith Garner - Principal Consultant [owner] -
http://DeploymentLive.com

OSD Tasks only available to PXE and media showed up in Software Center on a server!

OK so I'm getting a selected windows 2008 r2 server setup with its SCCM client cert, I get the client installed on there - everything's looking great, I see updates and CI's and policies all coming down nicely watching the client logs... I open up software
center thinking I'll go on ahead and kick off the 2 available windows updates and to my horror I see my OSD Task Sequence deployments (Available) sitting there in software center. These are all set for visibility only to PXE and media - NEVER software center
- every single one of them - and I've triple-checked every one since I saw this and also verified they don't show up on a client workstation. I deleted the deployments for these task sequences and grabbed the \windows\ccm\logs directory in full off the server
for review... How in the flying heck did these task sequences show up in Software Center on my server's newly installed client / software center???

Aha! Thanks Mr Sandys! Sure enough the client hasn't upgraded yet and is at 5.00.7711.0000.
I have automatic sitewide client upgrade configured (within 1 day) - guess I'll wait to see if it updates or not. Shouldn't pushing the client from my CM server send the latest client X_X ?

SCCM OSD and MDT 2012 - Task Sequence query

Hi All
I have single server SCCM 2012 R2 server with MDT 2013 successfully integrated. I'm looking to create a 'Sysprep and Capture' type Task Sequence within SCCM, so that this can be done via PXE rather than SCCM's more manual 'Capture Media' method. Just
wondering if anyone has thoughts on this, experience, pointers etc?
Couple of options that look possible are:
MDT Toolkit Package - include in SCCM based Task Sequence. Would it then be fairly easy to mimic ts steps detailed in MDT's existing 'Sysprep and Capture' TS, but within SCCM?
SCCM TS Steps - I've seen there are a number of TS Steps that look like they may enable OS Capture, but if so, bit confused there isn't more documented \ blogged on this kind of TS, would have thought this was a common requirement for a
SCCM TS? (TS Steps of interest within SCCM: 'Prepare Windows for Capture' and 'Capture Operating System Image')
Any assistance much appreciated!
Kind Regards
Andrew

There is a bit of debate about the best way to capture reference images. Check out this good blog that reviews the options:
http://www.deploymentresearch.com/Research/tabid/62/EntryId/163/The-battle-begins-Building-the-perfect-reference-image-for-ConfigMgr-2012.aspx
Having said that, you can certainly create a capture task sequence in SCCM. If you choose to create a new task sequence,you should see a build and capture option. Simply create a build and capture task sequence and then remove the build steps.
You will be left with:
I've used this method in certain cases.
Or as you said, if you are integrated with MDT, you can create an MDT task sequence to do the capture or add MDT steps as needed.
Hopefully that helps!
Jeff

Task seqence according to departments in a company and MDT 2013

Hi,
I have a problem and I need help from the SCCM community.
So here we go:
I am in a process of upgrading SCCM from 2007 to 2012, great. I have setup lab environment which consists of 2 DC, 1 DB server, 1 SCCM 2012 Server and 2 test clients (Windows 7).
My question is about planning and design of the task sequence for various departments in our company. I have no idea how to approach it or how to implement it. Right now we use HTA script.
The idea is to deploy a set of applications like Skype, acrobat, 7-zip to all windows 7 clients, and then based on what I choose in MDT(this is the actual procedure which we use in 2007):
…have other applications which are specific to the chosen department.
I want to move away from the hta script in SCCM 2012 but I have no idea how to do it. Only thing that I know it MIGHT work would be to make MDT 2013 TS user driven OS deployment TS.
This drags another questions:
Is there anywhere on the internet a guide for this? Youtube or something that I was not able to find.
Would that mean that I would have many Task Sequences?
By that I mean for example.
“Deploy Windows 7 – QA”
“Deploy Windows 7 – DEV”
“Deploy Windows 7 – IT”
“Deploy Windows 7 – CS”
“Deploy Windows 7 – PM”
And if I have windows 8.1 which I will that would mean too many TSs displayed I want to avoid that and have only 1 for windows 7 and 1 for windows 8.1 clients. I want to make a TS which deploys applications according
to what I choose in UDI Wizard Designer (Am I right? Is that being made in UDI?).
I would love to see a solution like this:
Any help is appreciated.
Thank you

Hi,
I am a bit stuck on the following...
I have created a custom UDI page called Gather data for OSD but i am not sure if I am doing a good job with variables:
I want to enter a name for the computer and for TS to of course give a name that I want to the computer.
I also would like to choose departments because then i can deploy different applications with different departments. I am basically trying to recreate the procedure written in my first post but without HTA:
Am I on the right path or?
Thanks,

SCCM 2012 SP1 and MDT 2012 Task Sequence Templates, MDT File/Settings Packages

We're setting up SCCM 2012 integrated with MDT 2012 for our OSD. My main issue is finding actual reference material for the MDT task sequence templates when integrated with SCCM. The MDT documentation has a lot of information on variables and task sequences
outside of SCCM integration.
One thing I'd love to find information on is what's actually going on during an MDT Client Task Sequence template. I found this http://social.technet.microsoft.com/Forums/en-US/645a77b2-5be6-431d-818c-57d24b1435cc/understanding-mdt-task-sequence?forum=configmgrosd but
it doesn't delve into the kind of detail I'm looking for. I can dig up information through the MDT reference material on some things, but I just can't find anything out there that actually walks you through an SCCM/MDT task sequence template. For instance,
under State Restore what is being referenced in Install Software with base variable name PACKAGES, vs Install Applications and base variable name COALESCED APPS. And, where are you supposed to put these applications? That's just a specific example, I'm hoping
to find some kind of walkthrough.
Two things I'm hazy on are the MDT packages. What exactly are the MDT Settings Package, and the MDT Files Package? What are they used for? What benefits do you get out of using them? And, how exactly do you use them? I know one of them has something to do
with customsettings.ini, but what's the point of using SCCM with MDT if you still have to muck around in the customsettings.ini file?
Either way, it seems like there are a lot of references to SCCM task sequences, and a lot of references to MDT task sequences. But, not together. Which is a bit annoying since the MDT-integrated task sequence templates are very obviously different than either
SCCM or MDT by itself. Any help would be appreciated, even just information on where to look. Maybe I'm just really bad at finding reference material for SCCM/MDT. Thanks.

When MDT integrated with SCCM, We need the following MDT components to be created:
MDT Boot image
MDT Toolkit Files
MDT Settings
The MDT boot image (for example) gives you extra abilities over the standard ConfigMgr boot image such as the ability to display a HTA Refer here:
http://www.windows-noob.com/forums/index.php?/forum/98-frontends-and-web-services/
MDT Files once created, you will find UDIWizard_Config.Xml file in which you can start User driven Installation OSD using UDI designer.
Refer these links for better understanding:
http://www.windows-noob.com/forums/index.php?/topic/5131-using-sccm-2012-rc-in-a-lab-part-16-integrating-mdt-2012-rc1-with-configuration-manager-2012/
http://www.windows-noob.com/forums/index.php?/topic/5221-using-sccm-2012-rc-in-a-lab-part-17-using-mdt-2012-rc1-within-configuration-manager-2012/
http://www.windows-noob.com/forums/index.php?/topic/5250-using-sccm-2012-rc-in-a-lab-part-18-deploying-a-udi-client-task-sequence-with-mdt-2012-rc1-integrated-in-configuration-manager-2012/
Thanks, Prabha G
Thanks for the quick reply. But, what about the MDT Settings Package? Also, both have a pretty big folder structure for each package. Surely it does more than just provide a couple xml and ini files? I'm not looking for anyone to spoon-feed me the information,
but at least a pointer in the right direction for finding the reference material. It seems for SCCM/MDT integration you have to go all over the place finding scraps of information to put together.
Also, any info on the SCCM/MDT task sequence templates? Thanks.

ZCM 10.3.2, PXE and Optiplex 980..

Maybe this has been answered already, but if it has, I haven't seen it yet. Has anyone been able to image an optiplex 980 with PXE on ZCM10, I cannot get it to work, and the culprit seems to be the intel boot agent, it seems to be too new of a version, for the PXE server. Any input would be appreciated.
Thanks,

Originally Posted by Techlord
Maybe this has been answered already, but if it has, I haven't seen it yet. Has anyone been able to image an optiplex 980 with PXE on ZCM10, I cannot get it to work, and the culprit seems to be the intel boot agent, it seems to be too new of a version, for the PXE server. Any input would be appreciated.
Thanks,
A new imaging update was released today, might be worth a shot to update and see if it resolves the issue: NOVELL: Downloads - ZENworks Imaging Driver Update for March 2011
Thomas

Dot1x, PXE and NAP

Hi Guys,
Got a question:
Trying to setup dot1x in an environment using Citrix Provisioning server. This involves the following process:
1. Workstation boots up using DHCP/Bootp, gets assigned an IP Address
2. Downloades Desktop image
3. Loads Workstation Image (Windows 7 Desktop)
From a dot1x perspective this is what we get:
1. Non-authenticated startup because it is using PXE there is no dot1x supplicant - port is assigned to a guest VLAN
2. When the image is loaded the LAN card is restarted and the Windows 7 Client has dot1x supplicant
3. Dot1x supplicant attempts authentication with either a pass or fail result.
4. Authentication success port is enabled, authentication fail quarrantine vlan is assigned.
Unfortunately we haven't been able to get this to work on the cisco switches because when the workstation moves from an non-authenticated startup (the guest VLAN) and is moved into an authenticated port that is enabled and goes to the main VLAN the workstation fails to complete startup because the change in VLAN interrupts the streaming to the Citrix provisioning server. As far as we understand for this boot process to work the workstation needs to remain in the same VLAN.
We tried to work around this by using per user ACL's however this doesn't work because if we don't configure a Guest VLAN for non-authorised ports, the port is disabled. We can't configure the Guest VLAN to be the same as the Primary VLAN of the port as this stops dot1x from authenticating the port.
Has anyone got a solution for this scenario. Is there a way to configure per user ACL's using dot1x which allows a non-authorised port be be enable but allow us to assign a per user acl to the port for authorised machines? The solution that is most likely to works is one that doesn't involve the use of different VLAN's execpt for perhaps a remediation VLAN for authorisation failed machines.
I hope this make sense and I hope there is someone out there that can help.
Regards,
He-Wun Kim

Hi,
We don't want to change the VLAN the main issue is that we can get the authentication to work i.e.:
The workstation using PXE boots up in the non-authenticated guest LAN, which has access to the provisioning servers, the image is downloaded and then loads.
The operating system boots up and successfully authenticates using Microsoft NAP as the supplicant, and is assigned to the port is authorized.
The problem is that the Guest VLAN and Authorized VLAN which is the default VLAN that the port is configured to be a part of are obviously on different IP subnets and the workstation as part of the process gets a new IP Address assigned when the Operating System boots, it is this CHANGE of vlan that breaks the provisioning process the VLAN port membership cannot change in order for the solution to work. We tried configuring the following using Radius VSA in which the Radius Server supplies the access-list name/number to use:
No Guest VLAN - The result, the PXE boot fails because the port is disabled when there is no dot1x authentication attempt made
Guest VLAN and Authorised VLAN the same - Fails because the switch doesn't allow this configuration authentication is disabled
Again the problem we have is that we are going from a non-authenticated to authenticated mode on the workstation, and there doesn't appear to be away to have the same workstation to remain on the same subnet for the duration of the boot and provisioning process.
We have looked at the MAC authentication option (which is what Citrix recommends) but we do prefer to use NAP/dot1x as it performs a number of health checks which are extremely useful in keeping our network nice and secure.
Regards,
He-Wun Kim

PXE and MDT

Similar Messages

Maybe you are looking for