Jump to content

Weird Sysprep issue,urgent help.


Recommended Posts

I have a lab of Dell Optiplex 755's 40 of them to be exact. I built my reference image in a virtual. I sealed the image with sysprep and then deployed it. When I came in today, I saw that 30 pc's were ok, but on 10 of them, I got a sysprep error Windows could not parse or process the unattend answer file for pass windows-setup at the specialize pass. I have uninstalled vmware tools before I sealed my image.

What I do not understand is the following, I have 40 Optiplex's 755's how can 30 of them be ok, and 10 crash. They are all the same hardware. :realmad:

If you need anymore log files let me know.

I am severely stumped.

Here is my answer file

?xml version="1.0" encoding="utf-8"?>

<unattend xmlns="urn:schemas-microsoft-com:unattend">

<settings pass="specialize">

<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">'>http://schemas.microsoft.com/WMIConfig/2002/State">

<Identification>

<JoinWorkgroup>LABS</JoinWorkgroup>

</Identification>

</component>

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">'>http://schemas.microsoft.com/WMIConfig/2002/State">

<ComputerName>*</ComputerName>

<RegisteredOrganization>My Organization</RegisteredOrganization>

<RegisteredOwner>My Organization</RegisteredOwner>

<CopyProfile>true</CopyProfile>

</component>

<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">'>http://schemas.microsoft.com/WMIConfig/2002/State">

<RunSynchronous>

<RunSynchronousCommand wcm:action="add">

<Description>UIU-COMMAND-ID={4dec1d91-5b7c-4f41-91e1-ee8d57db943e}</Description>

<Order>1</Order>

<Path>reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</Path>

</RunSynchronousCommand>

<RunSynchronousCommand wcm:action="add">

<Path>net user administrator /active:yes</Path>

<Order>2</Order>

</RunSynchronousCommand>

</RunSynchronous>

</component>

</settings>

<settings pass="oobeSystem">

<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">'>http://schemas.microsoft.com/WMIConfig/2002/State">

<UserAccounts>

<AdministratorPassword>

<Value>aABjAG0AaABzAD8AQQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>

<PlainText>false</PlainText>

</AdministratorPassword>

<LocalAccounts>

<LocalAccount wcm:action="add">

<Password>

<Value>dABlAGEAYwBoAGUAcgBQAGEAcwBzAHcAbwByAGQA</Value>

<PlainText>false</PlainText>

</Password>

<Description>Faculty</Description>

<DisplayName>Faculty</DisplayName>

<Group>Administrator</Group>

<Name>Faculty</Name>

</LocalAccount>

<LocalAccount wcm:action="add">

<Password>

<Value>aABjAG0AaABzAD8AUABhAHMAcwB3AG8AcgBkAA==</Value>

<PlainText>false</PlainText>

</Password>

<Description>Admin</Description>

<DisplayName>Admin</DisplayName>

<Group>Administrator</Group>

<Name>Admin</Name>

</LocalAccount>

</LocalAccounts>

</UserAccounts>

<OOBE>

<HideEULAPage>true</HideEULAPage>

<SkipMachineOOBE>true</SkipMachineOOBE>

<SkipUserOOBE>true</SkipUserOOBE>

<NetworkLocation>Work</NetworkLocation>

<ProtectYourPC>3</ProtectYourPC>

</OOBE>

<TimeZone>Eastern Standard Time</TimeZone>

<AutoLogon>

<Password>

<Value>aABjAG0AaABzAD8AUABhAHMAcwB3AG8AcgBkAA==</Value>

<PlainText>false</PlainText>

</Password>

<Enabled>true</Enabled>

<Username>Administrator</Username>

</AutoLogon>

</component>

<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<SystemLocale>en-US</SystemLocale>

<InputLocale>0409:00000409;1009:00001009;0c0c:00000c0c</InputLocale>

<UILanguage>en-US</UILanguage>

<UserLocale>en-US</UserLocale>

</component>

</settings>

<cpi:offlineImage cpi:source="wim:c:/winpro764bit/install.wim#Windows 7 ENTERPRISE" xmlns:cpi="urn:schemas-microsoft-com:cpi" />

</unattend>

Setuperr.log

2011-08-08 16:46:05, Error SYSPRP SPPNP: Error 0x2 setting SDDL on driver file C:\Windows\system32\drivers\vmaudio.sys!

2011-08-08 16:46:05, Error SYSPRP SPPNP: Error 0x2 setting SDDL on driver file C:\Windows\system32\DRIVERS\vmci.sys!

Link to comment
Share on other sites


Of course we all know not all hardware is really the same, even if they have the same model number. Why it worked on most isn't a concern really, but it is obvious there are still VM files in the image if they are being referenced in the log file.

Anyways, you can just try to redo those 10 again to see what happens.

Please remember to use code tags (even though you left a character out at the beginning of your paste) :rolleyes:

Link to comment
Share on other sites

Actually no those two vm files do not exist in the image. I did a double check. I did uninstall vmware tools BEFORE sealing the image.

But there is reference to them in the registry I will delete all references to them (4 Places)

and try again. I will post back later today.

Thank you for the reply.

Edited by clivebuckwheat
Link to comment
Share on other sites

verify the bios level on the ten machines is the same as the other 30. We used to have this problem regularly with windows xp and Dell systems when motherboards were replaced under warranty and were a different BIOS revision or HW build revision.

Link to comment
Share on other sites

Hi clivebuckwheat

I was pretty sure that the 755 was intel based and not AMD... Was the inage captured on intel or AMD? I had a similar issue when we bought our first AMD machines and applied an intel image. There's a device driver that needs to be disabled when doing this as I found out. Anyway if that's your issue this might help. The device was IntelPPM from memory.

Link to comment
Share on other sites

About your Unattend.xml file, change for Admin and Faculty:

<Group>Administrators</Group>

Remove: <SkipMachineOOBE> and <SkipUserOOBE>. These values are DEPRECATED for Windows 7.

You can choose inside OOBE section the values you need!

<OOBE>

<HideEULAPage>true</HideEULAPage>

<NetworkLocation>Work</NetworkLocation>

<ProtectYourPC>3</ProtectYourPC>

<SkipMachineOOBE>true</SkipMachineOOBE> (remove)

<SkipUserOOBE>true</SkipUserOOBE> (remove)

</OOBE>

About drivers, you can try to add:

Persisting Plug and Play Device Drivers During generalize

You can persist device drivers when you run the sysprep command with the /generalize option by specifying the PersistAllDeviceInstalls setting in the Microsoft-Windows-PnPSysprep component.

During the specialize configuration pass, Plug and Play scans the computer for devices and installs device drivers for the detected devices.

By default, these device drivers are removed from the system when you generalize the system.

If you set PersistAllDeviceInstalls to true in an answer file, Sysprep will not remove the detected device drivers.

For more information, see the Unattended Windows Setup Reference (Unattend.chm).

http://technet.micro...512(WS.10).aspx

About <RegisteredOrganisation>, it seems it's better to not add a space!

<RegisteredOrganization>My_Organization</RegisteredOrganization>

I hope that can help you!

*Edit: Please ATTACH your files and no paste them. Your script "setupact.log" freeze the loading page site and must be stopped !

Edited by myselfidem
Link to comment
Share on other sites

Thanks myselfidem, but I built my reference image in a VM so how would PersistAllDeviceInstalls help, should I not be generalizing everything?, as you can see above sysprep is complaining about two files vmaudio and vmcmi.sys

About your Unattend.xml file, change for Admin and Faculty:

<Group>Administrators</Group>

Remove: <SkipMachineOOBE> and <SkipUserOOBE>. These values are DEPRECATED for Windows 7.

You can choose inside OOBE section the values you need!

<OOBE>

<HideEULAPage>true</HideEULAPage>

<NetworkLocation>Work</NetworkLocation>

<ProtectYourPC>3</ProtectYourPC>

<SkipMachineOOBE>true</SkipMachineOOBE> (remove)

<SkipUserOOBE>true</SkipUserOOBE> (remove)

</OOBE>

About drivers, you can try to add:

Persisting Plug and Play Device Drivers During generalize

You can persist device drivers when you run the sysprep command with the /generalize option by specifying the PersistAllDeviceInstalls setting in the Microsoft-Windows-PnPSysprep component.

During the specialize configuration pass, Plug and Play scans the computer for devices and installs device drivers for the detected devices.

By default, these device drivers are removed from the system when you generalize the system.

If you set PersistAllDeviceInstalls to true in an answer file, Sysprep will not remove the detected device drivers.

For more information, see the Unattended Windows Setup Reference (Unattend.chm).

http://technet.micro...512(WS.10).aspx

About <RegisteredOrganisation>, it seems it's better to not add a space!

<RegisteredOrganization>My_Organization</RegisteredOrganization>

I hope that can help you!

*Edit: Please ATTACH your files and no paste them. Your script "setupact.log" freeze the loading page site and must be stopped !

Link to comment
Share on other sites

Setuperr.log

2011-08-08 16:46:05, Error SYSPRP SPPNP: Error 0x2 setting SDDL on driver file C:\Windows\system32\drivers\vmaudio.sys!

2011-08-08 16:46:05, Error SYSPRP SPPNP: Error 0x2 setting SDDL on driver file C:\Windows\system32\DRIVERS\vmci.sys!

I made some search and I saw that these files are specific drivers for VMware Virtual Machine!

Maybe there is an update to fix this issue with VMware? Or it's possible to remove those files inside your image before capturing or after with DISM?

http://kb.vmware.com...ernalId=1009826

Maybe this video can give you some help:

NEW Videos:

http://www.wincert.n...nt-101-updated/

About SDDL:

http://blogs.dirteam...dl-strings.aspx

http://networkadmink...ACE_String.aspx

http://technet.micro...325(WS.10).aspx (about SID)

You can also, as I see inside the forum (I don't remember where is this thread!):

Another way is to access OFFLINE the Windows 7 Registry and delete all keys under HKEY_LOCAL_MACHINE\SYSTEM\MountedDevices

(they will be re-initialized correctly if your is a "standard" install, there may be problems with "strange" partitioning setups and/or drive letter changed during original install).

Regards

Edited by myselfidem
Link to comment
Share on other sites

  • 3 weeks later...

Tonight I cleaned up my answer file. Out of 10 computers I had 1 crash on the specialize pass of my answer. I then checked the setuperr.log and it was empty

Here is my cleaned up answer file. I will attached my panther log files if anyone would be so kind as to take a look. Nothing seems out of the ordinary to me. The problem occurs sporadically on Dell Optiplex Models 755, 760 and 780'S.

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="specialize">
<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<Identification>
<JoinWorkgroup>LABS</JoinWorkgroup>
</Identification>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<ComputerName>*</ComputerName>
<RegisteredOrganization>DC</RegisteredOrganization>
<RegisteredOwner>DC</RegisteredOwner>
<CopyProfile>true</CopyProfile>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Description>UIU-COMMAND-ID={4dec1d91-5b7c-4f41-91e1-ee8d57db943e}</Description>
<Order>1</Order>
<Path>reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</Path>
</RunSynchronousCommand>
<RunSynchronousCommand wcm:action="add">
<Order>2</Order>
<Path>net user administrator /active:yes</Path>
</RunSynchronousCommand>
</RunSynchronous>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<UserAccounts>
<AdministratorPassword>
<Value>aABjAG0AaABzAD8AQQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
</UserAccounts>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<SkipMachineOOBE>true</SkipMachineOOBE>
<SkipUserOOBE>true</SkipUserOOBE>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>3</ProtectYourPC>
</OOBE>
<TimeZone>Eastern Standard Time</TimeZone>
<AutoLogon>
<Password>
<Value>aABjAG0AaABzAD8AUABhAHMAcwB3AG8AcgBkAA==</Value>
<PlainText>false</PlainText>
</Password>
<Enabled>true</Enabled>
<Username>Administrator</Username>
</AutoLogon>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SystemLocale>en-US</SystemLocale>
<InputLocale>0409:00000409;1009:00001009;0c0c:00000c0c</InputLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
</settings>
<cpi:offlineImage cpi:source="wim:c:/winpro764bit/install.wim#Windows 7 ENTERPRISE" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>

Panther.zip

Link to comment
Share on other sites

I still maintain that it is a hardware failure or difference (bios, hw build, etc, Dell has caused this issue for me for years), if you had it work without error on 90% of the systems it is not your image or your answer file.

Are you using the Universal Imaging Utility in creating your image?

Link to comment
Share on other sites

We use to use UIU but not any longer. So the best thing I can do is make sure BIOS are up to date I guess. The strange thing is after sysprep has crashed. If I re-image the same machine again it usually works.

Also to get out of the sysprep crash. I do SHIFT+F10.

Net user Administrator /active:yes

The go to regedit

HKLMSystemSetup

Clear the cmdline entry in the registry

and set all other values in this branch to 0 and reboot and windows will boot.

I guess this is a mystery that I will never solve.

Link to comment
Share on other sites

The situation you are running into is hardly rare. In my last company and my current company I always have to tell our techs that if an image fails, try it again. If it fails again then there is something wrong with the system. This is because the images (and boot environments) are known to work across multiple hardware platforms. If the problem is persistant, get that PC into repair to find out what is wrong and get it fixed.

Link to comment
Share on other sites

Thanks you made me feel a little better. I have spent 3 weeks on this problem but the problem is so random. I have been over my answer file with a fine tooth comb and the image is so clean yet sometimes it crashes on the specialize pass. This problem makes after hours imaging rather impossible. Someone told me it might be the copy profile bombing. Is there anyway to check this out?

Edited by clivebuckwheat
Link to comment
Share on other sites

1. Make sure you burn any MS iso at 4x max. I had errors with Dell mainly burning faster

2. never in the setuperr.log. Look for error in setupact.log. I don't see anything in the setupact.log. Did you copy this from C:\Windows\Panther? Sometimes the error reflects in C:\Windows\Panther\UnattendGC

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...