ConfigMgr Task Sequence: Configure TPM and enable BitLocker for Dell hardware

Scope

This guide is to help configure a ConfigMgr Task Sequence to automate enabling BitLocker at time of Image Deployment.  This does not detail the steps that are required to extend the Active Directory Schema or create the necessary group policy objects. Details on extending the AD Schema and creating the group policies can be found here

Prerequisites

ConfigMgr 2007

Dell CCTK - Download

Windows 7

TPM 1.2

2008 Active Directory or 2008 Active Directory Schema Extension (to store BitLocker keys)

Active Directory Group Policy (to store BitLocker keys)

ConfigMgr 2007: Deploy and remove software by AD group

In ConfigMgr 2007 there are many ways to deploy software.  One that has been brought up to me several times is how can we deploy software based on AD group.  Below is the steps to do so.  You will advertise your installer to the Needs Collection and your Removal to the Remove Collection.  These collections will automatically move the group members to the correct collection based on installed status.  **Be careful to ensure all members are in the AD group that you intend to keep the software installed on as if you have software already deployed via manual install or other means it will fall into the remove collection unless the group is updated.

ConfigMgr Task Sequence: Add a WMI Condition

Scope

During your OSD Task Sequence you may want to determine whether the machine is a laptop or not, install software to a specific machine name format, or install drivers to only specific models of laptops.  For this you can use the WMI Query Condition within the Tasks of your Task Sequence.  A great tool to look up what can be queried from of WMI is WMICodeCreator and is provided by Microsoft.

Procedure

1. Open your SCCM Task Sequence

Create Microsoft DaRT ConfigMgr 2007 Boot Disk

Create ERD/DaRT ConfigMgr Boot Disk

Prerequisites

Microsoft Desktop Optimization Pack (Available through Mirosoft Software Assurance)

Microsoft Windows Automated Installation Kit Download

Create Microsoft DaRT Boot Disk

http://technet.microsoft.com/en-us/library/ee460909.aspx

Copy Microsoft DaRT Boot Disk

1.       Mount Microsoft DaRT Boot Disk with an ISO mounting utility

Replace default Recovery Image and integrate MS DaRT into SCCM OSD Image

Replace default Recovery Image and integrate MS DaRT into SCCM OSD Image

Scope

This document will detail the steps needed to replace the default recovery image of a Windows 7 machine with the MS DaRT Recovery image and integrate it into SCCM Operating System Deployment

Prerequisites

1.       DaRT Integration Script Download

2.       Microsoft Desktop Optimization Pack 2011 R2 (MDOP) *Available as part of Software Assurance

3.       .Net Framework 4.0 Download

4.       Microsoft Windows SDK for Windows 7 (Debugging tools only) Download

5.       Additional Drivers for NIC and HDD Controller (Drivers used for your OSD Boot Image)

Procedure