Shulou(Shulou.com)06/03 Report--

Background:

1. It is planned to use SCVMM 2012 R2 to automatically deploy the win7 virtual machine template. Although the VM template has been used many times, there is one difference between the client version of OS and the server version of OS, that is, the client version of the operating system will disable the administrator account by default, and then must create a new administrator account.

two。 Plan to use the answer file in the SCVMM VM template to use Unattend.xml to enable some settings by default (such as the firewall enables remote Desktop by default, enable the default administrator and set the password), automatically log in to the default administrator once, and then execute some commands, such as configuring the startup menu (it seems to enter recovery mode when VM crashes, so that VM restart requires manual intervention), and other operations such as configuring some services.

Problem: administrator cannot be used when specifying an administrator account for this Win7 in SCVMM, otherwise an error will be reported during deployment (10619, the user name provided is not a valid local administrator name for the operating system).

When you configure other account names, SCVMM generates a local account creation setting for the OOBE phase in unattend.xml, which will conflict with the existing administrator if you use administrator (but it's strange that I use this on server VM templates, only the client version has such a problem).

Question 2: due to problem 1, I hope that the admin account I set up here will be deleted automatically after VM deployment. The GUIRunonce part of the figure above seems to do this, but the problem is that GUIRunonce needs to log in to an account, so automatically log in to the default administrator account once, and then execute some default commands such as net user admin / del.

BUG presentation: although there is no problem with the above ideas in principle, and I have no problem directly under the hyper-v VM test with unattend.xml, there is a BUG when using SCVMM.

1. Phenomenon 1, if you configure autologon and logoncount in unattend.xml, the logonCount will become 999 times in the merged unattend.xml generated by SCVMM, which means you have to use other means to clear autologon, otherwise the VM will log in automatically all the time.

two。 Phenomenon 2, if you configure autologon in unattend.xml and specify the GUIRunOnce command in SCVMM at the same time, then the GUIRunOnce command in the final synthesis of unattend.xml becomes blank, even if you do not configure these commands in the GUIRunOnce window of SCVMM, but directly write these commands in the answer file, SCVMM will finally merge these commands into empty.

Here is the problem XML, and this BUG is also mentioned in Microsoft forums, which seems to be a long time ago, but my latest version of 2012 R2 is still a problem.

Https://social.technet.microsoft.com/Forums/systemcenter/en-US/de874b1b-bd93-4746-a138-22422ff3717c/unattendxml-parsingmerging-issue-with-scvmm-2012-r2?forum=virtualmachinemanager

Thinking and solving:

1. If the BUG is caused by autologon, can you bypass this section and execute the command without logging in to the account? Yes, after windows deployment, you can configure a custom script to execute commands before logging in for the first time. The name of the script is fixed to setupComplete.cmd, and the script path is% WINDIR%\ Setup\ Scripts\ SetupComplete.cmd. We just need to create and modify the script.

Reference:

Https://technet.microsoft.com/en-us/library/cc766314(v=ws.10).aspx

For the Unattend.xml used in the finished SCVMM (for 32-bit win7) and 64-bit win7, modify the x86-bit x64 in processorArchitecture= "x86".

Remarks: the serial number of the product in XML is KMS Client Key. The remote desktop and the corresponding firewall for remote desktop are turned on by default. The administrator account is enabled by default. The password part of the administrator account is the encrypted value. You can change the encrypted password in windows system image manager (enter the plaintext and write the encrypted ciphertext).

*

False

FJ82H-XT6CR-J8D7P-XQJJ2-GPDD4

False

one

0

True

@ FirewallAPI.dll,-28752

All

WORKGROUP

one

Net user administrator / active:yes

True

one

Work

Microsoft

Microsoft

China Standard Time

Password Here = =

False

Zh-CN

Zh-CN

Zh-CN

0804:00000804

Finished setupComplete.cmd:

@ echo off

Net user admin / del

Bcdedit / set {default} recoveryenabled No

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.