What Are You Doing Right Now
-
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
-
@gjacobse saw your earlier post will be looking into that
-
@jt1001001 said in What Are You Doing Right Now:
@gjacobse saw your earlier post will be looking into that
Happy to share what I have learned,… and learn if there is a better way.
-
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Sadly - it seems like your job is basically to be shadow IT inside your own IT department.
You want to do things efficiently, but the powers that be don't see the value in that - for you, perhaps it really is time to move on.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
Do you have or have you linked to the script? Just curious if I have missed it here. I am curious to compare / test it.
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
-
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
-
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@obsolesce said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
End of year PTO for me. Rethinking home office layout as 2022 we will be shifting gears and i will need some bench space for working on Autopilot deployment. Our E5 licenses were approved so major security overhaul next year
Autopilot - been trying to sort out a USB option to run the hardware ID… not had any success… not totall happy with the process yet.
Why not use the popular PS module? It'll grab the hash and register it in Autopilot.
Otherwise, I have a script I made somewhere made to be ran from USB that will take the hash, send it to an Azure Storage Table to await processing by an Azure Function that registers it into autopilot if you're looking for a fully automated solution other than running the script itself.
We have this wonderful security policy- we turn off powershell scripting- i have to got through a very manual process…
I found a set up, which I think I linked previous- that didn’t work… but it is possible I missed something on it. I’ll have to see if I can spin up my laptop here at the hotel and read back my comments to verify…
With scripting turned off- and literally Policed by systems being scanned a third party for script, it’s a bit frustrating.
Then the only thing to do is to reimage every device using an ISO or image with the Autopilot profile baked in. Make sure the Autopilot profile is set to register devices in Autopilot. If they want bullshit policies that actually decrease security, then it's going to get inconvenient for everyone.
That’s an interesting option. Might you have details on that?
It looks like that PowerShell module you were looking into not so long ago may work. I did it manually instead of using that, I forget now why I decided to do it that way, maybe it was cleaner I forget. But essentially all you need to do is create an Windows installer ISO of an up to date Win10/11 install with the Autopilot profile xml in a specific Windows folder.
I'd share the ones I made but they are Win10/11 enterprise with activation and autopilot profile baked in. I can share the procedure I created though, but won't get a chance until later today or tomorrow... if that PS module method is of no interest to you.
-
Finally a clear night, but late and cold outside (8c), no prep done. So I'm sitting inside with the telescope pointing out the window, tracking a binary star (Alpheratz) I can see with the Fuji camera attached.
The tracking is a little bit off because I'm very limited to the stars I could use for the auto 2 star alignment. I also can't get great focus going through glass, but when I open the door for a sec, it's good then. No big deal, other than that it's working perfectly in KStars / Ekos on the R-Pi!
-
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
-
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
You can inject an XML into the ISO before you burn it - use it...
or if using USB media - it's just another file on the stick. -
@dashrender said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
You can inject an XML into the ISO before you burn it - use it...
or if using USB media - it's just another file on the stick.Okay - It may be to much of a Monday for me today.. Tired from travel and tired of the WTabsoluteF (the two knuckle heads are having a VR-Minecraft and Pikachu conversation in the other room that is annoying.
I think injecting the XML into the ISO is one thing - and yea do-able - I'll go back to read that later. It maybe a case of crossing thoughts between the ISO (image) and the IMAGE process used to built / rebuilt a device. Which is a totally different IMAGE process / object.
On a new device - we will OEM install Win10 (and Chrome, Updates, MitelConnect, VPN client, etc) and then IMAGE it with Macrium Reflect. Once that is done - I don't know that you can inject the needed XML file as it in a different 'state'.
-
@gjacobse said in What Are You Doing Right Now:
Okay - It may be to much of a Monday for me today.. Tired from travel and tired of the WTabsoluteF (the two knuckle heads are having a VR-Minecraft and Pikachu conversation in the other room that is annoying.
geezer voice get off my lawn yous youngin's....
-
@gjacobse said in What Are You Doing Right Now:
@dashrender said in What Are You Doing Right Now:
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
You can inject an XML into the ISO before you burn it - use it...
or if using USB media - it's just another file on the stick.Okay - It may be to much of a Monday for me today.. Tired from travel and tired of the WTabsoluteF (the two knuckle heads are having a VR-Minecraft and Pikachu conversation in the other room that is annoying.
I think injecting the XML into the ISO is one thing - and yea do-able - I'll go back to read that later. It maybe a case of crossing thoughts between the ISO (image) and the IMAGE process used to built / rebuilt a device. Which is a totally different IMAGE process / object.
On a new device - we will OEM install Win10 (and Chrome, Updates, MitelConnect, VPN client, etc) and then IMAGE it with Macrium Reflect. Once that is done - I don't know that you can inject the needed XML file as it in a different 'state'.
I didn't think that was how Autopilot worked? But then - I'm a TOTAL and utter noob on autopilot.
-
@dashrender as am I and still reading up on it/figuring it out
-
@jt1001001 said in What Are You Doing Right Now:
@dashrender as am I and still reading up on it/figuring it out
Do you know - does one deploy autopilot on personalized images? or only on OEM/Enterprise base installs?
-
@dashrender said in What Are You Doing Right Now:
@jt1001001 said in What Are You Doing Right Now:
@dashrender as am I and still reading up on it/figuring it out
Do you know - does one deploy autopilot on personalized images? or only on OEM/Enterprise base installs?
You have to install and register the AutoPilot Profile on the device before installing Windows. You would register the device in Intune. Once registered shutdown the device until the profile is created. Once it is created then you can setup your device with internet connectivity and it will go through the process you have including the image and settings and policies you setup for the device.
-
@gjacobse said in What Are You Doing Right Now:
Happy New Year -
Yes, I am interested in your procedure when you get time. Looks like we are using Windows Business - but I don't expect the procedure building being different.I'm also curious how you built the ISO with XML profile.
TIA
Before you sysprep to create the ISO, use the PowerShell module to download your autopilot config, then put it here: C:\Windows\Provisioning\AutoPilot\AutoPilotConfigurationFile.json
I didn't have time yet on the PC to get the procedure I created and likely won't until tomorrow or the next, but here is a MS link for some breadcrumbs in the meantime, regarding creating the Autopilot profile, then downloading the json. Sorry, json, I said xml before I think:
https://docs.microsoft.com/en-us/mem/autopilot/existing-devices
