The virtual machine that I have been using to do some Desktop Deployment work ran out of space today. I notice the directories taking up all the space where the RemoteInstall and Distribution directories that belong to BDD and WDS. So I decided to add another virtual disk and move those two directories.

WDS
Moving WDS was easy, stop the WDS service then do the following:

1. Cut and Past the RemoteInstall Directory to where you'd like it.
2. Reshare the RemoteInstall directory as REMINST
3. Open regedit and change HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\TFTPD\Parameters\Directory to the new location of RemoteInstall.
4. Start WDS and you're away.

BDD 2007
BDD 2007 was fairly striaght forward was well. Make sure you've closed the workbench and do the following:

1. Move the Distribution directory to where you'd like it.
2. Open regedit and change HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\BDD 2007\Distribution_Dir to the new location of the Distrubution directory.

You can also rename these directories as well.

There, that was fairly painless.

I've been working with Windows System Image Manager today and found myself searching around for the right input locale to use for Australia.

Microsoft have a list of the right locales to use at http://msdn2.microsoft.com/en-us/library/ms776260.aspx

For us aussies,
Locale identifier:0x0c09
Locale: English (Australia)
Locale name: en-AU
Script tag: Latn
ANSI code page: 1252

So you may have noticed a few asthetic changes to my blog but as well as this I've upgraded it to dasBlog 2.0. I must say the upgrade was fairly painless.

I've been making small but noticable changes to the layout of the site. This will continue until I'm happy with what will be come a new theme I'll send it to be included with dasBlog.

I've recently installed Exchange 2007 and have been trying to get ActiveSyn up and running to sync with my Palm Treo 750. I knew that Exchange 2007 comes with a self-signed cert but didn't know how to get at it or import it into Windows Mobile. Fortunatley the proceedure is very simple and is detailed here.

In case you are wondering the brief steps are as follows:

1. Open IIS and go to the Directory Security Tab of the Default Website.
2. View the Certificate and Click the "Export to File" button.
3. Accept the default options and save the cerificate somewhere you can remember.

To import into Windows Mobile:

1. Copy the .cer file to your Windows Mobile device.
2. Using the File Explorer on the device locate and open the .cer file.
3. Select yes.

Enjoy!

Today I found myself clicking through a large number of text files containing information from Cisco switches. The text files contained a show run, show ver, show cdp neighbours and show interface status.

The customer wanted to know which interfaces had been hard-coded for speed or duplex and which interfaces had auto-negotiated to half duplex. After doing the first two by hand I realized Powershell could accomplish this quite quickly.

Get-ChildItem -Recurse -Filter "show-run.txt" | Select-String "speed","duplex"

And the results:
172.16.3.101\show-run.txt:50: duplex half
172.16.3.101\show-run.txt:51: speed 100
172.16.3.103\show-run.txt:35: speed 10
172.16.3.103\show-run.txt:45: duplex half
172.16.3.103\show-run.txt:46: speed 10
172.16.3.103\show-run.txt:98: duplex full
172.16.3.103\show-run.txt:99: speed 100
172.16.3.166\show-run.txt:41: duplex half
172.16.3.166\show-run.txt:42: speed 100

To find the interfaces that have negotiated at half duplex:
Get-ChildItem -Recurse -Filter "show-int.txt" | Select-String "half"

The Results:
172.16.3.101\show-int.txt:10:Fa0/6                      notconnect   1          Half     100 100BaseTX/FX
172.16.3.101\show-int.txt:21:Fa0/17                     connected    1        A-Half    A-10 100BaseTX/FX
172.16.3.101\show-int.txt:32:Gi0/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.102\show-int.txt:32:Gi0/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.103\show-int.txt:6:Fa0/4                      connected    1          Half      10 100BaseTX/FX
172.16.3.106\show-int.txt:5:Fa0/1                      connected    1        A-Half   A-100 100BaseTX/FX
172.16.3.107\show-int.txt:32:Gi0/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.121\show-int.txt:32:Gi1/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.123\show-int.txt:32:Gi0/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.164\show-int.txt:33:Gi0/2                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.166\show-int.txt:5:Fa0/1                      notconnect   1          Half     100 100BaseTX/FX
172.16.3.166\show-int.txt:32:Gi0/1                      connected    1        A-Half    1000 CX_GIGASTACK
172.16.3.169\show-int.txt:33:Gi0/2                      connected    1        A-Half    1000 CX_GIGASTACK
176.16.3.122\show-int.txt:31:Fa0/24                     connected    1        A-Half   A-100 100BaseTX/FX
...
Just saved myself half an hour of clicking through txt files!

I noticed today that WinPE 2, like all the WinPEs before it, does not have a built in network card driver for VMWare. Now you could add a driver to WinPE 2 by using the peimg /inf command but I just wanted to test something really quickly and didn't want the hastle of making a new WinPE 2 disk.

So I discovered you can tell VMWare to use emulate an Intel e1000 network card which works great with WinPE 2. Just add ethernet0.VirtualDev = "e1000" to your .vmx file!!

Most antivirus products these days have a unique ID stored in the registry so that management consoles can distinguish the clients. In you are using some form of cloning in your organisation this can cause problems with clients not updating or reporting back to the management console.

This week I ran into this very issue with eTrustITM v8. Fortunately all you need to do is delete a couple of ID values from the registry before running sysprep.

For eTrustITM delete the following key:
HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustITM\CurrentVersion\ID

For eTrust Antivirus delete the following:
HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\eTrustAntivirus\CurrentVersion\ID

Remember to do this immediately before running sysprep otherwise the clients will register again, particularly if you do a reboot before running sysprep. In my builds I usually have a sysprep.cmd that deletes keys like this and then runs sysprep.exe.

It looks like there is already a lot of good information out there about System Center Essentials 2007. Here are a few of handy spots I have found already:

• System Center Essentials @ Microsoft: http://www.microsoft.com/systemcenter/sce/default.mspx
• Pricing Information: http://www.microsoft.com/systemcenter/sce/howtobuy/default.mspx
• SCE TechNet Forums: http://forums.microsoft.com/TechNet/ShowForum.aspx?ForumID=1558&SiteID=17
• Management Pack Authoring (AuthorMPs): http://www.authormps.com
• SCE Wiki: http://sce.editme.com/
• Blogs
  • Advisec Blog - http://advisec.wordpress.com/
  • SCE Tips & Trips - http://blogs.technet.com/caseymck/default.aspx
  • Remote Managed Services - http://blogs.technet.com/dustinj/default.aspx
  • Pete's Management Blog - http://www.it-jedi.net/

Know of any other great resources??

In my spare time over the last few days I've been getting ready to install the System Center Essentials RTM. After getting all the pre-reqs. installed I fired off the SCE 2007 installer only to find that after getting all the way through to installing and configuring reporting setup fails. Setup then promptly rolls back.

After digging a bit I found that this is actually a known issues with the RTM and Microsoft is working to fix the issue as soon as possible. The issue is to do with disjoint namespaces. Basically your NetBios Name doesn't match your FQDN for your domain. For instance, my netbios name for my domain is AD but my FQDN is ad.internal.

There is a thread on TechNet if you are interested in following the issue: http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=1556029&SiteID=17

I've been wondering how to do this in Vista. The registry key is:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Set DisableCAD to 0

Thanks to John at myITforum.com for this one.