This topic contains procedures for the tasks that are listed and
described in the following table.
Type |
Procedure |
Prestage Computers
|
- To prestage a client computer
- To prestage a client computer to boot from a
different server
- To prestage a client computer to use a
network boot program other than the default
- To prestage a client computer to use an
unattend file other than the default for the Windows PE phase
of unattended setup
- To prestage a client computer to use a boot
image other than the default
- To prestage a client computer to join a
domain
- To view the attributes of a prestaged
client
|
Configure the Auto-Add Policy
|
- To enable the Auto-Add policy
- To change the length of time approved
computers are held in the Auto-Add database
- To change the length of time rejected and
pending computers are held in the Auto-Add database
- To delete the rejected or approved computers
table
|
Specify Settings for Pending Computers
|
- To change the rate at which pending computers
will poll the server
- To change the number of times pending
computers will poll the server
- To change the message displayed to pending
computers
- To set a default network boot server for
pending computers
- To set a default network boot program for
pending computers
- To set a default unattend file for pending
computers
- To set a default boot image for pending
computers
- To set domain join options for pending
computers
|
Approve and Reject Pending Computers
|
- To view the table of computers that are
pending approval
- To approve a pending computer by using the
default settings
- To approve all pending computers by using the
default settings
- To approve a pending computer, but change a
setting
- To approve all pending computers, but change
a setting
- To reject a pending computer
|
Prestage Computers
To prestage a client computer
Using the Active Directory Users and Computers
snap-in |
Using WDSUTIL |
- On the server running Active Directory Users and Computers,
open the Active Directory Users and Computers MMC snap-in (click
Start, click Run, type dsa.msc, and then click
OK).
|
Note |
|
To manage the server remotely, you can install “AD DS Snap-Ins
and Command-Line Tools” in the Remote Server Administration Tools.
To do this, click Add Features in Server Manager, and
install the feature from the following location: Remote
Server Administration Tools>Remote Administration Tools>AD DS
and AD LDS Tools>AD DS Tools>AD DS Snap-Ins and Command-line
Tools .
|
- In the console tree, right-click the organizational unit that
will contain the new client computer.
- Click New, and then click Computer.
- Type the client computer name, click Next, and then
click This is a managed computer.
- In the text box, type the client computer's MAC address
preceded with twenty zeros or the globally unique identifier (GUID)
in the format: {XXXXXXXX-XXXX-XXXX-XXX-XXXXXXXXXXXX}.
- Click Next, and click one of the following options to
specify which server or servers will support this client
computer:
- Any available remote installation
server
- The following remote installation
server
- Click Next, and then click Finish.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Add-Device /Device:<name>
/ID:<GUIDorMACAddress> where
<GUIDorMACAddress> is the identifier of the new
computer. If you use a MAC address, you must precede it with twenty
zeros (0).
For example: WDSUTIL /Add-Device /Device:Computer1
/ID:{E8A3EFAC-201F-4E69-953F-B2DAA1E8B1B6}
/ReferralServer:WDSServer1 /BootProgram:boot\x86\pxeboot.com
/WDSClientUnattend:WDSClientUnattend\unattend.xml
/User:Domain\MyUser /JoinRights:Full
/BootImagePath:boot\x86\images\boot.wim
/OU:"OU=MyOU,CN=Test,DC=Domain,DC=com"
|
The command in the preceding procedure creates a
computer account object in Active Directory Domain Services
(AD DS) for the specified computer, with the
netbootGUID attribute set to the specified ID.
To prestage a client computer to
boot from a different server
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Device /Device:<name>
/ReferralServer:<ServerName> .
|
The preceding procedure sets the AD DS
netbootMachineFilePath attribute to the specified referral
server.
To prestage a client computer to
use a network boot program other than the default
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Device /Device:<name>
/BootProgram:<path> , where <path>
is the relative path to the boot program you want from the
RemoteInstall folder.
|
The preceding procedure appends the specified path to
the referral server as part of the netbootMachineFilePath
attribute on the computer.
To prestage a client computer to
use an unattend file other than the default for the Windows PE
phase of unattended setup
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Device /Device:<name>
/WDSClientUnattend:<path> , where the path is relative
to the unattend file you want from the RemoteInstall folder.
|
The preceding procedure sets the
WdsUnattendFilePath variable in the
netbootMirrorDataFile AD DS attribute on the client’s
computer account object to the specified path.
To prestage a client computer to
use a boot image other than the default
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Device /Device:<name>
/BootImagePath:<path> , where <path>
is the relative path to the boot image you want from the
RemoteInstall folder.
|
This command sets the BootImagePath variable in
the netbootMirrorDataFile AD DS attribute on the
client’s computer account object to the specified path.
To prestage a client computer to
join a domain
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Do one of the following:
- To enable the specified user to join the
client computer to the specified domain once, run
WDSUTIL
/Set-Device /Device:<name> /User:<user>
/JoinRights:JoinOnly /JoinDomain:Yes /Domain:<domain>
/ResetAccount , where:
<user> is domain\user or user@domain
<name> is the name of the computer
<domain> is the name of the domain
- To enable the specified user to join the
client computer to the specified domain at any time, run
WDSUTIL /Set-Device /Device:<name> /User:<user>
/JoinRights:Full /JoinDomain:Yes /Domain:<domain> .
- To join the client computer to the specified
domain without granting any user rights, run
WDSUTIL
/Set-Device /Device:<name> /JoinDomain:Yes
/Domain:<domain> .
|
The preceding procedure sets the JoinDomain
variable in the netbootMirrorDataFile AD DS attribute
on the client’s computer account object to 1. It also grants
the specified user rights on the computer object.
To view the attributes of a
prestaged client
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Do one of the following:
- To view the prestaged client by name in the
local domain, run
WDSUTIL /Get-Device
/Device:<name> .
- To view a prestaged client by ID (GUID or
MAC) in the local domain, run
WDSUTIL /Get-Device
/ID:<ID> .
|
Note |
|
To specify that the client is in a domain other than the local
one, specify /Domain:<domain> with either of
these commands.
|
|
Note |
|
To search the entire AD DS forest, specify
/Forest:Yes with either of these commands.
|
|
The preceding procedure displays the requested
information from the folder.
Configure the Auto-Add Policy
For more information about the Auto-Add policy, see
Enabling the Auto-Add Policy at Prestaging Client
Computers
To enable the Auto-Add policy
Using the MMC |
Using WDSUTIL |
- Right-click the server, and then click Properties.
- On the PXE Response settings tab, click Respond to
all (known and unknown) client computers.
- Select the check box For unknown clients, notify
administrator and respond after approval.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddPolicy
/Policy:AdminApproval .
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\Policy
to 1.
To change the length of time
approved computers are held in the Auto-Add database
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddPolicy /RetentionPeriod
/Approved:<time in days> .
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\ApprovedRetention
to the specified number.
To change the length of time
rejected and pending computers are held in the Auto-Add
database
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddPolicy /RetentionPeriod
/Others:<time in days> .
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\OtherRetention
to the specified number.
To delete the approved or rejected
computers table
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Delete-AutoAddDevices
/DeviceType:<ApprovedDevices|RejectedDevices> .
|
The preceding procedure deletes the contents of the
approved or rejected table in the Auto-Add database.
Specify Settings for Pending Computers
To change the rate at which pending
computers will poll the server
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- To set the time between polls, run
WDSUTIL /Set-Server
/AutoAddPolicy /PollInterval:<time in seconds> .
|
This command sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\PollInterval
to the specified time.
To change the number of times
pending computers will poll the server
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddPolicy
/MaxRetry:<retries> .
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\PollMaxRetry
to the specified value.
To change the message displayed to
pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddPolicy
/Message:<message> .
|
This procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\PollMessage
to the specified message.
To set a default network boot
server for pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddSettings
/Architecture:{x86|x64|ia64} /ReferralServer:<server
name> .
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\ReferralServer
to the specified server name.
To set a default network boot
program for pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddSettings
/Architecture:{x86|x64|ia64} /BootProgram:<path> ,
where the <path> is relative to the
RemoteInstall folder.
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\BootProgramPath
to the specified path.
To set a default unattend file for
pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddSettings
/Architecture:{x86|x64|ia64}
/WDSClientUnattend:<path> , where the path is relative
to the RemoteInstall folder.
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\WdsUnattendFilePath
to the specified path.
To set a default boot image for
pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Set-Server /AutoAddSettings
/Architecture:{x86|x64|ia64} /BootImage:<path> , where
<path> is relative to the RemoteInstall
folder.
|
The preceding procedure sets
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\BootImagePath
to the specified path.
To set domain join options for
pending computers
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Do one of the following:
- To enable the specified user (specified as
domain\user or user@domain) to join the client computer to the
specified domain once, run
WDSUTIL /Set-Server
/AutoAddSettings Architecture:{x86|x64|ia64} /User:<user>
/JoinRights:JoinOnly /JoinDomain:Yes
/Domain:<domain> .
- To enable the specified user to join the
client computer to the specified domain at any time, run
WDSUTIL /Set-Server /AutoAddSettings
Architecture:{x86|x64|ia64} /User:<user> /JoinRights:Full
/JoinDomain:Yes /Domain:<domain> .
|
The preceding procedure sets:
-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\JoinRights
to 0 if Join Only and 1 if Full
-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WDSServer\Providers\WDSPXE\Providers\BINLSVC\AutoApprove\<architecture>\JoinDomain
to 1.
Approve and Reject Pending Computers
To view the list of computers that
are pending approval
Using the MMC |
Using WDSUTIL |
- Expand the server node.
- Select the Pending Devices node.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Get-AutoAddDevices
/DeviceType:PendingDevices .
|
The preceding procedure displays the Auto-Add devices
table from the Binlsvcdb.mdb file.
To approve a pending computer by
using the default settings
Using the MMC |
Using WDSUTIL |
- Select the Pending Devices node.
- Right-click the computer you want to approve, and then click
Approve.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Approve-AutoAddDevices
/RequestID:<ID> with the ID obtained from the Auto-Add
database.
|
The preceding procedure approves the computer. For more
information, see Prestaging Client
Computers.
To approve all pending computers by
using the default settings
Using the MMC |
Using WDSUTIL |
- Right-click the Pending Devices node.
- Click Approve All.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Approve-AutoAddDevices
/RequestID:All .
|
The preceding procedure approves the computers. For
more information, see Prestaging Client
Computers.
To approve a pending computer, but
change a setting
Using the MMC (name change only) |
Using WDSUTIL |
- Select the Pending Devices node.
- Select the computer you want to approve.
- On the Action menu, click Name and Approve.
- In the dialog box, type the name you want to give the
computer.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Approve-AutoAddDevices
/RequestID:<ID> with the ID obtained from the Auto-Add
database
In addition, you can append this command with the following
options:
- To change the name, specify
/MachineName:<name>
- To change the organizational unit (OU) where
the account will be created, specify
/OU:<name of
OU> .
- To change the user account for the domain
join, specify
/User:<name> where the name is
domain\user or user@domain.
- To enable the user to join this computer to
the domain only once, specify
/JoinRights:JoinOnly .
- To enable the user to join this computer to
the domain at any time, specify
/JoinRights:Full .
- To join this computer to the domain, specify
/JoinDomain:Yes .
- To direct the computer to install from a
different Windows Deployment Services server, specify
/ReferralServer:<server name> .
- To change the network boot program used,
specify
/BootProgram:<path> .
- To change the unattend file used for the
Microsoft Windows Preinstallation Environment (Windows PE)
phase of unattended setup, specify
/WDSClientUnattend:<path> .
- To change the boot image used, specify
/BootImagePath:<path> .
|
The preceding procedure approves the computer, with the
configured settings. For more information, see Prestaging Client
Computers.
To approve all pending computers,
but change a setting
Using the MMC |
Using WDSUTIL |
N/A
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Run
WDSUTIL /Approve-AutoAddDevices
/RequestID:All
In addition, you can append this command with the following
options:
- To change the OU where the accounts will be
created, specify
/OU:<name of OU> .
- To change the user account used for domain
join, specify
/User:<name> where the name is
domain\user or user@domain.
- To allow the user to join these computers to
the domain once only, specify
/JoinRights:JoinOnly .
- To allow the user to join these computers to
the domain at any time, specify
/JoinRights:Full .
- To join these computers to the domain,
specify
/JoinDomain:Yes .
- To direct the computers to install from a
different Windows Deployment Services server, specify
/ReferralServer:<server name> .
- To change the network boot program used,
specify
/BootProgram:<path> .
- To change the unattend file used for the
Windows PE phase of unattended setup, specify
/WDSClientUnattend:<path> .
- To change the boot image used, specify
/BootImagePath:<path> .
|
The preceding procedure approves the computers with the
configured settings. For more information, see Prestaging Client
Computers.
To reject a pending computer
Using the MMC |
Using WDSUTIL |
- Select the Pending Devices node.
- Right-click the computer, and then click Reject or
Reject All.
|
- Click Start, right-click Command Prompt, and
click Run as administrator.
- Do one of the following:
- To reject a single computer, run
WDSUTIL /Reject-AutoAddDevices /RequestID:<ID>
with the ID obtained from the Auto-Add database.
- To reject all computers, run
WDSUTIL
/Reject-AutoAddDevices /RequestID:All .
|
The preceding procedure sets the Status field for the
computer to 2 (rejected) in the table of pending computers, and it
sends the Abortpxe.com file to the computer.