Deployment to AD Pre-provisioned computers.

Greg_E

I have something that is probably very basic, but I'm not figuring this out.

Say I get a shipment of new computers for a classroom, I pull one of them out to help make the image I need, do everything, sysprep, and grab the image from either USB or network WIE boot. I also add all the computer accounts into their proper AD containers, sync TOEMS with LDAP and can see all the computers and put them in groups.

Now I want to deploy the image, I can boot and deploy without submitting a computer name. But how do I get these new computers to be associated with their AD name so that I can get polices and tasks applied to them?

Everytime I boot and type in a computer name (PCD8443 or PCD8443.lab.lan) I get an image only computer account built, not associated with the PCD8443 that I brought in through LDAP sync.

I've used FOG before, and had to manually create computers with their MAC address to get them to associate hardware to name, do I need to do something similar in TOEMS? If I try to edit the AD imported computers, I'm not allowed to add the MAC address to each.

Greg_E

This is what I see, no matter how I try to boot. I've checked pretty much all the settings against the documentation, and can not discover how this works. secure boot is the goal, but I might need to give up on that goal and try the LIE boot loader and see what happens.

theopenem_admin

Did you install Toec on the image?

Greg_E

No I did not, I can try this and see what changes. For the most basic of imaging tasks I didn't think this was important, and because you can push it after the fact. But after installing it, and preparing it, will the second computer still find the AD created account when I'm deploying the image to it (or multiple other computers)?

I may need to wipe the server out and start again, I've messed up the tftp server something fierce between WIE runner and standalone.

theopenem_admin

All computers are considered Unmanaged(Image Only) until Toec is installed. Toec is what ties everything together. If Toec is installed, as soon as imaging is complete it runs registers itself with it's matching AD computer name, looks at policies assigned to it's group and runs them. If you plan on managing the computers with Toec, it makes the most sense to just put it on the image.

Greg_E

I decided to start over. TOEC on the client wasn't connecting, and too many errors and fixes on TOEMS could be compounding issues. Restored the server to a pre-TOEMS state and wiping the client and fresh win11 25h2 eval going on.

I still have a mental block on this, but going to give it another try and see what I can get done in the next few work days, I shouldn't be constantly interrupted like the last attempt.