Then you can view it and see what is happening. Then go to the Control\Mcafee folder and replace the ts.xml file with this one.
Create a dummy x86 deploy TS named Mcafee. Save the two sections together as ts.xml. Sc stop "McAfee Endpoint Encryption Agent"ĮpeWinUpgradeTool.exe -SaveMbr c:\EpeMbr.datĮpeWinUpgradeTool.exe -SetFileLocks UnlockĬscript.exe "%SCRIPTROOT%\f" /captureĬscript.exe "%SCRIPTROOT%\f" /captureĬscript.exe "%SCRIPTROOT%\f" /captureĬscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f" /PEĮpeWinUpgradeTool.exe -SetMbr C:\EpeMbr.datĬscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"ĮpeWinUpgradeTool.exe -SaveMbr X:\EpeMbr.datĬmd /c "copy /V /Y %DEPLOYROOT%\Extra\%ARCHITECTURE%\Windows\System32\Drivers\MfeEEAlg.sys C:\Windows\System32\Drivers\MfeEEAlg.sys"Ĭmd /c "copy /V /Y %DEPLOYROOT%\Extra\%ARCHITECTURE%\Windows\System32\Drivers\MfeEpePc.sys C:\Windows\System32\Drivers\MfeEpePc.sys"Ĭmd /c "copy /V /Y %DEPLOYROOT%\Extra\%ARCHITECTURE%\Windows\System32\Drivers\SafeBoot.sys C:\Windows\System32\Drivers\SafeBoot.sys"Ĭmd /c "copy /V /Y %DEPLOYROOT%\Extra\%ARCHITECTURE%\Windows\System32\Drivers\SbAlg.sys C:\Windows\System32\Drivers\SbAlg.sys"Ĭscript.exe "%SCRIPTROOT%\UpdateMcAfeeEEReg.vbs"Ĭscript.exe "%SCRIPTROOT%\f"ĮpeWinUpgradeTool.exe -SetMbr X:\EpeMbr.dat Ĭscript.exe "%SCRIPTROOT%\ZTI_f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript.exe "%SCRIPTROOT%\f"Ĭscript "%SCRIPTROOT%\f" "-number-of-reboots 10" I removed some capture image tasks to get the character count down. OLogging.CreateEntry "Safeboot Reg Value does not exist", LogTypeWarning OLogging.CreateEntry "Setting Safeboot Epe Task Sequence variable to False", LogTypeInfo OLogging.CreateEntry "Setting Safeboot Epe Task Sequence variable to True", LogTypeInfo If InStr( UCASE(strSafebootRegData), "STATE=ENCRYP" ) Then OLogging.CreateEntry strOutlookRegValue & " value = " & strSafebootRegData, LogTypeInfo StrSafebootRegData = oShell.RegRead(strSafebootRegValue) If RegistryValueExists(strSafebootRegValue) Then OLogging.CreateEntry "Reading value at " & strSafebootRegValue, LogTypeInfo OLogging.CreateEntry "Current OS is detected as " & oEnvironment.Item("Architecture"), LogTypeInfo StrSafebootRegValue = "HKLM\SOFTWARE\McAfee EndPoint Encryption\MfeEpePC\Status\CryptState" StrSafebootRegValue = "HKLM\SOFTWARE\Wow6432Node\McAfee EndPoint Encryption\MfeEpePC\Status\CryptState" If UCase(oEnvironment.Item("Architecture")) = "X64" Then OLogging.CreateEntry "Beginning Safeboot encryption Registry key checks", LogTypeInfo This is the function from my preflight check wsf file that checks the registry for the Safeboot enryption status key: 'Checking encryption status
Then all the other tasks are performed if EpeStatus = True We search for "STATE=ENCRYP" because the reg key value has a typo where it shows up as Encryped. We have a pretty extensive preflight script checking for We had trouble with systems that were once encrypted, but decrypted, being re-encrypted, so we changed our detection process to look for a regisgtry key.
VERIFY YOUR STARTIN FOLDER AND TARGET DRIVERS
Is the documentation correct on adding drivers and registry to WinPE, without the drivers in WinPE the disk is not accesible as I tried to load a clean WinPE to see if that is going to work but it is not able to access the C: drive as its encrypted.Īttaching my (edited) TS.xml. Failed to run the last action: Apply Operating System. Permissions on the requested may be configured incorrectly. Iam able to get to point where its applying the OS but errors I have followed the steps as of the document below to load the drivers in WinpE
VERIFY YOUR STARTIN FOLDER AND TARGET WINDOWS 7
Please can you explain in detail as am trying to make to refresh systems from XP to WIndows 7 using SCCM 2007 with all systems encrypted with McAfee EEPC and when trying to wipe and load the OS its throwing up the access denied error at every stage.
0 kommentar(er)
