RE: Windows 7 Sysprep, PITA

2013-01-18 Thread Kennedy, Jim
What I do is make an image just before I sysprep it.  Then reboot it and 
sysprep and make an image and use that in production.

So I always have an image that is in audit mode to fall back on.

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, January 18, 2013 4:12 PM
To: NT System Admin Issues
Subject: Re: Windows 7 Sysprep, PITA

I've had issues with windows Vista/7 images. Here's one of the big gotchas:

You can only sysprep an image 3 times. After that, it's no good... you'll have 
to start over.

What that means: You make a base install of 7 and sysprep (1) image it. then 
you make a basic image with your usual software ans sysprep (2) that. Then you 
make a very specific lab image and sysprep (3) that... That's it. you can't do 
it anymore. If you try to modify your 3rd sysprep image and re-sysprep (4) 
it... game over.

This is one of the ways Microsoft is trying to prevent piracy. Either that or 
they are trying to drive techs crazy.


--Matt Ross
Ephrata School District


- Original Message -
From: itli...@imcu.com
[mailto:itli...@imcu.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 18 Jan 2013
13:01:31 -0800
Subject: Windows 7 Sysprep, PITA


> Why is the sysprep on Windows 7 so hard to get right?
> 
> I have an image that has worked for over a year.
> 
> I added some software to it and reimaged.
> 
> Not the original machine comes out of Sysprep just fine but the 
> install.wim is failing on all imaged devices with a Windows failed  to 
> load please insert Windows media and try again.
> 
> WTF???
> 
> Any ideas?
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
>   ~
> 
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



Re: Windows 7 Sysprep, PITA

2013-01-18 Thread Matthew W. Ross
I've had issues with windows Vista/7 images. Here's one of the big gotchas:

You can only sysprep an image 3 times. After that, it's no good... you'll have 
to start over.

What that means: You make a base install of 7 and sysprep (1) image it. then 
you make a basic image with your usual software ans sysprep (2) that. Then you 
make a very specific lab image and sysprep (3) that... That's it. you can't do 
it anymore. If you try to modify your 3rd sysprep image and re-sysprep (4) 
it... game over.

This is one of the ways Microsoft is trying to prevent piracy. Either that or 
they are trying to drive techs crazy.


--Matt Ross
Ephrata School District


- Original Message -
From: itli...@imcu.com
[mailto:itli...@imcu.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 18 Jan 2013
13:01:31 -0800
Subject: Windows 7 Sysprep, PITA


> Why is the sysprep on Windows 7 so hard to get right?
> 
> I have an image that has worked for over a year.
> 
> I added some software to it and reimaged.
> 
> Not the original machine comes out of Sysprep just fine but the
> install.wim is failing on all imaged devices with a Windows failed  to
> load please insert Windows media and try again.
> 
> WTF???
> 
> Any ideas?
> 
> 
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~   ~
> 
> ---
> To manage subscriptions click here:
> http://lyris.sunbelt-software.com/read/my_forums/
> or send an email to listmana...@lyris.sunbeltsoftware.com
> with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin



RE: Patch management recommendations

2013-01-18 Thread Tom Miller
Cost depends on your business type, appliance used, and the number of nodes you 
need.  I saved so many man-hours with KBox and that was a big factor.  (About 
four years I ago I tried to get SCCM working.  We got it working, but it 
required constant attention and so many man-hours.  In the end I spent so many 
man-hours on it that the cheap non-profit cost was pointless.  Changed to more 
expensive Kbox and cut the man-hours by 75% easily.  My experience only and no 
offense to you SCCM folks.)

-Original Message-
From: Matthew W. Ross [mailto:mr...@ephrataschools.org] 
Sent: Friday, January 18, 2013 11:55 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

We looked at the KBox several years ago. Is it still extremely expensive? (I 
think we were quoted $20,000, which is a lot for us.)


--Matt Ross
Ephrata School District


- Original Message -
From: Tom Miller
[mailto:tmil...@sfgtrust.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 18 Jan 2013
04:25:03 -0800
Subject: RE: Patch management recommendations


> I had a conference yesterday with the Kace team and a product 
> overview.  The newest release has lots of cool features that I didn't 
> see in the version I used previously.  And if you do not already have 
> a help desk, you can use that module (no extra cost).  For small 
> companies like mine, this sort of all-in-one product is great.  Users 
> can enter tickets, install software (system perms not logged in user), 
> and read any internal KB docs you wish to post.  KBox also comes with 
> two Bomguard licenses, so you do not need extra GoToAssist or whatever 
> purchases, if you just need a few licenses.
> 
> Not that it may matter to the list, but I always found the Kbox agent 
> very easy to deploy and upgrade.
> 
> Tom
> 
> From: John Cook [mailto:john.c...@pfsf.org]
> Sent: Thursday, January 17, 2013 9:39 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> We run Kace as a Virtual appliance (K1000) with no tweaks and it 
> handles our approx. 250 computers with no issue.
> 
>  John W. Cook
> Network Operations Manager
> Partnership For Strong Families
> 5950 NW 1st Place
> Gainesville, Fl 32607
> Office (352) 244-1610
> Cell (352) 215-6944
> MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4
> 
> From: Glen Johnson [mailto:gjohn...@vhcc.edu]
> Sent: Thursday, January 17, 2013 9:36 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> Almost all the Virginia Community colleges, dumped Altiris in favor of KACE.
> The latest update to Altiris was a disaster for everyone that attempted it.
> We were not one of the brave colleges to try, but from what I heard, 
> the system requirements were huge, a dual socket, quad core server 
> with 24gig ram was barely adequate to serve 3 to 400 client workstations.
> Ouch.
> We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual 
> socket, quad core with 16gig ram under vmware 5 and it is very responsive.
> Also two other windows virtuals on the same host.
> The instructor led training was very good also.
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Thursday, January 17, 2013 9:08 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> I'd take a step back to wait and see on Altiris with yesterday's news.
> 
> http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-
> again-symantec-dumping-it-for-less-than-it-paid/
> 
> From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
> Sent: Thursday, January 17, 2013 8:40 AM
> To: NT System Admin Issues
> Subject: Re: Patch management recommendations
> 
> Kace
> Altiris
> SCCM with SCUP
> 
> One of these should fit most of your clients needs.
> Christopher Bodnar
> Enterprise Architect I, Corporate Office of Technology:Enterprise 
> Architecture and Engineering Services
> 
> Tel 610-807-6459
> 3900 Burgess Place, Bethlehem, PA 18017 
> christopher_bod...@glic.com
> 
> [cid:image001.jpg@01CDF492.11CAAC30]
> 
> The Guardian Life Insurance Company of America
> 
> www.guardianlife.com
> 
> 
> 
> 
> 
> 
> 
> From:"Charlie Kaiser"
> mailto:charl...@golden-eagle.org>>
> To:"NT System Admin Issues"
> mailto:ntsysadmin@lyris.sunbelt-software.com>>
> Date:01/16/2013 06:04 PM
> Subject:Patch management recommendations
> 
> 
> 
> 
> I work for a consulting firm that manages a variety of SMB clients. As 
> we increase our client load and the size of the clients (moving from 
> the 3-10 seat to the 50-1000 seat clients) we are implementing more 
> advanced products for a variety of tasks.
> 
> We are currently looking at patch management solutions. Our current 
> paradigm is a mix of WSUS and manual intervention, but it's not 
> enough, obviously. I haven't used a centralized patch management 
> system for aroun

RE: Patch management recommendations

2013-01-18 Thread Matthew W. Ross
We looked at the KBox several years ago. Is it still extremely expensive? (I 
think we were quoted $20,000, which is a lot for us.)


--Matt Ross
Ephrata School District


- Original Message -
From: Tom Miller
[mailto:tmil...@sfgtrust.com]
To: NT System Admin Issues
[mailto:ntsysadmin@lyris.sunbelt-software.com]
Sent: Fri, 18 Jan 2013
04:25:03 -0800
Subject: RE: Patch management recommendations


> I had a conference yesterday with the Kace team and a product overview.  The
> newest release has lots of cool features that I didn't see in the version I
> used previously.  And if you do not already have a help desk, you can use
> that module (no extra cost).  For small companies like mine, this sort of
> all-in-one product is great.  Users can enter tickets, install software
> (system perms not logged in user), and read any internal KB docs you wish to
> post.  KBox also comes with two Bomguard licenses, so you do not need extra
> GoToAssist or whatever purchases, if you just need a few licenses.
> 
> Not that it may matter to the list, but I always found the Kbox agent very
> easy to deploy and upgrade.
> 
> Tom
> 
> From: John Cook [mailto:john.c...@pfsf.org]
> Sent: Thursday, January 17, 2013 9:39 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our
> approx. 250 computers with no issue.
> 
>  John W. Cook
> Network Operations Manager
> Partnership For Strong Families
> 5950 NW 1st Place
> Gainesville, Fl 32607
> Office (352) 244-1610
> Cell (352) 215-6944
> MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4
> 
> From: Glen Johnson [mailto:gjohn...@vhcc.edu]
> Sent: Thursday, January 17, 2013 9:36 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> Almost all the Virginia Community colleges, dumped Altiris in favor of KACE.
> The latest update to Altiris was a disaster for everyone that attempted it.
> We were not one of the brave colleges to try, but from what I heard, the
> system requirements were huge, a dual socket, quad core server with 24gig
> ram was barely adequate to serve 3 to 400 client workstations.
> Ouch.
> We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket,
> quad core with 16gig ram under vmware 5 and it is very responsive.
> Also two other windows virtuals on the same host.
> The instructor led training was very good also.
> 
> From: Rod Trent [mailto:rodtr...@myitforum.com]
> Sent: Thursday, January 17, 2013 9:08 AM
> To: NT System Admin Issues
> Subject: RE: Patch management recommendations
> 
> I'd take a step back to wait and see on Altiris with yesterday's news.
> 
> http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/
> 
> From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
> Sent: Thursday, January 17, 2013 8:40 AM
> To: NT System Admin Issues
> Subject: Re: Patch management recommendations
> 
> Kace
> Altiris
> SCCM with SCUP
> 
> One of these should fit most of your clients needs.
> Christopher Bodnar
> Enterprise Architect I, Corporate Office of Technology:Enterprise
> Architecture and Engineering Services
> 
> Tel 610-807-6459
> 3900 Burgess Place, Bethlehem, PA 18017
> christopher_bod...@glic.com
> 
> [cid:image001.jpg@01CDF492.11CAAC30]
> 
> The Guardian Life Insurance Company of America
> 
> www.guardianlife.com
> 
> 
> 
> 
> 
> 
> 
> From:"Charlie Kaiser"
> mailto:charl...@golden-eagle.org>>
> To:"NT System Admin Issues"
> mailto:ntsysadmin@lyris.sunbelt-software.com>>
> Date:01/16/2013 06:04 PM
> Subject:Patch management recommendations
> 
> 
> 
> 
> I work for a consulting firm that manages a variety of SMB clients. As we
> increase our client load and the size of the clients (moving from the 3-10
> seat to the 50-1000 seat clients) we are implementing more advanced products
> for a variety of tasks.
> 
> We are currently looking at patch management solutions. Our current paradigm
> is a mix of WSUS and manual intervention, but it's not enough, obviously. I
> haven't used a centralized patch management system for around 5-6 years
> (used to use early versions of Shavlik) so I haven't been keeping up with
> the market. We're now looking for something that does 3rd party apps, not
> just MS stuff, so WSUS is off the table. Our clients are all on MS
> platforms, though; almost no *nix or Apple.
> 
> I don't envision a one-size-fits-all product. I expect that we'll want a
> variety of solutions tailored to the size and complexity of the client. And
> I have no illusions about the "ease" of patch management given any product.
> :-)
> My boss would love an MSP-style of centrally managed product that can handle
> all our clients, but my belief is that trying to go that route is much more
> difficult than doing per-client implementations, es

RE: Patch management recommendations

2013-01-18 Thread Tom Miller
I had a conference yesterday with the Kace team and a product overview.  The 
newest release has lots of cool features that I didn't see in the version I 
used previously.  And if you do not already have a help desk, you can use that 
module (no extra cost).  For small companies like mine, this sort of all-in-one 
product is great.  Users can enter tickets, install software (system perms not 
logged in user), and read any internal KB docs you wish to post.  KBox also 
comes with two Bomguard licenses, so you do not need extra GoToAssist or 
whatever purchases, if you just need a few licenses.

Not that it may matter to the list, but I always found the Kbox agent very easy 
to deploy and upgrade.

Tom

From: John Cook [mailto:john.c...@pfsf.org]
Sent: Thursday, January 17, 2013 9:39 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

We run Kace as a Virtual appliance (K1000) with no tweaks and it handles our 
approx. 250 computers with no issue.

 John W. Cook
Network Operations Manager
Partnership For Strong Families
5950 NW 1st Place
Gainesville, Fl 32607
Office (352) 244-1610
Cell (352) 215-6944
MCSE, MCP+I, MCTS, CompTIA A+, N+, VSP4, VTSP4

From: Glen Johnson [mailto:gjohn...@vhcc.edu]
Sent: Thursday, January 17, 2013 9:36 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

Almost all the Virginia Community colleges, dumped Altiris in favor of KACE.
The latest update to Altiris was a disaster for everyone that attempted it.
We were not one of the brave colleges to try, but from what I heard, the system 
requirements were huge, a dual socket, quad core server with 24gig ram was 
barely adequate to serve 3 to 400 client workstations.
Ouch.
We currently run both the K1000 and K2000 on a HP/Compaq dl-380 dual socket, 
quad core with 16gig ram under vmware 5 and it is very responsive.
Also two other windows virtuals on the same host.
The instructor led training was very good also.

From: Rod Trent [mailto:rodtr...@myitforum.com]
Sent: Thursday, January 17, 2013 9:08 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

I'd take a step back to wait and see on Altiris with yesterday's news.

http://myitforum.com/myitforumwp/2013/01/16/altiris-to-become-altiris-again-symantec-dumping-it-for-less-than-it-paid/

From: Christopher Bodnar [mailto:christopher_bod...@glic.com]
Sent: Thursday, January 17, 2013 8:40 AM
To: NT System Admin Issues
Subject: Re: Patch management recommendations

Kace
Altiris
SCCM with SCUP

One of these should fit most of your clients needs.
Christopher Bodnar
Enterprise Architect I, Corporate Office of Technology:Enterprise Architecture 
and Engineering Services

Tel 610-807-6459
3900 Burgess Place, Bethlehem, PA 18017
christopher_bod...@glic.com

[cid:image001.jpg@01CDF492.11CAAC30]

The Guardian Life Insurance Company of America

www.guardianlife.com







From:"Charlie Kaiser" 
mailto:charl...@golden-eagle.org>>
To:"NT System Admin Issues" 
mailto:ntsysadmin@lyris.sunbelt-software.com>>
Date:01/16/2013 06:04 PM
Subject:Patch management recommendations




I work for a consulting firm that manages a variety of SMB clients. As we
increase our client load and the size of the clients (moving from the 3-10
seat to the 50-1000 seat clients) we are implementing more advanced products
for a variety of tasks.

We are currently looking at patch management solutions. Our current paradigm
is a mix of WSUS and manual intervention, but it's not enough, obviously. I
haven't used a centralized patch management system for around 5-6 years
(used to use early versions of Shavlik) so I haven't been keeping up with
the market. We're now looking for something that does 3rd party apps, not
just MS stuff, so WSUS is off the table. Our clients are all on MS
platforms, though; almost no *nix or Apple.

I don't envision a one-size-fits-all product. I expect that we'll want a
variety of solutions tailored to the size and complexity of the client. And
I have no illusions about the "ease" of patch management given any product.
:-)
My boss would love an MSP-style of centrally managed product that can handle
all our clients, but my belief is that trying to go that route is much more
difficult than doing per-client implementations, especially without
dedicated patch management admins.

Having said all that, is anyone working with patch management systems that
they really like for this space? Also, any you really DON'T like?

Thanks!

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***




~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com

RE: Patch management recommendations

2013-01-18 Thread Ray
I'm just glad I no longer have to travel there for games.  It's a pitstop on
our way to Las Vegas. 

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org] 
Sent: Thursday, January 17, 2013 5:17 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

It is indeed an odd town. But when you're a falconer, it's one of the best
places in the US to live...

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, January 17, 2013 3:38 PM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

There is that. Kind of an odd town though. My kids played sports against
Kingman.  

-Original Message-
From: Charlie Kaiser [mailto:charl...@golden-eagle.org]
Sent: Thursday, January 17, 2013 10:44 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

Everything's remote. Most clients in California, but cost of living is
better here... :-)

***
Charlie Kaiser
charl...@golden-eagle.org
Kingman, AZ
***


-Original Message-
From: Ray [mailto:rz...@qwest.net]
Sent: Thursday, January 17, 2013 7:53 AM
To: NT System Admin Issues
Subject: RE: Patch management recommendations

In Kingman? Wow. 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~
  ~

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin