Remove User profiles on shared computers

For shared computers on your network where users login and you do not want hundreds of user profiles on the local shared computer.


Put the domain user accounts (or a group) into the local Guests group on the shared computers, when the user logs off, the entire profile is deleted.


From here, https://support.microsoft.com/en-us/help/165398/profiles-for-members-of-guests-group-are-deleted




If needed, you can remove old user profiles with a GPO.
Computer Configuration\Administrative Templates\System\User Profiles


Set Delete User profiles older than a specified number of days on system restart to Enabled

Volume Shadow Copies

Restore from Shadow Copy with long filename


- right click the folder you want to restore from shadow copy
- Previous Versions
- select a date and select Open
- navigate within the Shadow Copy to the problem folder or file that you wish to recover
- choose properties on this folder or file
- General tab, select the Location, highlight and copy the full location path
ex. \\localhost\H$\@GMT-2017.07.14-10.45.03\Shares\Directory\
- open command prompt, cmd.exe
- use robocopy to recover
ex. robocopy "\\localhost\H$\@GMT-2017.07.14-10.45.03\Shares\Directory\" H:\RESTOREHERE /E /COPYALL

HP Procurve Stuff

Firmware update using TFTP
Setup a TFTP server someplace on your network.
Download switch software, extract and place .swi files into TFTP directory
On the switch,
Switch# configure
Switch(config)# copy tftp flash 10.20.30.34 F_04_82.swi
Device will be rebooted, do you want to continue [y/n]? y
File will be copied to switch, should see a line indicating file being written and then switch will reboot itself.


Enable SSH
crypto key generate ssh
show crypto host-public-key
ip ssh
no telnet-server


Trunks
Switch# configure
Switch(config)# trunk 11-13 trk1


Time
Switch# configure
Switch(config)#  timesync sntp
Switch(config)#  sntp unicast
Switch(config)#  sntp server priority 1 192.168.1.23
Switch(config)#  time daylight-time-rule continental-us-and-Canada
Switch(config)#  time timezone -300

CSVDE list Active Directory information

focuses on an OU
csvde -d "OU=Stuff,DC=domain,DC=local" -f output.csv


list of users without computer accounts or contacts
csvde -f output.csv -r "(&(objectClass=user)(objectCategory=person))"


use -l to filter based on columns
csvde -f output.csv -l "DN, givenName, sn, mail, samAccountName"


csvde -f output.csv -r objectClass=user -l "displayName, samAccountName, mail, physicalDeliveryOfficeName

MDT hangs at sysprep working on HP 820 G3

1. In MDT/SSCM edit the task sequence that includes your capture, click on the "OS Info" tab, and click the "Edit Unattend.xml" button.
2. The Windows System Image Manager window will analyze the image you've selected (it will take a while) then display the current answer file configuration.
3. On the left side of the window, in the "Windows Image" pane you should see the name of the image you are using. If not, click the grey box to browse to and select the image file for the task you are performing (if you don't have one yet, try a generic image).
4. The catalog for the Windows image should be available now. Expand the tree to (YourImageName)\Components\amd64_Microsoft-Windows-PnpSysprep_(YourWindowsVersion)_neutral
5. Right-click on amd64_Microsoft-Windows-PnpSysprep_(YourWindowsVersion)_neutral and select to "Add Setting to Pass 3 generalize"
6. In the "Answer File" pane, expand the tree to unattend\Components\3 generalize
7. Click on amd64_Microsoft-Windows-PnpSysprep_neutral, then in the Properties pane to the right, change the value "PersistAllDeviceInstalls" to "true"
8. Save the answer file. You will likely get a warning about several of MDT's default values not passing validation. Ignore it and save it anyways.
9. Run your capture task again and this time sysprep should complete and move on to the "Create WIM" capture task.

Adding a delay to MDT 2013 task sequence

To add a delay to a task sequence, in cases where you need to wait for the network to start before continuing.


In the deployment share , scripts folder edit the Litetouch.wsf script.  Add the Bolded part, value is in ms ( 5000ms = 5 seconds )

Function ValidateDeployRootWithRecovery

  Dim sARF
  Dim sNetworkErrorHint
  DIm iRetVal
  Dim sLTISuspend

  'Delay wait for DHCP  
  wscript.sleep 5000

  If oUtility.ValidateConnectionEx(oEnvironment.Item("DeployRoot"), True) = Success then
   ValidateDeployRootWithRecovery = SUCCESS
   exit function
  End if

Windows 7 : enable wireless connection before domain logon

Problem being laptops needing to logon before connecting to the wireless network, making it impossible for a domain user to logon.


Setup one laptop how you need, then check its WLAN profile name,


netsh wlan show profile


With that information, either create a registry entry on the laptop or add it to your Group Policy.


Registry Entry


HKLM\Software\Microsoft\Windows\CurrentVersion\Run


Create a String Value under the above key, name can be anything, value should be,
%comspec% /c netsh wlan connect name="WLAN PROFILE NAME"


Group Policy


Add to Computer Config > Preferences > Windows Settings > Registry