Help us enhance your Sophos Community experience. Share your thoughts in our Sophos Community survey.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 5 subscribers
  • Views 29109 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SafeGuard Easy 4.30 and OSD in SCCM

JohnS

I'm having some problems with SGE in a OS Deployment, XP to Win 7 in SCCM.

The drive is to be formatted during the OSD task sequence and no data on the drive is to be saved. I've prepared the WinPE image with the filter drivers as described in article 66019 and prepared a .cfg file that disables warning messages to show when MBR has been changed and disables the restore MBR option.

The new image seems to get applied correctly and I can read the disk fine during the task sequence but after restart the floppy icon still appears and it stops at "loading operating system". I've tried using bootsect /nt60 c: /mbr as the first step after the inital restart to WinPE, I've also tried diskpart with "clean" command but none of these has worked. SGE seems to reside in the MBR no matter what I do.

Is there any solution to get SGE out of the MBR and get the drive completely clean from WinPE?

EDIT: I should add that removing SGE from the MBR works fine with diskpart and option clean when I boot to WinPE from a CD, however, this is a Zero Touch scenario so WinPE must be staged and started from the disk. Also, we have the option to uninstall the with a uninstall.cfg file, but that also means a decrypt is needed if I understand correctly, and that simply takes too long in this scenario.

:12557


This thread was automatically locked due to age.
Parents
  • 0

    Hi again,

    I've just tried our ZTI task sequence using the FltDoNothing.exe (version 2.1) accroding to Donmak's post, but I can't get it to work. A quick call to Sophos support in the UK was rather futile as well. All they could say was that 4.30 is probably too old and that the FltDoNothing may not work for this version. A complete decyption was recommended instead.

    Donmak; you said you disabled the POA beforehand. In v. 4.30 there's a MBR protection feature. Did you do any changes to that part in your setup or is that feature removed in 4.50?

    :22821
Reply
  • 0

    Hi again,

    I've just tried our ZTI task sequence using the FltDoNothing.exe (version 2.1) accroding to Donmak's post, but I can't get it to work. A quick call to Sophos support in the UK was rather futile as well. All they could say was that 4.30 is probably too old and that the FltDoNothing may not work for this version. A complete decyption was recommended instead.

    Donmak; you said you disabled the POA beforehand. In v. 4.30 there's a MBR protection feature. Did you do any changes to that part in your setup or is that feature removed in 4.50?

    :22821
Children
No Data
Unfiltered HTML