20250305 more notes
This commit is contained in:
112
projects/VZ/Win11-autoinstall-iso.md
Normal file
112
projects/VZ/Win11-autoinstall-iso.md
Normal file
@@ -0,0 +1,112 @@
|
||||
## Source
|
||||
|
||||
- [unattended Winstall - Github](https://github.com/memstechtips/UnattendedWinstall)
|
||||
- [answer files](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs?view=windows-11)
|
||||
- [unattended-generator](https://schneegans.de/windows/unattend-generator/)
|
||||
|
||||
## 20250303 - Todo
|
||||
|
||||
- [ ] Zertifikat (VZBY_SecurityAppliance_SSL_CA.cer) einfuegen
|
||||
- [ ] Vantage Tool Installieren im Userkontext
|
||||
- [ ] Energiesparmodus bei Netzbetrieb auf 'nie' setzen
|
||||
- [ ] Freigabe [\\vzby-srv-fp01\install$](file://vzby-srv-fp01/install$) (nur als Domain-Admin) mappen wäre praktisch…
|
||||
- [ ] SW - M365, MS Teams, PDF24, Sophos Connect, Sophos Endpoint Agent, Firefox, Acrobat Reader, Teamviewer QS aus Public Desktop, Netlogon Script als Verknuepfung auf Plublic Desktop
|
||||
- [ ] SW in Userkontext - SBX-Generator
|
||||
- [ ] Taskleiste:
|
||||
- [ ] ausblenden von: Copilot, Store, Outlook New
|
||||
- [x] Suchefeld auf "nur Suchsymbol setzen"
|
||||
- [ ] Aktive Anwendungen auf "aus"
|
||||
- [x] Taskleiste auf "links" verschieben
|
||||
- [ ] Sophos Connect (wenn installiert), auf "dauerhaft" im SysTray platzieren
|
||||
|
||||
## VZ requirements
|
||||
|
||||
- Kein Secure Boot benoetigt
|
||||
|
||||
### User
|
||||
|
||||
- User: Admin, Pass: Wgdkr!4mE
|
||||
|
||||
### Pre-settings
|
||||
|
||||
- Einfache Systemwiederherstellung (im unattended.xml??, galube nicht umsetzbar, da Microsoft dies erzwingt)
|
||||
- Deaktivierung Schnellstart (DONE)
|
||||
- "Outlook Neu"-Button ausblenden
|
||||
- Kamera und Mikrofon unter Datenschutzeinstellungen einschalten
|
||||
- bei Druckerinstallation: Point to Print-Problem lösen - Reg Key ausführen (reg add "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint" /v RestrictDriverInstallationToAdministrators /t REG_DWORD /d 0 /f)
|
||||
- Energieeinstellungen bei "Netzbetrieb": Nie runterfahren
|
||||
|
||||
### Software
|
||||
|
||||
- **Ninja One Agent**
|
||||
- Office M365 (M365 Business Standard)
|
||||
- PDF24
|
||||
- MS Teams
|
||||
- Lenovo Commercial Vantage
|
||||
- Sophos Endpoint Agent
|
||||
- Sophos Connect
|
||||
- Firefox Browser
|
||||
|
||||
#### Public Desktop
|
||||
- TeamviewerQS.exe (sbx quick support)
|
||||
- Script: Netzlaufwerke aktualisieren (C:\WINDOWS\system32\cmd.exe /c "cscript \\VZBY.lan\NETLOGON\logon.vbs && exit")
|
||||
|
||||
|
||||
|
||||
## Meeting Michael (17.01.2025)
|
||||
|
||||
The steps we want to implement:
|
||||
|
||||
1. Win 11 OS autoinstall - the idea is to use Microsoft's own "Answer files"
|
||||
2. AD coupling - it probably possible to also use the Answer files for this
|
||||
3. Ninja Agent Installation - again, use answer file
|
||||
4. SW Installation - Use NinjaOne
|
||||
5. OS and SW Configuration and Personalization - Use NinjaOne
|
||||
|
||||
## Meeting (10.02.2025)
|
||||
|
||||
#### Teilnehmer
|
||||
|
||||
- Hannah Bischof
|
||||
- Oliver Kaspar
|
||||
- Petar Cubela
|
||||
|
||||
### Takeaway
|
||||
|
||||
- pxe boot optimal (falls moeglich)
|
||||
- generische Win11 Installation
|
||||
- mit Kunden abgestimmte software auf allen Rechner installieren, welche benoetigt wird (NinjaOne)
|
||||
|
||||
- im Buero Loesung haben und potentiell bei groesseren Kunden, wo es sich lohnt
|
||||
|
||||
## Options - autoinstall
|
||||
|
||||
#### pxe
|
||||
- Linux netboot.xyz Server (should work)
|
||||
- SCCM - Configuration Manager
|
||||
- Intune (expensive)
|
||||
|
||||
#### other
|
||||
- boot stick and iso +unattended.xml (Microsoft's answer file)
|
||||
|
||||
## Gespraech mit Martin
|
||||
|
||||
- ablauf und termin muss mit vz geklaert werden. auch in bezug zu unsere ressourcen
|
||||
- idee: pxe-boot einer praeparierten iso+xml welche sich automatisch installiert (samt ninja agent) und darauf folgende Installation aller sw pakete via ninja
|
||||
|
||||
## Meeting Vorbereitung unattende.xml 20250212
|
||||
|
||||
### Open Questions
|
||||
|
||||
- time zone: test automatic time zone settings using the language settings
|
||||
- where should windows explorer be displayed: quick access or _this pc_
|
||||
- hide the _task view_ button?
|
||||
- configure wifi interactively or skip it???
|
||||
- how to inject script? (for instance to install ninja agent)
|
||||
|
||||
### mandatory manually for now
|
||||
|
||||
- change computer name
|
||||
- add to domain (domain join)
|
||||
- ninja agent install
|
||||
- trigger software installation via ninja
|
||||
46
projects/VZ/ninja-install-archive.md
Normal file
46
projects/VZ/ninja-install-archive.md
Normal file
@@ -0,0 +1,46 @@
|
||||
```powershell
|
||||
#Download and Run MSI package for Automated install
|
||||
## VZ
|
||||
#$uri = "https://eu.ninjarmm.com/agent/installer/22ea45a7-e951-4229-b305-ef9178339f0c/verbraucherzentralebayernmnchenmo9-7.0.2317-windows-installer.msi"
|
||||
## SBX link for tests
|
||||
$uri = "https://eu.ninjarmm.com/agent/installer/f816281d-6f56-4f13-abd6-5d4abf4dc67a/softboxhauptsitz-7.0.2317-windows-installer.msi"
|
||||
$out = "c:\Temp\NinjaOneInstaller.msi"
|
||||
|
||||
if ( !( Test-Path "C:\Temp" ) )
|
||||
{
|
||||
New-Item -ItemType Directory -Path "C:\Temp"
|
||||
}
|
||||
|
||||
|
||||
Function Download_MSI_NinjaOne_Installer{
|
||||
Invoke-WebRequest -uri $uri -OutFile $out -UserAgent ([Microsoft.PowerShell.Commands.PSUserAgent]::FireFox)
|
||||
$msifile = Get-ChildItem -Path $out -File -Filter '*.ms*'
|
||||
write-host "NinjaOne MSI $msifile "
|
||||
}
|
||||
|
||||
$msifile = Get-ChildItem -Path $out -File -Filter '*.ms*'
|
||||
Function Install_NinjaOne{
|
||||
write-host "NinjaOne MSI $msifile "
|
||||
$FileExists = Test-Path $msifile -IsValid
|
||||
$DataStamp = get-date -Format yyyyMMddTHHmmss
|
||||
$logFile = '{0}-{1}.log' -f $msifile.fullname,$DataStamp
|
||||
$MSIArguments = @(
|
||||
"/i"
|
||||
('"{0}"' -f $msifile.fullname)
|
||||
"/qn"
|
||||
"/norestart"
|
||||
"/L*v"
|
||||
$logFile
|
||||
)
|
||||
If ($FileExists -eq $True)
|
||||
{
|
||||
Start-Process "msiexec.exe" -ArgumentList $MSIArguments -passthru | wait-process
|
||||
write-host "Finished msi "$msifile
|
||||
}
|
||||
|
||||
Else {Write-Host "File doesn't exists"}
|
||||
}
|
||||
Download_MSI_NinjaOne_Installer
|
||||
$msifile = Get-ChildItem -Path $out -File -Filter '*.ms*'
|
||||
Install_NinjaOne
|
||||
```
|
||||
10
projects/phytron/nextcloud_gitlab_after_hack.md
Normal file
10
projects/phytron/nextcloud_gitlab_after_hack.md
Normal file
@@ -0,0 +1,10 @@
|
||||
|
||||
## Nextcloud
|
||||
|
||||
IP address: 192.168.66.66
|
||||
|
||||
## Gitlab
|
||||
|
||||
IP address: 192.168.66.67
|
||||
|
||||
|
||||
Reference in New Issue
Block a user