We are deploying images to computers throughout our district. The image has been syspreped and we have the Agent deployment configured to run during the GuiRunOnce section of the sysprep.inf file along with the install of Sophos AntiVirus and lastly a gpupdate /force /boot to force the AD policies to refresh and reboot the computer so that it is not left logged in as the local Administrator. Below is the GuiRunOnce section of the sysprep.inf file (server names and passwords changed):
[GuiRunOnce]
Command0="c:\ldsleep.exe 30"
Command1="net use \\LDSERVER\ldlogon Password /u:DOMAIN\LANDesk"
Command2="cmd /q /c \\LDSERVER\ldlogon\wscfg32.exe /F /L /STATUS /NOREBOOT"
Command3="net use \\LDSERVER\ldlogon /d /y"
Command4="cmd /q /c del /q c:\ldsleep.exe"
Command5="cmd /q /c del /q c:\ldiscan.cfg"
Command6="net use \\AVSERVER\SophosUpdate Password /u:DOMAIN\LANDesk"
Command7="\\AVSERVER\SophosUpdate\CIDs\S000\SAVSCFXP\setup.exe -user DOMAIN\LANDesk -pwd Password -mng yes"
Command8="net use \\AVSERVER\SophosUpdate /d /y"
Command9="gpupdate /force /boot"
The imaging has been going fine - during the first boot, after the automated mini-setup completes, the system automatically logs in once and runs the various GuiRunOnce commands to install the agent, the antivirus, and refresh group policy and reboot.
We are able to deploy software through pushes and remote into these machines after imaging like normal, but the machines do not install any software deployed from LANDesk that has been configured using a Policy or as a Policy-Supported Push if the machine was not on at the time of the initial push.
Upon further investigation, it appears that the policy invoker service is not working correctly for the systems to be able to pull installs through policy. We recieve this error in the Desktop Manager when we go to try to refresh the policy "Policy synchronization has failed"
If we re-install the agent again manually by navigating to the ldlogon share and running wscfg32.exe, when the install finishes, the policy invoker starts and the system begins receiving software deployment through policies as it should.
Here is the question: Why does the policy invoker service not start when the agent is installed suring the GuiRunOnce leaving the system unable to receive software? This is extremely detrimental to our re-imaging process as the systems need to install certain location and department specific software packages after they have been imaged. We would like to have these deployments setup as policies so that when the system gets re-imaged, it begins installing any necessary software packages immediately following the imaging process and mini-setup while the system is waiting at the login prompt.