We are doing something very similar to this for our Citrix Gold Image/Templates which are little bit different than a pure VM template, but essentially our generalization script is run immediately prior to "sealing" the image and does the following:
1. stops the ccmexec service 2. deletes %windir%\smscfg.ini 3. removes the SMS local certificates 4. delete the machine's local configmgr hardware inventory data from WMI 5. stamps a reg key so we can inventory when the generalization script was run Not sure if all of these are required, but it seems to work for us. On Tue, Jul 18, 2017 at 10:37 AM, Burke, John <john.bu...@bellaliant.ca> wrote: > Thanks > > > > *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists. > myitforum.com] *On Behalf Of *Jason Sandys > *Sent:* Tuesday, July 18, 2017 11:47 AM > *To:* mssms@lists.myitforum.com > *Subject:* [mssms] RE: VM gold images? what do you folks do? Current > Branch > > > > Nothing has changed with this in as long as I can remember. You simply > delete the cert, nothing more, nothing less. See > https://docs.microsoft.com/en-us/sccm/core/clients/deploy/ > deploy-clients-to-windows-computers#a-namebkmkclientimagea-how-to- > install-clients-with-a-computer-image for details. > > > > The client auth cert is the client’s identity card, thus changing it > changes its identity which in turn forces it to regenerate any unique IDs > and GUIDs. > > > > J > > > > *From:* listsad...@lists.myitforum.com [mailto:listsadmin@lists. > myitforum.com <listsad...@lists.myitforum.com>] *On Behalf Of *Burke, John > *Sent:* Tuesday, July 18, 2017 8:15 AM > *To:* mssms@lists.myitforum.com > *Subject:* [mssms] VM gold images? what do you folks do? Current Branch > > > > Hi Folks, > > > > Our vm team is asking us about putting the new CB sccm client in the gold > image. I’ve been told that removing guide and cert isn’t supported > anymore. I’m wondering what you folks do with regards to vm gold images. > > > > > >
