Without seeing the actual relevant smsts.log snippets it's hard to say much 
definitively.

J

From: [email protected] [mailto:[email protected]] On 
Behalf Of Brian Marobella
Sent: Thursday, March 6, 2014 5:36 PM
To: [email protected]
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

I'm running the TS in the State Restore Phase.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Jason Sandys
Sent: Wednesday, March 5, 2014 9:42 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

0x80004005 is *not* Access Denied, it is "Unspecified error".

Where in the TS are you trying to run these?

J

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Brian Marobella
Sent: Wednesday, March 5, 2014 2:00 PM
To: [email protected]<mailto:[email protected]>
Subject: [MDT-OSD] AD Security Group and Local Admins Group During Task Sequence

Are there restrictions, issues or specific steps when trying to run a Task 
sequence that adds an AD Security Group to the Local Admins group or run a Task 
sequence that adds the computer to an Active Directory Security Group?

NOTE: The Task Sequence installs Windows Server 2012 R2

I've tried the following to add an AD Group to the Local Admins Group

·         Administrators001=DOMAIN\Group Name - in CustomSettings.ini

·         Run Task Sequence command = cmd /c net localgroup administrators /add 
" DOMAIN\Group Name"

I've tried the following when trying to add the computer to an AD Security 
Group.

·         Jörgen's script and process 
http://ccmexec.com/2010/08/adding-computer-to-ad-groups-during-deployment/

·         Andrew's process 
http://gallery.technet.microsoft.com/scriptcenter/Add-the-current-computer-3759f02d.

A couple of notes:

1.       I've tried running the TS as a Domain Admin account

2.       The TS fails with permissions denied Return Code = -2147467259 
0x80004005

Is there a character limit in the group name?

Any insight or help would be appreciated.

Thanks

Reply via email to