Tried changing command to cmd /c net localgroup administrators " DOMAIN\Group 
Name" /add . Still getting the same unspecified error.

Command completed, return code = -2147467259
Litetouch deployment failed, Return Code = -2147467259  0x80004005

If I run the same command, it works if I add a user profile DOMAIN\UserName.  
Fails when adding an AD Security Group.
From: [email protected] [mailto:[email protected]] On 
Behalf Of Paul Kaufman
Sent: Friday, March 7, 2014 12:00 PM
To: [email protected]
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

Just for clarification, the command line you provided is incorrect.  The "/add" 
switch should come at the end.

Incorrect:            cmd /c net localgroup administrators /add " DOMAIN\Group 
Name"

Correct:                cmd /c net localgroup administrators " DOMAIN\Group 
Name" /add

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Brian Marobella
Sent: Thursday, March 6, 2014 4:36 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

I'm running the TS in the State Restore Phase.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Jason Sandys
Sent: Wednesday, March 5, 2014 9:42 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

0x80004005 is *not* Access Denied, it is "Unspecified error".

Where in the TS are you trying to run these?

J

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Brian Marobella
Sent: Wednesday, March 5, 2014 2:00 PM
To: [email protected]<mailto:[email protected]>
Subject: [MDT-OSD] AD Security Group and Local Admins Group During Task Sequence

Are there restrictions, issues or specific steps when trying to run a Task 
sequence that adds an AD Security Group to the Local Admins group or run a Task 
sequence that adds the computer to an Active Directory Security Group?

NOTE: The Task Sequence installs Windows Server 2012 R2

I've tried the following to add an AD Group to the Local Admins Group

·         Administrators001=DOMAIN\Group Name - in CustomSettings.ini

·         Run Task Sequence command = cmd /c net localgroup administrators /add 
" DOMAIN\Group Name"

I've tried the following when trying to add the computer to an AD Security 
Group.

·         Jörgen's script and process 
http://ccmexec.com/2010/08/adding-computer-to-ad-groups-during-deployment/

·         Andrew's process 
http://gallery.technet.microsoft.com/scriptcenter/Add-the-current-computer-3759f02d.

A couple of notes:

1.       I've tried running the TS as a Domain Admin account

2.       The TS fails with permissions denied Return Code = -2147467259 
0x80004005

Is there a character limit in the group name?

Any insight or help would be appreciated.

Thanks

Reply via email to