I'm assuming you don't have a space between the " and the DOMAIN as you have in 
your actual task, right?

-Phil



From: [email protected] [mailto:[email protected]] On 
Behalf Of Brian Marobella
Sent: Friday, March 7, 2014 12:54 PM
To: [email protected]
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

Tried changing command to cmd /c net localgroup administrators " DOMAIN\Group 
Name" /add . Still getting the same unspecified error.

Command completed, return code = -2147467259
Litetouch deployment failed, Return Code = -2147467259  0x80004005

If I run the same command, it works if I add a user profile DOMAIN\UserName.  
Fails when adding an AD Security Group.
From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Paul Kaufman
Sent: Friday, March 7, 2014 12:00 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

Just for clarification, the command line you provided is incorrect.  The "/add" 
switch should come at the end.

Incorrect:            cmd /c net localgroup administrators /add " DOMAIN\Group 
Name"

Correct:                cmd /c net localgroup administrators " DOMAIN\Group 
Name" /add

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Brian Marobella
Sent: Thursday, March 6, 2014 4:36 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

I'm running the TS in the State Restore Phase.

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Jason Sandys
Sent: Wednesday, March 5, 2014 9:42 PM
To: [email protected]<mailto:[email protected]>
Subject: RE: [MDT-OSD] AD Security Group and Local Admins Group During Task 
Sequence

0x80004005 is *not* Access Denied, it is "Unspecified error".

Where in the TS are you trying to run these?

J

From: [email protected]<mailto:[email protected]> 
[mailto:[email protected]] On Behalf Of Brian Marobella
Sent: Wednesday, March 5, 2014 2:00 PM
To: [email protected]<mailto:[email protected]>
Subject: [MDT-OSD] AD Security Group and Local Admins Group During Task Sequence

Are there restrictions, issues or specific steps when trying to run a Task 
sequence that adds an AD Security Group to the Local Admins group or run a Task 
sequence that adds the computer to an Active Directory Security Group?

NOTE: The Task Sequence installs Windows Server 2012 R2

I've tried the following to add an AD Group to the Local Admins Group

·         Administrators001=DOMAIN\Group Name - in CustomSettings.ini

·         Run Task Sequence command = cmd /c net localgroup administrators /add 
" DOMAIN\Group Name"

I've tried the following when trying to add the computer to an AD Security 
Group.

·         Jörgen's script and process 
http://ccmexec.com/2010/08/adding-computer-to-ad-groups-during-deployment/

·         Andrew's process 
http://gallery.technet.microsoft.com/scriptcenter/Add-the-current-computer-3759f02d.

A couple of notes:

1.       I've tried running the TS as a Domain Admin account

2.       The TS fails with permissions denied Return Code = -2147467259 
0x80004005

Is there a character limit in the group name?

Any insight or help would be appreciated.

Thanks
________________________________

PRIVILEGED AND CONFIDENTIAL. This email and any files transmitted with it are 
privileged and confidential and intended solely for the use of the individual 
or entity to whom they are addressed. If you have received this email in error 
please notify the sender. If you are not the named addressee you should not 
disseminate, distribute or copy this e-mail or any of its attachments.


Reply via email to