Microsoft released a new tool for analyzing and comparing sets of Group Policy Objects (GPOs). The tool is is deliverd in a .zip file and requires no installation.
A short guide for troubleshooting Windows Update Agent:
1. Download and execute//install “System Update Readiness Tool (CheckSur)” from https://support.microsoft.com/en-us/kb/947821.
Check the following log for errors C:WindowsLogsCBSCheckSUR.log
2. For any updates that could not be repaired by CheckSur, download the msu-package manually from Microsoft Catalog, http://catalog.update.microsoft.com/v7/site/Home.aspx or from Microsoft Download Center, http://www.microsoft.com/download
3. Create the folder C:WindowsCheckSurpackages if it doesnt already exists and move the downloaded updates there.
4. Execute “System Update Readiness Tool (CheckSur)” again.
5. Install updates from Windows Update.
MDT creates a partition named BDEDrive when it installs Windows OS. This drive is used with Bitlocker to boot the OS. If Bitlocker never will be used the BDEDrive can be removed using the following procedure:
1. Start an elevated command promt and execute the following command to copy startup files to the C-drive:
bcdboot C:Windows /s C:
2. Set partition C: as active:
select disk 0
select part 1
3. Reboot the computer:
shutdown -r -t 0
4. Delete the BCD Drive:
select disk 0
select part 2
There is a more indepth explanation at the following site:
How To Patch Windows Image to be able to install Features On Demand on patched Windows Server 2012:
0. Show applied patches:
WMIC QFE > PATCHES.TXT
1. Download patches using “WSUS Offline Update”
2. Mount the wim-file using dism:
dism /mount-wim /WimFile:C:wsusofflinewiminstall.wim /index:2 /mountDir:C:wsusofflinedismmount
3. Apply patches
dism “/Image:c:wsusofflinedismmount” /Add-Package “/PackagePath:C:wsusofflineclientw62-x64temp”
4. Commit changes
dism /Unmount-Wim /MountDir:c:wsusofflinedismmount /commit
5. Repeat step 2-4 for the other images (index 1,3,4)
To list packages added to the image:
dism /Image:C:wsusofflinedismmount /Get-Packages
For troubleshooting installations:
First of all Powershell Remoting must be enabled on the machine you are going to manage. The command ‘Enable-PSRemoting -Force’ starts the WinRM service, changes its startup mode to automatic and creates a firewall-rule that allows incoming connections.
You can test the connection by entering the following Powershell command from an remote computer:
The result should look something like in the following example:
PS C:UsersTestUser> Test-WsMan TESTCOMPUTER
wsmid : http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd
ProtocolVersion : http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
ProductVendor : Microsoft Corporation
ProductVersion : OS: 0.0.0 SP: 0.0 Stack: 3.0
To create a remote session, enter the following command:
Enter-PSSession -Computername -Credential <domainusername>
Really good article that describes how to remove hidden COM ports for Non-connected Devices, http://www.rttycontesting.com/lagniappe/removehiddencomports.html
The trick is to set the environment variable devmgr_show_nonpresent_devices to 1 as described in Microsoft KB-article 315539, http://support.microsoft.com/kb/315539/en-us.