Abstract:

This document will go over creating a filter for machines that have not joined the domain and how to import the drivers and to use the newly created filter to install the drivers onto the newly imaged machines

Assumptions: 

• CMS or ITMS is installed on NS.

• Managed Software Solution is installed on clients

• knowledge on importing software into the console

• 7zip to unzip exe driver packages. 

*This how to does not cover setting up or how to import software into the console. It is assumed that a general knowledge of importing software and using policies to deliver software is understood

Create the filter:

Note: this procedure is for machines that join a workgroup. If your machines join a domain after imaging then skip this section

From  the console go to Manage > Filters

At the top of the tree right click on Filters > New > Filter

A new filter will be created in the main window

Select QueryMode: Raw SQL for the Filter Definition

enter:    

select Guid,name,Domain 

from vcomputer

where domain = 'WORKGROUP'

click 'Save Changes' 

 Rename the filter to: 'Computers joined to WorkGroup'

Create the Software Resource:

1) Get the drivers required for your system

many drivers are compressed executables. Use 7zip to decompress the executables. You may need to do this several times to get to the driver exe

NOTE: If a readme.txt is provided read it to see if there is a silent switch available to silently install the driver. If no silent switch is available then user interaction maybe needed to progress the installation along. Also go to the vendors website and search the forums for managed driver installation

2).Import the driver exe into the console as a software release. Use article: http://www.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-2  for importing the software and create a rule to detect the software.

3.)If imaging diffterent vendor models in your environment. A way to detect to those systems is needed to deploy the drivers just to those machines.

• Once the resource is created go to the rules tab to create a rule
• Click on 'New' applicability rule
• Copy the key name from regedit: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\BIOS
• Copy value name that identifies the products Example: SystemFamily
• Copy the Value Data: Example ThinkPad T420
• Create a new rule
• Click on the '+' > Standardtrule > Registry Key Value
• enter the Registry key Path name: example: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\BIOS
• enter the Registry entry: example SystemFamily
• enter the Registry valule: example: ThinkPad T420
• Name the Rule to something like ThinkPad T420. This rule then can be used for other drivers for which the the computer needs a driver.
• click on 'OK' button

4.) Use a detection rule to verify the software driver is indeed installed

Click on 'New' detection rule

• Copy the key name from regedit. 

Possible driver registry paths are:

a.)HKLM\SYSTEM\CurrentControlSet\Services Registry Tree

b.)HKLM\SYSTEM\CurrentControlSet\Control Registry Tree

c.)HKLM\SYSTEM\CurrentControlSet\Enum Registry Tree

d.)HKLM\SYSTEM\CurrentControlSet\HardwareProfiles Registry Tree

• Copy value name that identifies the products
• Copy the Value Data
• Create a new rule
• Click on the '+' > Standardtrule > Registry Key Value
• enter the Registry key Path name
• enter the Registry entry
• enter the Registry valule
• Name the Rule to something like that identifies the driver. This rule then can be used for other drivers for which the the computer needs a driver.
• click on 'OK' button

Create a managed software delivery policy.  Use article: http://www.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-4 for creating the policy

1.) Apply the policy to computers;

1. Add a filter to the Policy. For this example we'll apply it to 'Computers joined to WorkGroup'.
   
   1. Click the Applied to button, and choose Filter.
   2. Click the Add Rule button.
   3. Change the 1st option to Exclude all computers not in.
      NOTE: The double-negative usage may be confusing. To put it into perspective, note that the Filter starts including all computers, thus the wording, while not intuitive, is accurately labeled in the context.
   4. Leave the 2nd option on Filter.
   5. Choose the filter Computers Joined to WorkGroup that we created.
   6. Click OK to apply the filter

2.) Schedule the policy: set the time for 5 minuntes after the hour. The time is not important here, what is important is for the computers to apply the policy after the it has joined the 'WorkGroup'. What is important is to set the repeat of the policy to run 'Daily'. When  the computer gets the policy and the time has passed then computer will run the policy almost immediately

Don't forget ot click the 'Save Changes" button