Abstract:
This document will go over creating a filter for machines that have not joined the domain and how to import the drivers and to use the newly created filter to install the drivers onto the newly imaged machines
Assumptions:
*This how to does not cover setting up or how to import software into the console. It is assumed that a general knowledge of importing software and using policies to deliver software is understood
Create the filter:
Note: this procedure is for machines that join a workgroup. If your machines join a domain after imaging then skip this section
From the console go to Manage > Filters
At the top of the tree right click on Filters > New > Filter
A new filter will be created in the main window
Select QueryMode: Raw SQL for the Filter Definition
enter:
select Guid,name,Domain
from vcomputer
where domain = 'WORKGROUP'
click 'Save Changes'
Rename the filter to: 'Computers joined to WorkGroup'
Create the Software Resource:
1) Get the drivers required for your system
many drivers are compressed executables. Use 7zip to decompress the executables. You may need to do this several times to get to the driver exe
NOTE: If a readme.txt is provided read it to see if there is a silent switch available to silently install the driver. If no silent switch is available then user interaction maybe needed to progress the installation along. Also go to the vendors website and search the forums for managed driver installation
2).Import the driver exe into the console as a software release. Use article: http://www.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-2 for importing the software and create a rule to detect the software.
3.)If imaging diffterent vendor models in your environment. A way to detect to those systems is needed to deploy the drivers just to those machines.
4.) Use a detection rule to verify the software driver is indeed installed
Click on 'New' detection rule
Possible driver registry paths are:
a.)HKLM\SYSTEM\CurrentControlSet\Services Registry Tree
b.)HKLM\SYSTEM\CurrentControlSet\Control Registry Tree
c.)HKLM\SYSTEM\CurrentControlSet\Enum Registry Tree
d.)HKLM\SYSTEM\CurrentControlSet\HardwareProfiles Registry Tree
Create a managed software delivery policy. Use article: http://www.symantec.com/connect/articles/symantec-software-management-71-best-practices-part-4 for creating the policy
1.) Apply the policy to computers;
2.) Schedule the policy: set the time for 5 minuntes after the hour. The time is not important here, what is important is for the computers to apply the policy after the it has joined the 'WorkGroup'. What is important is to set the repeat of the policy to run 'Daily'. When the computer gets the policy and the time has passed then computer will run the policy almost immediately
Don't forget ot click the 'Save Changes" button