Skip to content

Month: July 2016

Use WMIC to get the exact model/make of your computer

A short tip and note to myself. A quick way to get the exact model and manufacturer from a Windows PC using the command line.

wmic computersystem get model,name,manufacturer,systemtype

This command gives me all the information I need to add the client for MDT deployments..

We usually configure MDT to look for the Model + Manufacturer to locate the drivers needed for the computer. We will add a driver group on the MDT Deployment share and inject the drivers in the MDT Task Sequence to filter the drivers like ‘Windows 7 x64\%make%\%model%. These are Windows variables.

This will give us the following folder tree for the Out-of-Box Drivers folder in MDT.

MDTdrivesr

 

Leave a Comment

Allow change password via RDP

I’ve experienced a few times that i’m not allowed to login using RDP because my password is expired or that ‘use must change password at next login’ is enabled in the Active Directory.

Today was one of those moments. I could not login to an customer environment i havent logged in to for a while, because my password was expired. So ehm.. I had to login to change my password, but I could not login to change my password because my password was expired.. right..
Now what? The customer wasn’t available at that time and I had to get to work.

I have found the following work around for that.

Lokaal

  1. Start mstsc.exe
  2. enter the remote desktop connection
  3. Click ‘Save as..’
  4. Save the RDP file as something like: ChangePassword.RDP
  5. Open notepad.exe and open the RDP file you just created.
  6.  add enablecredsspsupport:i:0 at the bottom of the file.clip_image003_thumb

Save the file, start the RDP connection using this file. Now you will have the possibility to change your password!

What if CredSSP is required?

If CredSSP (Credential Security Support Provider is required to login to the remote desktop, you will get the following error message:
Try to make an RDP connection using the full FQDN (servername.domain.local) in stead of just the servername. Otherwise, the above solution is not possible. Except when you disable CredSSP.

CredSSP can be disabled to change de RDP settings on the remote desktop to disable ‘Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended).’

Leave a Comment