Deployment Solution

How to protect with password PXE boot menu for Redeployment (Managed) Computer in  Deployment 7.5.

1. Create PXE Linux Preboot environment with name  “LinuxPXEWinPE”.
2. Create  PXE Windows PE Preboot environment with name “WinPE_PXE”.
3. Create a  “C:\WinpeISO” folder on Notification Server.
4. Run bootwiz.exe  from  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Bootwiz\{374E1C49-4F58-4F5C-8D51-07A30F0D44AD}\cache\bootwiz
5. Click  Create New Configuration
6. Enter Name “WinPEwithPassword”
7. Select in Pre-boot Operating System for this configuration: Windows PE
8. OEM Extension: DS
9. Boot Media Type: ISO
10. Boot Task Type: Automation
11. In the Path field enter the  C:\WinpeISO\WinPEwithPassword.iso
12. Click Next and create iso WinPE file.
13. Download a syslinux from  https://www.kernel.org/pub/linux/utils/boot/syslinux/syslinux-6.01.zip
14. Unzip the syslinux to folder  С:\WinpeISO\syslinux61
15. Go to folder  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images and copy folder  LinuxPXEWinPE to LinuxPXEWinPE.backup
16. Copy file pxelinux.0  from  С:\WinpeISO\syslinux61\bios\core to folder  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC
17. Copy file menu.c32  from  С:\WinpeISO\syslinux61\bios\com32\menu to C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC
18. Copy file ldlinux.c32 from  С:\WinpeISO\syslinux61\bios\com32\elflink\ldlinux  to  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC
19. Copy file memdisk from  С:\WinpeISO\syslinux61\bios\memdisk  to  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC
20. Copy file libutil.c32 from С:\WinpeISO\syslinux61\bios\com32\libutil  to C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC
21. In folder  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC\pxelinux.cfg create file “default “

default menu.c32

prompt 0

menu title PXE Special Boot Menu

menu INCLUDE pxelinux.cfg/graphics.conf

MENU AUTOBOOT Starting Local System in # seconds

label WinPE

                MENU LABEL Boot Windows PE from network

                MENU PASSWD passw0rd 

                kernel memdisk

    append iso raw

                initrd WinPEwithPassword.iso

22. In folder  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC\pxelinux.cfg create file  graphics.conf

menu color tabmsg 37;40      #80ffffff #00000000

menu color hotsel 30;47      #40000000 #20ffffff

menu color sel 30;47      #40000000 #20ffffff

menu color scrollbar 30;47      #40000000 #20ffffff

MENU MASTER PASSWD yourpassword

MENU WIDTH 80

MENU MARGIN 22

MENU PASSWORDMARGIN 26

MENU ROWS 6

MENU TABMSGROW 15

MENU CMDLINEROW 15

MENU ENDROW 24

MENU PASSWORDROW 12

MENU TIMEOUTROW 13

MENU VSHIFT 6

MENU PASSPROMPT Enter Password:

NOESCAPE 1

ALLOWOPTIONS 0

23. Copy  WinPEwithPassword.iso  file to the folder  C:\Program Files\Altiris\Altiris Agent\Agents\Deployment\SBS\Images\LinuxPXEWinPE\x86PC.

24. Go to console Notification Server and configure a NBS General Settings for Redeployment (Managed Computer) and select  Respond to Managed computers ,  “LinuxPXEWinPE “ in PXE boot Image and Continue immediately (Do not prompt) options.

Now, you have to enter password "passw0rd"  for boot to Windows PE for redeployment managed computer.