Powershell Script through SCCM 1902

Question

Powershell Script through SCCM 1902

DukeHazord 1

Hi,

I have a question regarding executing custom PS Scripts via SCCM. I am trying run a PowerShell script via task sequence by invoking through command line.

%windir%\System32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Bypass -File C:\users\public\PersonalTemplates.ps1 -CurrentUser

I am trying to amend an entry in HKCU via script. The task sequence suggests it ended successfully. The script returns with code 0 but it doesn't modify/amend the value in the registry. Instead, I get the following error in the smsts.log:

RegQueryValueExW is unsuccessful for Software\Microsoft\SMS\Task Sequence, SMSTSEndProgram TSManager 13936 (0x3670)

GetTsRegValue() is unsuccessful. 0x80070002. TSManager 13936 (0x3670)

I have even tried the sysnative path suggestion but it fails to find that path (as I believe it doesn't exist) All our clients machines are 64 bit Windows 10 systems

When the script is run manually on a machine, it works absolutely fine.

Please advise what am I doing wrong

Regards.

AllenLiu-MSFT 49,311 Reputation points Microsoft External Staff

2021-01-29T06:13:00.497+00:00

sccm related issue, I changed the tag
DukeHazord 1 Reputation point

2021-01-29T09:24:35.807+00:00

This is my first post and I was trying to find the SCCM tag. Thanks for that. Hopefully, someone here would have a solution for me

Regards

2 answers

Your answer

AllenLiu-MSFT 49,311 Reputation points Microsoft External Staff

2021-01-29T06:13:00.497+00:00

sccm related issue, I changed the tag
DukeHazord 1 Reputation point

2021-01-29T09:24:35.807+00:00

This is my first post and I was trying to find the SCCM tag. Thanks for that. Hopefully, someone here would have a solution for me

Regards

Answer 1

Youssef Saad 3,416

Hi @DukeHazord ,

Have you tried create a package with the script & command line and add it on your task sequence? Make sure you deploy the script in the user context.

Regards,

Youssef Saad | New blog: https://youssef-saad.blogspot.com
Please remember to ** “Accept answer” ** or upvote for useful answers, thank you!

DukeHazord 1 Reputation point

2021-02-01T11:23:18.61+00:00
Hi Youssef,

I am not sure if I follow. I will tell you what I have done so far:

First, I created Script under 'Scripts' and then right-click on a device to deploy. When you try to monitor the status it is stuck on creating client jobs and does not execute

Then I tried to include it in Task Sequence, it didn't work

Then I ran a batch script in Task Sequence that would copy the script to client's machine and then ran another command line to execute the script. It doesn't work

By seeing the above state error RegQueryValueExW and GetTsRegValue() I thought the script is unable to access registry. I then decided to right a simple PS Script which basically pulls the content of a folder with dir command and creates output in a text file but I get the same error. I have the Full Administrator role which has the permission to run scripts.

I will attempt it through a package, but why am I unable to run scripts on collections or via Task Sequence?

Answer 2

This biggest issue is that CM runs in System Context, so HKCU isn't really a thing when running a process via CM.

Now there are some things in CM that you can do to make things run in the logged on user's context, but not in a Task Sequence. ServiceUI.exe was a way to get around this limitation to display things to the user, but that won't help in this situation.

If you're trying to set a registry value for users, I'd suggest using a configuration item and having it run in the user's context, which will have rights to the user's registry hive.

The best way to deal with USER registry items IMO, is group policy.

Share via

Powershell Script through SCCM 1902

2 answers

Your answer