ZCM Imaging Windows 11 - no boot after restore

Hello,

We are trying to build a Windows 11 image using ZCM native Linux engine. We can create the image, restore the image but upon the first boot of the Windows 11 operation system the spinning circle stuck at the Manufacture "Lenovo" screen.

I have narrowed the issue down to a chkdsk issue. After the computer image is restored, computer does not boot, I can boot the computer with the Installation ISO key, go into recovery mode, go to command prompt, change drive to c: and run a chkdsk /f on c:. The process completes and I reboot. Windows 11 boots normal.

I made a Windows 10 Image, captured and restored the image and upon first boot of Windows 10 goes into a chkdsk, repairs itself and then boots.

Whats odd is that in both Windows 10 and Windows 11 ZCM image restores it appears there is a need for a chkdsk /f upon first boot in either OS. Windows 10 does a automatic checkdsk on first boot but Windows 11 just hangs. I checked the regkey to see if the autocheck disk was enabled for windows 11 OS and it is. I did a CHKDSK /f on both installs prior to capturing the image and ran a chkntfs to confirm the drive was not dirty.

ZENworks environment

##########################

ZENworks Configuration Management Version: 23.4.0.0
ZENworks Asset Management Version: 23.4.0.88
ZENworks Patch Management Version: 23.4.0.88
ZENworks EndPoint Security Management Version: 23.4.0.88
ZENworks Full Disk Encryption Version: 23.4.0.88
ZENworks Agent Version: 23.4.0.88
ZENworks Updater Service Last Contact Time: 8:55 AM
ZENworks Updater Service Version: 23.4.0.88

Windows Versions 

##########################

Windows 10 Education Version 22H2.19 64 bit

Windows 11 Education Version 23H2 Build (22631.3593) 64 bit

Windows 10/11 base Image creation process

##########################

1) Install Windows 11 from Iso

2) install Windows patches

3) Deploat OS with Windows10DebloaterGUI.ps1

4) Disable Hibernate with Powercfg /h off

5) Capture Image

6) Deploy image on same exact hardware (changed nothing) then we get boot issue in Windows 11.

Few things I have tried.

I have tried sysprep /oobe and non sysprep same results.

I have switched to using the Texera driver. This made no difference.

I have tried different hardware, same results. Windows 11 first boot stuck on Manufacture screen. Chkdsk /f in recovery mode fixes the issue.

I am wondering if the capture or restore process is causing the system partition to be in a dirty state.

Anyone experience this? does anyone know of a workaround?

Thanks,

Parents
  • 0  

    Is restoremask.xml on your image set to disable the Restore/Changing of the SID?

    https://www.novell.com/documentation/zenworks-23.4/zen_cm_preboot_imaging/data/bg4iu9s.html

    If not, the imaging restore process will try and alter the devices SID which is quite bad on WIndows 7, Really Bad on WIndows 10, and Really Really Bad on WIndows 11.

    The only place left that touches the SID is the Linux Imaging Boot Environment.  ZENworks WInPE has never done it, since that came along after touching SID became a real no-no and all ZENworks Agent code has been stripped of SID Touching.

    --

    Avoiding SID Change is likely sufficient.....

    If that does not help....I recommend creating a fresh image using the latest WIndows 11 Media but w/o any network connection to help ensure no updates are applied to the PC during the Image Creation as that can really mess with restored images as the identity updates itself as part of SYSPREP.  It's generally the store apps that cause the most issues.  If there are specific Windows Updates you want to apply such as the June Cumulative Update....that should be fine but I would download them and apply via a USB stick versus using Windows Update.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • 0 in reply to   

    Created a new BASE Windows 11 23 H2 image

    Process:

    1) install Windows 11 EDU

    2) Wipe all partitions, then let windows installer create partitions

    3) unplugged ethernet cable

    4) No Microsoft updates installed, No hardware drives installed

    5) Ran cmd (administrator elevated) to disable hibernate powercfg /h off

    6) Power off computer, take image

    7) Restore image on same hardware, image process freezes at 7 seconds into the restore process on the following directory:

    c:\Program Files\WindowsApps\Microsoft.VP9VideoExtentions_1.0.50901.0_x64__8wekyb3d8bbwee\x86

  • 0   in reply to 

    "Yes, I forgot to mention that. Restoremask.xml is in the root of C: and when I finish retore an image I see the message "SIDchanger is disabled"

    With that method and the Restore Mask and message.....you SHOULD be good in regards to your issue with needing"CHKDSK".  The Sid Changing breaks the security settings on a number of files all across the computer since the permissions are set to the PCs SID.  Check disk goes through and fixes the invalid ones with the current SID.

    --

    In regards to the issue around VP9VideoExentions....I don't have any Good Suggestions other than the obvious LAME one....

    https://lazyadmin.nl/it/uninstall-microsoft-store-and-default-apps/

    Remove the VP9 Windows Store Apps from ALL USERS prior to taking the image.  

    I want to say something around making sure you are using the TUXERIA Driver....but that would be a total mess...since enabling it would be a major project.  You could test using WInPE on a one off basis.  There could be something in the file system with that app that the LInux NTFS Drivers are not liking.  But getting that fixed would be a Servicec Request and Dev work that will take a while.

    I know folks hate when I say it....But starting on WinPE will save you heart ache in the long run.   Far less Hardware Driver issues and it gives far more imaging options than just Disk Images.  How things work are basically the same with the same imaging commands....just done from a WIndows Boot OS instead of LInux.  When Setting up WinPE you can keep your current setup in place and just and a Boot Menu option to boot WinPE if you select it so you can test and play with it w/o impacting your current designs.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • 0 in reply to   

    Morning Craig,

    I removed the VP9 ... directory. It was not pretty. But the image was able to restore without freezing during the restore process. However the boot issue still remains.

    The TUXERIA driver,. I tried both with and without the TUXERIA driver and I did not see a difference. Same issue, stuck at boot.

    I am using a USBkey to boot the computer. I have not switched over to PXE. This is in the plan. I am using the bootcd_tntfs.iso and used RUFUS to create the USB key.

    After I restore the image, system does not boot. I boot the USB WIn 11 Iso to recovery mode. go to command prompt and do a chkdsk /f. Results are below. After this, system boots.

  • 0   in reply to 

    Does not look like a SID Change issue to me.  I would expect to see errors where it was processing Security Descriptors.  

    You could try running CHECKDSK before creating the image...That might help....If something was sort of flakey...before the image was created....it will just not be made correctly...That was suggested above and could help....

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

Reply Children
No Data