[Casper] Dual booting Macbooks!!!!

Wed Jul 16 11:56:53 PDT 2008

Well

A bit of an update here.

We used the JAMF tools (scripts and netinstall creator) to make the images.  On the windows side there is an object policy that detects the bot camp preference pane in control panels, and if that program is there it does a few things via a zen policy.

Since we use Novell client to log in, I also disabled the Microsoft networking client, so no need to sys prep and no need to have unique names, which cuts down our imaging time.  At log in the MAP test software is automatically launched, as well as this command to keep the laptops from sleeping.  

c:\windows\system32\powercfg.exe -setactive "always on"

We found out that if they go to sleep it kills the connection, which kills the app, which forces a reboot, and we don't want to make our user base frustrated.

We had to increase the size of the windows partition to make the imaging process happy.  It seems we get less failures with the partition size being about 35% for Windows.

On the windows side I disabled port 80 and 443 originally through a local policy using MMC, but since it was such a pain I ended up using a free firewall application that just blocks all outgoing port 80 and 443 requests.  It actually is a redirect to the localhost instead.  That way no student would really want to run windows, since we only need it for one purpose.

Then once MAP is terminated in any possible way (through the app or task manager or if it crashes) another script executes (via that same object policy) that can open up applications and mimic mouse clicks.  It opens up the boot camp exe on windows and selects the OS X volume and then selects restart.

So, this is very possible to do, and at the same time very ridiculous.  However, MAP testing is not supported on intel macs and we have nothing but intel macs.  I successfully had 20 machines test no issues at all yesterday.  

I used autoIT for the mouse script.  Here is the script

;; boot_to_osx.au3
;;
;; there's no way to do this with the command line or anything,
;; so here's a little autoit script to use apple's provided
;; utility to bless the OSX drive.

#requireadmin

Run("C:\Windows\system32\AppleControlPanel.exe")
WinWait("Boot Camp Control Panel")
WinActivate("Boot Camp Control Panel")
WinWaitActive ("Boot Camp Control Panel")
ControlClick ("Boot Camp Control Panel", "", "[CLASSNN:SysListView321]", "left", 1, 40, 20)
ControlClick("Boot Camp Control Panel", "OK", 1)

Here is where you can find the app to download, it is free

http://www.autoitscript.com/autoit3/downloads.shtml

This works, but we do have a failure rate with imaging, and after about 2 weeks of testing and troubleshooting I am about to call it an AFP problem.  When you start a session of say 20 clients AFP jumps up and plateaus.  Which is fine, but about half way through it will spike.  I am thinking that this spike is when the casper client switches from the OS X image to the windows image, and AFP does some weird auto balancing thing where it changes the client's speeds.  When this happens I think that the windows image doesn't always get deployed right.  We have 100% success rate with the OS X image every single time, and the Windows side will get the no bootable devices found error at start up.  The Windows success rate is any where from 70% to 100% per each run of imaging.  If you wipe it and reimage it, it works 9 times out of 10.  That 1 time out of 10 is hardware failure, either bad NIC or bad HD.  Also while troubleshooting this issue, and this is a HUGE find, I took the windows installation and booted off an XP CD and ran recovery console.  I ran a chkdsk /r on the windows installation right before making the image.  This not only fixed some of my issues with the image not copying right but it shaved off 1.6 Gigabytes!!!!! of the total image size.  Since Windows likes to cache all those system updates, and they are already compressed they are pretty much wasted space on the installation.  I ran CCcleaner to get rid of all that stuff but it didn't fully go away until I ran that chkdsk /r on the C:\ drive. 

Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
cell:  913-449-7589
office:  913-627-0351
>>> "Ernst, Craig S." <ERNSTCS at uwec.edu> 06/30/08 2:21 PM >>>
Pay them what you would for Microsoft, Parallels or Citrix licenses to make a working Mac product. =)

And was the Citrix expert actually someone from Citrix? I find it hard to believe the advice you were given about that product, but I wouldn't be surprised on the price you may have been quoted for it. Microsoft also has things up their sleeve related to Terminal Services I think.

Maintaining dual-boot is probably what you should do as a last resort in my opinion. For the added cost I would do Parallels if you don't need to leverage the native power of the hardware. Managing that many more clients and keeping them secure and up-to-date. I'd think you'd want a single point of update if possible instead of doubling the client base.

We're still working on our dual boot environment because of some really SIMPLE tools an enterprise needs to properly maintain it. Like booting from Windows to Mac via a command line interface so you can script it or schedule it. (and if anyone has a solution for that I'm all eyes) There are lots of other good tools out there for cloning and what not.

Craig

On 6/30/08 2:07 PM, "Thomas Larkin" <tlarki at kckps.org> wrote:

Ironically, Virtual machine licenses like Parallels of VMware Fusion for that many clients is actually more expensive than a 1 year least of windows xp professional.  The developer is willing to pick up most of the tab if we just straight run windows.  Plus they can only guarantee us that it runs on windows, since it has never been heavily tested in virtual environments.

I have used Bombich's tools in the past, and I guess I could just use them again to deploy a dual booting image.  I have about a month to complete this and get it rolled out to 6,000 machines.  So, basically I have the rest of this week to get it working because next week we start mass imaging.

Thomas Larkin
TIS Department
KCKPS USD500
tlarki at kckps.org
cell:  913-449-7589
office:  913-627-0351
>>> Tom Welch <tom.welch at venturethree.com> 06/30/08 2:03 PM >>>
Hi Thomas

Could you possibly look at using parallels? I know there is an extra
cost but it would be very easy to push out with Casper. Then you could
either deploy the virtual hd image or a virtual cd image pointing
towards a ghost server to image the virtual machine. And if your
developer is paying :p

I also think you might be able to use apple's net install to deploy
bootcamp. But it might just be the partition. I've not fully looked
into it.

Good luck!
--
Many Thanks
Tom Welch

On 30 Jun 2008, at 18:45, "Thomas Larkin" <tlarki at kckps.org> wrote:

> Guess I should clarify....
>
> The old mac version corrupts the database files on intel macs.  The
> windows version works with out a hitch, hence the need to load
> windows clients on the macs...
>
> Sorry Should have pointed that out to begin with.
>
> Thomas Larkin
> TIS Department
> KCKPS USD500
> tlarki at kckps.org
> cell:  913-449-7589
> office:  913-627-0351
>>>> "Thomas Larkin" <tlarki at kckps.org> 06/30/08 12:36 PM >>>
> The problem is with this software to my knowledge is that it is
> based on older PPC and classic architecture and while it does in
> fact run under Rosetta when it writes results to their database it
> corrupts it.  This is a problem particular to OS X so I think that
> using a PPC emulator or even an API like crossover or perhaps even a
> virtual machine will all be moot.  We have unlimited windows 98
> client and I am installing a virtual machine of it right now via
> virtual box.
>
> We can't pick up a new product because there is no way to migrate
> the database to another technology.  The developer says they promise
> a web based product by 2009, but what does that mean?  All it means
> to me is that this next school year I will be forced to do whatever
> it takes to get this software to work.
>
> This is a known issue and is why the developer offered to pay 90% of
> our one year lease costs of WinXP Pro on 6,000 clients.
>
> I have done this before in iMac labs with Bombich's software and the
> boot camp beta, and it all worked.  However, the 1:1 laptop
> environment is a bit different.  After I get everything up and
> running I got to make sure the machine is still locked down on both
> sides since our students take their machines home, and because the
> FCC and CIPA require us to filter their Internet surfing.
>
> This will be a project indeed.
>
> Thomas Larkin
> TIS Department
> KCKPS USD500
> tlarki at kckps.org
> cell:  913-449-7589
> office:  913-627-0351
>>>> "Smith, William" <william.smith at merrillcorp.com> 06/30/08 12:24
>>>> PM >>>
> On 6/30/08 12:14 PM, "Thomas Larkin" <tlarki at kckps.org> wrote:
>
>> Due to powers that be it looks like I must load Windows on all of
>> our Macbooks
>> for one piece of software.  This is a critical piece of software
>> that our
>> users need and there is no alternative, for a long story short.
>> So, the
>> software company that is in question is offering to pay for 90% of
>> the costs
>> for windows licenses for one year until they migrate their product
>> to a web
>> based one.
>
> Any possibility at all that this could work in CrossOver Mac? I know
> not
> every Windows application works but if it does work for your
> application
> then it means less overhead.
>
> --
>
> bill
>
> William M. Smith, Technical Analyst
> MCS IT
> Merrill Communications, LLC
> (651) 632-1492
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper
>
> _______________________________________________
> Casper mailing list
> Casper at list.jamfsoftware.com
> http://list.jamfsoftware.com/mailman/listinfo/casper

_______________________________________________
Casper mailing list
Casper at list.jamfsoftware.com
http://list.jamfsoftware.com/mailman/listinfo/casper