Windows 10 Upgrade

[mlajoie]

Good morning.  We are trying to upgrade to Windows 1909 on Solidcore enabled devices.  We want to do it somewhat automagically so we're doing this:

--  create a custom property tag and a PAR based on that tag that puts the machine into update mode

--  perform the upgrade

--  resolidify the device

--  exit update mode / back to enable

We are stuck on how to resolidify the device.  If we did it programmatically using sadmin so, we'd need to open the CLI first so that's a problem.  

We're thinking of creating another custom property tag that runs a re-solidification client task.

Is there another way that we can automate this process?

Please advise of any ideas or suggestions.

Thank you very much.

[BenEllis]

Please read through the following documentations:

https://kc.mcafee.com/corporate/index?page=content&id=KB91257

https://docs.mcafee.com/bundle/application-change-control-8.3.x-product-guide-windows/page/GUID-0554...

Windows 10 upgrade steps. https://kc.mcafee.com/corporate/index?page=content&id=KB86551

[mlajoie]

So...yeah. I've been through that. What I'm trying to do is figure out a way that I can re-solidify the device after the upgrade without ePO admin intervention.

We're utilizing tagging to put the machine into update mode. We're thinking of using another tag to have ePO to run the resolidify client task but just aren't sure if that's a good way or if there's a better way?

I don't think we can script the resolidfy commands because we'd have to unlock the CLI first. Is that right? if so, that creates a bit more overhead to the installation. That's why were' going to use the tagging method.

Looking for advice, really.

[Kenchee_etf]

Hello @mlajoie 

What are you using to deploy Win 10 Upgrade on machine? SCCM, maybe?

If you are using anything that can be scripted, you may from ePO:
01. Enable Update Mode.
02. Unlock CLI.

Now you trigger update that will:
01. Upgrade Win10
02. Execute sadmin so locally.
03. Execute sadmin eu.
04. Execute sadmin lockdown locally.

I hope this helps.

[BenEllis]

You could script the re-solidification via the tool of your choice.

If you want to recover the cli via bat : you could use the command "sadmin recover -z password" but please note in your tool your cli password will be in plaintext.

Another thing is you could create a tag to to  automate the client task for resolidification based off that tag.