Few questions regarding post-install tasks on our fresh 3.6 box:

  1. The machine deploys the WIM, boots into Windows and starts post-install tasks. It reboots almost immediately. It didn't do this before, and now has wasted 1 of my auto-logins I set. It looks like it's disabling UAC by default now? I don't have a script for this, but it shows Disable UAC, Run DPInst as the 2 tasks before rebooting. Why are these running? And why does it reboot? I don't want to modify my WIM image for this now, as it never did this prior to 3.6
  2. I have some very long scripts being deployed post-install (SMART Notebook software). If I let the machine sit for a while, the monitor goes black. At that point, the mouse completely dies. The keyboard will wake the machine, but the mouse doesn't do anything after that.
  3. Last step is to enable UAC? Why? I want this off. It's off as part of my WIM image, and it's set in GPO to set it as off. Why is KACE forcing UAC off, then back on for me? 


5 Comments   [ + ] Show Comments


  • The enable and disable UAC looks like a new steps, and was an issue for us for a minute. However we came up with a task before that to modify the KACE UAC vbs script which is sent down during install, basically removing lines from the VBS.

    Does one of your tasks have reboot set on it after windows is installed?
  • I think the UAC steps may have always been there but are more "visible" with the new task engine. Your policies will still take effect after the imaging process is completed and handed off. Most users are needing some tweaks with the new engine. I never needed an autologon before the upgrade but now I need at least one to keep it "hands off".
  • I'm using WIM, not a scripted install. I've always used this as our master Win7x86 master image, and autologin set to 2. First time, it will go in and install all post-install tasks, rename PC, then restart. It will auto-login to Windows the second time, and join the domain and finish a few other steps. Now, it's reboot before almost any of the post-install tasks begins, and thus eliminating an auto login count.
  • Why not just change your auto login count to one more then? Or do you simply want to eliminate that initial reboot?
  • I would rather eliminate that reboot, as it's a WIM that is already sysprepped, and I don't see any easy way to add another auto-login count.
    • Can you just add to the count in the registry as a post install?
Please log in to comment



To address the confusion with disable/enable UAC, we created this knowledgebase article:


Lead T3 Enterprise Solutions Consultant, K2000

Answered 05/03/2014 by: cserrins
Red Belt

Please log in to comment

As far as I know disabling the UAC it to get the post install tasks to run. It reenables at the end, but I do not think it affects what your .xml, or GPOs are set to. 

For the machine going to sleep I use this as a post install bat script to change the power settings. My GPO will then change them once it joins the domain.

POWERCFG -SETACTIVE 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
POWERCFG -X -monitor-timeout-ac 120
POWERCFG -X -disk-timeout-ac 120
POWERCFG -X -standby-timeout-ac 120

I also kill explorer.exe because I also have long post installs. During those installs users have full access to the machine.

@echo offtaskkill /IM Explorer.exe /F 

As part of my last task I stop the service for my anti-virus. Even though I have an exception for cleanup.exe, it still slows the image down tremendously. It will start back up after the reboot.

Answered 02/25/2014 by: dugullett
Red Belt

  • Hi,

    I believe you can also setup a lockscreen task which is ideal during post installation tasks. This way you wouldn't need to disable explorer.exe. Also, is there a way you can install your sophos agent as the last install before the cleanup task
    • Wouldn't locking the screen defeat the purpose of having the task engine? Sophos is the last task I have. I include a two minute timeout to give it time to communicate with the AV server. These tasks work perfect for me.
Please log in to comment
Answer this question or Comment on this question for clarity