Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)

Securing customSettings.INI

%3CLINGO-SUB%20id%3D%22lingo-sub-2411234%22%20slang%3D%22en-US%22%3ESecuring%20customSettings.INI%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2411234%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EThis%20is%20my%20customSettings.INI%20file%20used%20by%20MDT%2FSCCM%20OSD%20task%20sequence%20gather%20step%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-bash%22%3E%3CCODE%3E%20%5BSettings%5D%0A%20Priority%3DCSettings%2C%20Default%0A%20Properties%3DOSInstall%2C%20DomainNetBiosName%2C%20TimeZoneName%2CCustomProperty1%2CCustomProperty2%0A%20%20%20%20%0A%20%5BDefault%5D%0A%20OSInstall%3DN%0A%20SkipCapture%3DYES%0A%20SkipAdminPassword%3DNO%0A%20SkipProductKey%3DYES%0A%20KeyboardLocale%3Den-AU%0A%20SLShare%3D%5C%5Cserver1.mydomain.local%5CmyLogs%24%5CLogs%0A%20%20%20%20%0A%20%5BCSettings%5D%0A%20SQLServer%3Dserver1.mydomain.local%5Cps1SCCM%0A%20Database%3DmyDBTst%0A%20Netlib%3DDBMSSOCN%0A%20DBID%3DMDTMyCS%0A%20DBPwd%3DmyPass%0A%20Table%3DComputerSettings%0A%20Parameters%3D%20MacAddress%2C%20OSDCOmputerName%0A%20ParameterCondition%3DOR%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EIs%20there%20a%20way%20to%20secure%20DBPwd%20by%20either%20encrypting%20or%20supplying%20through%20a%20TS%20variable%20instead%20of%20plaintext%3F%3C%2FSPAN%3E%3CBR%20%2F%3E%3CSPAN%3ESCCM%20version%20CB%201906%20%3B%20MDT%20integrated.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2411234%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECM%20current%20branch%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EGeneral%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

This is my customSettings.INI file used by MDT/SCCM OSD task sequence gather step:

 

 

 [Settings]
 Priority=CSettings, Default
 Properties=OSInstall, DomainNetBiosName, TimeZoneName,CustomProperty1,CustomProperty2
    
 [Default]
 OSInstall=N
 SkipCapture=YES
 SkipAdminPassword=NO
 SkipProductKey=YES
 KeyboardLocale=en-AU
 SLShare=\\server1.mydomain.local\myLogs$\Logs
    
 [CSettings]
 SQLServer=server1.mydomain.local\ps1SCCM
 Database=myDBTst
 Netlib=DBMSSOCN
 DBID=MDTMyCS
 DBPwd=myPass
 Table=ComputerSettings
 Parameters= MacAddress, OSDCOmputerName
 ParameterCondition=OR

 

 

 

Is there a way to secure DBPwd by either encrypting or supplying through a TS variable instead of plaintext?
SCCM version CB 1906 ; MDT integrated.

0 Replies