Sometimes when running an SCCM task sequence, you want to prompt for input, for example to populate a Task Sequence variable that you will use later. In this example, I am encrypting a laptop HDD (SED) using Wave ERAS, and I’m using a command-line tool that populates the pre-boot authentication screen with the AD account of the laptop end-user. This runs during a post-deployment task sequence that provisions the encryption. As each laptop is prepared for a different end user, I needed to prompt for the user account during the task sequence, then pass the input to a script that adds the account to the encryption pre-boot.
To accomplish this I decided to use a Powershell script with ServiceUI.exe to prompt for and set the TS variable, then pass this variable to the encryption script as a parameter. I tested it using SCCM 2012R2 integrated with MDT2013, but I can’t see why it wouldn’t work in older versions that support ServiceUI.exe.
Here’s the ‘how to’:
Create a Package
First, create a package in SCCM that contains the Powershell script below, and the ServiceUI.exe. ServiceUI.exe comes with MDT and allows you to break out of the TS session into the user session, where you can interact. Since I still deploy some x86 OS’s at times, I decided to include both the x86 and x64 version of the executable in the same package, and rename them accordingly, although the x86 version will probably work for both architectures. Then I use a TS condition to create separate steps for x86 and x64.
You can find the ServiceUI.exe here:
C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x64, or
C:\Program Files\Microsoft Deployment Toolkit\Templates\Distribution\Tools\x86
This script prompts for input during a task sequence, and sets the input as a TS variable.
# Close the TS UI temporarily
$TSProgressUI = New-Object -COMObject Microsoft.SMS.TSProgressUI
# Prompt for input
[System.Reflection.Assembly]::LoadWithPartialName('Microsoft.VisualBasic') | Out-Null
$TSUsername = [Microsoft.VisualBasic.Interaction]::InputBox("Enter the username of the end user", "Username prompt", "eg tjones")
# Set the TS variable
$tsenv = New-Object -COMObject Microsoft.SMS.TSEnvironment
$tsenv.Value("TSUsername") = $TSUsername
Distribute your package to your DPs, no program is required for it.
What does the script do?
First, it hides the task sequence UI while the prompt is displayed, otherwise it will appear behind the UI. Second, we prompt for the input. Lastly we pass the input into a new TS variable called %TSUsername%.
Add Task Sequence Steps
Next, we will add a step to the task sequence that prompts for the username. Add a ‘Run Command Line’ step and use the package you created. Call the ServiceUI_x86.exe with the following parameters:
ServiceUI_x86.exe -process:TSProgressUI.exe %SYSTEMROOT%\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File PromptForUsername.ps1
Do the same for the x64 version of ServiceUI, if you are using both versions. You can set a simple OS version condition on each task to determine the architecture:
Next I update my ‘add user’ step passing the %TSUsername% variable into the parameters of the command:
When the task sequence runs, it will prompt for the username:
It then adds the user into the preboot authentication via the script. We can see from the SMSTS.log that it correctly substitutes the variable when running the command:
This example uses a non-deployment task sequence; it should also work during a deployment, although I didn’t test it yet 🙂 To work during the WinPE phase, you will need to add Powershell support to your boot image. For OS deployment there are more elegant ways of getting input during the WinPE Phase, such as Jason Sandys’ OSD++, or by using an HTA, but that may seem a bit much if just one or two inputs are required, so this is an excellent and easily implemented alternative that can be used during any task sequence.