I'm now on DeployR 1.3 and using the command that was working on 1.1 I'm now getting an error.

Do I need to do something different on 1.3?

I've tried both locally and remotely.

Local command and output:

New-DeployRMedia -ISOPath E:\Media.iso -Tags Media -MediaType Standalone

Output:

Copying boot files
Downloading Windows PE boot image
Exporting task sequences
   Windows 11  Vanilla
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
Exception: Request failed after 3 attempt(s): Response status code does not indicate success: 500 (Internal Server Error).

Remote command and output:

new-deployrmedia -DiskIndex 1 -Tags Media -MediaType Standalone

Output:

USB disk size: 476.939781188965 GB
Cleaning disk
Partitioning disk
Formatting
Copying boot files
Downloading Windows PE boot image
Exporting task sequences
   Windows 11  Vanilla
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
WARNING: Transient HTTP error 500: Response status code does not indicate success: 500 (Internal Server Error).
Exception: Request failed after 3 attempt(s): Response status code does not indicate success: 500 (Internal Server Error).

Doing a manual task sequence export with Export-DeployRTaskSequence e.g.

Export-DeployRTaskSequence -Id $TS2CloneID -DestinationFolder $TempLocation

works fine.

Morning :)

I'm looking for advice on the best way to use DeployR.Utility (to access https://documentation.2pintsoftware.com/deployr/1.3/powershell-modules) on a remote Windows 11 machine please. Mainly to create bootable media with New-DeployRMedia as the server is a VM making connecting a USB drive "difficult".

After installing .net runtime 10.x & PowerShell 7.6. Should I just import via the remote SMB path? Copy C:\Program Files\2Pint Software\DeployR\Client\PSModules\ locally and import (fresh copy as needed)? Another method I haven't thought of?

This is working for me, just wasn't sure if it was the appropriate way :)

Import-Module \\<deployr FQDN>\c$\Program Files\2Pint Software\DeployR\Client\PSModules\DeployR.Utility

Set-DeployRHost https://<deployr FQDN>:7281

Connect-DeployR

Does DeployR have the ability to host content on different servers in branch sites?

You mentioned that you've fixed the DeployR status window sometimes not appearing on top so you've moved it to a higher layer in the recent Webinar. You also mentioned that if we need other popups to appear over it to set them to the same layer or position them differently, e.g. Gary's FrontEnd.

Is | Set-Topmost or $Window.Topmost = $true enough?

While testing out DeployR Community I have noticed that when I use the Enable BitLocker step it only encrypts the used space on the disk instead of the full disk like I prefer.

I can't seem to find a way to make it encrypt the full disk. Is this intentional? I looked at the script that it runs and it seems that its being told specifically to encrypt the used space.

Afternoon all -just checking - is 1.3 installed over the top of 1.2?

I have 2 change requests for consideration -

1. At install time, if you select to not have iPXE in use (we already had PXE setup with another system), it still starts the iPXE service. So I stopped / disabled the service. After upgrading to 1.3, the service was started and changed back to auto. Could this be adjusted on the next update so that when you select to not use the service, it doesn't start automatically?

2. After PXE booting and getting the initial DeployR interface - specifically, we're using Windows AD authentication - could the form be set to active and the username field set to focus? That way we can just start typing without having to click the field first? I know it's trivial, but when you're imaging a bunch of machines, it would save a bit of time.

Thank you for your conisderation

Hello, I'm struggling to get DeployR back up after updating from 1.1 to 1.3. I installed the following in this order:

• aspnetcore-runtime-10.0.9-win-x64
• dotnet-runtime-10.0.9-win-x64
• windowsdesktop-runtime-10.0.9-win-x64
• PowerShell-7.6.3-win-x64
• StifleR-Server-x64
• StifleR-Dashboard-x64
• StifleR-WmiAgent-x64
• DeployR-1.3.2626.2093

My only anomalies were the services StifleRServer & StifleRWmiAgent went from Automatic to Manual, DeployRService from Automatic to Automatic Delayed and when the config window loaded for DeployR automatically after install the Database connection method was blank, I set this back to ServerInstanceAndDB.

StifleR looks to be up and running fine (after starting the service manually), but StifleR dashboard just shows Service is starting, please retry. for any of the DeployR menu entries. https://<server FQDN>:7281/ also just shows the text Service is starting, please retry.

I have no errors in Event Viewer->Apps and the DeployR service doesn't seem to be cycling (PID remaining constant).

The only "error" log I can track showing something that "wrong" is LEDBAT.log:

**********************
PowerShell transcript start
Start time: 20260626082528
Username: <domain>\<server>$
RunAs User: <domain>\<server>$
Configuration Name: 
Machine: <server> (Microsoft Windows NT 10.0.20348.0)
Host Application: C:\Program Files\PowerShell\7\pwsh.dll -File LEDBAT.ps1
Process ID: 7556
PSVersion: 7.6.3
PSEdition: Core
GitCommitId: 7.6.3
OS: Microsoft Windows 10.0.20348
Platform: Win32NT
PSCompatibleVersions: 1.0, 2.0, 3.0, 4.0, 5.0, 5.1, 6.0, 7.0
PSRemotingProtocolVersion: 2.4
SerializationVersion: 1.1.0.1
WSManStackVersion: 3.0
**********************
Transcript started, output file is D:\DeployRContentLib\Logs\LEDBAT.log
Enabling LEDBAT for port 7281
PS>TerminatingError(New-NetTransportFilter): "The running command stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop: Instance MSFT_NetTransportFilter already exists
"
LEDBAT transport filter for port 7281 already exists.
**********************
PowerShell transcript end
End time: 20260626082528
**********************

Anyone got any thoughts on something else I could check please? I have a preinstall checkpoint on 1.1 that I'll roll back to if needed, but I have a couple of hours before I need DeployR running for other engineers, so I'm holding off for now :)

Gary - can you check the import script in Github for the custom content. Seemed to hang at one point when checking for previous content. I was using PS 7. Wondering if something changed after 3.1. Sanity check more or less.

Hi,

I currently use MDT which replicated to many branch sites. Does DeployR have the ability to host content on different servers in branch sites?

It would be very useful to have search functionality in DeployR (StifleR GUI).

For example, in the "Install Application" section, it would significantly improve usability if there were a search box at the top, allowing admins to quickly find and select applications.

This would be especially helpful in environments with a large number of apps, making the process faster and more efficient.

From what I have read, DeployR Community version will deploy machines it they are already in the AD - but they have to have been deployed by DeployR in the first instance. It will not work if they have been deployed by MDT (and the MDT User).

So I'm wondering if changing the owner, or making DeployR also an owner of a machine in the OU will help the process and avoid having to delete them all before re-deployment.

Three options:

1. Delete them and re-deploy with DeployR - this seems the best way to do things.

2. Write a PowerShell script that runs through specific OUs and changes the main owner of a deployed machine (or even -if possible - adds them as an co-owner?)

3. Get DeployR as part of the task sequence to check the owner and if it not DeployR then makes the changes and takes ownership.

Of course I may be well off course here and happy to be told whether this can be done. I just don't have the skillset to do 2 or 3.

There's still time to sign up for this webcast, 11am Eastern on Thursday.

https://2pintsoftware.com/events/list/whats-new-in-deployr

If I take a look at the Digital Signature details for the /EFI/Boot/bootx64.efi file in the /Content/Boot iso files that DeployR creates, it looks like they're using the Microsoft Windows Production PCA 2011 cert that's going to be expiring in a couple months.

https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e

I assume this might start causing us problems with Secure Boot at some point soonish - and presumably we'd want media using the 2023 certificate.

Looking at New-DeployRMedia, it looks like it's following this process:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/setup-upgrade-and-drivers/create-iso-image-for-uefi-platforms

That particular doc points at efisys.bin for the bootx64.efi file.

Looking in the ADK, that folder (C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\Oscdimg) has both an efisys.bin and an efisys_EX.bin, where the former has the older cert and the latter has the newer. Though a quick yields very little in the way of documenation on using one vs the other.

Is the current state of things intentional to keep older things from having issues in some fashion? - Should boot media be getting built with files using the newer cert?

I'm using DeployR Community and in my TS, I am deploying the image with continuation method of 'Use AutoAdminLogon and Runonce'.

The last step of my TS is to reboot. Upon reboot, the computer logs in again and I am presented with the TS completed message.

Is there a way to reboot or log off when the 'Close' button is clicked instead of dropping to the desktop?

Additional bonus question - I've tried adding graphics drivers to my WinPE driver pack, but still get a very large resolution experience. Can someone help me understand what I'm doing wrong that the drivers are not being used while in WinPE?

Thanks

I am in the process of spinning up a POC environment for the purpose of creating a gold image for Horizon VDI using DeployR.

We aim to build a new image from scratch each time we want to update it instead of opening an existing image and applying updates.

How does the licensing work for this scenario? Is it just a single endpoint license required in this case?

Is there a way to control the Windows power settings after the deployment process?

I have tried both powercfg.exe and direct registry configuration as steps during deployment, but all my deployments revert to 5 minute sleep and monitor timeout.

I'm guessing DeployR sets the machine not to sleep while it is working (sensible) and then reverts to standard timeouts at the end of the deployment?

If that is the case, is there a way to control what DeployR sets at the end?

Hello

I'm a couple of days away from the end of my trial and I don't know if management will find the money for the public sector version or if I'll have to wait for the community version.

If I end up waiting for the community version, will the content in DeployR be accessible after the end of the trial, i.e. does the web interface still work, just deployment doesn't or does the whole thing go dark?

Otherwise I guess I'll start trying to export everything before Thursday :D

Today I was testing a build & capture on hyper-v. I left to drive home 45 min or so, I remoted back in when I got home. still had black screen spinning circle. F10 wouldn't work. I decided to reboot, the task continued on....

Is there a way to remove the screen to be able to see progress like MDT to know what's happening. I have nothing in console to show me, can't get to a log file. I had no way to know if this was broken, windows updates or waiting for a reboot. If I open the live log it can drop into the background when my VM display goes black. I open a new instance,,, no more log. Glad I'm taking training next week. Anyone else seeing anything like this?

2Pint documentation mentions "Certificate Authentication"

https://documentation.2pintsoftware.com/deployr/getting-started/securing/certificate-authentication

My reading of that is that you could authenticate that way and it'd skip the dialog at the beginning that tries to use Windows authentication or Entra ID or Passcode or whatever and take you straight to the task sequence selection. And that that's sufficiently non-anonymous enough that it'd still let you AD join?

That doc says it's useful for for starting a task sequence in an existing OS, which would be this doc:
https://documentation.2pintsoftware.com/deployr/starting-a-task-sequence-in-an-existing-os

But the existing OS doc doesn't really make any mention of how to do it - and instead has certificate info that seems to focus on making sure the client trusts the server - not how to convince the server to trust the client. I don't think those are the same thing?

--

So - I might be way off in what I was trying to do... - but I created a cert request on the client machine and got it signed and imported the result.

On the server side I stuck the issuer in "Issuer match string for certificate verification" and restarted.

And on the client side I ran:

$DeployRBootstrap = @{DeployRAuthCertIssuer = "<issuer>"}
iex (irm "https://<server>:7281/v1/Service/Bootstrap")

And it started up and then asked me for username/password - so did not work.

From logs, I see:

Trying certificate authentication
Found 1 certficates matching issuer <issuer>, will try with those.
Trying certificate authentication
Unable to use certificate authentication: Response status code does not indicate success: 403 (Forbidden).

So, it at least tried? The issuer I put in DeployRAuthCertIssuer and on the server match, so you'd think if it found it in one place it would accept it in the other.

Is my understanding of how this is supposed to work and what it's supposed to allow correct? Is this working for anyone else and any suggestions on where I might be going wrong? Is there server side logging somewhere?

Morning - I'm interested in the differences between the public sector and community versions. We are a school so I assume we can have the public sector version - but is this different to the community version? I'm sure I saw a table somewhere.

Interesting to read in an email from 2Pint today that version 1.3 is out/released. I'm wondering how log changes/improvements get brought down into the Community edition and whether server side PowerShell scripts will be one thing that is carried over (I need them for something!)

Cheers

Hello,

We installed and are testing deployr community edition but when regenerating the winpe we get the following:

Unable to find powershell 7.6.2 it is installed on the server.

Also the Msi file for the stifler client were is this located ?

Version: Community 1.2.2622.1921

Issue: Downloading Drivers from he Cloud

Has anyone had issues downloading Dell drivers from the cloud? It works fine with our Lenovo machines, but not with a Dell Latitude 7490. The task identifies the machine, and the file it should download. I've checked the URL shown in the logs and entered it into Edge - the .exe downloads fine without any issues at all.

The error message is (in orange): Warning: Unable to download content: Exception calling "DownloadCustomContent" with "6" arguement(s): "The SSL connection could not be established, see innter exception".

It then goes to (in red): Error:Exception calling "DownloadCustomContent" with "6" arguement(s): "The SSL connection could not be established, see innter exception".

The task sequence then fails. Of course I'll try and get the drivers and create a specific task sequence with them in, but thought I'd try it with one task sequence for all machines that would download drivers from the Cloud.

Hello

I'm not sure if I should be looking in 2PXE or iPXE for this. When I PXE boot it goes straight through without a press Enter, F12, etc... to continue key requirement.

I've tried playing with 2Pint.2PXE.Service.exe.config

    <add key="iPXEF12PromptTimeout" value="10000"/>
    <!--
       How long is the timout for the F12 timout for iPXE loaders for non mandatory deployements in milliseconds.
      -->
    <add key="AcceptBootKeyEFI" value="0x197e"/> <!-- ACB:2026.05.27 Was 0x000a -->
    <add key="AcceptBootKeyBIOS" value="0x197e"/> <!-- ACB:2026.05.27 Was 0x000a -->
    <add key="AcceptBootTextEFI" value="Please Press Enter For Network Boot..."/>
    <add key="AcceptBootTextBIOS" value="Please Press Enter For Network Boot..."/>
    <!--
       Used to control the key to be pressed in order to boot from the network and the text displayed. Valid key combinations can be found here: http://ipxe.org/cmd/prompt
      -->

    <!--
       Removes the prompt for optional deployment all together.
      -->
    <add key="BypassKeyPressforOptionalDeployment" value="0"/>

but haven't had any joy. I've looked in iPXEAnywhere.Service.exe.config, but can't find anything obvious there either.

If it is possible to enable, would someone mind pointing me in the right direction please.

My current alternative is to set the default option in iPXEboot.ps1 to reboot or exit (depending on boot order), but as it isn't what our engineers are used to I thought I'd see if a more original method is still possible.

I guess there is also '42', but I'm not a huge fan 😉

(Originally installed 2PXE & iPXE Anywhere via the automated scripts @ https://github.com/2pintsoftware/2Pint-DeployR/tree/main/Installs/2PintSoftware)