Using 'FSMAUTIL.exe resetuid' to reset the UID via a script
Hi,
As per subject line we have a number of machines which was created from an image but the UID was not reset before the final stage of the build. Now we have a number of machine with the same UID. The additional problem is that these users do not have full administrator permission to the machines. We had the problem before for Windows XP machines but then users had administrative permission. I'd rather not apply the fix per machine so need to work out a solution that we can apply on the network.
echo off if exist %windir%\UID3.TXT goto uid-skip
Echo Resetting F-Secure UID
c:\progra~1\f-secure\common\fsmautil RESETUID
if not exist %windir%\UID3.TXT copy \\server\path\UID3.TXT %windir% /y
echo F-Secure UID has been reset
goto uid-end
:uid-skip
Echo F-Secure UID has already been set
:uid-end
This is mostly affecting version Workstation 9.31 client and have tried pushing Workstation 11 using both Host Identification Randomly Genterated Global Unique ID and SIMBIOS Global Unique ID on different machines to see if it made a difference but it didn't.
I know the machines that have the same UID from various other solutions that we use so am able to compare what is in PM v11 and WSUS.
Any help would be appreciated.
Regards Al.
Comments
-
Hello Al,
First of all, I wouldn't recommend you to use version 9.31, it has critical issues. If you want to use 9.x version, 9.32 is the right choice.
Second, we have a known issue in 9.x versions regarding resetuid procedure.
Third, SMBIOS guid could be the same for several machines in some cases.
So, I would recommend you to take version 11.00 in use, together with random guid:
FSMAUTIL RESETUID RANDOMGUID
or
FSMAUTIL RESETUID RANDOMGUID APPLYNOW
Best regards,
Vad
0 -
Hi Vad,
Thanks for your reply.
Sure, I can upgrade to version 11.00 and this wouldn't cause me any problems at all. My concern is how to run the commands you mentioned FSMAUTIL RESETUID RANDOMGUID or FSMAUTIL RESETUID RANDOMGUID APPLYNOW.
As mentioned the end user doesn't have administrative permissions and ideally we would like to script this somehow across multiple machines.
Regards,
Al0 -
Hello,
I see. Well, you can use domain group policies for example.
Best regards,
Vad
0 -
Hi Vad,
Thanks, I'll give this a go! I'll update the post shortly.
Regards,
Al0
Categories
- All Categories
- 4.7K WithSecure Community
- 3.6K Products
- 1 Get Support