question

aj-47 avatar image
0 Votes"
aj-47 asked aj-47 commented

Securing customSettings.INI

This is my customSettings.INI file used by MDT/SCCM OSD task sequence gather step:

 [Settings]
 Priority=CSettings, Default
 Properties=OSInstall, DomainNetBiosName, TimeZoneName,CustomProperty1,CustomProperty2
    
 [Default]
 OSInstall=N
 SkipCapture=YES
 SkipAdminPassword=NO
 SkipProductKey=YES
 KeyboardLocale=en-AU
 SLShare=\\server1.mydomain.local\myLogs$\Logs
    
 [CSettings]
 SQLServer=server1.mydomain.local\ps1SCCM
 Database=myDBTst
 Netlib=DBMSSOCN
 DBID=MDTMyCS
 DBPwd=myPass
 Table=ComputerSettings
 Parameters= MacAddress, OSDCOmputerName
 ParameterCondition=OR

Is there a way to secure DBPwd by either encrypting or supplying through a TS variable instead of plaintext?
SCCM version CB 1906 ; MDT integrated.

mem-cm-osdmem-mdt
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AllenLiu-MSFT avatar image
0 Votes"
AllenLiu-MSFT answered aj-47 commented

Hi, @aj-47
Thank you for posting in Microsoft Q&A forum.
We may check if below article helps:
https://techcommunity.microsoft.com/t5/windows-blog-archive/encoding-sensitive-information-in-customsettings-ini-and/ba-p/706695
https://keithga.wordpress.com/2015/01/06/security-week-locking-down-your-deployment/
(Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.)


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

It seems there is no update for a couple of days. May we know the current status of the problem?

0 Votes 0 ·

Thanks for suggesting articles in the links provided. I'm unsure if the logic will address my requirement.
I'm after securing DBPwd password in the CSettings section.
In the sample provided, it is plain-text.


0 Votes 0 ·