Using the Approve-AutoaddDevices Command

Applies To: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Approves computers that are pending administrative approval. When the Auto-add policy is enabled, administrative approval is required before unknown computers (those that are not prestaged) can install an image. You can enable this policy using the PXE Response tab of the server s properties page.

Syntax

wdsutil [Options] /Approve-AutoaddDevices [/Server:<Server name>] /RequestId:{<Request ID>| ALL} [/MachineName:<Device name>] [/OU:<DN of OU>] 
[/User:<Domain\User | User@Domain>] [/JoinRights:{JoinOnly | Full}] [/JoinDomain:{Yes | No}] [/ReferralServer:<Server name>] [/BootProgram:<Relative path>] [/WdsClientUnattend:<Relative path>] [/BootImagepath:<Relative path>]

Parameters

Parameter Description
[/Server:] Specifies the name of the server. This can be either the NetBIOS name or the fully qualified domain name (FQDN). If a server name is not specified, the local server will be used.
/RequestId:{Request ID | ALL} Specifies the request ID assigned to the pending computer. Specify ALL to approve all pending computers.
[/MachineName:] Specifies the name of the computer to be added. You cannot use this option when approving all computers.
[/OU:] Specifies the distinguished name of the organizational unit (OU) where the computer account object should be created. For example: OU=MyOU,CN=Test,DC=Domain,DC=com. The default location is the container of the default computer.
[/User:<Domain\User | User@Domain>] Sets permissions on the computer account object to assign the specified user the necessary rights.
[/JoinRights:{JoinOnly | Full}] Specifies the type of rights to be assigned to the specified user.

- JoinOnly requires the administrator to reset the computer account before the user can join the computer to the domain.
- Full gives full access to the user, which includes the right to join the computer to the domain.
[/JoinDomain:{Yes | No}] Specifies whether or not the computer should be joined to the domain as this computer account during operating system installation. The default value is Yes.
[/ReferralServer:] Specifies the name of the server to be contacted to download the network boot program and boot image by using Trivial File Transfer Protocol (tftp).
[/BootProgram:] Specifies the relative path from the remoteInstall folder to the network boot program that this computer should receive. For example: boot\x86\pxeboot.com.
[/WdsClientUnattend:] Specifies the relative path from the remoteInstall folder to the unattend file that automates the Windows Deployment Services client.
[/BootImagepath:] Specifies the relative path from the remoteInstall folder to the boot image that this computer should receive.

Examples

To approve the computer with a RequestId of 12, type:

wdsutil /Approve-AutoaddDevices /RequestId:12

To approve the computer with a RequestID of 20 and deploy the image with the specified settings, type:

wdsutil /Approve-AutoaddDevices /RequestId:20 /MachineName:computer1 /OU:"OU=Test,CN=company,DC=Domain,DC=Com" /User:Domain\User1 
/JoinRights:Full /ReferralServer:MyWDSServer /BootProgram:boot\x86\pxeboot.n12 /WdsClientUnattend:WDSClientUnattend\Unattend.xml /BootImagepath:boot\x86\images\boot.wim

To approve all pending computers, type:

wdsutil /verbose /Approve-AutoaddDevices /RequestId:ALL

additional references

Command-Line Syntax Key Using the delete-AutoaddDevices Command Using the get-AutoaddDevices Command Using The Reject-AutoaddDevices Command