798591 - create MDT deployment shares on DFS

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: General, task)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

https://mana.mozilla.org/wiki/display/IT/Task+Sequences
defines two deployment shares (per domain).  Those should be created, properly linked to the DFS shares.

Update the docs if required.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Let's also set up the scheduled tasks that will make sure the operatingsystems folders on the shares are in sync between the domains.

The tasks and corresponding scripts should be installed via GPO, rather than by hand.

Comment 2

[Dustin J. Mitchell [:dustin] (he/him)]

Chris, this basically means setting up the dev and prod DS's that you mentioned in IRC.  The DFS shares are pretty much done - they just need their NTFS permissions set up and documented, in bug 798590.

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Chris, I set the share permissions up, but I'm not sure how best to set the NTFS permissions.  IMHO we should set those on \\releng\data\mdt\depshares so all deployment shares inherit.  Can you set that up and document it in Mana?

Comment 4

[Chris Nackers [:cnackers]]

I moved the Production MDT share into the DFS replication.  it's \mdt\depshares\prodshare.

So Prodshare comes from a replication out of DevShare. Then DFS-R will replicate that to WDS2 from WDS1.  

The boot image for production is configured using the defaultgateway so that it will automatically connect to the correct location.

[Settings]
Priority=DefaultGateway, Default

[DefaultGateway]
10.12.40.1=WDS2
10.26.40.1=WDS1

[WDS1]
DeployRoot=\\WDS1.releng.ad.mozilla.com\ProdShare$

[WDS2]
DeployRoot=\\WDS2.releng.ad.mozilla.com\ProdShare$

[Default]
DeployRoot=\\WDS1.releng.ad.mozilla.com\ProdShare$
SkipBDDWelcome=YES

Comment 5

[Dustin J. Mitchell [:dustin] (he/him)]

https://mana.mozilla.org/wiki/display/IT/MDT
https://mana.mozilla.org/wiki/display/IT/DFS+Shares

So the dev shares are not replicated with DFS-R?  Is that planned?  If not, let's mark this bug RESOLVED/FIXED :)

Comment 6

[Chris Nackers [:cnackers]]

WinPE doesn't support the DFS namespace, so we can't connect directly to the DFS. But we can take advantage of the DFS-R replication, so that is what we are doing. DFS-R is making sure the prodshare is replicated between WDS1 and WDS2, so it will always be up to date (once replicated).

I shared them out direclty so we can access through WinePE, but DFS is still handling the replication between the 2 servers.

Hope that makes sense.

Comment 7

[Dustin J. Mitchell [:dustin] (he/him)]

Chris is going to put the DevShare on DFS as well, then close this.

Comment 8

[Chris Nackers [:cnackers]]

DevShare has been moved as well.