SCCMTSPSI
SCCMTSPSI

Documentation for SCCM task sequence deployment orchestrator

  1. Overview
  2. Realm setup
  3. Active Directory & SCCM setup.
    1. Active directory - Security group
    2. Active directory - Broker account
    3. SCCM - Deployment collection
    4. SCCM - Administrative category for applications
    5. SCCM - Administrative category for office
    6. SCCM - Limiting collection for collections
    7. AD - Parent AD group for AD group list
    8. AD - Staging OU
    9. SCCM - Configuration directory
    10. SCCM - WinPE boot image setup
  4. Configuration tool & File
    1. Realm secret key
    2. Allowed WinPE instances
    3. Network access account
    4. Notification account
    5. Hostname formatting
    6. Automatically identify hostname
    7. Overrides
    8. Active directory staging OU
    9. MBAM Server details
    10. SMTP server details
    11. Notification types
    12. User state migration (USMT)
      1. Data store encryption
      2. Migration types
      3. Free space
      4. Config XML
      5. Migration rules XML
      6. Ignore return error codes
      7. Migrating EFS files
      8. Move domain
      9. Move user
      10. Currupt user profiles
    13. Logs and Profiles location
    14. Disk setup
    15. Content availability check
    16. Error adding collection member
    17. Error adding AD group member
    18. Wait for Bitlocker decryption
    19. Approved hardware
    20. Extension Attributes
  5. Using sccmtspsi (Operator view)
    1. sccmtspsi login window content
    2. sccmtspsi controls
      1. Asset hostname
      2. Unlock bitlocker
      3. Get task sequence deployments
      4. Get operating system images and packages
      5. Get office application
      6. Get SCCM applications
      7. Get SCCM collections
      8. Get AD Groups
      9. sccmtspsi actions
      10. Data migration options
      11. Primary users
      12. AD / SCCM entry
      13. Extension Attributes
  6. Task sequence steps
    1. sccmtspsi-tasksequence.exe
    2. Task sequence variables
    3. Apply operating system image step
  7. Task sequence error codes
  8. sccmtspsi error codes

Task sequence variables

VariableDescription
SCCMTSPSI-APP-PACKAGEID-S0100038-ISSETSpecifies if SCCM application with PackageID "S0100038" was selected by the opeartor. (True or False)
SCCMTSPSIMBAMSERVERADDRESSURLMBAM server address url.
SCCMTSPSIDATADRIVEVOLUMELABEL2Volume label of data drive 2.
SCCMTSPSIDATADRIVEVOLUMELABEL1Volume label of data drive 1.
SCCMTSPSIDATADRIVE2Drive letter of data drive 2.
SCCMTSPSIDATADRIVE1Drive letter of data drive 1.
SCCMTSPSIUSMTUSBIDENTIFIER

The label that identifies a USB drive as a USMT data store. This is set in the configuration file. Click to read the documentation.
SCCMTSPSIUSMTCOMPRESSUSBDATASTORE

Compress setting for USB USMT data store. Click to read the documentation.
SCCMTSPSISCCMSITECODE

SCCM site code.
SCCMTSPSISCCMSERVER

Fully qualified domain name of the SCCM management point.
SMSTSUdaUsers

The primary users of the device are automatically set at the end of the task sequence. Click to read the documentation.
SCCMTSPSISELECTEDOFFICESUITEPACKAGEID

PackageID of the SCCM office application selected. Click to read the documentation.
SCCMTSPSISELECTEDOFFICESUITENAME

Name of the SCCM office application selected. Click to read the documentation.
SCCMTSPSISET1APP

The base variable SCCMTSPSISET1APP and/or SCCMTSPSISET2APP and/or SCCMTSPSISET3APP can then be referenced in the task sequence as explained in the documentation. Click here to read the documentation.
SCCMTSPSIUSMTXMLRULEFILES

USMT command line sub part. Migration XML rule files. E.g. /i:"miguser.xml" /i:"migapps.xml".


The rule XML's files are set in the configuration file. Click to read the documentation.
SCCMTSPSIUSMTINCLUDEDANDEXCLUDEDUSERS

USMT command line sub-part. Included and excluded user SID's 
SCCMTSPSIUSMTENCRYPTIONALGORITHM

USMT store encryption algorithm. Click here to read the documentation.
SCCMTSPSIUSMTEFSHANDLE

USMT command line sub-part for handling encrypted system files. Click to read the documentation.
SCCMTSPSIUSMTCOMPRESSNETWORKDATASTORE

Compress USMT network data store. (True /False). Click to read the documentation.
SCCMTSPSIUSMTNETWORKDATASTORE

USMT network data store; set in the configuration file. Click here to read the documentation.
SCCMTSPSIUSMTUSERCHANGES

USMT command line sub-part if user moves are configured in the configuration file. Click here to read the documentation.
SCCMTSPSIUSMTDOMAINCHANGES

USMT command line sub-part if domain changes where configured in the configuration file. Click to read the documentation.
OSDStateStorePath

Location to which the USMT data is saved.
OSDMigrateLocalAccountPassword

Local accounts are issued this temporary password during the USMT process. This variable is unique to a deployment.
OSDMigrateConfigFiles

The Config.xml (or any selected name) file is an optional User State Migration Tool (USMT) file that you can create using the /genconfig option with the ScanState.exe tool. If you want to include all of the default components, and do not want to change the default store-creation or profile-migration behavior, you do not need to create a Config.xml file.


Click here to see the documentation.
OSDMigrateAdditionalRestoreOptions

The additional options that are specified in the form of a string that is appended to the automatically generated USMT command line. sccmtspsi adds the following items to this variable.



  • Included / excluded users.

  • Domain moves

  • User moves

  • Compress (Yes or No)

  • USMT type : Hardlink /USB / Network
SMSTSMP

SCCM management point.
SCCMTSPSIWINPEARCHITECTURE

Architecture of the WinPE image.
SCCMTSPSISYSTEMMODEL

Hardware model of the device.
SCCMTSPSISYSTEMMANUFACTURER

Device hardware manufacturer.
SCCMTSPSISMTPSERVERSSLENABLED

SMTP server communication is SSL enabled.
SCCMTSPSISMTPSERVERPORT

Port number through which SMTP requests are made to the SMTP server. This information is set in the configuration file. Click to read the documentation.
SCCMTSPSISMTPSERVER

Fully qualified domain name of the SMTP server.
SCCMTSPSISELECTEDTASKSEQUENCENAME

Name of the selected Task Sequence.
SCCMTSPSISELECTEDTASKSEQUENCEPACKAGEID

The TasksequenceID of the selected Task Sequence.
SCCMTSPSISELECTEDOPERATINGSYSTEMNAME

The Package Name of the selected operating system.
SCCMTSPSISELECTEDOPERATINGSYSTEMPACKAGEID

The PackageID of the selected operating system.
SCCMTSPSIREALMNAME

The 3 character Realm name. 
SCCMTSPSIPROCESSORARCHITECTURE

Processor architecture of the device. Possible values : x86, MIPS, Alpha, PowerPC, ARM, ia64, x64, Unknown.
SCCMTSPSIPCSYSTEMTYPE

Listed below are the possible values.



  • Unspecified

  • Desktop

  • Mobile

  • Workstation

  • Enterprise Server

  • SOHO Server

  • Appliance PC

  • Performance Server

  • Maximum

  • Unknown
SCCMTSPSIOPERATOREMAIL

Email address of the sccmtspsi operator.
SCCMTSPSIOPERATORDISPLAYNAME

Full name of the sccmtspsi operator.
SCCMTSPSIOPERATINGSYSTEMVOLUMELABEL

Volume label of the Operating System drive. Click to read the documentation. 
SCCMTSPSIOPERATINGSYSTEMDRIVE

The drive to which the Operating System will be installed. This drive has the volume name as set in the task sequence variable SCCMTSPSIOPERATINGSYSTEMVOLUMELABEL.
SCCMTSPSINETWORKLOGLOCATION

Network location to where the local logs will be copied to. The location is set in the configuration file. Click here to see the documentation.
SCCMTSPSINETWORKACCESSACCOUNT

The network access account set in the configuration file. Click here to see documentation.
SCCMTSPSILOGINDOMAIN

Login domain. The domain name set in the sccmtspsi command line.
SCCMTSPSIDELETEORKEEPADSCCMENTRY

  • Delete computer from AD and SCCM.

  • Keep computer in AD and SCCM.

  • Delete computer from AD and Keep in SCCM.

  • Keep computer in AD and Delete from SCCM.
SCCMTSPSIASSETNAME

Same as OSDComputerName. Hostname / Assetname / NetBIOS name.
SCCMTSPSIADMINEMAIL

Administrative email address. Email address set in the configuration file.
SCCMTSPSIACTIONS

  • Hardlink : capture –> Install Windows –> Hardlink : restore

  • USB : capture –> Install Windows –> USB : restore

  • USB : capture –> Install Windows

  • Install Windows –> USB : restore

  • USB : capture

  • Network : capture –> Install Windows –> Network : restore

  • Network : capture –> Install Windows

  • Install Windows –> Network : restore

  • Network : capture

  • Install Windows

  • Decommission

  • Turn off Bitlocker
OSDComputerName

Same as SCCMTSPSIASSETNAME. Hostname / Assetname / NetBIOS name issued to the device.
« sccmtspsi-tasksequence.exeApply operating system image step »
Suggest Edit

DCOM hardening issue.

This application fails to authenticate with WMI on the SCCM server because Microsoft has not yet hardened DCOM on their Windows Preinstallation Environment. We are working on a different approach, but it will only be released during the first quarter of 2024. But until that time, the only workaround will be to uninstall the update corresponding to KB5004442.