450 likes | 873 Vues
System Center Configuration Manager 2007. Zensar Technologies Ltd. Presentation by Rakesh Kumar Date : 01- Sept-2010. SCCM 2007 Tech Training. Agenda. Introduction Overview of SCCM 2007 Key Focus Area Version History Benefits Of SCCM 2007
E N D
System Center Configuration Manager 2007 Zensar Technologies Ltd. Presentation by Rakesh KumarDate : 01- Sept-2010
SCCM 2007 Tech Training Agenda • Introduction • Overview of SCCM 2007 • Key Focus Area • Version History • Benefits Of SCCM 2007 • New/Enhance with Respect to SMS 2003 • Changes in each version • Site Management • Installation & Configuration • Platform Support • SCCM feature installation & configuration • Site Maintenance • Known issue and troubleshooting • Infrastructure PD for SCCM 2007 • Quiz
Overview of SCCM 2007 System Center Configuration Manager (ConfigMgr or SCCM), formerly Systems Management Server (SMS), is a System management software product by Microsoft for managing large groups of Windows-based computer systems. Configuration Manager provides remote control, patch management, software distribution, operating system deployment, network access protection, and hardware and software inventory.
Key Focus Area Enhanced Insight and Control • Optimized for Windows and Beyond Comprehensive Deployment and Updating Assess, Deploy and Update From Desktops to Datacenters and Beyond
Version History 2007 System Center Configuration Manager 2007 RTM 2008 System Center Configuration Manager 2007 SP1 System Center Configuration Manager 2007 R2 2009 System Center Configuration Manager 2007 SP2 2010/2011 System Center Configuration Manager 2007 R3 2011 System Center Configuration Manager Vnext
Benefits Of SCCM 2007 Key Benefits • Simplified UI • Advanced Task Sequencing • Reduced SCCM infrastructure costs with branch office support • Improved scheduling and greater control including Wake-on-LAN • Common processes for Windows Mobile and embedded device • Unified delivery of Windows operating system for clients and servers • One worldwide image to manage with Vista • Built on Windows Vista technologies including Windows Imaging • Vista and Office 2007 upgrade assessment and resolution planning • Offline media support for full offline provisioning
Configuration Benefits Of SCCM 2007 Key Benefits • Integration with Windows 2008 Network Access Protection • Simplified, comprehensive software updating w/ templates for common tasks • Enterprise Vulnerability assessment • Securely managing devices across the Internet • Secure network storage of user state during Operating System deployment • Knowledge-driven desired configuration management based on the System Modeling Language (SML) • IT policies for analyzing corporate and regulatory compliance • Out of the box configuration policies for server workloads i.e. Exchange • License and asset management
Changes in each version Configuration Manager RTM
Changes in each version Configuration Manager Service Pack 1
Changes in each version Configuration Manager R2
Changes in each version Configuration Manager SP2
Changes in each version Configuration Manager R3
Site Management Site Hierarchy & Relationship Central Site Relationship Parent Site Hierarchy Primary Secondary Primary Child Child Child Secondary Secondary Secondary Secondary Child Child Child Child
Site Management Site Server Roles SQL Server SCCM MP SCCM Secondary Site Server SCCM Primary Site Server SCCM SLP SCCM RP SCCM SHV SCCM DP SCCM FSP SCCM SUP/WSUS SCCM PSP Branch DP SCCM SMP
Installation & Configuration Pre-requirements • SQL 2005 SP2 or later on (only for primary Site) • Active Directory Schema Extensions • WSUS 3.0 SP1 or later on • .NET 2.0 Framework or Higher • MMC 3.0 • Server must be part of Domain or Member Server • System Account must have SysAdmin & Local Admin on SQL Box • Installation Account must be Domain user • Installation Account must be local Admin on installation Server and SysAdmin & Local Admin on SQL box • WebDav must be Enabled • IIS 6.0 or later • BITS 2.0 or later • ASP and ASP.NET • Remote Differential Compression (RDC) only for Win2K8 • MS06-030: Vulnerability in Server Message Block could allow elevation of privilege only for Win2K3 • Knowledge Base article 906570 on Secondary Site for Win2K3
Platform Support Not supported SCCM SP1/Sp2 SCCM
Installation & Configuration Site Server Configuration • Site Properties • Site System Roles • Site Address • Site Boundary • Discovery Methods • Client Agent • Site Component • Client Installation
SCCM feature installation & configuration Features • Software Distribution • Patch Management • Asset intelligence • OSD or Image Management
Site Maintenance • Site Maintenance Task • Daily • Weekly • Periodic • 2. Site Backup & Recovery • Central Site backup & Recovery • Primary Site backup & Recovery
Site Maintenance Task Daily - Verify that predefined maintenance tasks scheduled to run daily are running successfully. Check Configuration Manager 2007 site database status. Check site server status. Check Configuration Manager 2007 site system inboxes for backlogs. Check site systems status. Check client status. Check the operating system event logs on site systems. Check the SQL Server error log. Check system performance. Weekly – Verify that predefined maintenance tasks scheduled to run weekly are running successfully. Delete unnecessary files from site systems. Produce and distribute end-user reports if required. Back up application, security, and system event logs and clear them. Check the site database size and verify that there is enough available disk space on the site database server to allow the site database to grow. Perform SQL Server database maintenance on the site database according to your SQL Server maintenance plan. Check available disk space on all site systems. Run disk defragmentation tools on all site systems. Periodic – Review the security plan for any needed changes. Change accounts and passwords if necessary according to your security plan. Review the maintenance plan to verify that scheduled maintenance tasks are scheduled properly and effectively depending on configured site settings. Review the Configuration Manager 2007 hierarchy design for any needed changes. Check network performance to ensure changes have not been made that affect site operations. Verify Active Directory settings affecting site operations have not changed. For example, you should ensure that subnets assigned to Active Directory sites used as boundaries for a Configuration Manager 2007 site have not changed. Review the disaster recovery plan for any needed changes. Perform a site recovery according to the disaster recovery plan in a test lab using a backup copy of the most recent backup snapshot created by the Backup ConfigMgr Site Server maintenance task. Check hardware for any errors or hardware updates available. Check overall health of site.
Known issue and Troubleshooting Clients Cannot Be Managed Because They Cannot Locate Their Default Management Point Computers Fail to Obtain Software Updates After Software Update Point-Based Client Installation Is Configured or getting error GP has been overwritten by Higher Authority in WUAHandler.log Clients Connecting over VPN Cannot Install Software Updates or Run Advertisements Attempting to Connect to the Database Generates an Error The Network Access Account Fails After Changing Account Name Cannot Create Branch Distribution Point Because the Option Is Disabled Distribution Manager (a Server Component) Fails When Creating a Share with a Long File Name Software Updates Fail on Child Sites but Succeed on Parent Sites Expired Software Updates Cannot Be Removed from an Active Deployment Not able to install secondary site server from Admin console
Infrastructure PD for SCCM 2007 • Purpose and Agenda • Purpose • To assist in the decision process to plan a successful Microsoft System Center Configuration Manager implementation • Agenda • Define the project scope • Determine which roles will be deployed • Determine the number of sites required • Design the sites • Determine the number of hierarchies required • Design each hierarchy
Infrastructure PD for SCCM 2007 What Is Microsoft System Center Configuration Manager 2007 ? Microsoft System Center Configuration Manager (SCCM) 2007 is a configuration management solution that: • Contributes to a more effective IT department by enabling secure and scalable operating system and application deployment and desired configuration management. • Provides comprehensive asset management of servers, desktops, and mobile devices.
Infrastructure PD for SCCM 2007 Applicable Scenarios The Section addresses the needs of: • Organizations with no configuration management solution that want to use SCCM 2007. • Organizations that presently use another configuration management solution and are planning to move to SCCM 2007. • Organizations with multi-forest environments where SCCM 2007 will be employed to manage systems that span Active Directory forest boundaries. • Organizations that have distributed environments with systems separated by wide area network (WAN) links. • Organizations with mobile devices, such as smart phones, that operate beyond firewalls but must be managed centrally.
Infrastructure PD for SCCM 2007 Example of SCCM 2007 Architecture
Infrastructure PD for SCCM 2007 SCCM 2007 Design Flow
Infrastructure PD for SCCM 2007 Step 1. Define Project Scope Answer the following questions to align goals with business motivation: • Will project encompass entire enterprise? • Which features will project address? • What is the client population to be managed? • What are the organization’s service expectations?
Infrastructure PD for SCCM 2007 Step 2. Determine Which Roles Will Be Deployed Establishing which site roles are required and where they are located determines site design and sizing, network sizing, and if the SCCM 2007 client will be deployed.
Infrastructure PD for SCCM 2007 Step 3. Determine the Number of Sites Required Start with one site, and then add more as required by the following: • Scale • Privacy concerns • Internet-connected clients • Active Directory forests • Network location • International languages • Organization
Infrastructure PD for SCCM 2007 Step 4. Design the Sites • Task 1: Plan the roles that are always required • Task 2: Plan the roles that are optional • Task 3: Plan the roles that are feature-specific • Task 4: Determine where to place hierarchy roles • Task 5: Determine where to place primary and secondary sites and branch distribution points • Task 6: Determine if native mode is required – the two options are native mode and mixed mode
Infrastructure PD for SCCM 2007 Step 4, Task 6. Option 1: Native Mode • Benefits: • Higher level of security by integrating with a public key infrastructure (PKI) to help protect client-to-server communication. • Enables the management of clients that are connected to the Internet, such as laptops used by mobile workers, computers used from an employee’s home, and smart phones. • Challenges: • PKI infrastructure is required. • Estimated native mode site operations are 10-15 percent slower in overall performance compared to sites configured to operate in mixed mode due to added load of encryption and signing. • Cannot interoperate with SMS 2003. • All parent locations up to and including the central site must be in native mode.
Infrastructure PD for SCCM 2007 Step 4. Task 6. Option 2: Mixed Mode • Benefit: • Enables integration with SMS 2003. • Challenge: • Additional design may be required to ensure the security of connections beyond the organization’s firewalls.
Infrastructure PD for SCCM 2007 Step 4. Design the Sites - continued • Task 7: Assign Clients to Sites • Task 8: Design boundaries of protected distribution point systems • Task 9: Design the site systems • Task 10: Determine the Fault-Tolerance Approach
Infrastructure PD for SCCM 2007 Step 5. Determine Number of Hierarchies Required Start with one hierarchy and add more, if required. Some possible scenarios requiring additional hierarchy are: • Size • Central site is mixed mode and native mode is required • Isolated networks • Politics • Regulatory requirements
Infrastructure PD for SCCM 2007 Step 6. Design Each Hierarchy • Task 1: Determine where to place central site • Task 2: Plan the site hierarchy
Infrastructure PD for SCCM 2007 Summary and Conclusion PD summarized the critical design decisions, activities, and tasks required to enable a successful design of SCCM 2007. It focused on decisions involving: • Which SCCM roles will be required • The server roles, role placement, databases, and connectivity of the SCCM 2007 infrastructure • The number of SCCM 2007 hierarchies required, and how many sites are required within each hierarchy