Thursday, 19 June 2014

Site types in SCCM 2012 and changes with SCCM 2007

Site types in SCCM 2012 and changes with SCCM 2007

Central administration site
The central administration site coordinates inter-site data replication across the hierarchy by using Configuration Manager database replication. It also enables the administration of hierarchy-wide configurations for client agents, discovery, and other operations. This site is used  for all administration and reporting for the hierarchy. Installing a CAS is only required to manage more than 100,000 clients, because the limit for Primary sites is 100,000 clients so if we want to manage more than that you'll need more than one primary and therefore will need a CAS.
A central administration site can support up to 25 child primary sites.
When using SQL Server Enterprise for the site database at the central administration site, the shared database and hierarchy supports up to 400,000 clients. The maximum number of supported clients per hierarchy depends on the SQL Server edition in the central administration site, and is independent of the SQL Server edition at primary or secondary sites. Configuration Manager supports up to 400,000 clients per hierarchy using  default settings for all Configuration Manager features.
Installing  SQL Server Standard for the site database at the central administration site, the shared database and hierarchy supports up to 50,000 clients. This is because of how the database is partitioned. After you install Configuration Manager, if you then upgrade the edition of SQL Server at the central administration site from Standard to Enterprise, the database does not repartition and this limitation remains.
Central Administration  site is  the top of the hierarchy in Configuration Manager 2012, it has the following differences from a central site in Configuration Manager 2007:
·   Does not process client data.
·   Does not accept client assignments.
·   Does not support all site system roles.
·   Participates in database replication
Note: Even though there is no DP in CAS – it should have  enough storage to hold EVERY package which resides in the hierarchy (even packages added directly at child primaries) and the disks are fast enough to allow processing of every package added to Configuration Manager.

Central administration site in Configuration Manager 2012 have the following differences from central administration site in Configuration Manager 2007
Although this is the site at the top of the hierarchy in System Center 2012 Configuration Manager, it has the following differences from a central site in Configuration Manager 2007:
  • Does not process data submitted by clients, except for the Heartbeat Discovery discovery data record DDR
  • Does not accept client assignments.
  • Does not support all site system roles.
  • Participates in database replication
Primary site
Manages clients in well-connected networks. Installing  SQL Server  on the same computer as the site server, the primary site can support up to 50,000 clients. When  SQL Server  is installed on a computer that is remote from the site server, the primary site can support up to 100,000 clients.
Note: Each primary site can support up to 250 secondary sites.
Primary sites in Configuration Manager 2012 have the following differences from primary sites in Configuration Manager 2007:
·      Additional primary sites allow the hierarchy to support more clients.
·      Cannot be tiered below other primary sites.
·      No longer used as a boundary for client agent settings or security.
·      Participates in database replication.
Secondary site
Controls content distribution for clients in remote locations across links that have limited network bandwidth.
Change from Configuration Manager 2007
Secondary  sites in Configuration Manager 2012 have the following differences from Secondary  sites in Configuration Manager 2007:

  • SQL Server is required and SQL Server Express will be installed during site installation if required.
  • A management point and distribution point are automatically deployed during the site installation.
  • Secondary sites can send content distribution to other secondary sites.
  • Participates in database replication.

Wednesday, 18 June 2014

SCCM Clients BASICS

SCCM Clients BASICS
How to install SCCM client on a computer?
SCCM client can be installed through number of  ways.
1.       Install SCCM 2012 client by client push
2.       Install SSCM 2012 Client by using software update based installation
3.       Install SSCM 2012 client using group policy
4.       Install SSCM 2012 client manually
5.       Install SSCM 2012 client using logon script
6.       Install SSCM 2012 client while operating system deployment
Install SCCM 2012 Client by Client push
Client push installation  installs  the SCCM client software on computers that Configuration Manager has discovered. Configuring  client push installation for a site, and client installation will automatically run on the computers that are discovered within the site's configured boundaries when those boundaries are configured as a boundary group.
Configuring the sites to automatically use client push for discovered computer
·         In the Configuration Manager console, navigate to  Administration.
·         In the Administration workspace, expand Site Configuration, and then click Sites.
·         In the Sites list, here it enables you to select the site for which you want to configure automatic site-wide client push installation.
·         On the Home tab, in the Settings group, click Client Installation Settings, and then click Client Push Installation.
·         On the General tab of the Client Push Installation Properties dialog box, select Enable automatic site-wide client push installation. Select the system types to which Configuration Manager should push the client software by selecting Servers, Workstations, or Configuration Manager site system servers. The default selection is Servers and Workstations.
·         Select whether you want automatic site-wide client push installation to install the System Center 2012 Configuration Manager client software on domain controllers.
·         On the Accounts tab, specify one or more accounts for System Center 2012 Configuration Manager to use when connecting to the computer to install the client software. Click the Create icon, enter the User name and Password, confirm the password, and then click OK. If you do not specify at least one client push installation account, System Center 2012 Configuration Manager tries to use the site system computer account. The account must have local administrator rights on every computer on which you want to install the client.

Using the Client push installation wizard
·         In the Configuration Manager console, navigate to  Assets and Compliance.
·         In the Assets and Compliance workspace, select one or more computers, or a collection of computers.
·         On the Home tab, choose one of the following:
o   To install the client to a single computer or multiple computers, in the Device group, click Install Client.
o   To install the client to a collection of computers, in the Collection group, click Install Client.
·         On the Before You Begin page of the Install Client Wizard, review the information, and then click Next.
·         On the Installation options page, configure whether the client can be installed on domain controllers, whether the client will be reinstalled, upgraded, or repaired on computers with an existing client, and the name of the site that will install the client software. Click Next.
·         Review the installation settings, and then close the wizard.

Install SSCM 2012 Client by using software update based installation
Software update-based client installation publishes the SCCM  2012 client to a software update point as an additional software update. This method of client installation can be used to install  client on computers that do not already have the client installed or to upgrade existing System Center 2012 Configuration Manager clients.
If a computer has client installed, Configuration Manager provides the client with the software update point server name and port from which to obtain software updates. This information is included in the client policy.
If a computer does not have client installed, you must configure and assign a Group Policy Object (GPO) in Active Directory Domain Services to specify the software update point server name from which the computer will obtain software updates.
You cannot add command-line properties to a software update-based client installation. If you have extended the Active Directory schema for SCCM  2012, client computers automatically query Active Directory Domain Services for installation properties when they install.
Configure GPO in active directory domain services to specify software update point for client installation and software update
·         Use the Group Policy Management Console to open a new or existing Group Policy Object.
·         In the console, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update.
·         Open the properties of the setting Specify intranet Microsoft update service location, and then click Enabled.
·         In the box Set the intranet update service for detecting updates, specify the name of the software update point server that you want to use and the port. These must match exactly the server name format and the port being used by the software update point:
o   If the Configuration Manager site system is configured to use a fully qualified domain name (FQDN), specify the server name by using FQDN format.
o   If the Configuration Manager site system is not configured to use a fully qualified domain name (FQDN), specify the server name by using a short name format. For example (http://SCCMServer1.anu.com:8530)
·         Assign the Group Policy Object to the computers on which you want to install the Configuration Manager client and receive software updates.
Publishing the SCCM client to the software update point
·         In the Configuration Manager console, click Administration.
·         In the Administration workspace, expand Site Configuration, and then click Sites.
·         In the Sites list, select the site for which you want to configure software update-based client installation.
·         On the Home tab, in the Settings group, click Client Installation Settings, and then click Software Update-Based Client Installation.
·         In the Software Update Point Client Installation Properties dialog box, select Enable software update-based client installation to enable this client installation method.
·         If the client software on the System Center 2012 Configuration Manager site server is a later version than the client version stored on the software update point, the Later Version of Client Package Detected dialog box opens. Click Yes to publish the most recent version of the client software to the software update point.

Installing  SSCM 2012 client using group policy
When assigning the SCCM client to computers by using Group Policy, the client installs when the computer first starts. When you publish the System Center 2012 Configuration Manager client to users by using Group Policy, the client displays in the Control Panel Add or Remove Programs for the computer for the user to install.
Use the Windows Installer package (CCMSetup.msi) for Group Policy-based installations. This file is found in the folder <ConfigMgr installation directory>\bin\i386 SCCM 2012 site server. You cannot add properties to this file to modify installation behavior
Installing SSCM 2012 client manually
Manually installing SCCM  client software on computers  by using the CCMSetup.exe program. This program and its supporting files can be found in the Client folder of the System Center 2012 Configuration Manager installation folder on the site server and on management points in your site. This folder is shared to the network as <Site Server Name>\SMS_<Site Code>\Client.
For example, specify the following command line CCMSetup.exe /mp:SCCMServerName /logon SMSSITECODE=AUTO


How to check if the client installation is succeeded or not?
Solution:
The client installation status can be verified using the log file or Control panel icons.
To check the log file, navigate to C:\Windows\System32\ccmsetup of the client computer and open the ccmsetup.log and clientmsi.log file. If the installation is success then you can see a “Installation Succeeded” line updated in the log file.
Also you can navigate to Start->Control panel and look for configuration manager icon entry (assuming that the control panel view is set to small icons).
How to uninstall a client?
Solution:
To uninstall a client from the client computer, execute the following command on the client computer.
Ccmsetup.exe /uninstall
To  run this command  open a cmd prompt and change (cd) to the directory where ccmsetup.exe can be found (most likely in %windir%\system32\ccmsetup on 32bit versions of Windows). Then you can run ccmsetup.exe /uninstall.
To confirm the Un-installation of the client, verify that the control panel icon is gone and ccmExec.exe process will be removed.

How to Speed up software advertisement by forcing Policy Retrieval & Evaluation cycle?
Solution:
Open control panel, navigate to Configuration manager icon and click on it. As the ConfigMgr window pops up switch to action tab and initiate the “Machine policy Retrieval & Evaluation Cycle” by clicking on “Initiate Action”

The SCCM client may not be installed properly or some agents won’t be running on the client computer. These clients won’t be receiving any policies due to this issue.
Solution:
This can be verified from the control panel, configuration manager icon. Open the configuration manager item and navigate to Action tab and if you see only some feature will be available like “User policy retrieval & Machine policy retrieval.
Look for the Locationserives.log file from c:\windows\system32\ccm\logs and it will contain the following error messages,
“Failed to refresh trusted key information while refreshing mp list”
“Failed to verify received message 0×80090006”
“Failed to verify received message 0x8009100e”
Follow the below steps to resolve this issue,
• Log on to the SCCM management point computer by using an account that has administrative permissions.
• Click Start, click Run, type services.msc in the Open box, and then click OK.
• In the Services MMC snap-in, right-click SMS_EXECUTIVE, and then click Stop.
• In the Services MMC snap-in, right-click SMS_SITE_COMPONENT_MANAGER, and then click Stop.
• Click Start, click Run, type ccmdelcert in the Open box, and then click OK.
• You receive the message:  “Successfully deleted cert”.
• In the Services MMC snap-in, right-click SMS_EXECUTIVE, and then click Start.
• In the Services MMC snap-in, right-click SMS_SITE_COMPONENT_MANAGER, and then click Start.
How to Speed up software advertisement by forcing Policy Retrieval & Evaluation cycle?
Solution:
Open control panel, navigate to Configuration manager icon and click on it. As the ConfigMgr window pops up switch to action tab and initiate the “Machine policy Retrieval & Evaluation Cycle” by clicking on “Initiate Action” once.

How to detect problems respect to no computer entry in SCCM while computer connected to network?
There are different reasons for a client computer not being displayed on the SCCM Console but connected to the network.
Solution: Check if the SCCM client is installed on the client computer by navigating to Control panel and look for “configuration manager” icon entry (assuming that the control panel view is set to small icons)
If the client is installed, then open services.msc in the client computer and verify if the SMS_AgentHost service is running, if not start the service.
Check the Firewall enabled or disabled if enabled, allow the ports to talk to site server
Finally do an update of collection membership as described below,
Open SCCM console and navigate to Assets and Compliance  ->Collections ->”Right click on a collection where the required client is not present” then select “update collection membership”

After distributing the software to the client, if the software package gets failed to download into the client computer cache
Cause: The software package may not be downloaded into the client computer cache if the client does not meet the requirement.
Solution: Ensure that the following services are up and running on the client computer
Background intelligence Transfer service
SMS agent Host
Windows Installer
Windows Management Instrumentation
Check if the client is contacting the DP using LocaitonServices.log file and if not add the required DP to the package.

If the client  fails to run an deployment  or if the software distribution failed on a client computer then how to troubleshoot?
Finding the Issue: Check the execmgr.log file in c:\windows\system32\ccm\logs on the client computer which will capture the execution of the program. It contains the exit code to determine the failure reason or the exact reason for the failure, normally for success the exit code is 0. If the program is failed then the exit code will be < or > 0. From these exit codes the reason for the failure can be sorted out.
If the distribution is failed on group of computers then the failure reason can be verified by running the report named “All advertisements for a specific package”. This report can be executed by navigating to Monitoring->Reports. In the right hand side you can see a report named “All advertisements for a specific package” right click on this report and run now you have to enter the package ID of the package which is failed, finally click on display.


Monday, 16 June 2014

Application Deployment through SCCM 2012 Using Software catalog

APPLICATION DEPLOYMENT Using SCCM 2012

Applications in SCCM 2012 can be deployed in such a manner that users can navigate to the application catalog and install the applications. 

This is a great new feature introduced in SCCM 2012.

All applications are recommended to be stored in shared network  with proper directory structure. Each applications should reside with their respective folder according to the vendor name. The naming convention of the application is always appreciated in “VendorName ProductName Version”.  

In SCCM Console the applications are recommended to be mounted inside the Application tab with respect to their vendor name.

We will be installing applications which are displayed in application catalog so that users can install application without administrative approval.

The maximum time to install the application is set to 120 minutes as default.

Mandatory applications can also deployed through application catalog, which can be integrated in Operating System Image on the process of Operating system deployment.

Below is the detailed process followed to deploy applications from SCCM 2012

1. Store the application in a network share folder from which SCCM server has proper access.For better understanding keep the application folder with  proper directory structure.

2. Create folder according to vendor name, and then create application inside the folder


3. Right click the folder and select Create Application and provide the package storage path

4.Type the name of the application and select Install behavior to Install for system and click next in the summery window



5. When application wizard completes successfully click close to exit


6. Right click the application that you have created and click Properties. Select Distribute Content

7. Right Click  the Application and Distribute the content to the distribution Point. Do not proceed until
you see the content status of the application as Green.

8. Click Next to complete the distribution.

9. In the monitoring tab navigate to Content status. The green color indicates that the content
has been distributed to distribution point successfully. You can also refer to distmgr.log for distribution status of the content.
10. Navigate the application under Application tab, Right click the application and click on Deploy.
Select the desired collection. This collection should be a user collection.


11. Check the Distribution point present.

12. Choose to Install the application and Purpose is set as Available.

13. Select User notifications as Display in Software Center and show all notifications. Click on Next


and Close



14. On the client computer, launch the Application catalog, Click Install to start the installation. The application is first downloaded and then installed. Wait for few minutes to complete the installation.

15. Click yes to continue

16. After some time you can see the application is installed successfully.

17. Navigate to Software Center and you can see the application is installed successfully

The log file which we can refer is CAS.log and AppEnforce.log from the client side which resides unde C:\Windows\CCM\Logs folder,


Sunday, 15 June 2014

Discovery in SCCM 2012

Discovery in SCCM 2012

In SCCM 2012 the discovery of users, groups and devices has been improved than 2007.
System Centre Configuration Manager 2012 discovery, fetches computers, users and network resource information  that can be managed by using Configuration Manager. Discovery creates a discovery data record (DDR) for each discovered object and stores this information in the Configuration Manager database.

What is Discovery Data Record?
When discovery of a resource is successful, discovery places information about the resource in a file that is referred to as a discovery data record (DDR). DDRs are then processed by site servers and entered into the Configuration Manager database where they are then replicated by database-replication with all sites. The replication makes discovery data available at each site in the hierarchy, regardless of where it was discovered or processed.

Discovery information can be further used to create custom queries and collections that logically group resources for managing systems such as the assignment of custom client settings and software deployments. Computers must be discovered before you can use client push installation to install the Configuration Manager client on devices.

Types of discovery in SCCM 2012.

1.     Active Directory Forest Discovery

The Active Directory Forest Discovery is a new discovery method in Configuration Manager 2012 that allows the discovery of Active Directory Forest where the site servers reside and also any trusted forest. This enables us to automatically create the Active Directory or IP subnet boundaries that are within the discovered Active Directory Forests.
Active Directory Forest Discovery should be configured on Central Administration Sites and Primary Sites.

 

2.     Heartbeat discovery

The Heartbeat Discovery method is enabled by default and is used to configure the heartbeat schedule. The heartbeat discovery runs on each Configuration Manager client and is used to create a discovery data record (DDR). This record is reported back periodically to the management point. For mobile device clients, the DDR is created by the management point that is used by the mobile device client.
The Heartbeat discovery should be configured on every Primary Site.

3.     Network Discovery

The Network Discovery method is used to discover the topology of your network and the devices on that network. The Network Discovery “service” searches your network for IP enabled resources. This is done by querying services that run an implementation of Microsoft’s DHCP, ARP tables in routers, SNMP enabled devices and Active Directory Domains.
It is  the best practice only to use this method when all other methods cannot find the devices you want to discover and manage.
Network discovery can be configured on the Central Administration Site, Primary Sites and Secondary Sites.

4.     Active Directory User Discovery

The Active Directory User Discovery is used to discover users residing under  Active Directory. Through this discovery method the resources can be configured  to discover one or more definable OUs or a complete domain, search into child containers and discover object within Active Directory groups.
What is Delta Discovery?
Delta discovery finds resources in the Active Directory that are new or modified since the last full discovery cycle.
Active Directory User Discovery should be configured on Central Administration Sites and Primary Sites.

5.     Active Directory System Discovery

The Active Directory System Discovery provides discovery options regarding OUs, scheduling and adding attributes that needs to be discovered. Two new options has been introduced in active directory system discovery.
1.        Discovery method only must discover computers that have logged on to a domain in a given period of time
2.       Discovery method only must discover computers that have updated their computer password in a given period of time.
This way discovery of  obsolete computer accounts from the Active Directory can be avoided.

6.     Active Directory Group Discovery

The old Configuration Manager 2007 System Group and User Group discovery are merged to one discovery method, which is called Active Directory Group Discovery. Besides merging the methods, Configuration Manager will now also remove devices or users from collections that are for instance removed from an Active Directory Group. This group enables us to discover Groups via a definable Location (OU or domain) or via definable Groups that are available in the Active Directory domain.
Also with the Active Directory Group Discovery it enables us to configure the “Time since last logon”  and “Time since last password update”  options. We can also  discover the membership of distribution groups.

Active Directory Group Discovery should be configured on Central Administration Sites and Primary Sites.