In this post we will see the steps for deploying windows 7 using SCCM 2012 R2,deploying the captured image using SCCM 2012 R2,SCCM 2012 R2.This command will perform the following actions, Specify that the client must use server10 as Management Point initially Assign the client to site with the site code PRI.Were looking at rolling out a large ammount of tablets on our network.We are currently trialling SCCM 2012 sp1 to see if this is the way forwards for doing this.AT. SCCM 2012 Building the Servers 14 May 2012 16 min read.In this post I am going to cut back on screen shoots, and just focus on the main points, if you need deep.SCCM 2. 01. 2 Part I Pre Configurationin Part I, I will be detailing the necessary steps to lay the foundation needed to install System Center Configuration Manager 2.I will be assuming a couple of things here.This series of blog posts assumes You have a 2.Active Directory Domain in place You have Domain Admin rights to your domain You can install SQL Server without instructions You will be using a Primary Standalone Configuration You will be setting up or utilizing PKI for HTTPS communication.Here is what we will be covering in Part I Preparation of Active Directory for SCCM installation Preparation of the System Center Servers.BgG5NbU/V-1Vf8bkPJI/AAAAAAAAidI/SaT2GrEK_XUwpEdiXYZKS5PO72s9PWv7wCK4B/s1600/Pict%2B10.jpg' alt='Install Management Point Sccm 2012 Task' title='Install Management Point Sccm 2012 Task' />Preparation of Active Directory.The first thing that we need to is create the System Management object in ADSI.Login to a Domain Controller and launch ADSIEdit Start Administrative Tools ADSI once the console loads, right click on ADSI Edit, leave the defaults and click OK.Then navigate down to the CNSystem object, right click then select New ObjectSelect container, click Next.At the next screen, enter System Management as the container Value.Perform a quick refresh on the console F5 and click on System.Youll see that the container was created successfully.Now, right click on the System Management container we just created and click Properties.Click the Security tab, add your SCCM server, give it Full Control permissions.Then click Advanced then set the Apply to This object and all descendant objects.Then Close ADSI Edit.Next, well need to Delegate Control of this container to the Computer Account of the SCCM server.Open up AD Users and Computers Start Administrative Tools Active Directory Users and Computers.Click View and then select Advanced Features.Well need this enabled for us to view the System Management container we just created.Next browse to the System.OU and then right click on System Management Delegate Control.This will activate the Delegation Control Wizard, click Next.You will be prompted on who to Delegate Control to.We want to give the SCCM Server this permission.Make sure you click on Object Types and select Computers, then search for your server, and click Next.We want to create a Custom Task.We want this control to apply to this folder, its contents, and all child objects selected.Make sure all three boxes are checked here, and then click Full Control.Finish out the wizard.While we are in Active Directory, we are going to go ahead and create two SCCM accounts.The SCCM Agent and the SCCM Service accounts.The SCCM Agent will be used to install the SCCM client on remote machines.This account will need administrator permissions to each server where the agent will be installed, so I am going to grant this user account Domain Admin rights.The SCCM Service account will be running the SQL Services on the remote SQL server.I created a new user named, domainsccm.Domain Admin group.I also created a user named domainsccm.Also make sure that you select Password Never Expires on these accounts youll have an issue in the future at some point Now, well need to extend the Active Directory Schema.On your System Center Configuration Manager 2.ISO, navigate to SMSSETUP BIN X6.In that directory there is a file named extadsch.Run as Administrator.Note This can be ran from any machine on the domain as long as you have access to a Domain Controller.Also, you will need to either be logged in as a user that has Schema Admins permissions, or perform a Run As as a user account with Schema Admin rights.A command window will appear briefly and then disappear.Check C Ext. ADSch.Here is a sample of what a successful attempt looks like lt 0.Modifying Active Directory Schema with SMS extensions.DS Root CNSchema,CNConfiguration,DCDOMAINNAME,DClocallt 0.Defined attribute cnMS SMS Site Code.Defined attribute cnm.S SMS Assignment Site Code.Defined attribute cnMS SMS Site Boundaries.Defined attribute cnMS SMS Roaming Boundaries.Defined attribute cnMS SMS Default MP.Defined attribute cnm.S SMS Device Management Point.Defined attribute cnMS SMS MP Name.Defined attribute cnMS SMS MP Address.Defined attribute cnm.S SMS Health State.Defined attribute cnm.S SMS Source Forest.Defined attribute cnMS SMS Ranged IP Low.Defined attribute cnMS SMS Ranged IP High.Defined attribute cnm.S SMS Version. lt 0.Defined attribute cnm.S SMS Capabilities. Download Do Fifa Manager 2011 Completo Chile . Defined class cnMS SMS Management Point.Defined class cnMS SMS Server Locator Point.Defined class cnMS SMS Site.Defined class cnMS SMS Roaming Boundary Range.Successfully extended the Active Directory schema.Please refer to the Config.Mgr documentation for instructions on the manuallt 0.Although the AD schema has now be extended,lt 0.AD must be configured to allow each Config.Mgr Site security rights tolt 0.If you see error 5s in the log after attempting the schema extension, go back and make sure your user account is a Schema Admin.Domain Admin permissions will not suffice for this.Congratulations At this point, Active Directory is ready for SCCM 2.Preparation of the System Center Servers.Before proceeding with my server configuration, it is important to understand what roles I am planning on implementing in my SCCM deployment.Below is a breakdown of how I am going to distribute the roles, note I am not going to be using all of the roles, just the ones I need SCCM Server Roles 1.Application Catalog Web Service Point Application Catalog Website Point Asset Intelligence Synchronization Point Component Server Distribution Point Endpoint Protection Point Fallback Status Point Management Point Site Server Site System.SCCM SQL Server 4 Roles Component Server Reporting Services Point Site Database Server Site System.For more information on the Server Roles, see Microsofts SCCM 2.Role Wiki. Here is where we will make sure that our System Center server and backend SQL server are prepared for installation.SCCM Server Install Roles and Features Configure Web.DAV Configure local firewall rules.Launch Server Manager, and install the Web Server IIS Role.Make sure that you include all of the following components.Ive added multiple screenshots here to make this easier to see what is needed.Once the Web Server IIS Role installation has been completed.You will also need to install the Windows Server Update Service WSUS Role.Install this role, but DO NOT configure it at this time.Cancel out of the WSUS Configuration Wizard that comes up after you have installed the role.Very important, when installing the WSUS Role, make sure you install WSUS to a separate site, as SCCM will utilize the Default Website.Next, well need to install some Features we need.From Server Manager, click Add Features.You will need to ensure all of the following are installed.If they are not, add them.NET Framework 3. 5.Fetaures and ALL child objects, including WCF Activation and its child objects.Background Intelligent Transfer Service BITS and BOTH child objects Remote Differential Compression.Next, well need to go into IIS Manager and configure Web.DAV Start Administrative Tools IIS.Navigate to the Default Website, Select Web.DAV Authoring Rules.On the Web. DAV Authoring Rules page, click Enable Web.DAV. Then you will need to click Add Authoring RuleCreate a rule that allows Read access to All Content, for All Users and click OK.Now you can close IIS Manager, as the IIS and Web.DAV setup is complete.Lets move on to configuring the local Firewall.Launch the Windows Firewall with Advanced Security utility.Start Administrative Tools Windows Firewall with Advanced SecuritySelect Inbound Rules.Make sure that all three default WMI rules are Enabled.By default, these are disabled.WMI communication to the SCCM server is essential.These rules are Windows Management Instrumentation ASync In Windows Management Instrumentation DCOM In Windows Management Instrumentation WMI InTo Enable these rules, select them all, right click and click Enable Rule Once enabled, they will turn green.Now we have everything we need on the SCCM server, well move on to the SQL server.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
November 2017
Categories |