SCCM 2007 Sp2 Build Guide - Sbi

State Bank Of India Confidential
Page i
SCCM 2007 R2 Build Guide Version 1 Draftl
Prepared by Mahender Singh
"SCCM 2007 SP2 Build Guide- SBI" last modified on 24 Jan. 11, Rev 11

SCCM 2007 R2Build and Configuration Guide

System Center Configuration Manager
(SCCM) 2007 R2 Deployment

Prepared for
State Bank of India Ltd.
Monday, 24 January 2011
Version.1
Draft


Page ii

Revision and Signoff Sheet
Change Record
Date Author Version Change reference
19
th
January
2011
Mahender .1 Initial draft for review/discussion

Reviewers
Name Version approved Position Date


Page iii

Table of Contents
1. Introduction ........................................................................................................................... 4
1.1 Document Purpose ............................................................................................................ 4
1.2 Intended Audience ............................................................................................................ 4
2. Deploying SCCM 2007 R2.................................................................................................... 5
2.1 Software requirements ........................................................................................................ 5
3. Install IIS and dot Net Framework 3.5 SP1 .......................................................................... 5
4. Configure WebDAV Settings for IIS ...................................................................................... 9
5. SQL Server 2008 Installation Steps ................................................................................... 13
6. Install WSUS 3.0 SP1 ......................................................................................................... 29
7. Extend the Active Directory Schema for SCCM 2007 SP2 ................................................... 35
8. Create System Management Container ............................................................................. 35
9. Installing SCCM 2007 SP2 ................................................................................................. 36
10. Configuring SCCM 2007 SP2 ........................................................................................... 49
a. Add Roles:-...................................................................................................................... 51
b. Configure Client Agents .................................................................................................. 61
c. Client Installation method ............................................................................................... 62
d. Manually Install SCCM Client ........................................................................................... 64
e. Discovery Method ............................................................................................................ 64
f. Installing agents .............................................................................................................. 67
g. Creating Collections ........................................................................................................ 69
11. Updates Deployment through SCCM 2007 .................................................................... 74
12. Backup SCCM Site ......................................................................................................... 84
13. Troubleshooting SCCM 2007 ......................................................................................... 85

State Bank of India Confidential

1. Introduction
1.1 Document Purpose
The following document details the Installation and configuration of the System Center Configuration
Manager 2007 SP2 for State Bank of India Ltd.
1.2 Intended Audience
This document is for the use of SBIs IT System Administrators Team.


2. Deploying SCCM 2007 R2

SCCM requires a database used for storing configuration and logging information. Microsoft SQL
Server 2008 is the database that will be used in this Document. It will be installed on Member server.
SQL Server installed and configured in SBI production environment on the same server as SCCM 2007
SP2 with following Details

Hostname SCCM2007
SQL Version SQL 2008 With SP1
Installation Directory C:\
IP Address 10.0.14.224
Subnet Mask 255.255.252.0
Installation Account Administrator
2.1 Software requirements

Server Software Required
SQL Server 2008 SP1 Windows 2008 with latest updates
IIS 7.0
Dot net framework 3.5 SP1

3. Install IIS and dot Net Framework 3.5 SP1

Open Server Manager and click on Features Add Features



In the Add feature Wizard select .Net Framework 3.5.1, Background Intelligence Transfer
Service( BITS) and Remote Differential Compression as shown in figure and click on Next.

Click on Next in Web Server Screen


Select Role Services as in figure above and click NEXT


Click Close to complete the add feature wizard

4. Configure WebDAV Settings for IIS

Open IIS manager from administrative tools and browse to Default Web Site

In the middle pane double click on WebDAV authoring Rules

In the WebDAV authoring window click on Add authoring Rule


In Add authoring windows select the following
Allow Access to All Content
Allow Access to this content All Users
Permissions Read, Source, Write

Click on Ok

Click on WebDAV settings


Change the settings as below:

Allow Anonymous Property Queries True
Allow Custom Properties False
Allow Property Queries with Infinite Path True
Allow Hidden Files to be listed True

Click on Apply on the Actions Pane

Note : You may need to change the WebDAV settings in the config file manually if your MP does not
install successfully

Navigate to %windir%\System32\inetsrv\config\schema
Take ownership of webdav_schema.xml
Remove the read only attributes

edit the below lines to these:

<attribute name="allowAnonymousPropfind" type="bool" defaultValue="true" />

<attribute name="allowInfinitePropfindDepth" type="bool" defaultValue="true" />

<attribute name="allowCustomProperties" type="bool" defaultValue="false" />

Save it and continue with SCCM.


5. SQL Server 2008 Installation Steps

Copy the installation files

Double click on Setup.exe
After a few seconds a dialog box appears. This will disappear from the screen and then the main
installation page appears

STEP 3 : SQL Server Installation Center
Click on the Installation hyperlink on the left hand side of the screen:

STEP 4 : SQL Server Installation Center
Click on the "New Server stand-alone installation" link on the right side of the
screen:


The following dialog appears on the screen whilst the install program prepares for installation:

STEP 5 (optional):
If any checks have failed, click on the Show details button or "View detailed report link" to find out the
cause, correct it, then click on the Re-run button to perform the checks again.


STEP 6 : Product key
If all checks have passed, click on the OK button. After a few moments, the option to select the edition
and to enter the license key (or product key) will appear. Note that the product key box may already
be populated, depending on which edition you have. Dont enter the product key weve shown here, it
wont work on your system:


STEP 7 : License Terms
Enter the product key into the box, or choose the free edition if you're evaluating SQL Server 2008, and
click on the Next button:

Click in the "I accept the license terms" check box, then click on the Next button again.

STEP 8: Setup Support Files
The following screen appears; click on the Install button:


After 30 seconds or so the dialog appears again:

Setup Support Rules
If all is well, the following screen appears:

Click on the Next button again.

STEP 10 : Feature Selection
Select the features you want to install.
At a minimum, the following are useful, but what you need will depend on your needs:

Click on the Next button.

STEP 11 : Instance Configuration

After a short while the following screen appears:

STEP 12 : Disk Space Requirements
This screen just tells you if you have sufficient disk space on the drive youre installing to, and whats
going to be installed where.


Click on Next.
STEP 13: Server Configuration
This step allows you to set up the service accounts that will be used to run SQL Server. If you have
created Windows NT or Active Directory accounts for use with services, use these

We have used system account as the service account.

STEP 14: Database Engine Configuration Account Provision
This screen allows you to set up database engine security.

Click on Next.

STEP 15: Reporting Services Configuration
This screen simply asks modes of default configuration.


Select Install, but do not configure the report server

STEP 16 : Error Usage Reporting
This screen simply asks if you want to send error information to Microsoft and can safely be skipped if
you do not want to share any information.

Click boxes if you want to help Microsoft help you.
Click on Next again

STEP 17: Installation Rules
This screen simply checks if there are any processes or other installations running which will stop the
installation of SQL Server 2008.

Click on Next again

STEP 18 : Ready to Install
This screen summaries what you are about to install and gives you a last chance to cancel or change
anything thats wrongly configured:

STEP 19 : Installation Progress
SQL Server 2008 will now install. How long it takes depends on the speed of your machine, what load
its under, the installation media (CD is slower) and what youve chosen to install.

Finally, the installation will complete:

4.1 Install SQL 2008 SP1

Download the SQL 2008 Sp1 executable and double click

Click on Run

On the welcome screen click on Next


Accept the license terms and click on Next

On the feature selection window click on select all and then click Next


Click Next on Check file in Use window

On ready to update window click on Update


SQL 2008 has been upgraded to SP1 click on next

Close the complete window


6. Install WSUS 3.0 SP1

Before software update point can successfully be installed and configured on a site system server in
Configuration Manager 2007, Windows Server Update Services (WSUS) 3.0 must be installed on the
server.

Note: DO NOT configure WSUS though the Configuration Wizard.

The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. Because
Configuration Manager 2007 manages the WSUS settings, you should exit the configuration wizard after
it opens.


Note: while this wizard is completing it takes a long period of time to download the new version from
Microsoft so please be patient and watch out for the window below to open and start the installation.

Click Install

Click Next

Click I accept the terms of the License agreement, and then click Next.

Select Store updates locally, specify the path, (point it to a partition of your choice which has
enough free space to store the updates) and then click Next


Click Next

If you decide to change this behavior make sure you keep a note of this as this information will be
required when we configure WSUS using SCCM.

Click Next >


Click Next

Click Finish


Close

DO NOT configure WSUS though the Configuration Wizard.

The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. Because

Configuration Manager 2007 manages the WSUS settings, you should exit the configuration wizard after
it opens.
7. Extend the Active Directory Schema for SCCM 2007 SP2

Open Command Prompt with Elevated Privileges

The Extadsch.exe is located in the bin\i386 folder of the installation media, browse through the folder
and run the command

The command will extend the active directory schema to accommodate SCCM 2007 SP2

Please verify from extadsch.txt at C:\ for successful extend of AD

8. Create System Management Container

To manually create the System Management container

1. Log on as an account that has the Create All Child Objects permission on the System container
in Active Directory Domain Services.
2. Run ADSI Edit, and connect to the domain in which the site server resides.

3. Expand Domain [computer fully qualified domain name], expand <distinguished name>, right-
click CN=System, click New, and then click Object.
4. In the Create Object dialog box, select Container, and then click Next.
5. In the Value field, type System Management and click Next.
6. Click Finish.
Set Permissions on System Management Container

To apply permissions to the System Management container using the
Active Directory Users and Computers administrative tool

1. Click Start, click Run, and then enter dsa.msc to open the
Active Directory Users and Computers administrative tool.
2. Click View, and then click Advanced Features.
3. Expand the System container.
4. Right-click System Management. On the context menu, click Properties.
5. In the System Management Properties dialog box, click the Security tab.
6. Click Add to add the site server computer account and grant the account Full Control
permissions.
7. Click Advanced, select the site servers computer account, and click Edit.
8. In the Apply onto list, select This object and all child objects.
9. Click OK.
9. Installing SCCM 2007 SP2

After all the Prerequisites are met we will install SCCM 2007 SP2.

Run Setup.exe from the SCCM 2007 Setup Disk

Select Configuration Manager 2007 SP2


SCCM 2007 Sp2 setup wizard welcome screen will open up. Click on Next to start the SCCM 2007 SP2
installation.

On the Available Setup Options Screen select Install a Configuration Manager Site Server and click on
Next


Accept the Microsoft Software License Terms and click on Next

On Installation Settings window select Custom Settings and click on Next


The site Type window will open. Select Primary Site and click on Next

Select if you want to participate in CEIP configuration, we have select No and click on Next


Enter the Product Key and click Next

Select the configuration Manager installation Folder and click on Next


On the Site Settings screen Enter Site Code as SBI and Site Name SBI Central Site - Mumbai. Please
enter different site Code and Site name for Secondary Sites.

Click on Next

On site Mode Select Configuration Manager Mixed Mode and click on Next


Select the Client agents required by you. These can be modified later using site management after
installation also. Click on Next

On the Database server window enter the SQL server and instance name. Also Enter the Configuration
Manager Database name. We have used the default Confmgr Site Database name SMS_SBI. Click on
Next


On the SMS Provider enter the default SCCM server name and click on Next

On the Management Point screen select Install a management Point and click on Next


Next is the Port Setting screen. Select the default port 80 and click on Next

On the Updated Prerequisite Components SCCM will require some updates. We have downloaded them
to a location. If you have not downloaded the updates then select the Check for updates and download
the newer version to an alternate path.

Select the latest updates have already been downloaded to an alternate path and click on Next

Brouse for the alternate path where updates are stored


Give the path of the updates and click on Next

On the Settings summary screen check all the settings and click on Next

Setup will check the prerequisites for SCCM installation if it is success the click on Next

Setup will start the installation


Click on Finish to finish the installation

10. Configuring SCCM 2007 SP2

Configure Boundaries:-

Expand the Site Management until you can see the Boundaries node, right click the node and select
New Boundary from the context menu. Right click on boundaries and select new Boundary

You can input a description, you can choose the type of network connection, be it slow or unreliable, or
Fast (LAN). Also the type of boundary you can choose from IP subnet, AD site names, IPv6 prefix, or IP
range.
We have chosen IP subnet as the site boundary


In the similar way add boundaries for 10.0.20.0, 10.0.30.0 and other subnets.
a. Add Roles:-

To Start Configuring Site roles open Configuration manager console

Expand Site Database; under site database Expand site Management

Expand SBI- SBI Central Site Mumbai and Site settings under that and Site systems

You can see Component server, DP, Site Server, Site System, and DB roles installed. On the left of the
middle window you will notice the new link for New Roles, you can use this to start the process or right
click on the server and select New Roles from the context menu.


When you select the New Roles you will start a wizard that follows the theme of task sequences, you will
fill out a survey of questions, followed by a summary, and then the execution of those tasks you have
selected.


On the first window, the General tab, you will see the options to use a FQDN, you must use this if you
are running in native mode, the second selection is the FQDN for Internet connected clients, this is
going to be different than your FQDN for intranet clients and is required if you are going to manage
Internet based clients so they can connect to the server from outside your firewall. If you need to
specify a different account to install the server roles you would provide this as well, I am going to use
the servers computer account. The last two selections are to make the site a protected site, this means
that only those clients that are assigned to it are the clients that will get a response from the site server,
the last one is Retrieve all data from this site server, what this does is it will configure all communication
to be initiated by the site server to the site system. We will specify the FQDN for intranet connected
systems so I input MUMHOISCCMC01.SBI.ADl, leave the protected system and retrieve data from this
site system checkboxes blank and click the Next button.


Now on to the selection of the roles to add to your system. As you can see from the list there are some
new roles as well as some classic roles. The new roles include System health validator which is part of
the NAP, State migration point which is part of the USMT/OSD, PXE service point, Fallback status point,
and Software update point. The others you should recognize, Server locator point and Reporting point.

Choose SLP, RP, SUP, and State migration point and click the Next button to continue.


This will take you into another list of sequences to configure each role individually, the first is the SLP,
leave these as defaults and click on Next

Next up is RP, leave the defaults and click next.

For SUP settings you may need to specify proxy server settings if you need to in order to get out to the
Internet, click the Next button to continue.


On the next dialog you will need to check the box that says Use this server as the active software
update point, leave the port set to 80 unless you changed this during the installation process. The SUP
role should only be set on server where you want them to download all the patches, this would typically
be your central site, where you will create the packages and then distribute them.

For the topmost site you will leave it to sync with Microsoft Update, then the sites below would sync
with it. As the server has not connection with internet select do not synchronize with internet
The next dialog allows you to set the schedule you sync your updates. Leave this at its default and click
the Next button.


The Classifications dialog allows you to choose what class of updates you want to download, the choices
are Critical Updates, Definition Updates, Drivers, Feature Packs, Security Updates, Service Packs, Tools,
Update Rollups, and Updates. You should note that if you are running a WSUS server and syncing with
it, which I would not recommend the settings here will not override what you have set in WSUS server
and you may end up with updates outside of what you configure here.
Choose the following Critical Updates, Security Updates, Service Packs, Update Rollups, and Updates,
and then click the next button.

The next dialog is the products you want to download updates for, choose Office, SQL, and Windows
and then click Next.


Select the Language for the updates i.e. English and click on next

Summary window will show the Roles selected and settings for the roles verify and click on Next

Click on close on the wizard complete window


b. Configure Client Agents

The client agents that you selected to be installed were installed with the default settings so we only
need to configure the agents that we want to change the defaults

Enable software metering client agent


c. Client Installation method

SCCM clients can be installed from the SCCM server using Client push installation method. This is for
reference we have not enabled Client Push installation



d. Manually Install SCCM Client

The client agent can be found at \\10.0.14.224\sms_sbi\client folder. To install the agents
follow these steps

Step1: On the client machine open c:\windows\system32\drivers\etc\hosts in the notepad and
Add the entry
10.0.14.224 SCCM2007 SCCM2007.SBI.COM

Step 2: Run SCCM agent setup file ccmsetup.exe with the following switch

Ccmsetup.exe /mp:sccm2007.sbi.com /service SMSSITECODE=SBI
SMSSLP=SCCM2007.sbi.com

Step3: After installation of agent open control panel and check for Configuration manager icon
there for successful agent installation
e. Discovery Method

At SBI Active Directory system discovery is being used for discovering systems across AD domain


Double click on Active Directory System Discovery under discovery Methods

Enable the Active Directory system discovery and click on new active directory container


Select Custom LDAP or GC query and browse to the Active Directory container from where to discover
the systems

Specify the discovery polling schedule and select run discovery as soon as possible


f. Installing agents

Expand the collection and Select the system on which you want to install agent

Right click on the system name and select install client

Select include only clients in this sites boundaries


Click on Finish
g. Creating Collections

Right click on the collections Tab and select new collection, the new clooection wizard will open as
follows


Add the membership Rule i.e. Direct membership or Query based membership and crate the collection

Enter the query Name and select resource class as System Resource

Click on Edit Query Statement

In the query properties box select the criteria tab and select on new criteria

On the criterion properties go to where tab and click on select. On select attribute screen select attribute
class as Computer System and attribute as Name and click on Ok


Select the operator and type the value. The value can be in wildcards like %del%, this query will match
all computers witch has DEL in their name attribute. Click on OK. Click OK again on query statement
properties box

Click ok on the query Rule Properties Box

Select Next in the membership rule page

Click Next in Advertisement window


Click Next on the Security Page and click on Finish

11. Updates Deployment through SCCM 2007

To Deploy Updates using SCCM Browse through Software Updates in the left hand pane of the SCCM
Configuration Manager Console.

Browse through and select the update you want to deploy


Right click on the update and select Deploy Software Updates, the Deploy software updates wizard will
open

Enter name for the deployment and click on the Next


Select on create a new Deployment Definition and click on Next

On the collection window select the collection on which you want to deploy the software update


Check on include members of subcollections if you want to and click on Next

On display and time settings window select Allow Display notification on clients and select client local
time. Give the duration for deadline, by default its 2 weeks


On the restart settings window select suppress system restart on Servers and click on Next

On Event Generation Window leave defaults and click Next


On Download Settings Window leave the default settings and click on Next

Give a name for the Template and save for Future use


On the Deployment Package Window click on Create a New deployment Package and enter the Name ,
Package Source and sending priority and click on Next

On the Distribution Point Window click on browse and select the Distribution point and click on Next

On the Download Location select download software updates from the Internet and click on Next

Select the Language for the update in the language selection window and click on Next


Specify the schedule for deployment as per above and click on Next

Verify the summary in the window and click on Next


Click on Close after the deploy software updates wizard complete successfully


12. Backup SCCM Site

If you want to backup your SCCM site, you may make use of SCCM Site Server Maintenance Task to
accomplish this. Below are the steps to configure the SCCM Backup job:

1. In the SCCM console, navigate to System Center Configuration Manager / Site Database
/ Site Management / <site name> / Site Settings / Site Maintenance / Tasks.

2. Right-click the Backup Site Server task, and click Properties.


3. Specify how frequent you would like to backup your site in the the backup task properties, and
click OK. Ensure that you schedule the backup task to run at an appropriate time

13. Troubleshooting SCCM 2007

Client Issues: - http://blogs.technet.com/b/configurationmgr/archive/2009/08/10/troubleshooting-
issues-where-clients-are-not-reporting.aspx

Log files in SCCM
http://technet.microsoft.com/en-us/library/bb892800.aspx

Troubleshooting SCCM
http://technet.microsoft.com/en-us/library/bb632812.aspx

SCCM 2007 Sp2 Build Guide - Sbi

Cargado por

Información del documento

Título original

Derechos de autor

Formatos disponibles

Compartir este documento

Compartir o incrustar documentos

Opciones para compartir

¿Le pareció útil este documento?

¿Este contenido es inapropiado?

Copyright:

Formatos disponibles

SCCM 2007 Sp2 Build Guide - Sbi

Cargado por

Copyright:

Formatos disponibles

State Bank Of India Confidential

También podría gustarte