Sccm 2007 Sp2 Build Guide - Sbi

8/11/2019 Sccm 2007 Sp2 Build Guide - Sbi

1/85

State Bank Of India Confidential

Page i

" Build Guide- SBI"

SCCM 2007 R2Build and Configuration Guide

System Center Configuration Manager(SCCM) 2007 R2 Deployment

Prepared for

State Bank of India Ltd.Monday, 24 January 2011

Version.1Draft


2/85


Page ii

" Build Guide- SBI"

Revision and Signoff Sheet

Change RecordDate Author Version Change reference

19 th January2011

Mahender .1 Initial draft for review/discussion

Reviewers

Name Version approved Position Date


3/85


Page iii

" Build Guide- SBI"

Table of Contents1. Introduction ............................................. .................................................. ............................ 4

1.1 Document Purpose .............................................. .................................................. ............ 4

1.2 Intended Audience .............................................. .................................................. ............ 4

2. Deploying SCCM 2007 R2........................................................ ............................................ 5 2.1 Software requirements .................................................................................... .................... 5

3. Install IIS and dot Net Framework 3.5 SP1 .............................. ............................................ 5

4. Configure WebDAV Settings for IIS .................................................. .................................... 9

5. SQL Server 2008 Installation Steps ............... .................................................. .................. 13

6. Install WSUS 3.0 SP1 ............................................. .................................................. .......... 29

7. Extend the Active Directory Schema for SCCM 2007 SP2 ................................................... 35

8. Create System Management Container ............................................................................. 35

9. Installing SCCM 2007 SP2 ....................................................................................... .......... 36

10. Configuring SCCM 2007 SP2 ......................................................... .................................. 49

a. Add Roles:- ...................................................................................................................... 51

b. Configure Client Agents .................................................................................................. 61

c. Client Installation method ..................................................................................... .......... 62

d. Manually Install SCCM Client ......................................... .................................................. 64

e. Discovery Method ................................................ .................................................. .......... 64

f. Installing agents .................................................. .................................................. .......... 67

g. Creating Collections ........................................................................................................ 69

11. Updates Deployment through SCCM 2007 .................................................. .................. 74

12.

Backup SCCM Site ............................................................... .......................................... 84

13. Troubleshooting SCCM 2007 ............................................... .......................................... 85


4/85

State Bank of India Confidential

1.

1.1 Document Purpose

The following document details the Installation and configuration of the System Center Configuration

Manager 2007 SP2 for State Bank of India Ltd.

1.2 Intended Audience

This document is for the use of SBIs IT System Administrators Team.


5/85


2. 200 2

SCCM requires a database used for storing configuration and logging information. Microsoft SQL

Server 2008 is the database that will be used in this Document. It will be installed on Member server. SQL Server installed and configured in SBI production environment on the same server as SCCM 2007SP2 with following Details

Hostname SCCM2007SQL Version SQL 2008 With SP1Installation Directory C:\IP Address 10.0.14.224Subnet Mask 255.255.252.0Installation Account Administrator

2.1 Software requirements

Server Software Required

SQL Server 2008 SP1 Windows 2008 with latest updates

IIS 7.0

Dot net framework 3.5 SP1

3. 3. 1

Open Server Manager and click on Features Add Features


6/85



7/85


In the Add feature Wizard select .Net Framework 3.5.1, Background Intelligence TransferService( BITS) and Remote Differential Compression as shown in figure and click on Next.

Click on Next in Web Server Screen


8/85


Select Role Services as in figure above and click NEXT


9/85


Click Close to complete the add feature wizard

.

Open IIS manager from administrative tools and browse to Default Web Site


10/85


In the middle pane double click on WebDAV authoring Rules

In the WebDAV authoring window click on Add authoring Rule


11/85


In Add authoring windows select the following Allow Access to All Content Allow Access to this content All UsersPermissions Read, Source, Write

Click on Ok

Click on WebDAV settings


12/85


Change the settings as below:

Allow Anonymous Property Queries True Allow Custom Properties False Allow Property Queries with Infinite Path True Allow Hidden Files to be listed True

Click on Apply on the Actions Pane

Note : You may need to change the WebDAV settings in the config file manually if your MP does notinstall successfully

Navigate to %windir%\System32\inetsrv\config\schemaTake ownership of webdav_schema.xmlRemove the read only attributes

edit the below lines to these:

Save it and continue with SCCM.


13/85


. 200

Copy the installation files

Double click on Setup.exe After a few seconds a dialog box appears. This will disappear from the screen and then the maininstallation page appears

STEP 3 : SQL Server Installation CenterClick on the Installation hyperlink on the left hand side of the screen:

STEP 4 : SQL Server Installation CenterClick on the "New Server stand-alone installation" link on the right side of thescreen:


14/85


The following dialog appears on the screen whilst the install program prepares for installation:

STEP 5 (optional):If any checks have failed, click on the Show details button or "View detailed report link" to find out thecause, correct it, then click on the Re-run button to perform the checks again.


15/85


16/85


STEP 7 : License TermsEnter the product key into the box, or choose the free edition if you're evaluating SQL Server 2008, andclick on the Next button:

Click in the "I accept the license terms" check box, then click on the Next button again.

STEP 8: Setup Support FilesThe following screen appears; click on the Install button:


17/85


After 30 seconds or so the dialog appears again:

Setup Support RulesIf all is well, the following screen appears :


18/85


Click on the Next button again.

STEP 10 : Feature SelectionSelect the features you want to install.

At a minimum, the following are useful, but what you need will depend on your needs:

Click on the Next button.

STEP 11 : Instance Configuration


19/85


After a short while the following screen appears:

STEP 12 : Disk Space RequirementsThis screen just tells you if you have sufficient disk space on the drive youre installing to, and whatsgoing to be installed where.


20/85


Click on Next.STEP 13: Server ConfigurationThis step allows you to set up the service accounts that will be used to run SQL Server. If you havecreated Windows NT or Active Directory accounts for use with services, use these

We have used system account as the service account.

STEP 14: Database Engine Configuration Account ProvisionThis screen allows you to set up database engine security.

Click on Next.

STEP 15: Reporting Services ConfigurationThis screen simply asks modes of default configuration.


21/85


Select Install, but do not configure the report server

STEP 16 : Error Usage ReportingThis screen simply asks if you want to send error information to Microsoft and can safely be skipped ifyou do not want to share any information.

Click boxes if you want to help Microsoft help you.Click on Next again

STEP 17: Installation RulesThis screen simply checks if there are any processes or other installations running which will stop theinstallation of SQL Server 2008.


22/85


Click on Next again

STEP 18 : Ready to InstallThis screen summaries what you are about to install and gives you a last chance to cancel or changeanything thats wrongly configured:

STEP 19 : Installation ProgressSQL Server 2008 will now install. How long it takes depends on the speed of your machine, what loadits under, the installation media (CD is slower) and what youve chosen to install.


23/85


24/85


25/85


On the welcome screen click on Next


26/85


Accept the license terms and click on Next

On the feature selection window click on select all and then click Next


27/85


Click Next on Check file in Use window

On ready to update window click on Update


28/85


SQL 2008 has been upgraded to SP1 click on next

Close the complete window


29/85


. 3.0 1

Before software update point can successfully be installed and configured on a site system server inConfiguration Manager 2007, Windows Server Update Services (WSUS) 3.0 must be installed on theserver.

Note: DO NOT configure WSUS though the Configuration Wizard.

The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. BecauseConfiguration Manager 2007 manages the WSUS settings, you should exit the configuration wizard afterit opens.


30/85


Note: while this wizard is completing it takes a long period of time to download the new version fromMicrosoft so please be patient and watch out for the window below to open and start the installation.

Click Install

Click Next

Click I accept the terms of the License agreement , and then click Next .


31/85


Select Store updates locally , specify the path, (point it to a partition of your choice which hasenough free space to store the updates) and then click Next


32/85


Click Next

If you decide to change this behavior make sure you keep a note of this as this information will berequired when we configure WSUS using SCCM.

Click Next >


33/85


Click Next

Click Finish


34/85


Close

DO NOT configure WSUS though the Configuration Wizard.

The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. Because


35/85


Configuration Manager 2007 manages the WSUS settings, you should exit the configuration wizard afterit opens.

7. Extend the Active Directory Schema for SCCM 2007 SP2

Open Command Prompt with Elevated Privileges

The Extadsch.exe is located in the bin\i386 folder of the installation media, browse through the folderand run the command

The command will extend the active directory schema to accommodate SCCM 2007 SP2

Please verify from extadsch.txt at C:\ for successful extend of AD

.

To manually create the System Management container

1. Log on as an account that has the Create All Child Objects permission on the System containerin Active Directory Domain Services.

2. Run ADSI Edit, and connect to the domain in which the site server resides.


36/85


3. Expand Domain [computer fully qualified domain name], expand , right-click CN=System , click New , and then click Object .

4. In the Create Object dialog box, select Container , and then click Next .5. In the Value field, type System Management and click Next .6. Click Finish .

Set Permissions on System Management Container

To apply permissions to the System Management container using the Active Directory Users and Computers administrative tool

1. Click Start , click Run , and then enter dsa.msc to open the Active Directory Users and Computers administrative tool.

2. Click View , and then click Advanced Features .3. Expand the System container.4. Right-click System Management . On the context menu, click Properties .5. In the System Management Properties dialog box, click the Security tab.6. Click Add to add the site server computer account and grant the account Full Control

permissions .

7. Click Advanced , select the site servers computer account, and click Edit .8. In the Apply onto list, select This object and all child objects .9. Click OK .

. 200 2

After all the Prerequisites are met we will install SCCM 2007 SP2.

Run Setup.exe from the SCCM 2007 Setup Disk

Select Configuration Manager 2007 SP2


37/85


SCCM 2007 Sp2 setup wizard welcome screen will open up. Click on Next to start the SCCM 2007 SP2installation.

On the Available Setup Options Screen select Install a Configuration Manager Site Server and click on

Next


38/85


Accept the Microsoft Software License Terms and click on Next

On Installation Settings window select Custom Settings and click on Next


39/85


The site Type window will open. Select Primary Site and click on Next

Select if you want to participate in CEIP configuration, we have select No and click on Next


40/85


Enter the Product Key and click Next

Select the configuration Manager installation Folder and click on Next


41/85


On the Site Settings screen Enter Site Code as SBI and Site Name SBI Central Site - Mumbai. Pleaseenter different site Code and Site name for Secondary Sites.

Click on Next

On site Mode Select Configuration Manager Mixed Mode and click on Next


42/85


Select the Client agents required by you. These can be modified later using site management afterinstallation also. Click on Next

On the Database server window enter the SQL server and instance name. Also Enter the ConfigurationManager Database name. We have used the default Confmgr Site Database name SMS_SBI. Click onNext


43/85


On the SMS Provider enter the default SCCM server name and click on Next

On the Management Point screen select Install a management Point and click on Next


44/85


Next is the Port Setting screen. Select the default port 80 and click on Next

On the Updated Prerequisite Components SCCM will require some updates. We have downloaded them

to a location. If you have not downloaded the updates then select the Check for updates and downloadthe newer version to an alternate path.

Select the latest updates have already been downloaded to an alternate path and click on Next


45/85


Brouse for the alternate path where updates are stored


46/85


Give the path of the updates and click on Next

On the Settings summary screen check all the settings and click on Next


47/85


Setup will check the prerequisites for SCCM installation if it is success the click on Next

Setup will start the installation


48/85


49/85


Click on Finish to finish the installation

10. Configuring SCCM 2007 SP2

Configure Boundaries:-


50/85


Expand the Site Management until you can see the Boundaries node, right click the node and selectNew Boundary from the context menu. Right click on boundaries and select new Boundary

You can input a description, you can choose the type of network connection, be it slow or unreliable, orFast (LAN). Also the type of boundary you can choose from IP subnet, AD site names, IPv6 prefix, or IPrange.We have chosen IP subnet as the site boundary


51/85


52/85


When you select the New Roles you will start a wizard that follows the theme of task sequences, you willfill out a survey of questions, followed by a summary, and then the execution of those tasks you haveselected.


53/85


On the first window, the General tab, you will see the options to use a FQDN, you must use this if youare running in native mode, the second selection is the FQDN for Internet connected clients, this isgoing to be different than your FQDN for intranet clients and is required if you are going to manageInternet based clients so they can connect to the server from outside your firewall. If you need to

specify a different account to install the server roles you would provide this as well, I am going to usethe servers computer account. The last two selections are to make the site a protected site, this meansthat only those clients that are assigned to it are the clients that will get a response from the site server,the last one is Retrieve all data from this site server, what this does is it will configure all communicationto be initiated by the site server to the site system. We will specify the FQDN for intranet connectedsystems so I input MUMHOISCCMC01.SBI.ADl, leave the protected system and retrieve data from thissite system checkboxes blank and click the Next button.


54/85


Now on to the selection of the roles to add to your system. As you can see from the list there are somenew roles as well as some classic roles. The new roles include System health validator which is part ofthe NAP, State migration point which is part of the USMT/OSD, PXE service point, Fallback status point,and Software update point. The others you should recognize, Server locator point and Reporting point.

Choose SLP, RP, SUP, and State migration point and click the Next button to continue.


55/85


This will take you into another list of sequences to configure each role individually, the first is the SLP,leave these as defaults and click on Next

Next up is RP, leave the defaults and click next.


56/85


57/85


On the next dialog you will need to check the box that says Use this server as the active softwareupdate point, leave the port set to 80 unless you changed this during the installation process. The SUProle should only be set on server where you want them to download all the patches, this would typicallybe your central site, where you will create the packages and then distribute them.

For the topmost site you will leave it to sync with Microsoft Update, then the sites below would syncwith it. As the server has not connection with internet select do not synchronize with internet

The next dialog allows you to set the schedule you sync your updates. Leave this at its default and clickthe Next button.


58/85


The Classifications dialog allows you to choose what class of updates you want to download, the choicesare Critical Updates, Definition Updates, Drivers, Feature Packs, Security Updates, Service Packs, Tools,Update Rollups, and Updates. You should note that if you are running a WSUS server and syncing withit, which I would not recommend the settings here will not override what you have set in WSUS serverand you may end up with updates outside of what you configure here.

Choose the following Critical Updates, Security Updates, Service Packs, Update Rollups, and Updates,and then click the next button.


59/85


The next dialog is the products you want to download updates for, choose Office, SQL, and Windowsand then click Next.


60/85


Select the Language for the updates i.e. English and click on next

Summary window will show the Roles selected and settings for the roles verify and click on Next

Click on close on the wizard complete window


61/85


b. Configure Client Agents

The client agents that you selected to be installed were installed with the default settings so we onlyneed to configure the agents that we want to change the defaults

Enable software metering client agent


62/85


63/85



64/85


d. Manually Install SCCM Client

The client agent can be found at \\10.0.14.224\sms_sbi\client folder. To install the agentsfollow these steps

Step1: On the client machine open c:\windows\system32\drivers\etc\hosts in the notepad andAdd the entry10.0.14.224 SCCM2007 SCCM2007.SBI.COM

Step 2: Run SCCM agent setup file ccmsetup.exe with the following switch

Ccmsetup.exe /mp:sccm2007.sbi.com /service SMSSITECODE=SBISMSSLP=SCCM2007.sbi.com

Step3: After installation of agent open control panel and check for Configuration manager iconthere for successful agent installation

e. Discovery Method

At SBI Active Directory system discovery is being used for discovering systems across AD domain


65/85


Double click on Active Directory System Discovery under discovery Methods

Enable the Active Directory system discovery and click on new active directory container


66/85


67/85


f. Installing agents

Expand the collection and Select the system on which you want to install agent

Right click on the system name and select install client


68/85


Select include only clients in this sites boundaries


69/85


Click on Finish

g. Creating Collections

Right click on the collections Tab and select new collection, the new clooection wizard will open asfollows


70/85


71/85


In the query properties box select the criteria tab and select on new criteria

On the criterion properties go to where tab and click on select. On select attribute screen select attributeclass as Computer System and attribute as Name and click on Ok


72/85


Select the operator and type the value. The value can be in wildcards like %del%, this query will matchall computers witch has DEL in their name attribute. Click on OK. Click OK again on query statementproperties box

Click ok on the query Rule Properties Box


73/85


Select Next in the membership rule page

Click Next in Advertisement window


74/85


Click Next on the Security Page and click on Finish

11. 200

To Deploy Updates using SCCM Browse through Software Updates in the left hand pane of the SCCMConfiguration Manager Console.

Browse through and select the update you want to deploy


75/85


Right click on the update and select Deploy Software Updates, the Deploy software updates wizard willopen

Enter name for the deployment and click on the Next


76/85


Select on create a new Deployment Definition and click on Next

On the collection window select the collection on which you want to deploy the software update


77/85


Check on include members of subcollections if you want to and click on Next

On display and time settings window select Allow Display notification on clients and select client localtime. Give the duration for deadline, by default its 2 weeks


78/85


On the restart settings window select suppress system restart on Servers and click on Next

On Event Generation Window leave defaults and click Next


79/85


On Download Settings Window leave the default settings and click on Next

Give a name for the Template and save for Future use


80/85


On the Deployment Package Window click on Create a New deployment Package and enter the Name ,Package Source and sending priority and click on Next

On the Distribution Point Window click on browse and select the Distribution point and click on Next


81/85


On the Download Location select download software updates from the Internet and click on Next

Select the Language for the update in the language selection window and click on Next


82/85


Specify the schedule for deployment as per above and click on Next

Verify the summary in the window and click on Next


83/85


Click on Close after the deploy software updates wizard complete successfully


84/85


12.

If you want to backup your SCCM site, you may make use of SCCM Site Server Maintenance Task toaccomplish this. Below are the steps to configure the SCCM Backup job:

1. In the SCCM console, navigate to System Center Configuration Manager / Site Database / Site Management / < site name > / Site Settings / Site Maintenance / Tasks .

2. Right-click the Backup Site Server task, and click Properties .


85/85

Documents

Sccm 2007 Sp2 Build Guide - Sbi