Webinar on SCCM 2012 R2

Administering and configuring System Center Configuration Manager 2012 R2 SP1

Topics:•Configuring and deploying SCCM 2012 R2•Data Quering using WQL and gathering collections •Configuring Software and Hardware Inventory, asset intelligence and software metering.

Overview of the System Center 2012 Environment

Single admin console

Manage clients onthe organizationalnetwork and the Internet

Configuration Manager

Overview of System Center 2012 R2 Configuration Manager

Application Management

Software Update

Management

Operating System

Deployment

ContentManagement

Asset management

Hardware and Software Inventory

Asset Intelligence

Software Metering

Remote Management

Reporting

Monitoring

Role-Based Administration

Administrativefeatures

Endpoint Protection

Compliance Settings

Power Management

ClientHealth

Changemanagement

New Features Provided with an Installation of System Center 2012 R2 Configuration Manager• Support for clients that run Windows 8, Windows 8.1, Windows RT, Windows 8.1 RT, iOS, Mac OS X, and Android• Support for Windows Server 2012 and Windows Server 2012 R2 to host site system roles• Support for SQL Server 2012 to host Configuration Manager databases• Support for merging of System Center 2012 R2 Configuration Manager hierarchies• New site system roles for the certificate registration point• Bulk reassignment of clients to alternate primary sites• Configuration Manager Windows PowerShell cmdlets

Overview of the System Center 2012 R2 Configuration Manager Hierarchy

SQL databaseCentral administration site

SQL database

Primary site

SQL database

SQL database

SQL databas

e

Secondary site

Primary site

Primary site

• Each site is identified by a unique three-character code

• The central administration site is for reporting and management only

• Primary sites can be parents of secondary sites only

• Secondary sites now have their own database

Site System Roles in Configuration Manager

• Default site system roles are installed when Configuration Manager setup is run

• Optional site system roles are added post-installation to support specific features

Default site system roles• Site server• Site system• Component server• Site database server• SMS Provider: does not

display in the console

Optional site system roles• Certificate

registration point• Distribution point• Management point• Reporting services

point• Software update point• State migration point

What Is a Central Administration Site?

A central administration site:• Is required to use a multisite hierarchy• Is used for administration and reporting• Requires an SQL database• Does not process client data• Does not support client assignment• Has a limited number of site system roles

What Is a Primary Site?

• To use Configuration Manager, you must have at least one primary site• Primary sites:

• Can be in a child relationship to a central administration site, which can only be set during installation

• Cannot be a child to another primary site• Manage clients in well-connected networks• Require a SQL Server database• Replicate their data to a central administration site if

part of a hierarchy• Support client assignment• Consist of one or more systems that host various

site system roles

What Is a Secondary Site?

A secondary site:• Is optional• Must be in a child relationship to a primary site,

which is set in the secondary site during installation

• Is used when you need to control network bandwidth

• Requires SQL Server Express or a SQL Server database to store configuration information

• Replicates its collected client data to its parent site by using file-based replication

• Does not support client assignment• Consists of one or more systems that host

various site system roles

Configuration Manager in a Small- to Medium-Sized Organization

Small- to medium-sized organizations often use a single primary site that includes:

• Mandatory:• Site server• Site database• Management point• Distribution point

• Optional:• Reporting services point• Software update point• Fallback status point• Other roles as required

Single Server with All

Site Roles

Configuration Manager in a Medium- to Large-Sized Organization

Medium- to large-sized organizations use primary and secondary sites• A primary site typically includes:

• Site server• Site database• Management point• Distribution point• Reporting services point• Software update point• Fallback status point• Other roles as required

• Secondary sites include:• Management point• Distribution point

Site Server Site

DatabaseSoftware

Update Point

Secondary Site Server

Remote Distribution Point

Configuration Manager in a Global Organization

Example of a complex hierarchy implementation:

Central Administration Site

Primary Sites

Secondary Sites

Remote Distribution

Point

How Data Flows and Replicates in a Hierarchy

Primary Site

Central Administration Site

Primary Site

Secondary Site

Global DataSite Data

Global data Site data

• Alert rules• Client discovery• Collections rules and count• Configuration items metadata• Deployments• Operating system images• Package metadata• Program metadata• Site control file• Site security objects• Software updates metadata• System resource list

• Alert messages• Asset intelligence CAL tracking• Client Health data• Client Health history• Collection membership results• Component and Site Status

Summarizers• Hardware inventory• Software distribution status

details• Software inventory and metering• Software updates site data• Status messages

Considerations for Implementing Configuration Manager SitesInstall a stand-alone primary site when you have:

Install secondary sites when you want:

Install multiple primary sites in a hierarchy when you have:

• A centralized administration approach• No more than 100,000 clients

• More clients than can be managed using a single primary site• Multiple administrative teams that require local connectivity for

the Configuration Manager consoles• A large number of remote locations• Export regulations on content

• To offload the client communication from the primary site • To provide tiered content routing between secondary sites with

the same parent

Planning a Multiple-Site Hierarchy

A central administration site:

A primary site:

A secondary site:

• Supports up to 250 secondary sites• Supports up to 250 distribution points • Supports up to 10 management points• Supports up to 50,000 clients when SQL Server is on the site server• Supports up to 100,000 clients when SQL Server is on a separate computer

• Supports up to 25 child primary sites• Supports up to 400,000 clients in the hierarchy when using SQL Server

Enterprise for the site database• Supports up to 50,000 clients in the hierarchy when using SQL Server

Standard for the site database

• Supports up to 250 distribution points• Supports a single management point located on site server• Supports communications from up to 5,000 clients

Overview of the Configuration Manager Administration Tools

• Configuration Manager console:• Primary method of managing a Configuration Manager

deployment• You can install it on an administrator’s client computer

• Configuration Manager client:• Trigger updates and retrieve information about individual

client computers

• Windows PowerShell Configuration Manager cmdlets:• Enable you to script Configuration Manager activities

• Orchestrator runbooks:• Enable using runbook automation to perform Configuration

Manager tasks

Using the Configuration Manager Console

Ribbon

Navig

ati

on

Pan

e

Results Pane

PreviewPane

Work

sp

aces

Overview of Client Installation Methods

•The client deployment installation methods include:• Client push installation• Group Policy installation• Software update point installation• Manual installation• Logon script installation• Upgrade installation (software deployment)• Operating system deployment• Computer imaging

Device Requirements to Support the Windows-Based Configuration Manager Client Agent

Supported Windows-based clients include:• Windows XP SP3, Windows XP x64 SP2, Windows Server 2003 SP2, and newer operating systems

Prerequisite software includes:• Windows Installer version 3.1.4000.2435 or newer• Installation process installs these additional

prerequisites before client installation:• Windows Update Agent• Microsoft Core XML Services• Microsoft Visual C++ Redistributable• Microsoft Policy Platform• Microsoft Silverlight• Microsoft .NET Framework 4 Client

Considerations for Supporting a Virtual Desktop Infrastructure

•RDS• Configuration Manager client agent is installed only once on the Remote Desktop Session Host• All features are supported

•Private virtual machines• Configuration Manager client agent is installed in each virtual machine• All features are supported

•Pooled virtual machines• Configuration Manager client agent is installed on each virtual machine• Software inventory, hardware inventory, and software metering data may not be relevant

Supporting Internet-Based Clients

• Considerations for supporting Internet-based clients:• Internet-based clients require a PKI• Microsoft Certificate Services certificate templates

can simplify certificate enrollment• All systems involved must trust the root CA• Internet-facing roles require a certificate• Client systems use a certificate for authentication

Secure web servicesAll utilized IIS-based site services

except fallback status point (not an HTTPS service)

without PKI-issued server certificate

HTTPS connection

Client systemon Internet

with PKI-issuedclient certificate

Primary site

Root CA

Issuing CA

PKI infrastructure

Supporting Mobile Devices

• Supported mobile devices include:• Windows Phone 8, Windows RT, and iOS devices• Windows Mobile 6.0 or newer• Windows CE 5.0 or newer• Nokia Symbian Belle• Limited support for devices that use ActiveSync• Android

• Client certificates are required on mobile devices for full support• You can support and manage mobile devices by using:• Windows Intune connector• Configuration Manager client agent• Legacy Configuration Manager client agent• Exchange connector

Supporting Workgroup-based Clients

The prerequisites that workgroup-based computers must meet include:• The Configuration Manager client agent must be installed manually on each workgroup-based computer• A network access account must be configured

The features that workgroup-based computers do not support include:• Client push installation• Targeting users for application deployment• Global roaming• Using AD DS to locate site systems• Active Directory discovery

Supporting Mac Computers

The following features are supported in Mac OS X computers:• Hardware inventory:

• Viewed in Resource Explorer• Used to create queries, collections, and reports

• Software deployment. Deploy software packages in the following formats:• Mac OS Installer Package (.PKG)• Mac OS X Application (.APP)• Apple Disk Image (.DMG)• Meta Package File (.MPKG)

• Compliance settings. Configuration Manager supports:• .plist files• Shell scripts

Supporting Linux-based and UNIX-based Computers

The supported operating systems include:• Red Hat Enterprise, Solaris, SUSE Linux Enterprise Server, Debian, CentOS, Ubuntu Server, Oracle Linux• IBM AIX, HP-UX

Linux-based and UNIX-based computers support the following features:• Hardware inventory:

• Viewed in Resource Explorer• Used to create queries, collections, and reports

• Software deployment:• User interaction is not supported• Maintenance windows are fully supported

Data Query

•Data Queries extract information related to resource discovery or inventory data.• In general the primary purpose of Data Queries are to build collections.

Status Message Query

Status Message Query has a very specific use. The site status and component status nodes show status messages related to a very specific site system or component. Although there are some filtering options these may not be sufficient when troubleshooting an issue. In such case you can use the status message queries to create custom queries for status messages including status messages from client.

The primary purpose of status message queries are to locate stored status messages.

Object Types

DeploymentDeployment

System ResourceSystem Resource

Package Package

Site Site

User Group Resource

User Group Resource

Program Program

User Resource

User Resource

Software Metering

Rule

Software Metering

Rule

There are over 20 object types available for building queries in Configuration Manager

Each object type consists of one or more attribute classes Some of the object types include:

There are over 20 object types available for building queries in Configuration Manager

Each object type consists of one or more attribute classes Some of the object types include:

RoleRole

A Configuration Manager object type is a resource class containing a set of attributes that represent Configuration Manager database objects

A Configuration Manager object type is a resource class containing a set of attributes that represent Configuration Manager database objects

Attribute ClassAttribute Class

Object TypeObject Type

AttributeAttribute SCSI BusSCSI Bus

System ResourceSystem Resource

Current Clock SpeedCurrent Clock Speed ManufacturerManufacturer PartitionsPartitions

ProcessorProcessor Disk DrivesDisk Drives

Objects and Attributes

NewNewDeleteDelete

GroupGroup

UngroupUngroup

PropertiesProperties Change OperatorChange Operator

NotNotLogical Operators Logical Operators

Group IndicatorsGroup Indicators

ClassClass

AttributeAttribute

SortSort

Required NameRequired Name

Required Object TypeRequired Object Type

Optional query elements are used to narrow the scope of a queryOptional query elements are used to narrow the scope of a queryAttribute classes and attributes are required, and if not specified, all available attributes displayAttribute classes and attributes are required, and if not specified, all available attributes displayEvery query requires a unique name, andSystem Resource is the default object typeEvery query requires a unique name, andSystem Resource is the default object type

Query Elements

To create a data query:

Managing Data Queries

Import an existing query or build a query from scratch22

Edit the query statement 33

Add search criterion on the Criteria tab55

Complete the settings on the General page of the Create Query Wizard11

Edit the General tab of the query statement properties to specify the criteria to display44

When creating criterion, use the Values button to display the related data currently stored in the database

66

What Is Inventory Collection?

Inventory collection is:• The process of gathering information that describes the hardware and software installed on a client computer• Configured by using client settings for the hierarchy or assigned on a per-collection basis

Software inventory data

Hardware inventory data

Asset intelligence data

Management Tasks That Use Inventory Data

Uses of hardware and software inventory data include:• Building queries based upon hardware configuration or installed software • Building collections on the basis of queried inventory results •Creating reports to display hardware configuration or installed software details •Maintaining corporate standards • Troubleshooting client problems •Collecting files (software inventory only)

The Process of Inventory Collection

View inventory information at a site after its database is updated by this process:

1. Client gets settings and collects inventory

2. Deliver data to management point

3. Deliver data to site server4. Update site database5. Replicate to the central

administration site

Site Database

Server

Site Server

Management

PointClient

How Is Hardware Inventory Collected?

•A hardware inventory obtains information by querying:• WMI database on Windows client computers• CMI database named OMI on Linux, UNIX, andMac OS X

•The hardware inventory agent collects:• An initial full hardware inventory• Subsequent delta inventories

Collecting Hardware Inventory

How Is Software Inventory Collected?

The software inventory process:• Collects data directly from files by reading the file header information• Collects file system details even from unknown files that may not have information in their file header• Collects copies of files that you specify and stores them on the site server• Enables you to view collected inventory and file information by using Resource Explorer, or view software inventory information in reports

Software Inventory File Types

• To configure new software inventory rules:• Create a new inventory

rule• Type the file name or

variable• Specify the location • Specify whether to

exclude encrypted and compressed files

• Specify whether to excludefiles in the Windows directory

• Specify the reporting detail for all rules

Overview of Asset Intelligence

Asset Intelligence:•Extends hardware inventory• License reporting•Supports ISO/IEC 19770-2 tags•Collect information about App-V apps

Benefits of Asset Intelligence

Asset Intelligence provides the following benefits over software inventory:•More accurate representation of software titles present on managed computers.• Information about the license usage for specific products, rather than just information about the software itself.•Asset intelligence retrieves information about installed software through the Hardware Inventory Client Agent.

The Asset Intelligence Catalog

Asset Intelligence catalog features:• Includes more than 500,000 software titles• Enables import of software license information• Provides information about hardware requirements for some titles• Is updated periodically through System Center Online

Configuring Data Collection for Asset Intelligence

Configuring Asset Intelligence can include the following tasks:• Enabling Hardware Inventory and software metering• Enabling Asset Intelligence inventory reporting classes• Enabling Windows Event Log settings • Importing software license information• Installing an Asset Intelligence synchronization point• Configuring Asset Intelligence maintenance tasks• Configuring Asset Intelligence security

Overview of Software Metering

•Software metering is the process of gathering detailed data on program usage from client computers in a Configuration Manager site•Types of data collected:• Program usage information• File information• Program information

SoftwareMeteringAgent

SoftwareMeteringAgent

Monitored programMonitored program

Monitored programMonitored program

Monitored programMonitored program

How Software Metering Works

Site Server

When you enable the Software Metering Agent, it:

Collects data each time a monitored program runs and terminates1

Uploads data to the management point on a scheduled basis2

Forwards data to the site server3

Adds data to the site database4

1

24

3

Enable the Software Metering Agent and configure a reporting schedule

Configuring the Software Metering Agent and Rules

To create a software metering rule:

Navigate to the Software Metering node1

Create a new software metering rule2

Provide relevant information for the program that you want to meter

3

Apply the rule to other sites if applicable4

When enabled, software metering will:• Automatically generate

disabled rules from recent usage history

• Generate automatic rules on the basis of a specified percentage of computers using a program

• Thanks for Attending the SessionRegards

Abu Zobayer (MCT)