Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
Page i
SCCM 2007 R2 Build Guide Version 1 Draftl
Prepared by Mahender Singh
"SCCM 2007 SP2 Build Guide- SBI" last modified on 24 Jan. 11, Rev 11
SCCM 2007 R2Build and Configuration Guide
System Center Configuration Manager
(SCCM) 2007 R2 Deployment
Prepared for
State Bank of India Ltd.
Monday, 24 January 2011
Version.1
Draft
State Bank Of India Confidential
Page ii
SCCM 2007 R2 Build Guide Version 1 Draftl
Prepared by Mahender Singh
"SCCM 2007 SP2 Build Guide- SBI" last modified on 24 Jan. 11, Rev 11
Revision and Signoff Sheet
Change Record
Date Author Version Change reference
19
th
January
2011
Mahender .1 Initial draft for review/discussion
Reviewers
Name Version approved Position Date
State Bank Of India Confidential
Page iii
SCCM 2007 R2 Build Guide Version 1 Draftl
Prepared by Mahender Singh
"SCCM 2007 SP2 Build Guide- SBI" last modified on 24 Jan. 11, Rev 11
Table of Contents
1. Introduction ........................................................................................................................... 4
1.1 Document Purpose ............................................................................................................ 4
1.2 Intended Audience ............................................................................................................ 4
2. Deploying SCCM 2007 R2.................................................................................................... 5
2.1 Software requirements ........................................................................................................ 5
3. Install IIS and dot Net Framework 3.5 SP1 .......................................................................... 5
4. Configure WebDAV Settings for IIS ...................................................................................... 9
5. SQL Server 2008 Installation Steps ................................................................................... 13
6. Install WSUS 3.0 SP1 ......................................................................................................... 29
7. Extend the Active Directory Schema for SCCM 2007 SP2 ................................................... 35
8. Create System Management Container ............................................................................. 35
9. Installing SCCM 2007 SP2 ................................................................................................. 36
10. Configuring SCCM 2007 SP2 ........................................................................................... 49
a. Add Roles:-...................................................................................................................... 51
b. Configure Client Agents .................................................................................................. 61
c. Client Installation method ............................................................................................... 62
d. Manually Install SCCM Client ........................................................................................... 64
e. Discovery Method ............................................................................................................ 64
f. Installing agents .............................................................................................................. 67
g. Creating Collections ........................................................................................................ 69
11. Updates Deployment through SCCM 2007 .................................................................... 74
12. Backup SCCM Site ......................................................................................................... 84
13. Troubleshooting SCCM 2007 ......................................................................................... 85
State Bank of India Confidential
1. Introduction
1.1 Document Purpose
The following document details the Installation and configuration of the System Center Configuration
Manager 2007 SP2 for State Bank of India Ltd.
1.2 Intended Audience
This document is for the use of SBIs IT System Administrators Team.
State Bank of India Confidential
2. Deploying SCCM 2007 R2
SCCM requires a database used for storing configuration and logging information. Microsoft SQL
Server 2008 is the database that will be used in this Document. It will be installed on Member server.
SQL Server installed and configured in SBI production environment on the same server as SCCM 2007
SP2 with following Details
Hostname SCCM2007
SQL Version SQL 2008 With SP1
Installation Directory C:\
IP Address 10.0.14.224
Subnet Mask 255.255.252.0
Installation Account Administrator
2.1 Software requirements
Server Software Required
SQL Server 2008 SP1 Windows 2008 with latest updates
IIS 7.0
Dot net framework 3.5 SP1
3. Install IIS and dot Net Framework 3.5 SP1
Open Server Manager and click on Features Add Features
State Bank of India Confidential
State Bank of India Confidential
In the Add feature Wizard select .Net Framework 3.5.1, Background Intelligence Transfer
Service( BITS) and Remote Differential Compression as shown in figure and click on Next.
Click on Next in Web Server Screen
State Bank of India Confidential
Select Role Services as in figure above and click NEXT
State Bank of India Confidential
Click Close to complete the add feature wizard
4. Configure WebDAV Settings for IIS
Open IIS manager from administrative tools and browse to Default Web Site
State Bank of India Confidential
In the middle pane double click on WebDAV authoring Rules
In the WebDAV authoring window click on Add authoring Rule
State Bank of India Confidential
In Add authoring windows select the following
Allow Access to All Content
Allow Access to this content All Users
Permissions Read, Source, Write
Click on Ok
Click on WebDAV settings
State Bank of India Confidential
Change the settings as below:
Allow Anonymous Property Queries True
Allow Custom Properties False
Allow Property Queries with Infinite Path True
Allow Hidden Files to be listed True
Click on Apply on the Actions Pane
Note : You may need to change the WebDAV settings in the config file manually if your MP does not
install successfully
Navigate to %windir%\System32\inetsrv\config\schema
Take ownership of webdav_schema.xml
Remove the read only attributes
edit the below lines to these:
<attribute name="allowAnonymousPropfind" type="bool" defaultValue="true" />
<attribute name="allowInfinitePropfindDepth" type="bool" defaultValue="true" />
<attribute name="allowCustomProperties" type="bool" defaultValue="false" />
Save it and continue with SCCM.
State Bank of India Confidential
5. SQL Server 2008 Installation Steps
Copy the installation files
Double click on Setup.exe
After a few seconds a dialog box appears. This will disappear from the screen and then the main
installation page appears
STEP 3 : SQL Server Installation Center
Click on the Installation hyperlink on the left hand side of the screen:
STEP 4 : SQL Server Installation Center
Click on the "New Server stand-alone installation" link on the right side of the
screen:
State Bank of India Confidential
The following dialog appears on the screen whilst the install program prepares for installation:
STEP 5 (optional):
If any checks have failed, click on the Show details button or "View detailed report link" to find out the
cause, correct it, then click on the Re-run button to perform the checks again.
State Bank of India Confidential
STEP 6 : Product key
If all checks have passed, click on the OK button. After a few moments, the option to select the edition
and to enter the license key (or product key) will appear. Note that the product key box may already
be populated, depending on which edition you have. Dont enter the product key weve shown here, it
wont work on your system:
State Bank of India Confidential
STEP 7 : License Terms
Enter the product key into the box, or choose the free edition if you're evaluating SQL Server 2008, and
click on the Next button:
Click in the "I accept the license terms" check box, then click on the Next button again.
STEP 8: Setup Support Files
The following screen appears; click on the Install button:
State Bank of India Confidential
After 30 seconds or so the dialog appears again:
Setup Support Rules
If all is well, the following screen appears:
State Bank of India Confidential
Click on the Next button again.
STEP 10 : Feature Selection
Select the features you want to install.
At a minimum, the following are useful, but what you need will depend on your needs:
Click on the Next button.
STEP 11 : Instance Configuration
State Bank of India Confidential
After a short while the following screen appears:
STEP 12 : Disk Space Requirements
This screen just tells you if you have sufficient disk space on the drive youre installing to, and whats
going to be installed where.
State Bank of India Confidential
Click on Next.
STEP 13: Server Configuration
This step allows you to set up the service accounts that will be used to run SQL Server. If you have
created Windows NT or Active Directory accounts for use with services, use these
We have used system account as the service account.
STEP 14: Database Engine Configuration Account Provision
This screen allows you to set up database engine security.
Click on Next.
STEP 15: Reporting Services Configuration
This screen simply asks modes of default configuration.
State Bank of India Confidential
Select Install, but do not configure the report server
STEP 16 : Error Usage Reporting
This screen simply asks if you want to send error information to Microsoft and can safely be skipped if
you do not want to share any information.
Click boxes if you want to help Microsoft help you.
Click on Next again
STEP 17: Installation Rules
This screen simply checks if there are any processes or other installations running which will stop the
installation of SQL Server 2008.
State Bank of India Confidential
Click on Next again
STEP 18 : Ready to Install
This screen summaries what you are about to install and gives you a last chance to cancel or change
anything thats wrongly configured:
STEP 19 : Installation Progress
SQL Server 2008 will now install. How long it takes depends on the speed of your machine, what load
its under, the installation media (CD is slower) and what youve chosen to install.
State Bank of India Confidential
Finally, the installation will complete:
State Bank of India Confidential
4.1 Install SQL 2008 SP1
Download the SQL 2008 Sp1 executable and double click
Click on Run
State Bank of India Confidential
On the welcome screen click on Next
State Bank of India Confidential
Accept the license terms and click on Next
On the feature selection window click on select all and then click Next
State Bank of India Confidential
Click Next on Check file in Use window
On ready to update window click on Update
State Bank of India Confidential
SQL 2008 has been upgraded to SP1 click on next
Close the complete window
State Bank of India Confidential
6. Install WSUS 3.0 SP1
Before software update point can successfully be installed and configured on a site system server in
Configuration Manager 2007, Windows Server Update Services (WSUS) 3.0 must be installed on the
server.
Note: DO NOT configure WSUS though the Configuration Wizard.
The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. Because
Configuration Manager 2007 manages the WSUS settings, you should exit the configuration wizard after
it opens.
State Bank of India Confidential
Note: while this wizard is completing it takes a long period of time to download the new version from
Microsoft so please be patient and watch out for the window below to open and start the installation.
Click Install
Click Next
Click I accept the terms of the License agreement, and then click Next.
State Bank of India Confidential
Select Store updates locally, specify the path, (point it to a partition of your choice which has
enough free space to store the updates) and then click Next
State Bank of India Confidential
Click Next
If you decide to change this behavior make sure you keep a note of this as this information will be
required when we configure WSUS using SCCM.
Click Next >
State Bank of India Confidential
Click Next
Click Finish
State Bank of India Confidential
Close
DO NOT configure WSUS though the Configuration Wizard.
The WSUS 3.0 configuration wizard automatically starts after the Setup wizard completes. Because
State Bank of India Confidential
Configuration Manager 2007 manages the WSUS settings, you should exit the configuration wizard after
it opens.
7. Extend the Active Directory Schema for SCCM 2007 SP2
Open Command Prompt with Elevated Privileges
The Extadsch.exe is located in the bin\i386 folder of the installation media, browse through the folder
and run the command
The command will extend the active directory schema to accommodate SCCM 2007 SP2
Please verify from extadsch.txt at C:\ for successful extend of AD
8. Create System Management Container
To manually create the System Management container
1. Log on as an account that has the Create All Child Objects permission on the System container
in Active Directory Domain Services.
2. Run ADSI Edit, and connect to the domain in which the site server resides.
State Bank of India Confidential
3. Expand Domain [computer fully qualified domain name], expand <distinguished name>, right-
click CN=System, click New, and then click Object.
4. In the Create Object dialog box, select Container, and then click Next.
5. In the Value field, type System Management and click Next.
6. Click Finish.
Set Permissions on System Management Container
To apply permissions to the System Management container using the
Active Directory Users and Computers administrative tool
1. Click Start, click Run, and then enter dsa.msc to open the
Active Directory Users and Computers administrative tool.
2. Click View, and then click Advanced Features.
3. Expand the System container.
4. Right-click System Management. On the context menu, click Properties.
5. In the System Management Properties dialog box, click the Security tab.
6. Click Add to add the site server computer account and grant the account Full Control
permissions.
7. Click Advanced, select the site servers computer account, and click Edit.
8. In the Apply onto list, select This object and all child objects.
9. Click OK.
9. Installing SCCM 2007 SP2
After all the Prerequisites are met we will install SCCM 2007 SP2.
Run Setup.exe from the SCCM 2007 Setup Disk
Select Configuration Manager 2007 SP2
State Bank of India Confidential
SCCM 2007 Sp2 setup wizard welcome screen will open up. Click on Next to start the SCCM 2007 SP2
installation.
On the Available Setup Options Screen select Install a Configuration Manager Site Server and click on
Next
State Bank of India Confidential
Accept the Microsoft Software License Terms and click on Next
On Installation Settings window select Custom Settings and click on Next
State Bank of India Confidential
The site Type window will open. Select Primary Site and click on Next
Select if you want to participate in CEIP configuration, we have select No and click on Next
State Bank of India Confidential
Enter the Product Key and click Next
Select the configuration Manager installation Folder and click on Next
State Bank of India Confidential
On the Site Settings screen Enter Site Code as SBI and Site Name SBI Central Site - Mumbai. Please
enter different site Code and Site name for Secondary Sites.
Click on Next
On site Mode Select Configuration Manager Mixed Mode and click on Next
State Bank of India Confidential
Select the Client agents required by you. These can be modified later using site management after
installation also. Click on Next
On the Database server window enter the SQL server and instance name. Also Enter the Configuration
Manager Database name. We have used the default Confmgr Site Database name SMS_SBI. Click on
Next
State Bank of India Confidential
On the SMS Provider enter the default SCCM server name and click on Next
On the Management Point screen select Install a management Point and click on Next
State Bank of India Confidential
Next is the Port Setting screen. Select the default port 80 and click on Next
On the Updated Prerequisite Components SCCM will require some updates. We have downloaded them
to a location. If you have not downloaded the updates then select the Check for updates and download
the newer version to an alternate path.
Select the latest updates have already been downloaded to an alternate path and click on Next
State Bank of India Confidential
Brouse for the alternate path where updates are stored
State Bank of India Confidential
Give the path of the updates and click on Next
On the Settings summary screen check all the settings and click on Next
State Bank of India Confidential
Setup will check the prerequisites for SCCM installation if it is success the click on Next
Setup will start the installation
State Bank of India Confidential
State Bank of India Confidential
Click on Finish to finish the installation
10. Configuring SCCM 2007 SP2
Configure Boundaries:-
State Bank of India Confidential
Expand the Site Management until you can see the Boundaries node, right click the node and select
New Boundary from the context menu. Right click on boundaries and select new Boundary
You can input a description, you can choose the type of network connection, be it slow or unreliable, or
Fast (LAN). Also the type of boundary you can choose from IP subnet, AD site names, IPv6 prefix, or IP
range.
We have chosen IP subnet as the site boundary
State Bank of India Confidential
In the similar way add boundaries for 10.0.20.0, 10.0.30.0 and other subnets.
a. Add Roles:-
To Start Configuring Site roles open Configuration manager console
Expand Site Database; under site database Expand site Management
Expand SBI- SBI Central Site Mumbai and Site settings under that and Site systems
You can see Component server, DP, Site Server, Site System, and DB roles installed. On the left of the
middle window you will notice the new link for New Roles, you can use this to start the process or right
click on the server and select New Roles from the context menu.
State Bank of India Confidential
When you select the New Roles you will start a wizard that follows the theme of task sequences, you will
fill out a survey of questions, followed by a summary, and then the execution of those tasks you have
selected.
State Bank of India Confidential
On the first window, the General tab, you will see the options to use a FQDN, you must use this if you
are running in native mode, the second selection is the FQDN for Internet connected clients, this is
going to be different than your FQDN for intranet clients and is required if you are going to manage
Internet based clients so they can connect to the server from outside your firewall. If you need to
specify a different account to install the server roles you would provide this as well, I am going to use
the servers computer account. The last two selections are to make the site a protected site, this means
that only those clients that are assigned to it are the clients that will get a response from the site server,
the last one is Retrieve all data from this site server, what this does is it will configure all communication
to be initiated by the site server to the site system. We will specify the FQDN for intranet connected
systems so I input MUMHOISCCMC01.SBI.ADl, leave the protected system and retrieve data from this
site system checkboxes blank and click the Next button.
State Bank of India Confidential
Now on to the selection of the roles to add to your system. As you can see from the list there are some
new roles as well as some classic roles. The new roles include System health validator which is part of
the NAP, State migration point which is part of the USMT/OSD, PXE service point, Fallback status point,
and Software update point. The others you should recognize, Server locator point and Reporting point.
Choose SLP, RP, SUP, and State migration point and click the Next button to continue.
State Bank of India Confidential
This will take you into another list of sequences to configure each role individually, the first is the SLP,
leave these as defaults and click on Next
Next up is RP, leave the defaults and click next.
State Bank of India Confidential
For SUP settings you may need to specify proxy server settings if you need to in order to get out to the
Internet, click the Next button to continue.
State Bank of India Confidential
On the next dialog you will need to check the box that says Use this server as the active software
update point, leave the port set to 80 unless you changed this during the installation process. The SUP
role should only be set on server where you want them to download all the patches, this would typically
be your central site, where you will create the packages and then distribute them.
For the topmost site you will leave it to sync with Microsoft Update, then the sites below would sync
with it. As the server has not connection with internet select do not synchronize with internet
The next dialog allows you to set the schedule you sync your updates. Leave this at its default and click
the Next button.
State Bank of India Confidential
The Classifications dialog allows you to choose what class of updates you want to download, the choices
are Critical Updates, Definition Updates, Drivers, Feature Packs, Security Updates, Service Packs, Tools,
Update Rollups, and Updates. You should note that if you are running a WSUS server and syncing with
it, which I would not recommend the settings here will not override what you have set in WSUS server
and you may end up with updates outside of what you configure here.
Choose the following Critical Updates, Security Updates, Service Packs, Update Rollups, and Updates,
and then click the next button.
State Bank of India Confidential
The next dialog is the products you want to download updates for, choose Office, SQL, and Windows
and then click Next.
State Bank of India Confidential
Select the Language for the updates i.e. English and click on next
Summary window will show the Roles selected and settings for the roles verify and click on Next
Click on close on the wizard complete window
State Bank of India Confidential
b. Configure Client Agents
The client agents that you selected to be installed were installed with the default settings so we only
need to configure the agents that we want to change the defaults
Enable software metering client agent
State Bank of India Confidential
c. Client Installation method
SCCM clients can be installed from the SCCM server using Client push installation method. This is for
reference we have not enabled Client Push installation
State Bank of India Confidential
State Bank of India Confidential
d. Manually Install SCCM Client
The client agent can be found at \\10.0.14.224\sms_sbi\client folder. To install the agents
follow these steps
Step1: On the client machine open c:\windows\system32\drivers\etc\hosts in the notepad and
Add the entry
10.0.14.224 SCCM2007 SCCM2007.SBI.COM
Step 2: Run SCCM agent setup file ccmsetup.exe with the following switch
Ccmsetup.exe /mp:sccm2007.sbi.com /service SMSSITECODE=SBI
SMSSLP=SCCM2007.sbi.com
Step3: After installation of agent open control panel and check for Configuration manager icon
there for successful agent installation
e. Discovery Method
At SBI Active Directory system discovery is being used for discovering systems across AD domain
State Bank of India Confidential
Double click on Active Directory System Discovery under discovery Methods
Enable the Active Directory system discovery and click on new active directory container
State Bank of India Confidential
Select Custom LDAP or GC query and browse to the Active Directory container from where to discover
the systems
Specify the discovery polling schedule and select run discovery as soon as possible
State Bank of India Confidential
f. Installing agents
Expand the collection and Select the system on which you want to install agent
Right click on the system name and select install client
State Bank of India Confidential
Select include only clients in this sites boundaries
State Bank of India Confidential
Click on Finish
g. Creating Collections
Right click on the collections Tab and select new collection, the new clooection wizard will open as
follows
State Bank of India Confidential
Add the membership Rule i.e. Direct membership or Query based membership and crate the collection
Enter the query Name and select resource class as System Resource
Click on Edit Query Statement
State Bank of India Confidential
In the query properties box select the criteria tab and select on new criteria
On the criterion properties go to where tab and click on select. On select attribute screen select attribute
class as Computer System and attribute as Name and click on Ok
State Bank of India Confidential
Select the operator and type the value. The value can be in wildcards like %del%, this query will match
all computers witch has DEL in their name attribute. Click on OK. Click OK again on query statement
properties box
Click ok on the query Rule Properties Box
State Bank of India Confidential
Select Next in the membership rule page
Click Next in Advertisement window
State Bank of India Confidential
Click Next on the Security Page and click on Finish
11. Updates Deployment through SCCM 2007
To Deploy Updates using SCCM Browse through Software Updates in the left hand pane of the SCCM
Configuration Manager Console.
Browse through and select the update you want to deploy
State Bank of India Confidential
Right click on the update and select Deploy Software Updates, the Deploy software updates wizard will
open
Enter name for the deployment and click on the Next
State Bank of India Confidential
Select on create a new Deployment Definition and click on Next
On the collection window select the collection on which you want to deploy the software update
State Bank of India Confidential
Check on include members of subcollections if you want to and click on Next
On display and time settings window select Allow Display notification on clients and select client local
time. Give the duration for deadline, by default its 2 weeks
State Bank of India Confidential
On the restart settings window select suppress system restart on Servers and click on Next
On Event Generation Window leave defaults and click Next
State Bank of India Confidential
On Download Settings Window leave the default settings and click on Next
Give a name for the Template and save for Future use
State Bank of India Confidential
On the Deployment Package Window click on Create a New deployment Package and enter the Name ,
Package Source and sending priority and click on Next
On the Distribution Point Window click on browse and select the Distribution point and click on Next
State Bank of India Confidential
On the Download Location select download software updates from the Internet and click on Next
Select the Language for the update in the language selection window and click on Next
State Bank of India Confidential
Specify the schedule for deployment as per above and click on Next
Verify the summary in the window and click on Next
State Bank of India Confidential
Click on Close after the deploy software updates wizard complete successfully
State Bank of India Confidential
12. Backup SCCM Site
If you want to backup your SCCM site, you may make use of SCCM Site Server Maintenance Task to
accomplish this. Below are the steps to configure the SCCM Backup job:
1. In the SCCM console, navigate to System Center Configuration Manager / Site Database
/ Site Management / <site name> / Site Settings / Site Maintenance / Tasks.
2. Right-click the Backup Site Server task, and click Properties.
State Bank of India Confidential
3. Specify how frequent you would like to backup your site in the the backup task properties, and
click OK. Ensure that you schedule the backup task to run at an appropriate time
13. Troubleshooting SCCM 2007
Client Issues: - http://blogs.technet.com/b/configurationmgr/archive/2009/08/10/troubleshooting-
issues-where-clients-are-not-reporting.aspx
Log files in SCCM
http://technet.microsoft.com/en-us/library/bb892800.aspx
Troubleshooting SCCM
http://technet.microsoft.com/en-us/library/bb632812.aspx