administering and configuring system center configuration manager 2012 r2 sp1
DESCRIPTION
-Configuring and deploying SCCM 2012 R2 -Data Quering using WQL and gathering collections -Configuring Software and Hardware Inventory, asset intelligence and software metering.TRANSCRIPT
Webinar on SCCM 2012 R2
Administering and configuring System Center Configuration Manager 2012 R2 SP1
Topics:•Configuring and deploying SCCM 2012 R2•Data Quering using WQL and gathering collections •Configuring Software and Hardware Inventory, asset intelligence and software metering.
Overview of the System Center 2012 Environment
Single admin console
Manage clients onthe organizationalnetwork and the Internet
Configuration Manager
Overview of System Center 2012 R2 Configuration Manager
Application Management
Software Update
Management
Operating System
Deployment
ContentManagement
Asset management
Hardware and Software Inventory
Asset Intelligence
Software Metering
Remote Management
Reporting
Monitoring
Role-Based Administration
Administrativefeatures
Endpoint Protection
Compliance Settings
Power Management
ClientHealth
Changemanagement
New Features Provided with an Installation of System Center 2012 R2 Configuration Manager• Support for clients that run Windows 8, Windows 8.1, Windows RT, Windows 8.1 RT, iOS, Mac OS X, and Android• Support for Windows Server 2012 and Windows Server 2012 R2 to host site system roles• Support for SQL Server 2012 to host Configuration Manager databases• Support for merging of System Center 2012 R2 Configuration Manager hierarchies• New site system roles for the certificate registration point• Bulk reassignment of clients to alternate primary sites• Configuration Manager Windows PowerShell cmdlets
Overview of the System Center 2012 R2 Configuration Manager Hierarchy
SQL databaseCentral administration site
SQL database
Primary site
SQL database
SQL database
SQL databas
e
Secondary site
Primary site
Primary site
• Each site is identified by a unique three-character code
• The central administration site is for reporting and management only
• Primary sites can be parents of secondary sites only
• Secondary sites now have their own database
Site System Roles in Configuration Manager
• Default site system roles are installed when Configuration Manager setup is run
• Optional site system roles are added post-installation to support specific features
Default site system roles• Site server• Site system• Component server• Site database server• SMS Provider: does not
display in the console
Optional site system roles• Certificate
registration point• Distribution point• Management point• Reporting services
point• Software update point• State migration point
What Is a Central Administration Site?
A central administration site:• Is required to use a multisite hierarchy• Is used for administration and reporting• Requires an SQL database• Does not process client data• Does not support client assignment• Has a limited number of site system roles
What Is a Primary Site?
• To use Configuration Manager, you must have at least one primary site• Primary sites:
• Can be in a child relationship to a central administration site, which can only be set during installation
• Cannot be a child to another primary site• Manage clients in well-connected networks• Require a SQL Server database• Replicate their data to a central administration site if
part of a hierarchy• Support client assignment• Consist of one or more systems that host various
site system roles
What Is a Secondary Site?
A secondary site:• Is optional• Must be in a child relationship to a primary site,
which is set in the secondary site during installation
• Is used when you need to control network bandwidth
• Requires SQL Server Express or a SQL Server database to store configuration information
• Replicates its collected client data to its parent site by using file-based replication
• Does not support client assignment• Consists of one or more systems that host
various site system roles
Configuration Manager in a Small- to Medium-Sized Organization
Small- to medium-sized organizations often use a single primary site that includes:
• Mandatory:• Site server• Site database• Management point• Distribution point
• Optional:• Reporting services point• Software update point• Fallback status point• Other roles as required
Single Server with All
Site Roles
Configuration Manager in a Medium- to Large-Sized Organization
Medium- to large-sized organizations use primary and secondary sites• A primary site typically includes:
• Site server• Site database• Management point• Distribution point• Reporting services point• Software update point• Fallback status point• Other roles as required
• Secondary sites include:• Management point• Distribution point
Site Server Site
DatabaseSoftware
Update Point
Secondary Site Server
Remote Distribution Point
Configuration Manager in a Global Organization
Example of a complex hierarchy implementation:
Central Administration Site
Primary Sites
Secondary Sites
Remote Distribution
Point
How Data Flows and Replicates in a Hierarchy
Primary Site
Central Administration Site
Primary Site
Secondary Site
Global DataSite Data
Global data Site data
• Alert rules• Client discovery• Collections rules and count• Configuration items metadata• Deployments• Operating system images• Package metadata• Program metadata• Site control file• Site security objects• Software updates metadata• System resource list
• Alert messages• Asset intelligence CAL tracking• Client Health data• Client Health history• Collection membership results• Component and Site Status
Summarizers• Hardware inventory• Software distribution status
details• Software inventory and metering• Software updates site data• Status messages
Considerations for Implementing Configuration Manager SitesInstall a stand-alone primary site when you have:
Install secondary sites when you want:
Install multiple primary sites in a hierarchy when you have:
• A centralized administration approach• No more than 100,000 clients
• More clients than can be managed using a single primary site• Multiple administrative teams that require local connectivity for
the Configuration Manager consoles• A large number of remote locations• Export regulations on content
• To offload the client communication from the primary site • To provide tiered content routing between secondary sites with
the same parent
Planning a Multiple-Site Hierarchy
A central administration site:
A primary site:
A secondary site:
• Supports up to 250 secondary sites• Supports up to 250 distribution points • Supports up to 10 management points• Supports up to 50,000 clients when SQL Server is on the site server• Supports up to 100,000 clients when SQL Server is on a separate computer
• Supports up to 25 child primary sites• Supports up to 400,000 clients in the hierarchy when using SQL Server
Enterprise for the site database• Supports up to 50,000 clients in the hierarchy when using SQL Server
Standard for the site database
• Supports up to 250 distribution points• Supports a single management point located on site server• Supports communications from up to 5,000 clients
Overview of the Configuration Manager Administration Tools
• Configuration Manager console:• Primary method of managing a Configuration Manager
deployment• You can install it on an administrator’s client computer
• Configuration Manager client:• Trigger updates and retrieve information about individual
client computers
• Windows PowerShell Configuration Manager cmdlets:• Enable you to script Configuration Manager activities
• Orchestrator runbooks:• Enable using runbook automation to perform Configuration
Manager tasks
Using the Configuration Manager Console
Ribbon
Navig
ati
on
Pan
e
Results Pane
PreviewPane
Work
sp
aces
Overview of Client Installation Methods
•The client deployment installation methods include:• Client push installation• Group Policy installation• Software update point installation• Manual installation• Logon script installation• Upgrade installation (software deployment)• Operating system deployment• Computer imaging
Device Requirements to Support the Windows-Based Configuration Manager Client Agent
Supported Windows-based clients include:• Windows XP SP3, Windows XP x64 SP2, Windows Server 2003 SP2, and newer operating systems
Prerequisite software includes:• Windows Installer version 3.1.4000.2435 or newer• Installation process installs these additional
prerequisites before client installation:• Windows Update Agent• Microsoft Core XML Services• Microsoft Visual C++ Redistributable• Microsoft Policy Platform• Microsoft Silverlight• Microsoft .NET Framework 4 Client
Considerations for Supporting a Virtual Desktop Infrastructure
•RDS• Configuration Manager client agent is installed only once on the Remote Desktop Session Host• All features are supported
•Private virtual machines• Configuration Manager client agent is installed in each virtual machine• All features are supported
•Pooled virtual machines• Configuration Manager client agent is installed on each virtual machine• Software inventory, hardware inventory, and software metering data may not be relevant
Supporting Internet-Based Clients
• Considerations for supporting Internet-based clients:• Internet-based clients require a PKI• Microsoft Certificate Services certificate templates
can simplify certificate enrollment• All systems involved must trust the root CA• Internet-facing roles require a certificate• Client systems use a certificate for authentication
Secure web servicesAll utilized IIS-based site services
except fallback status point (not an HTTPS service)
without PKI-issued server certificate
HTTPS connection
Client systemon Internet
with PKI-issuedclient certificate
Primary site
Root CA
Issuing CA
PKI infrastructure
Supporting Mobile Devices
• Supported mobile devices include:• Windows Phone 8, Windows RT, and iOS devices• Windows Mobile 6.0 or newer• Windows CE 5.0 or newer• Nokia Symbian Belle• Limited support for devices that use ActiveSync• Android
• Client certificates are required on mobile devices for full support• You can support and manage mobile devices by using:• Windows Intune connector• Configuration Manager client agent• Legacy Configuration Manager client agent• Exchange connector
Supporting Workgroup-based Clients
The prerequisites that workgroup-based computers must meet include:• The Configuration Manager client agent must be installed manually on each workgroup-based computer• A network access account must be configured
The features that workgroup-based computers do not support include:• Client push installation• Targeting users for application deployment• Global roaming• Using AD DS to locate site systems• Active Directory discovery
Supporting Mac Computers
The following features are supported in Mac OS X computers:• Hardware inventory:
• Viewed in Resource Explorer• Used to create queries, collections, and reports
• Software deployment. Deploy software packages in the following formats:• Mac OS Installer Package (.PKG)• Mac OS X Application (.APP)• Apple Disk Image (.DMG)• Meta Package File (.MPKG)
• Compliance settings. Configuration Manager supports:• .plist files• Shell scripts
Supporting Linux-based and UNIX-based Computers
The supported operating systems include:• Red Hat Enterprise, Solaris, SUSE Linux Enterprise Server, Debian, CentOS, Ubuntu Server, Oracle Linux• IBM AIX, HP-UX
Linux-based and UNIX-based computers support the following features:• Hardware inventory:
• Viewed in Resource Explorer• Used to create queries, collections, and reports
• Software deployment:• User interaction is not supported• Maintenance windows are fully supported
Data Query
•Data Queries extract information related to resource discovery or inventory data.• In general the primary purpose of Data Queries are to build collections.
Status Message Query
Status Message Query has a very specific use. The site status and component status nodes show status messages related to a very specific site system or component. Although there are some filtering options these may not be sufficient when troubleshooting an issue. In such case you can use the status message queries to create custom queries for status messages including status messages from client.
The primary purpose of status message queries are to locate stored status messages.
Object Types
DeploymentDeployment
System ResourceSystem Resource
Package Package
Site Site
User Group Resource
User Group Resource
Program Program
User Resource
User Resource
Software Metering
Rule
Software Metering
Rule
There are over 20 object types available for building queries in Configuration Manager
Each object type consists of one or more attribute classes Some of the object types include:
There are over 20 object types available for building queries in Configuration Manager
Each object type consists of one or more attribute classes Some of the object types include:
RoleRole
A Configuration Manager object type is a resource class containing a set of attributes that represent Configuration Manager database objects
A Configuration Manager object type is a resource class containing a set of attributes that represent Configuration Manager database objects
Attribute ClassAttribute Class
Object TypeObject Type
AttributeAttribute SCSI BusSCSI Bus
System ResourceSystem Resource
Current Clock SpeedCurrent Clock Speed ManufacturerManufacturer PartitionsPartitions
ProcessorProcessor Disk DrivesDisk Drives
Objects and Attributes
NewNewDeleteDelete
GroupGroup
UngroupUngroup
PropertiesProperties Change OperatorChange Operator
NotNotLogical Operators Logical Operators
Group IndicatorsGroup Indicators
ClassClass
AttributeAttribute
SortSort
Required NameRequired Name
Required Object TypeRequired Object Type
Optional query elements are used to narrow the scope of a queryOptional query elements are used to narrow the scope of a queryAttribute classes and attributes are required, and if not specified, all available attributes displayAttribute classes and attributes are required, and if not specified, all available attributes displayEvery query requires a unique name, andSystem Resource is the default object typeEvery query requires a unique name, andSystem Resource is the default object type
Query Elements
To create a data query:
Managing Data Queries
Import an existing query or build a query from scratch22
Edit the query statement 33
Add search criterion on the Criteria tab55
Complete the settings on the General page of the Create Query Wizard11
Edit the General tab of the query statement properties to specify the criteria to display44
When creating criterion, use the Values button to display the related data currently stored in the database
66
What Is Inventory Collection?
Inventory collection is:• The process of gathering information that describes the hardware and software installed on a client computer• Configured by using client settings for the hierarchy or assigned on a per-collection basis
Software inventory data
Hardware inventory data
Asset intelligence data
Management Tasks That Use Inventory Data
Uses of hardware and software inventory data include:• Building queries based upon hardware configuration or installed software • Building collections on the basis of queried inventory results •Creating reports to display hardware configuration or installed software details •Maintaining corporate standards • Troubleshooting client problems •Collecting files (software inventory only)
The Process of Inventory Collection
View inventory information at a site after its database is updated by this process:
1. Client gets settings and collects inventory
2. Deliver data to management point
3. Deliver data to site server4. Update site database5. Replicate to the central
administration site
Site Database
Server
Site Server
Management
PointClient
How Is Hardware Inventory Collected?
•A hardware inventory obtains information by querying:• WMI database on Windows client computers• CMI database named OMI on Linux, UNIX, andMac OS X
•The hardware inventory agent collects:• An initial full hardware inventory• Subsequent delta inventories
Collecting Hardware Inventory
How Is Software Inventory Collected?
The software inventory process:• Collects data directly from files by reading the file header information• Collects file system details even from unknown files that may not have information in their file header• Collects copies of files that you specify and stores them on the site server• Enables you to view collected inventory and file information by using Resource Explorer, or view software inventory information in reports
Software Inventory File Types
• To configure new software inventory rules:• Create a new inventory
rule• Type the file name or
variable• Specify the location • Specify whether to
exclude encrypted and compressed files
• Specify whether to excludefiles in the Windows directory
• Specify the reporting detail for all rules
Overview of Asset Intelligence
Asset Intelligence:•Extends hardware inventory• License reporting•Supports ISO/IEC 19770-2 tags•Collect information about App-V apps
Benefits of Asset Intelligence
Asset Intelligence provides the following benefits over software inventory:•More accurate representation of software titles present on managed computers.• Information about the license usage for specific products, rather than just information about the software itself.•Asset intelligence retrieves information about installed software through the Hardware Inventory Client Agent.
The Asset Intelligence Catalog
Asset Intelligence catalog features:• Includes more than 500,000 software titles• Enables import of software license information• Provides information about hardware requirements for some titles• Is updated periodically through System Center Online
Configuring Data Collection for Asset Intelligence
Configuring Asset Intelligence can include the following tasks:• Enabling Hardware Inventory and software metering• Enabling Asset Intelligence inventory reporting classes• Enabling Windows Event Log settings • Importing software license information• Installing an Asset Intelligence synchronization point• Configuring Asset Intelligence maintenance tasks• Configuring Asset Intelligence security
Overview of Software Metering
•Software metering is the process of gathering detailed data on program usage from client computers in a Configuration Manager site•Types of data collected:• Program usage information• File information• Program information
SoftwareMeteringAgent
SoftwareMeteringAgent
Monitored programMonitored program
Monitored programMonitored program
Monitored programMonitored program
How Software Metering Works
Site Server
When you enable the Software Metering Agent, it:
Collects data each time a monitored program runs and terminates1
Uploads data to the management point on a scheduled basis2
Forwards data to the site server3
Adds data to the site database4
1
24
3
Enable the Software Metering Agent and configure a reporting schedule
Configuring the Software Metering Agent and Rules
To create a software metering rule:
Navigate to the Software Metering node1
Create a new software metering rule2
Provide relevant information for the program that you want to meter
3
Apply the rule to other sites if applicable4
When enabled, software metering will:• Automatically generate
disabled rules from recent usage history
• Generate automatic rules on the basis of a specified percentage of computers using a program
• Thanks for Attending the SessionRegards
Abu Zobayer (MCT)