step by step sccm 1511 installation for anyone · linkedin: step by step sccm 1511 ... before...

Riaz Javed Butt

MS Expert Talk | www.msexperttalk.com

Twitter: @RiazJavedButt, @MSCloudTalks, @MSExpertTalk

Facebook: https://web.facebook.com/MSExpertTalk/

LinkedIn: https://pk.linkedin.com/in/riazbutt

STEP BY STEP SCCM 1511 INSTALLATION FOR ANYONE

http://www.msexperttalk.com/

https://web.facebook.com/MSExpertTalk/

https://pk.linkedin.com/in/riazbutt

Author: Riaz Javed Butt 1 SCCM 1511 Step by Step Installation Guide for Anyone v1.0

Contents Introduction .................................................................................................................................................. 2

System Center Configuration Manager 1511 Installation ............................................................................ 2

Create System Management Container in AD and Assign Permissions .................................................... 2

Extend AD Schema for System Center Configuration Manager ............................................................... 9

Install System Center Configuration Manager Pre-requisites .................................................................. 9

Install .Net 3.5 Framework Feature ........................................................................................................ 12

Download and Install Microsoft Report Viewer 2010 ............................................................................ 20

Download and Install Windows Assessment and Deployment Toolkit for Windows 8.1 ....................... 24

Install Windows Assessment and Deployment kit hotfix for Windows Server 2012 R2 ..................... 32

Create AD Security Group and Add SCCM Servers as member .............................................................. 37

Assign Full permissions to Security Group on Systems Container in AD ................................................ 39

Create Required Service Account and Security Group ........................................................................... 42

Add SCCM_Admins and SCCM_Servers to local admin group of SCCM Servers .................................... 42

Install WSUS 3.0 SP2 with KB2720211 & KB2734608 ............................................................................. 42

Install SQL Server 2012 R2 SP3 for SCCM ............................................................................................... 53

SPN Creation ....................................................................................................................................... 75

SQL Configuration for SCCM ............................................................................................................... 76

Database Sizing for SCCM ................................................................................................................... 78

SQL Network Communication ............................................................................................................. 78

Configure SQL Server to Use Network Account .................................................................................. 80

Configure the Windows Firewall to Allow SQL Server Access ............................................................ 81

SCCM Server Installation ......................................................................................................................... 82

Prerequisite Check .............................................................................................................................. 82

SCCM Installation ................................................................................................................................ 82


Introduction The intent of this document is to provide a step by step guideline to install SCCM 1511 in a small

organization. As of now, SCCM 1705 is available to install in your infrastructure with new enhanced

features but I’m going to start with the 1511 version and will upgrade this to new versions later. This guide

assumes that you’ve the fundamental understanding of how SCCM works and what are the required

parameters of SCCM.

This guide will follow a path of basic SCCM 1511 installation and later on, we will upgrade to SCCM 1602,

1606 and so on.

System Center Configuration Manager 1511 Installation Before installing ConfigMgr 1511 we need to perform prep work to prepare Active Directory

infrastructure ready to handle SCCM installation. This guide assumes that no previous version of

ConfigMgr is installed in your Active Directory domain environment.

Create System Management Container in AD and Assign Permissions Preparation of active directory requires you to create a System Management container in active

directory and apply appropriate permissions.

• To create a container, login to active directory domain controller and run ADSI Edit

• Connect to Default naming context

• Navigate to Domain > System, Right click on System and Click on New > Object to create a

system management container.


Once the container is created, go to the properties of container and add all the SCCM servers and apply

appropriate permissions.


Add SCCM computer machine and assign permissions


Extend AD Schema for System Center Configuration Manager Navigate to SCCM setup drive > SMSSetup>BIN>X64 and run the executable extadsch.exe. This

executable will extend the AD schema for SCCM

Install System Center Configuration Manager Pre-requisites

All below pre-requisites can be installed using the following powershell cmdlet. We have installed the

pre-requisites one by one.

Add-WindowsFeature Web-Windows-Auth,Web-ISAPI-Ext,Web-Metabase,Web-WMI,BITS,RDC,NET-

Framework-Features,Web-Asp-Net,Web-Asp-Net45,NET-HTTP-Activation,NET-Non-HTTP-Activ,Web-

Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-App-

Dev,Web-Net-Ext,Web-Net-Ext45,Web-ISAPI-Filter,Web-Health,Web-Http-Logging,Web-Log-


Libraries,Web-Request-Monitor,Web-HTTP-Tracing,Web-Security,Web-Filtering,Web-

Performance,Web-Stat-Compression,Web-Mgmt-Console,Web-Scripting-Tools,Web-Mgmt-Compat


Install .Net 3.5 Framework Feature


Download and Install Microsoft Report Viewer 2010

Download Microsoft Report viewer and install

https://www.microsoft.com/en-us/download/confirmation.aspx?id=6442

https://www.microsoft.com/en-us/download/confirmation.aspx?id=6442


Download and Install Windows Assessment and Deployment Toolkit for Windows 8.1

Download windows assessment and deployment toolkit for windows 8.1 from

https://www.microsoft.com/en-US/download/details.aspx?id=39982

https://www.microsoft.com/en-US/download/details.aspx?id=39982


Install Windows Assessment and Deployment kit hotfix for Windows Server 2012 R2 https://support.microsoft.com/en-us/help/3143760/windows-pe-boot-images-don-t-initialize-in-

system-center-configuration-manager

https://support.microsoft.com/en-us/help/3143760/windows-pe-boot-images-don-t-initialize-in-system-center-configuration-manager

https://support.microsoft.com/en-us/help/3143760/windows-pe-boot-images-don-t-initialize-in-system-center-configuration-manager


As a workaround, you can also install Windows Assessment and Deployment Kit for Windows 10 that is

supported with SCCM 1511 and Windows 10

https://blogs.technet.microsoft.com/enterprisemobility/2015/11/20/issue-with-the-windows-adk-for-

windows-10-version-1511/

https://blogs.technet.microsoft.com/enterprisemobility/2015/11/20/issue-with-the-windows-adk-for-windows-10-version-1511/

https://blogs.technet.microsoft.com/enterprisemobility/2015/11/20/issue-with-the-windows-adk-for-windows-10-version-1511/


Create AD Security Group and Add SCCM Servers as member


Assign Full permissions to Security Group on Systems Container in AD


Click on advanced settings and select SCCM_Servers and click on Edit to select the option of “This object

and all descending objects”


Create Required Service Account and Security Group • SQL server services account – SCCM_SQLSrv

• SCCM Network Access Account – SCCM_NAA

• Domain user account for use SCCM client push install – SCCM_ClientPush

• Domain user account for use with reporting services User – SCCM_SQLReporting

• Domain account used to join machine to the domain during OSD – SCCM_DomainJoin

• Domain group containing all SCCM Admins Group – SCCM_Admins

• Domain group containing all SCCM servers in the hierarchy Group – SCCM_Servers

Add SCCM_Admins and SCCM_Servers to local admin group of SCCM Servers

Install WSUS 3.0 SP2 with KB2720211 & KB2734608 http://go.microsoft.com/fwlink/?LinkID=79477.v

http://go.microsoft.com/fwlink/?LinkID=79477.v


Install SQL Server 2012 R2 SP3 for SCCM


Select the Database Engine, Reporting Services and Management Tools features and specify the SQL

installation directory. This is the directory for the program files and shared features


It’s not recommended to use C drive for SQL installation. We highly recommend to use a different drive

for SQL installation.


On the Collation tab, set the Database Engine to use SQL_Latin1_General_CP1_CI_AS


SPN Creation When you configure SQL Server to use the local system account, a Service Principal Name (SPN) for the

account is automatically created in Active Directory Domain Services. When the local system account is

not in use, you must manually register the SPN for the SQL Server service account.

Since we are using a domain account, we must run the Setspn tool on a computer that resides in the

domain of the SQL Server. It must use Domain Administrator credentials to run.

Run both commands to create the SPN, Change the server name and account name in each command.

setspn -A MSSQLSvc/yourservername:1433 yourdomain\SCCM_SQLSrv

setspn -A MSSQLSvc/yourserver.fullfqdn.com:1433 yourdomain\SCCM_SQLSrv

To verify the domain user SPN is correctly registered, use the Setspn -L command

setspn –L yourdomain\SQLSA

https://technet.microsoft.com/en-ca/library/cc731241.aspx


SQL Configuration for SCCM SCCM setup verifies that SQL Server reserves a minimum of 8 GB of memory for the primary site. To

avoid, the warning, we’ll set the SQL Server memory limits to 8GB-12GB (80% of available RAM).

• Launch SQL Server Management Studio


• Right click the top SQL Server instance node

• Select Properties


• In the Memory tab define a limit for the minimum and maximum server

memory. Configure and limit the memory to 80% of your server available RAM. In my

case I have 14GB available.

• Minimum 8192 and Maximum 10240

Database Sizing for SCCM We always recommend to create the SCCM database before the setup. This is not mandatory, SCCM will

create the database for you during setup but will not create it the optimal way.

SQL Network Communication

To ensure proper SQL communication, verify that settings are set accordingly in SQL Network

configuration

• Open SQL Server Configuration Manager

• Go to SQL Server Network Configuration / Protocols for MSSQLServer


• On the Right Pane, right-click TCP/IP and select Properties

• In the Protocol tab

o Enable: YES

o Listen All : NO

• In the IP Addresses tab

• IP1 (which should have your Server IP)

o Active : YES

o Enabled : YES

• All other IP and IP ALL

o Active : YES

o Enabled : NO

• TCP Dynamic Ports : Blank value

o TCP Port : 1433


Configure SQL Server to Use Network Account On the SQL Server, click Start and launch SQL Server Configuration Manager

• Click SQL Server Services, in the right window pane, right-click SQL Server, click Properties

• Click the Log On tab, click “This account”, click browse

• Select the Run Account created earlier

• Enter the password (twice to confirm) in the Log on tab, click OK. When prompted to Confirm

the Account change, click Yes to restart the service. Click OK to close the properties page.

• Ensure the SQL Server service is running with the new domain (service) account

We recommend to re-run the Prerequisite Check for SCCM 1511 and validate that you do not see the

prerequisite for SQL Server service as a warning or failure.


• Restart the SQL Server Service.

Configure the Windows Firewall to Allow SQL Server Access The netsh.exe tool can be used by an administrator to configure and monitor Windows-based computers

at a command prompt or using a batch file. By using the netsh tool, you can direct the context commands

you enter to the appropriate helper, and the helper then performs the command. A helper is a Dynamic

Link Library (.dll) file that extends the functionality of the netsh tool by providing configuration,

monitoring, and support for one or more services, utilities, or protocols. All operating systems that

support SQL Server have a firewall helper. Windows Server 2008 also has an advanced firewall helper

called advfirewall. The details of using netsh are not discussed in this topic. However, many of the

configuration options described can be configured by using netsh. For example, run the following script

at a command prompt to open TCP port 1433:

netsh firewall set portopening protocol = TCP port = 1433 name = SQLPort mode = ENABLE scope =

SUBNET profile = CURRENT


netsh advfirewall firewall add rule name = SQLPort dir = in protocol = tcp action = allow localport = 1433

remoteip = localsubnet profile = DOMAIN

SCCM Server Installation

Prerequisite Check

• Open an Administrator command prompt

• Browse to .\SMSSETUP\BIN\X64

• Run the following command: prereqchk.exe /AdminUI

SCCM Installation We are finally ready to launch the setup. First, reboot the server. This will make sure that the machine is

not in a Reboot pending state.

• Open the SCCM ISO

• Run Splash.hta

• Select Install


For the purpose of this guide, I’ve installed ConfigMgr in C drive and it’s not recommended for

production deployment.


• On the Site System Roles screen:

o Check Install a Management Point

o Check Install a Distribution Point


You can ignore this warning message as sometime you might see this warning related to AD permissions

but if you manually verify the permissions, you can ignore this warning.


Once the installation is completed, you can start performing your post installation tasks with SCCM 1511

and use in production.

step by step sccm 1511 installation for anyone · linkedin: step by step sccm 1511 ... before...

Documents