Wednesday, January 25, 2012

Notes on System Center 2012 Configuration Manager

Capacity Planning:

Central Site
· Central site - 400000 clients (with MS SQL Enterprise Edition & default configuration)
· Central site can have max. of 25 child primary
· Central site with MS SQL std edition will only support 50000 clients.
· No direct client can be attached to central site

Primary Site
· Primary site – can have max of 250 secondary site
· SQL on same server – Max of 50000 clients
· SQL on different server – Max of 100000 clients

Secondary Site
· Max of 2500 clients per site

Management Point
· 10 MP per primary site
· Per MP in Primary site supports 25000 clients
· 1 MP per secondary site and should be co hosted on same secondary server
· Per MP (that’s all) in Secondary site server supports 10000 clients

Distribution Point
· Each primary site supports up to 5,000 distribution points as a combined total of distribution points. This total includes all the distribution points at the primary site and all distribution points that belong to the primary sites child secondary sites.
· Individually, each primary site supports up to 250 distribution points and each distribution point can support up to 4,000 clients.
· Individually, each secondary site supports up to 250 distribution points and each distribution point can support up to 4,000 clients.
=========================================================================================================================================================

Legal:
· SLA with teams for server and database support
· SLA with customers for each of the functional / features of SC2012 Config Manager
· Auditing requirement from each country legal team
· Separation of duties (helpdesk, Config Manager Ops team, SQL team and build team etc.)
=========================================================================================================================================================
AD Readiness:
· Are subnets and sites are well defined? What is the strategy for creating Config manager collection?
· Active Directory schema extension? Need to discuss with AD team.
=========================================================================================================================================================
New OU, Groups, Accounts and Service Accounts:

Accounts:
1. SCCMADMIN – Full Config Manager Admin/s
2. SCCMOPR – Daily Operator/s
3. SCCMSWUPAADMIN – SW update admin
4. SCCMPUSH
==========================================================================================================================================================

Organizational Units:
1. SCCM – To place all servers
2. SQL – to place MS SQL servers
3. SharePoint – To Place SharePoint servers if we use
==========================================================================================================================================================

Groups:
SCCM_Admins
Members: SCCMADMIN

SCCM_DP_Operators
Members: all servers

SCCM_Operators
Members: SCCMOPR

SCCM_Servers
Members:

SCCM_SWUpdate_Admins
Members: SCCMSWUPAADMIN

Workstation_Admins
Members: SCCMADMIN, SCCMOPR, SCCMSWUPAADMIN, SCCMPUSH
=============================================================================================================================================================

Service Accounts:
sccmexch – connecting to exchange
Sccmna – network account
Sccmpush – client push account
Sccmreporting – reporting service account
Sccmsqlsa – sql server service account
============================================================================================================================================================

Group Policies:
Through restricted group policy, Domain Admins, SCCM Admins and SCCM servers are part of local administrators of SCCM servers.
Through another restricted group policy, Domain Admins and workstation admins are part of local administrator group of computers.
============================================================================================================================================================
Exchange Integration & certificates:

============================================================================================================================================================
Required:
Naming Convention
============================================================================================================================================================
Schema Extension:
Extadsch.exe will be inside SCCM iso under SMSSETUP\BIN\X64 directory.
Open Extadsch.log and check for success and make sure no error reported.

System Management Folder Creation:
· Use adsiedit.msc to create a folder called “System Management” (new object->container) under CN=system
· Click on permission and give full control using advanced tab for the SCCM_Servers group, choose this object and all descendant objects
After this the change is replicated to all DC using full replication. So please aware of network bandwidth glitches.
============================================================================================================================================================

MS SQL Server:
· SQL Server 2008 SP2 with Cumulative Update 7 or SQL Server 2008 R2 with SP1 and Cumulative Update 4
· Server collation should be same across databases and supports only SQL_Latin1_General_CP1_CI_AS
· manually register the SPN for the account - How to Manage the SPN for SQL Server Site Database Servers
· Only Windows Authentication is supported
· Memory for MSSQL – 50% when co located and 80% when running on remote server
· .NET Framework to be installed
· Intersite communications for SQL server service broker TCP 4022 ; SQL database – TCO -1433
· No dynamic port assignment for SQL
· Make sure about firewall rules for MSSQL

Check:
Check under patches in Add / Remove programs for installed SQL SP and patches
Check the services for running SQL services
UseKB321185 to check the versions.
Setspn –l - this is to only check;
To set SPN, goto DC and run
Setspn –a MSSQLSvc/:1433 \
Setspn –a MSSQLSvc/:1433 <\
=============================================================================================================================================================

Accounts Created by SC2012 Config Manager:
http://technet.microsoft.com/en-us/library/hh427337.aspx
============================================================================================================================================================
SC2012 Config Manager Pre-Request: (this can be used to check the server requirement for installing Config Manager)
Prereqchk.exe /pri /sql /sdk
Have all the Config Manager downloads ready. Use setupdl.exe inside Config Manager CD to get a setup downloads.
Check:
All errors and warning should be solved before the installation.
============================================================================================================================================================

When no Config Manager programs to be installed on a drive, just create a file called NO_SMS_ON_DRIVE.SMS file in that root of the partition.
============================================================================================================================================================

Once Config Manager installed, Using ADSIedit.msc check the site code inside
============================================================================================================================================================

No comments:

Post a Comment