Tuesday, July 30, 2013

SCCM Interview Questions/FAQs - Part 9 (Software Updates)

Part # 9 – Software Updates

1)  Is it true that when you add a software update to an update list, the updates are automatically approved for deployment?

Ans: No.

Explanation: An update list simply contains a set of software updates. Adding software updates to an update list does not approve them for deployment, but initiating a deployment using the update list is part of the recommended software updates workflow.

Reference: http://technet.microsoft.com/en-us/library/bb693591.aspx and http://technet.microsoft.com/en-us/library/bb632667.aspx

2) One of the settings stored in a deployment template is the collection. When creating the deployment template, are you required to specify the collection setting?

Ans: No.

The collection settings in a deployment template is optional. Depending on you deployment strategy. You will likely want to leave the collection setting blank in the deployment template and specify the collection when creating the deployment. This allows you to use the deployment template for deployments that will target different collections.

Reference: http://technet.microsoft.com/en-us/library/bb632940.aspx & http://technet.microsoft.com/en-us/library/bb633176.aspx

3) Can you hide individual software update deployments from end users?

Ans: No

Explanation: The ability to hide deployments is a site-wide setting configured on the Update Installation tab in the Software Updates Client Agent properties. The hide all deployments from end users setting applies to all deployments at the site, and therefore, you cannot hide individual deployments. When the Hide all deployments setting is enabled, display notifications, notifications area icons, installation progress, and the Available Software updates dialog box will not display on Client computers.  Additionally the software updates in optional deployments are never displayed and cannot be installed when this setting is enabled.

Reference: http://technet.microsoft.com/en-us/library/bb632393.aspx & http://technet.microsoft.com/en-us/library/bb693706.aspx

4) Consider a Hypothetical Scenario: A SCCM Administrator does the following:

(I) Runs the Download Updates Wizard to download Update1 and Update 2 to deployment package A.

(II) Runs the Download Updates Wizard to download Update1, Update2 and Update 3 to deployment package B.

(III) creates a deployment for Update1 and Update2 by using deployment package A. The deadline in the deployment is configured for the current date and time.

(IV) Before client computers receive the assignment policy, Package A is mistakenly deleted.

Now when the client computers receive the assignment policy, will they be able to download both Update1 and Update2 from a distribution point so that the software update installations can be initiated?

Ans: Yes.

Explanation: In SCCM 2007, there is no hard link between a deployment and deployment package. Clients install software updates in a deployment by using any distribution point that has the software updates available, regardless of the deployment package. Even if the deployment package is deleted from an active deployment, clients can still install the software updates in the deployment as long as each update has been downloaded to at least one other deployment package (Package B in our scenario) and is available on the distribution point accessible from the client.

Reference: http://technet.microsoft.com/en-us/library/bb680906.aspx and http://technet.microsoft.com/en-us/library/bb693754.aspx

5.  Can you create a software update deployment using the following scenario?
(I) Create an update list with a set of software updates.
(II) Drag the update list onto an existing deployment template.

Ans: Yes.

Explanation: Using an update list to create software update deployments is part of the recommended deployment process. In SCCM, you can drag an update list onto an existing deployment template to create a new deployment or drag an update list onto an existing software update deployment to add the updates to the deployment.

Reference: http://technet.microsoft.com/en-us/library/bb693779.aspx & http://technet.microsoft.com/en-us/library/bb693591.aspx

6) Can you create a custom update for an in-house application, publish it to WSUS, and use the software updates feature in SCCM 2007 to report on the compliance of the custom update and deploy it to client computers?

Ans: Yes.

Explanation: You can use System Center Updates Publisher to author custom updates and publish them to WSUS. The Software update point in Configuration Manager can be configured to synchronize locally published updates. After the custom update has been synchronized, client computers will scan for software updates compliance and the custom update can be deployed.

Reference: http://technet.microsoft.com/en-us/library/bb632895.aspx and http://technet.microsoft.com/en-us/library/bb632485.aspx

Monday, July 29, 2013

How to rollback or remove a patch causing unexpected issues on thousands of ConfigMgr Client computers?

How will you rollback a specific software update/patch that is found to be causing unexpected issues on thousands of SCCM Clients in your network?

Ans: By using, the following command in a task sequence: “C:\Windows\System32\wusa.exe /uninstall /kb:XXXXXX /quiet /norestart" (Applicable for clients that are Windows 7 or higher, where XXXXXX denotes the KB article /identification number, WSUA.exe is Windows updates Standalone Installer executable). Refer the URL below in reference for the Step by Step procedure for Mass rollback of software patches those are causing issues.

Reference: http://weikingteh.wordpress.com/2013/05/13/how-to-rollback-remove-a-patch-using-sccm-configmgr/

SCCM Interview Questions/FAQs - Part 8 (Software Distribution)

Part # 8 Software Distribution

1) Does a Configuration Manager Branch distribution point require a secondary site in which to operate?

Ans: No.

Explanation: A Branch distribution point is intended to allow smaller or distributed offices to host a SCCM 2007 distribution point on an existing client computer without requiring the installation of a secondary site.

Reference: http://technet.microsoft.com/en-us/library/bb632688.aspx & http://technet.microsoft.com/en-us/library/bb680853.aspx

2)  Can you prevent certain clients from accessing a particular distribution point?
Ans: Yes.
Explanation: You can protect a Configuration Manager Distribution point to prevent clients outside of its protected boundaries from accessing content stored on it.

Reference: http://technet.microsoft.com/en-us/library/bb892788.aspx

3) Can you copy multiple packages to a distribution point simultaneously?

Ans: Yes.

Explanation: In Systems Management Server (SMS) 2003, you had to copy packages one at a time to a distribution point. In SCCM 2007, you can use the Copy Packages Wizard to copy multiple packages to a distribution point simultaneously.

Reference: http://technet.microsoft.com/en-us/library/bb693746.aspx

4) If an advertised program with a maximum allowed run time of Unknown is still running at the end of a maintenance window, will the advertisement fail?

Ans: No.

Explanation: When SCCM attempts to determine whether there is enough time to run a program in a maintenance window, it looks at the maximum allowed run time option. If this option is set to Unknown, it is evaluated as a program run time of Zero (0) minutes. In this case, the advertisement will succeed even if it falls outside of a defined maintenance window

Reference: http://technet.microsoft.com/en-us/library/bb694197.aspx.

5) Can you install a Branch Distribution Point on to a computer that is not a Configuration Manger Client?

Ans: No.

Explanation: To install a branch distribution point, the target computer must be a Configuration Manager 2007 client running Windows XP or later.

Reference: http://technet.microsoft.com/en-us/library/bb680335.aspx

6) Do maintenance windows always control whether or not an advertised program will run on a client computer?

Ans: No.

Explanation:  Although maintenance windows are designed to allow administrators to control when client computers will download or run advertised programs, they are not intended to be universally restrictive. When creating a mandatory advertisement for a package, an administrator can elect to have that assignment ignore maintenance windows set on the target collection.

Reference: http://technet.microsoft.com/en-us/library/bb694295.aspx

7) Can you use Configuration Manger 2007 software distribution to uninstall a software package?

Ans: Yes.

Explanation: You can advertise any package or command to client computers using software distribution. If the software package has an uninstall command line, advertise this to the clients from which you want to remove the software package. If the software package does not have an uninstall routine, you might be able to build a script to accomplish this.

Reference: http://technet.microsoft.com/en-us/library/bb680422.aspx

8) Can you re-run an advertisement that has previously run successfully on client computers?

Ans: Yes.

Explanation: You can re-run an advertisement that has previously completed successfully, but only if the original advertisement had a mandatory scheduled assignment that has not yet expired.

Reference: http://technet.microsoft.com/en-us/library/bb681010.aspx

9) To install a branch distribution point, must Internet Information Services (IIS) be installed on the branch distribution point computers?

Ans: No.

Explanation: A computer hosting a Branch Distribution point does not need to have IIS installed.

Reference: http://technet.microsoft.com/en-us/library/bb680335.aspx

SCCM Interview Questions/FAQs - Part 7(SCCM 2007 Server Installation/Setup FAQs)

Part#7 – SCCM Installation Quiz

1)  Is it required to extend the Active Directory Schema for Configuration Manager?

Ans: No.

Explanation: It is not compulsory to extend AD Schema. But, extending schema would allow clients to retrieve many types of information related to SCCM from trusted sources. It’s just a best practice.

Reference: http://technet.microsoft.com/en-us/library/bb694066.aspx

2)  When upgrading Systems Management Server (SMS) 2003 AD Schema extensions for SCCM using ConfigMgr_ad_schema.ldf LDIF file, are additional steps required?

Ans: Yes.

Explanation: If the AD schema was previously extended for SMS 2003 sites, you must modify the ConfigMgr_ad_schema.ldf file shipped with the SCCM installation source files to allow SCCM Management point object attributes to be added to AD schema successfully.

Reference: http://technet.microsoft.com/en-us/library/bb632388.aspx

3) Is it possible to install a native mode SCCM site using the simple setting option of the SCCM setup?

Ans: No

Explanation: The simple setup installation option installs a SCCM 2007 primary site in mixed mode and configures a single computer to host all the necessary site server roles.

Reference: http://technet.microsoft.com/en-us/library/bb632792.aspx

4) Is site to site communication secured using public key infrastructure (PKI) certificates for sites configured to operate in native mode?

Ans: No.

Explanation: Native mode helps secure client to server communications only. To help protect server to server and site to site communication, consider implementing Internet Protocol Security (IPSec) or secure key exchange (applicable only site to site communications)

Reference: http://technet.microsoft.com/en-us/library/bb680658.aspx, http://technet.microsoft.com/en-us/library/bb633269.aspx and http://technet.microsoft.com/en-us/library/bb632851.aspx

5) Can the Configuration manager SMS provider be installed on a computer other than the site server or the site database server?

Ans: Yes.

Explanation: The SMS Provider can be installed on the site database server, site server or another server class third computer during SCCM 2007 setup.

Reference: http://technet.microsoft.com/en-us/library/bb680613.aspx

6) Is the SMS provider only to allow Configuration Manager Console connectivity to site database information?

Ans: No.

Explanation: The SMS Provider is used by Configuration Manager Console, Resource Explorer, tools and custom scripts used by SCCM 2007 administrations to access site information stored in the site database.

Reference: http://technet.microsoft.com/en-us/library/bb680613.aspx

7) Is the SMS Provider capable of translating data from one language to another in multilingual SCCM 2007 site hierarchies?

Ans: No.

Explanation: In multilingual SCCM 2007 site hierarchies, the site database is capable of storing information in different languages received from child sites. When site data is requested, the SMS provider determines the installed operating system language of the requesting computer and formats the data returned from the site database in a matching language format.

Reference: http://technet.microsoft.com/en-us/library/bb680613.aspx

8) Is Microsoft SQL Server 2005 database mirroring supported for the SCCM site database?

Ans: No.

Explanation: SQL Server 2005 database mirroring is not supported for the Configuration Manager Site database.  When installing SCCM 2007, the SQL Server site database can be installed on either the default instance or a named instance of SQL Server 2005. The instance used to host the site database can also be configured as a SQL Server failover cluster instance.

Reference: http://technet.microsoft.com/en-us/library/bb680717.aspx and http://technet.microsoft.com/en-us/library/bb693612.aspx

9) Is the SQL Server named pipes communication protocol required for Configuration Manager Site database installations?

Ans: No.

Explanation: The TCP/IP Protocol is required for SQL Server network communications to allow Kerberos authentication. The named pipes protocol is not required for SCCM 2007 site database operations and should be used only to troubleshoot any Kerberos authentication issues encountered when using TCP/IP protocol communications.

Reference: http://technet.microsoft.com/en-us/library/bb735877.aspx

10) Do SCCM 2007 Management Point computers configured in network load balancing (NLB) clusters in mixed-mode sites require registering a Service Principal Name (SPN) in Active Directory Domain Services?

Ans: Yes.

Explanation: To allow mixed-mode client approval processes, management point site systems configured as part of NLB clusters, in SCCM 2007 sites that are configured to operate in mixed mode, require registration of a Service Principal Name (SPN) in Active Directory Domain Services for the user name that is configured to run the CCM Windows Auth Server Framework Pool IIS application pool.

Reference: http://technet.microsoft.com/en-us/library/bb735879.aspx

Friday, July 26, 2013

SCCM Interview Questions/FAQs - Part 6 (Operating System Deployment FAQs)

Part # 6 – OS Deployment

1) Can I use stand-alone media to deploy operating system images to Computers that are not Configuration Manager 2007 clients?

Ans: Yes.

Explanation: You can use stand-alone media to deploy Operating system images to computers that are not Configuration Manger Clients. But, all the necessary installation files must be contained on the installation media because the media will not have a connection to the SCCM 2007 site.

Reference: http://technet.microsoft.com/en-us/library/bb680865.aspx & http://technet.microsoft.com/en-us/library/bb632784.aspx

2) Can I use stand-alone media to distribute software updates?

Ans: No

Explanation: Using stand-alone media to distribute software updates is not supported because stand-alone media has no connection to a Configuration Manager 2007 site.

Reference: http://technet.microsoft.com/en-us/library/bb680701.aspx

3) Can computers locate and install device drivers immediately after they have been imported into the drive catalog?
Ans: No.
Explanation:  For a computer to locate and install a device driver, the device driver must be imported into the driver catalog and made available on an accessible distribution point.
Reference: http://technet.microsoft.com/en-us/library/bb693985.aspx

4) Can task sequence names be the same?

Ans: Yes.

Explanation: Task sequence names do not need to be unique. You can reuse the same name for different task sequence.
Reference: http://technet.microsoft.com/en-us/library/bb693631.aspx & http://technet.microsoft.com/en-us/library/bb680818.aspx

5) Do task sequence variables that are assigned to a collection take precedence over task sequence variables that are assigned to a specific computer?

Ans: No.

Explanation: Variables assigned to a specific computer will have a higher priority that variables assigned to the collection or collections where the Configuration Manager client is located. For example, if collection A has a variable assigned to it and Computer A, which a member of collection A, has a conflicting variable assigned to it, the variable assigned to Computer A will receive higher priority than that of the variable assigned to Collection A.

Reference: http://technet.microsoft.com/en-us/library/bb693541.aspx & http://technet.microsoft.com/en-us/library/bb680451.aspx

6) Can I add as many device drivers as possible to boot images to complete an operating system deployment?

Ans: No.

Explanation: You should add only network and mass storage device drivers to a boot image. Adding device drivers to a boot image can increase the memory requirements of the boot image. If the memory requirements of the boot image exceed the memory of the target computer, the deployment will fail.

Reference: http://technet.microsoft.com/en-us/library/bb680959.aspx & http://technet.microsoft.com/en-us/library/bb633028.aspx

7) Will importing computer information that already exists in the Configuration Manager 2007 database create a duplicate record?

Ans: No.

Explanation: if the computer to be imported already exists in the SCCM 2007 database, the new computer information will overwrite the existing computer information.

Reference: http://technet.microsoft.com/en-us/library/bb633291.aspx

8) Can I deploy an operating system to a computer with no formatted partition?

Ans: Yes.

Explanation: If there is no formatted partition available, the Configuration Manager 2007 task sequence engine will create and format a temporary partition to use as the local data path.

Reference: http://technet.microsoft.com/en-us/library/bb693478.aspx

9)  If you advertise a task sequence to a SCCM 2007 collection, will any associate SCCM 2007, sub-collections also receive the advertisement?

Ans: No.

Explanation: Task sequence advertised to a SCCM 2007 collection are not advertised to SCCM 2007 sub-collections and task sequence can be advertised only to SCCM 2007 client computers, not the specific users.
Reference: http://technet.microsoft.com/en-us/library/bb693631.aspx

10) When a task sequence steps fails, does the task sequence continue on with the next task sequence step?

Ans: No.

Explanation: By default, a task sequence will fail after one step or action fails. To continue after a task sequence step failure, edit the task sequence and select Continue on error on the Options tab.

Reference: http://technet.microsoft.com/en-us/library/bb632410.aspx

SCCM Inteview Questions/FAQs - Part 5 (Client Installation FAQs)

Part#5 - Client installation FAQs

1)  Is a fallback status point required to deploy Configuration Manager 2007 Clients?

Ans: No

Explanation:  Fallback Status point is an optional but recommended Configuration Manager 2007 site System. When Configuration Manager 2007 Client computers cannot communicate with a management point, they will send state messages to the fallback status point. If you do not have a fallback status point in your site, it might be more difficult to troubleshoot failed client deployments.

Reference: http://technet.microsoft.com/en-us/library/bb694178.aspx and http://technet.microsoft.com/en-us/library/bb680537.aspx

2)  Does a Configuration Manager 2007 site need to have client push enable to use client push installation?

Ans: No.

Explanation: Selecting the option “Enable client push to Assigned Resources” option in general tab of Client Push Installation properties dialog box will result in SCCM installing clients to discovered computers within the site configured boundaries. However if this option is not enabled you will still be able to use the Client Push installation wizard to push Clients.

Reference: http://technet.microsoft.com/en-us/library/bb632380.aspx

3) Can you run client.msi to manually install the Configuration Manager Client?
Ans: No
Explanation:  You must run CCMSetup.exe to install the client software. CCMSetup.exe downloads the necessary pre-requisites for client installation and then runs client.msi

Reference: http://technet.microsoft.com/en-us/library/bb680980.aspx

4)  Does the SCCM Client require any exception to be made on the client computer firewall?

Ans: Yes.

Explanation: Many features of SCCM 2007 require exception to be made on the client firewall to enable communications with SCCM 2007 site Systems.

Reference: http://technet.microsoft.com/en-us/library/bb694088.aspx

5) Can you supply further installation properties to CCMSetup.exe when installation properties have been provisioned on computers using Group policy?

Ans: No.

Explanation: You can provision computers with installation properties prior to client installation taking place, but if you supply further installation properties during client installation, the provisioned installation properties are ignored.

Reference: http://technet.microsoft.com/en-us/library/bb680980.aspx & http://technet.microsoft.com/en-us/library/bb632469.aspx

6) Can you add custom client installation properties to CCMSetup.exe for a Software update point based client installation?

Ans: No

Explanation:  It is not possible to add any custom installation properties to the CCMSetup.exe command line when using software update point based client installation. However if you have extended the AD schema for Client Computers automatically query ADDS for installation properties when they install. If you have not extended AD Schema, you can use Windows Group Policy to provision client installation settings to computers in your site. These settings are automatically applied to any software update point based client installations.

Reference: http://technet.microsoft.com/en-us/library/bb632469.aspx

7)  In SCCM 2007, can you use the ccmclean.exe utility to uninstall the client software from computers?
Ans: No
Explanation: SCCM 2007 does not support the use of ccmclean.exe to uninstall the client software. To Remove SCCM 2007 client, you must use CCMSetup.exe with the /uninstall property.

Reference: http://technet.microsoft.com/en-us/library/bb694276.aspx

8) Can you use client.msi to deploy the SCCM 2007 client using  Group Policy?

Ans: NO.

Explanation: SCCM 2007 does not support running client.msi directly. But a Windows installer exe, CCMSetup.msi is provided for Group Policy installations.

Reference: http://technet.microsoft.com/en-us/library/bb633010.aspx

9. Can you use client push installation to install the SCCM 2007 Client on Workgroup computers?

Ans: No

Explanation: Client push installation can install client only of resources in Active Directory and Workgroup systems do not appear in AD.

Reference: http://technet.microsoft.com/en-us/library/bb680962.aspx

10) Can you change the default size of the temporary program download folder(cache) on client computers?

Ans: Yes

Explanation: There are two methods to change the size of the cache location on SCCM 2007 clients: When installing the client by using the Client.msi installation property SMSCACHSIZE. After the client is installed using SCCM in the Windows Control Panel of the client Computer.

Reference: http://technet.microsoft.com/en-us/library/bb680615.aspx

Thursday, July 25, 2013

SCCM Interview Questions/FAQs - Part 4

1) Can you deploy virtual application packages to any configuration Manager 2007 Clients?
Ans: No.

Explanation: Client Computers must be running Windows XP or later to run virtual application packages.

References: http://technet.microsoft.com/en-us/library/cc161873.aspx

2) Can configuration Manager 2007 R2 be used to monitor the Microsoft Forefront Client Security agent?

Ans: Yes

Explanation: A desired Configuration management configuration pack is supplied with SCCM 2007 R2 to monitor the status of the client agent. This configuration pack can be imported into you site and assigned to a collections of computers running Forefront Client Security Agent.

Reference: http://technet.microsoft.com/en-us/library/cc161958.aspx & http://technet.microsoft.com/en-us/library/bb693504.aspx

3) When a Configuration Manager 2007 r2 operating system deployment to an unknown computer fails to install OS and Configuration Manager Client, will the computer appear in a node labelled as UnProvisioned Computers?

Ans: Yes

Explanation: When a computer is identified by the PXE Service point but the operating system deployment task sequence fails to install the OS and a configuration Manager Client, the computer will appear under the UnProvisioned Computers node under Operating System Deployment.

Reference: http://technet.microsoft.com/en-us/library/cc431437.aspx

4) Does scheduling a multicast for OS deployment allow the administrator to specify a time when OS deployment packages will be sent to clients?

Ans: No

Explanation: Scheduling multicasts allows the administrators to specify the time delay before a multicast is started, specify the minimum number of sessions required before the multicast begins or both.

Reference: http://technet.microsoft.com/en-us/library/cc161836.aspx

5) Can the Client status reporting host system be installed on any computer in a Configuration Manager 2007 R2 site?

Ans: Yes.

Explanation: The Client status reporting host system is the computer on which the client status reporting feature is installed. This can be installed on any supported computer in a configuration manager site. For performance reasons, it is recommended that you do not install client status reporting on your Configuration Manager Site server.

Reference: http://technet.microsoft.com/en-us/library/cc161853.aspx & http://technet.microsoft.com/en-us/library/cc161905.aspx

6) Does client status reporting use a separate Microsoft SQL Server database to store data about the health of Configuration Manager Clients?

Ans: No

Explanation: The Client health monitoring tool in System Management Server (SMS) 2003 used a separate database to store client health data. In SCCM 2007 Client status reporting, the client health data is integrated into the SCCM 2007 database.

Reference: http://technet.microsoft.com/en-us/library/cc431368.aspx

7) Can you copy existing Configuration Manager Reports into SQL Reporting Services in Configuration Manager 2007 R2?

Ans: Yes

Explanation: SQL Reporting Services feature the Copy Reports to Reporting Services Wizard, which enabled you o copy existing Configuration Manager reports to SQL reporting Services.

Reference: http://technet.microsoft.com/en-us/library/cc161979.aspx

8) Is the Create Report Wizard the only method of creating SQL Reporting Services Reports in Configuration Manager 2007 R2?

Ans: No

Explanation: In addition to using the create Report Wizard, you can also create SQL Reporting Services reports using the SQL reporting Services Webpage. Both the Create Report Wizard and the SQL Reporting Services Webpage will initiate Microsoft Report Builder to create the report.

Reference(s): http://technet.microsoft.com/en-us/library/cc678412.aspx and http://technet.microsoft.com/en-us/library/cc512025.aspx

9) Are custom reports installed with client status reporting in Configuration Manager 2007 R2?

Ans: No.

Explanation: Although a number of custom reports are supplied with the client status reporting, these are not installed by default. To install these reports, you must locate the file ClientStatusReports.mof on the Configuration Manager 2007 R2 installation media and use the Import Object Wizard to import the reports.

Reference: http://technet.microsoft.com/en-us/library/cc161853.aspx

10) In Configuration Manager 2007 R2 SQL Reporting Services, can you configure reports to be delivered to you on recurring schedule?

Ans: Yes.

Explanation: SQL Reporting Services in Configuration Manager 2007 R2 allows you to configure reports to be run on a specified schedule and then delivered to you via e-mail or by being deposited in a file share you specify.

Reference: http://technet.microsoft.com/en-us/library/cc872783.aspx

Wednesday, July 24, 2013

SCCM Interview Questions/FAQs - Part 3

Part #3

11) Are any extra configuration steps required to configure servers running Windows Server 2008 as Configuration Manager 2007 sites?

Ans: Yes.

Explanation: For Example, the management point site system role requires IIS 7 to be installed and configured to support the MP’s requirement. IIS is not installed by default in Windows 2008 servers.

12) Can you import Software license information for software not produced by Microsoft into the asset intelligence catalog?

Ans: Yes

Explanation: You can use the Asset Intelligence License Import Wizard to import non-Microsoft Software licenses information to the SCCM DB.
Reference(s): http://technet.microsoft.com/en-us/library/cc431428.aspx & http://technet.microsoft.com/en-us/library/bb632714.aspx & http://technet.microsoft.com/en-us/library/cc161913.aspx

13) When the ConfigMgr console is running on a server without a connection to the internet, Can you prevent the console from trying to connect to the internet to display the System Center Configuration manager TechCenter site in the top node of the console tree?

Ans: Yes

Explanation: To prevent the System Center Configuration Manager console from downloading the TechCenter home page

1. In a registry editor, locate the key HKLM\Software\Microsoft\ConfigMgr\AdminUI.

2. Create a new DWORD value DisableHomePage.

You do not need to set any data for the DisableHomePage value; if the value exists, the console will not attempt to connect to the TechCenter home page.

14) Can you use out of band management for computers that are managed over internet?

Ans: No.

Explanation: Out of Band Management in ConfigMgr 2007 SP1 does not support clients that are managed over internet with internet based client management.

15) Can you schedule Asset Intelligence catalog information updates to occur automatically on a schedule?

Ans: Yes:

Explanation: If you are a Microsoft Software Assurance Licensed Customer, you can use the asset intelligence synchronization point role in Configuration Manager 2007 SP1 to schedule automatic catalog information updates.

16) Can you manage AMT-based computers if they do not have the configuration manager 2007 Sp1 client installed?

Ans: Yes

Explanation: You can manage AMT-based computers event if they do not have any version of the client installed. This is because communication is to the computer’s management controller, rather than the operating system or a client agent that is running on the OS.

References: http://technet.microsoft.com/en-us/library/cc161963.aspx & http://technet.microsoft.com/en-us/library/cc161785.aspx

17) In Asset inventory, can you submit uncategorized software title information to Microsoft to be categorized?

Ans: Yes.

Explanation: Uncategorized software title information can be submitted to System Center Online for research and categorization. After an uncategorized software title is submitted, researches identify, categorize and then make the software title categorization information available to all customer using the online service.

Reference: http://technet.microsoft.com/en-us/library/cc161911.aspx

18) When importing software license information into the site database using the Asset Intelligence License Import Wizard, can Microsoft Volume Licenses be imported using .csv formatted file.?

Ans: No.

Explanation: Microsoft Volume License statements should be saved as an.XML formatted file, While non-Microsoft License information should be imported using a .CSV formatted file.


19) Does Configuration Manager Support Migrating AMT-based computers from another AMT Management Solution?

Ans: Yes

Explanation: Configuration Manager supports several methods to migrate computers from an existing AMT management solution. The easiest solution is when the AMT version is 3.2.1 or later and the computer is running the configuration manager 2007 SP1 Client. If either of these conditions is not met, your existing AMT management Solution might have an export utility to help automate the migration of these compute4rs to Configuration Manager. Without an export utility, you can still migrate these computers if you have all the relevant computer information.

Tuesday, July 23, 2013

Buying Licenses for System Center Configuration Manager 2012

Buying System Center Configuration Manager 2012

System Center Configuration Manager comes bundled with Microsoft System Center 2012 suite. 

System Center 2012 comes in two variants.
1. System Center 2012 Datacenter Edition
2. System Center 2012 Standard Edition

We should buy license for any one of these two variants to setup SCCM 2012 infrastructure.
Further, licensing is classified into two ways

1. System Center Server Management Licensing
2. System Center Client Management Licensing

System Center Server Management Licensing:

System Center 2012 server management licensing dramatically simplifies how you purchase the management capabilities you need to get the most from your private cloud. The System Center 2012 server management solution is offered in two editions: Standard and Datacenter. Both editions include all the System Center features and capabilities you need to manage your private cloud. Editions are differentiated only by virtualization rights. Simply choose the appropriate edition for each server you want to manage and start taking advantage of the capabilities you need to accomplish your goals. 

*VMs are equivalent to managed operating system environments (OSEs)

When is a Server Management license required?
A Server ML is required for managed devices that run server Operating System Environments (Windows OSEs and non-Windows OSEs) 

1 Server Management licensing covers up to 2 processors

In Datacenter Edition, The number of required Server MLs for each managed server is determined by the number of physical processors..

In Standard Edition, The number of required Server MLs for each managed server is determined by the number of physical processors OR the number of OSEs being managed (whichever is greater). 

*All Physical Processors on a server must be licensed with same edition of Server Management licensing.
*SQL Server license comes bundled with the Server Management licensing.
*Manages all type of workloads

System Center 2012 Client Management Licensing:
System Center 2012 client management licensing provides simple, cost-effective options to manage and protect client systems. Customers can purchase individual client management licenses for System Center 2012 Configuration Manager, System Center 2012 Endpoint Protection, and System Center 2012 Client Management Suite. Configuration Manager and Endpoint Protection are also licensed as part of the Core CAL suite, and Client Management Suite is available as part of the Enterprise CAL suite.
System Center 2012 Configuration Manager 
System Center 2012 Configuration Manager is available on a per-user or per-operating system environment (OSE) basis, as well as in the Core CAL and Enterprise CAL suites. System Center 2012 Configuration Manager is also included with a subscription to Windows Intune. Windows Intune subscriptions are available via the Microsoft Online Subscription Program (MOSP) as well as through the Enterprise Agreement. 
System Center 2012 Endpoint Protection 
System Center 2012 Endpoint Protection is available as a per-user or per-device subscription, as well as in the Core CAL and Enterprise CAL suites. The subscription includes all antimalware updates and product upgrades during the subscription period.

System Center 2012 Client Management Suite 
The System Center 2012 Client Management Suite is available on a per-user or per-OSE basis, as well as in the Enterprise CAL suite. It is composed of Data Protection Manager, Operations Manager, Orchestrator, and Service Manager.

Pricing & Licensing Details

* Customers can also access these offerings at a significant discount through Microsoft’s client access license suites (Core CAL and Enterprise CAL).

Microsoft system Center 2012
Microsoft System Center 2012 components are classified into two groups based on the scope of the management, they are: 

Component Classifications:

1. Cloud and Datacenter Management
a. App Controller
b. Data Protection Manager
c. Operations Manager
d. Orchestrator
e. Service Manager
f. Virtual Machine Manager

2. Client Management and Security
a. Configuration Manager
b. Endpoint Protection

Let us see, each of the Component in detail.

System Center 2012 Configuration Manager provides comprehensive configuration management for the Microsoft platform that can help you empower users with the devices and applications they need to be productive while maintaining corporate compliance and control.

System Center 2012 App Controller provides a common self-service experience across private, hosted, and public clouds that can help you empower application owners to easily build, configure, deploy, and manage new services.

System Center 2012 Data Protection Manager provides unified data protection for Windows servers and clients that can help you deliver scalable, manageable, and cost-effective protection and restore scenarios from disk, tape, and Windows Azure.

System Center 2012 Endpoint Protection, built on System Center Configuration Manager, provides industry-leading threat detection of malware and exploits as part of a unified infrastructure for managing client security and compliance that can help you simplify and improve endpoint protection.

System Center 2012 Operations Manager provides deep application diagnostics and infrastructure monitoring that can help you ensure the predictable performance and availability of vital applications and offers a comprehensive view of your datacenter, private cloud, and public clouds.

System Center 2012 Orchestrator provides orchestration, integration, and automation of IT processes through the creation of runbooks that can help you to define and standardize best practices and improve operational efficiency.

System Center 2012 Service Manager provides flexible self-service experiences and standardized datacenter processes that can help you integrate people, workflows, and knowledge across enterprise infrastructure and applications.

System Center 2012 Virtual Machine Manager provides virtual machine management and services deployment with support for multi-hypervisor environments that can help you deliver a flexible and cost effective private cloud environment. System Center 2012 SP1 Virtual Machine Manager requires Windows Server 2012 and will not work on previous server operating systems.

ConfigMgr 2012 Deployment Cheat Sheet

ConfigMgr 2012 Deployment Cheat Sheet!

1. Build yourself a Windows Server 2008R2 SP1 Server or Windows 2012 Server

2. Install SQL Server 2008 R2 SP1 CU6 or later

a) Verify SQL Collation is set to SQL_Latin1_General_CP1_CI_AS

b) Configure SQL Server process memory allocation

3. Add the following Windows Features

-.NET Framework 3.5.1

- Background Intelligent Transfer Service

- Remote Differential Compression

- Install .NET Framework 4

- Add Additional IIS Roles Services

- Web Server - Application Development: ASP.Net, ASP, ISAPI Filters

- Web Server - Security: Basic Authentication, Windows Authentication, URL Authorization, IP and Domain Restrictions

- Management Tools: IIS Management Scripts and Tools, Management Server, IIS 6 Management Compatibility

Following is the powershell command to install the various roles and features for deploying SCCM 2012 Sp1. Open Powershell - Type Import-Module ServerManager - <enter> and then copy paste the below text on the powershell window and press enter. 

Add-WindowsFeature Web-Common-Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-Asp-Net,Web-Net-Ext,Web-ASP,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Basic-Auth,Web-Windows-Auth,Web-Url-Auth,Web-Filtering,Web-IP-Security,Web-Stat-Compression,Web-Mgmt-Tools,Web-WMI,NET-Framework,RDC,BITS -Restart 

4. Create SccmAdmin account in Active Directory

5. Assign that account the SQL Server “sysadmin” role

6. Create “System Management” container in Active Directory

7. Delegate SCCM Server full control access to the container “System Management” Container

8. Extend Active Directory Schema (If necessary), not required if you had extended schema for SCCM 2007.

9. Perform ConfigMgr pre-req checker & Install ConfigMgr!