tag:blogger.com,1999:blog-25861697947458812372024-03-06T13:02:25.473-07:00Jim Moldenhauer's Tech BlogA blog of all things TechnologyJimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.comBlogger91125tag:blogger.com,1999:blog-2586169794745881237.post-60090238143013562132017-09-19T13:36:00.000-07:002017-09-19T13:44:54.309-07:00SCOM 2016 - Monitor & Recover a ServiceMonitoring services is the bread and butter of SCOM but not a lot of people know how to actually setup service monitoring, and fewer still know how to setup SCOM to automatically restart services when they fail.<br />
<br />
<b>Creating the Monitor:</b><br />
<b><br /></b>
In the SCOM console go to Authoring > Management Pack Objects and Right Click on Monitors. Select Create a Monitor > Unit Monitor<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP9CBbVpULaSMfo4DxD6itXqi19p1FS2aBAEl6ZmTuxYM2yehZddWjJoIy951YdOFTkQyBY7yiG9AQluc8FEkBo8Z9fA1QnHkaU04EAmyspg18TNoAnId12KfCrV9i8ZrRSQXlht7Yods/s1600/01.png" imageanchor="1"><img border="0" height="151" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgP9CBbVpULaSMfo4DxD6itXqi19p1FS2aBAEl6ZmTuxYM2yehZddWjJoIy951YdOFTkQyBY7yiG9AQluc8FEkBo8Z9fA1QnHkaU04EAmyspg18TNoAnId12KfCrV9i8ZrRSQXlht7Yods/s320/01.png" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
The Create a Unit Monitor wizard will run, Select Windows Services > Basic Service Monitor. Also Select a Management Pack. Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidkSRVaK3pFRJLTyx8wzbiVIkan40aoWunwkD_DNkWlQ_s_IDcmsmXcW7zws4Ci_afdmdQh9KatxQpLbxzn_ZihPFR1fplg6bIwRUPkj7jm9f8WzmEncnrK3Hxg26gL8-sGlR4B-Rv5Gs/s1600/02.PNG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidkSRVaK3pFRJLTyx8wzbiVIkan40aoWunwkD_DNkWlQ_s_IDcmsmXcW7zws4Ci_afdmdQh9KatxQpLbxzn_ZihPFR1fplg6bIwRUPkj7jm9f8WzmEncnrK3Hxg26gL8-sGlR4B-Rv5Gs/s320/02.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
In General give the monitor a name, I like to use the friendly name of the service so I can easily go back to it. Monitor target should be Windows Computer and Parent monitor is Availability. If this is a service that is common to a lot of servers then leave Monitor is enabled checked. Otherwise uncheck it and you will have to do an override later. Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQQg2imPtIE3dqBlvaoyXvSFCtVHCZfJnn9oxNl2qEkdpGf6eY5rwIhOqWBJ-duYaXZORUdNp8D7Lt17KeBtxFVs1HnA3otLcVzIkbwPaKYkpmXJyRpHVhYRj4c3dJ1oVRBboDPFTQB4c/s1600/03.PNG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQQg2imPtIE3dqBlvaoyXvSFCtVHCZfJnn9oxNl2qEkdpGf6eY5rwIhOqWBJ-duYaXZORUdNp8D7Lt17KeBtxFVs1HnA3otLcVzIkbwPaKYkpmXJyRpHVhYRj4c3dJ1oVRBboDPFTQB4c/s320/03.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
If you know the service name (The actual name, not the common name in services) you can enter it here otherwise you can just browse for it but hitting the ... button. Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBAibYkTWQoC_MHYIRwcmybD9F5yXBZNDWFgq-IIp5Hor8isJgX0R-L252qbLbXGdSTiOrCRvznevm0k1-mR10lNVwaIBmuQ4VAR-sYN2yxKzbf1fjLGI10Sap8Pw_82SX3cuGEyWPYPM/s1600/04.PNG" imageanchor="1"><img border="0" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBAibYkTWQoC_MHYIRwcmybD9F5yXBZNDWFgq-IIp5Hor8isJgX0R-L252qbLbXGdSTiOrCRvznevm0k1-mR10lNVwaIBmuQ4VAR-sYN2yxKzbf1fjLGI10Sap8Pw_82SX3cuGEyWPYPM/s320/04.PNG" width="320" /></a></div>
<div style="text-align: left;">
<span style="color: yellow;">NOTE: Make a note of the service name as you will need it later</span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
In Configure Health set your state conditions and Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjs3gHvd2bdGrda5mcsecA0qlTV1sgkQXpGUhn0Gm5gQa6q3Sqo58g4KMd8jeGxkRfsQ38BeGIWsNGLJm00drYdUoMT9YUxJ1Kbpl0IaGT8HlWxMuXOyrp-80IK4uXGa3POA5THBRm0HJ8/s1600/05.PNG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjs3gHvd2bdGrda5mcsecA0qlTV1sgkQXpGUhn0Gm5gQa6q3Sqo58g4KMd8jeGxkRfsQ38BeGIWsNGLJm00drYdUoMT9YUxJ1Kbpl0IaGT8HlWxMuXOyrp-80IK4uXGa3POA5THBRm0HJ8/s320/05.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Finally in Configure Alerts Check the box Generate alerts for this monitor. Update the alert description as needed and Click Create.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiA7P3NsFwBvkrJRXnA3OLprED2rEeFi36-Cwq0S_jNy9DQPFCw7oMCEaJ8GQwXte83fGKjw0L6wJPGQc76bCooST2nuNEWlK9MSwCWQ7EXlYytY_6_Inwh6iW22SMCww6m_mM1g7ifY4/s1600/06.PNG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiA7P3NsFwBvkrJRXnA3OLprED2rEeFi36-Cwq0S_jNy9DQPFCw7oMCEaJ8GQwXte83fGKjw0L6wJPGQc76bCooST2nuNEWlK9MSwCWQ7EXlYytY_6_Inwh6iW22SMCww6m_mM1g7ifY4/s320/06.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Setting Auto Recovery</b>:</div>
<div style="text-align: left;">
Now that the monitor is created go back into monitors and find it. Right click on the monitor and select Properties. Go to the Diagnostic and Recovery tab. Under Configure Recovery Tasks select Add > Recovery for critical health state</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX8u3pJhN4XkOvbcqL8_Yo9w4j_pHN8zfcl1QntphWrs8Xr20pBrKHe4pbo6Mog0Q74jNMZzLThn5MRYxlF1WiLgmk-wOuW7DLygXA8QZotrJEyubx8RL9ZILrTM_WtsfNnVZ9VV44E4Q/s1600/07.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX8u3pJhN4XkOvbcqL8_Yo9w4j_pHN8zfcl1QntphWrs8Xr20pBrKHe4pbo6Mog0Q74jNMZzLThn5MRYxlF1WiLgmk-wOuW7DLygXA8QZotrJEyubx8RL9ZILrTM_WtsfNnVZ9VV44E4Q/s320/07.PNG" width="300" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Select Run Command and Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgInT-GwCdVAd4HoT1zjjyInASxTAwmczxajY-0vQH-EbFxhoPgo7R1XcFQS-67iwnq5B4k7HgrkLW1JoXLWFZ9TGBt2E3wbfbitkpNUwRPyNesBR-yM5YscIBhSq2ZxIX0co000yxa2_A/s1600/08.PNG" imageanchor="1"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgInT-GwCdVAd4HoT1zjjyInASxTAwmczxajY-0vQH-EbFxhoPgo7R1XcFQS-67iwnq5B4k7HgrkLW1JoXLWFZ9TGBt2E3wbfbitkpNUwRPyNesBR-yM5YscIBhSq2ZxIX0co000yxa2_A/s320/08.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
In General call it Start Service. For Recovery target select Windows Server and make sure Run recovery automatically and Recalculate monitor state after recovery finishes are both checked and Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja-30R9WVKxI0pOFqaPuN2NeJJzUbo-cb5xjx_Fr4owv8do-oVGzbWkq72uWmqMzf5w5pBIqWaw3nRYUSWBDGtxFXXFtPVXK2hTSbJyoXEKPGd-QJlEowcyqI72yJYyWJo22aq55zggiE/s1600/09.PNG" imageanchor="1"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja-30R9WVKxI0pOFqaPuN2NeJJzUbo-cb5xjx_Fr4owv8do-oVGzbWkq72uWmqMzf5w5pBIqWaw3nRYUSWBDGtxFXXFtPVXK2hTSbJyoXEKPGd-QJlEowcyqI72yJYyWJo22aq55zggiE/s320/09.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
The Full path to file is <span style="color: yellow;">%windir%\system32\net.exe</span> and the Paramaters are <span style="color: yellow;">Start ServiceName</span> (captured earlier) In my case it is start MB3Service. Set the timeout to a few minutes and Click Create. </div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6DmRrc8yYHUTAQDOjHPCIeBzm3GzhrWaReFqNn38YssDiG1bXlc0rPZUZeMaJUNB7f_7TR9e3VqOEqUHd7K6rqaRTSm2F9wX3d6ifsTyG6-GXJ-C7G1o6GX6kQ53xfqgkULLPekMwbA/s1600/10.PNG" imageanchor="1"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv6DmRrc8yYHUTAQDOjHPCIeBzm3GzhrWaReFqNn38YssDiG1bXlc0rPZUZeMaJUNB7f_7TR9e3VqOEqUHd7K6rqaRTSm2F9wX3d6ifsTyG6-GXJ-C7G1o6GX6kQ53xfqgkULLPekMwbA/s320/10.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Click Apply</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3QBAl1BvKqysEaKT-vd9mqhvmvro-mS2Y543fZrAzmyvZmZHbTnJgmBDj3JL5HUoGl11nY2h8VhnRDE2PfOkH-VMcZJOo_aYWOjXWKt5TXI0jPNy38ODRaKZgphZfXkgkwwx8-ydGEJM/s1600/11.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3QBAl1BvKqysEaKT-vd9mqhvmvro-mS2Y543fZrAzmyvZmZHbTnJgmBDj3JL5HUoGl11nY2h8VhnRDE2PfOkH-VMcZJOo_aYWOjXWKt5TXI0jPNy38ODRaKZgphZfXkgkwwx8-ydGEJM/s320/11.PNG" width="298" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Give it a few minutes to propagate out into your environment and once it does you can stop the service on a test machine to make sure the alert goes out and the service gets restarted. </div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
More to come!<br />
<br />
If you like this blog give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-77046850032037846862017-06-27T10:34:00.001-07:002017-06-28T07:51:43.317-07:00SCOM 2016 - Moving the Operations DatabaseThere may come a time where you require to move your Operational database from one machine to another. In my case I have outgrown my existing SQL server and need to move it to a server that has more headroom. This is going to be the first of two segments where I will cover the migration of the Operations, Data Warehouse and Reporting databases to an alternate SQL server.<br />
<br />
At a high level the process is fairly straight forward.<br />
<ol>
<li>Stop the Operations Manager services</li>
<li>Create the backup of the Ops Database</li>
<li>Restore the backup of the Ops Database on new hardware</li>
<li>Update the registry and configuration files</li>
<li>Update the Database tables</li>
<li>Update credentials in SQL</li>
<li>Start Operations Manager services</li>
</ol>
<div>
Depending on how many management servers you have and how large the database is this process could take a while and monitoring will be down during this time, so plan accordingly. Lets get started</div>
<div>
<br /></div>
<div>
<b>Stop the Operations Manager services:</b></div>
<div>
On <span style="color: yellow;">ALL </span>of your management servers go to services and stop the following:<br />
<ul>
<li>System Center Data Access</li>
<li>Microsoft Monitoring Agent</li>
<li>System Center Management Configuration</li>
</ul>
<b>Create the backup of the Ops Database:</b></div>
<div>
On the SQL server that currently hosts the Operations database log into SQL Server Management Studio with an administrator account. Expand the SQL Server then Databases. Right Click on OperationsManager (assuming you left the name default, select the appropriate db if not) then Tasks > Back Up...</div>
<div style="text-align: center;">
<b><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFknSNXYD4_SuSbK5Y5Lm8xIrlE303M4WPDKHJf7Znhh_goosNIve9UtNp0n929m4_-rm39jy7OZ6TkppzTRy-rkfKVyri31lKYpbA8vtrFRT2iYJ4rla2COhgWVQWSvo_HtRIBetmWl8/s1600/01.png" imageanchor="1"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFknSNXYD4_SuSbK5Y5Lm8xIrlE303M4WPDKHJf7Znhh_goosNIve9UtNp0n929m4_-rm39jy7OZ6TkppzTRy-rkfKVyri31lKYpbA8vtrFRT2iYJ4rla2COhgWVQWSvo_HtRIBetmWl8/s320/01.png" width="320" /></a></b></div>
<div>
<br />
The Back Up Database Wizard will start. On the General page, In the Database field verify that OperationsManager is selected. Otherwise grab the pulldown and choose the correct database. Backup type is Full, Backup component is Database, Back up to Disk and select an appropriate location to save to (I left it default).<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN9dkl8HfjDWbUdGn7jLON0RCVc5Fb7jlsAeizgloJZ0qH7GmNyuiuXp8-oDM59EX77muPeS-7HlrYIQRv0YFOnbXADXuqzIOFmwG57dYOMqAWlfRv2CU0KqVqW4R0CtwBH3dRTvAokYM/s1600/02.PNG" imageanchor="1"><img border="0" height="234" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN9dkl8HfjDWbUdGn7jLON0RCVc5Fb7jlsAeizgloJZ0qH7GmNyuiuXp8-oDM59EX77muPeS-7HlrYIQRv0YFOnbXADXuqzIOFmwG57dYOMqAWlfRv2CU0KqVqW4R0CtwBH3dRTvAokYM/s320/02.PNG" width="320" /></a></div>
<br />
On the Media Options Page Select Back up to new media set, and erase all existing backup sets. Give it a name and description. For Reliability select Verify backup when finished and Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWUGrUmAeFfV1rSMsEsNfg6l9FmUiiNThpfJ9PzPGbiBs_iUmnPHtYuCg0OGrjR02qTcqQu-aEPJ809-ln4_-ZI4TZtUR7GFtxfyt2f9GIAWZAwoZIobKYoDR2XQxDyzhlF6osC1BJ-No/s1600/03.PNG" imageanchor="1"><img border="0" height="234" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWUGrUmAeFfV1rSMsEsNfg6l9FmUiiNThpfJ9PzPGbiBs_iUmnPHtYuCg0OGrjR02qTcqQu-aEPJ809-ln4_-ZI4TZtUR7GFtxfyt2f9GIAWZAwoZIobKYoDR2XQxDyzhlF6osC1BJ-No/s320/03.PNG" width="320" /></a></div>
<br />
Depending on how large the database is this could take a while. You will get a success message when finished.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBrs04f7AScMiY6noReB3X-mqThPaWF10fcc1HtEcNPqaUaT83v-Tpibb-JdYrgt195mNKApvkcno7wvyjJAAB9MZR2QrUEjB5SOwdcZGjRxvO6P-GXHF6sveUkekhyw2apOFiKGELekI/s1600/04.PNG" imageanchor="1"><img border="0" height="67" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBrs04f7AScMiY6noReB3X-mqThPaWF10fcc1HtEcNPqaUaT83v-Tpibb-JdYrgt195mNKApvkcno7wvyjJAAB9MZR2QrUEjB5SOwdcZGjRxvO6P-GXHF6sveUkekhyw2apOFiKGELekI/s320/04.PNG" width="320" /></a></div>
<br />
<span style="color: yellow;">Tip: If you want to save some time in the following segment, repeat this step for OperationsManagerDW, SCOMReports and SCOMReportsTempDB. </span><br />
<br />
Copy all four of the .bak files you just created from the old SQL server to the new SQL server and you are ready for the next step.<br />
<br />
<b>Restore the backups onto new hardware:</b><br />
Once you have copied the .bak files to the new SQL server open SQL Server Management Studio (on the new machine) Right Click on Databases and Select Restore Database...<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBOmsgb_34u2XfMmnF88zVWdKJ9EK-5J6JGbGl8Ws7cBKmYSsYdrhVpxtKODNTVRZ_qMp2EOjPxeoQ0hrebCRhIq6G-rAjMAJglymDd5lQd6dVH9Jr45M4AAzArmvGZb8JTsewGn75lFc/s1600/05.png" imageanchor="1"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBOmsgb_34u2XfMmnF88zVWdKJ9EK-5J6JGbGl8Ws7cBKmYSsYdrhVpxtKODNTVRZ_qMp2EOjPxeoQ0hrebCRhIq6G-rAjMAJglymDd5lQd6dVH9Jr45M4AAzArmvGZb8JTsewGn75lFc/s320/05.png" width="320" /></a></div>
<br />
When the Restore Database Wizard starts you will need to select device since the destination server has no backup history information you will not be able to select Database. Click on the ... and navigate to the location of the OperationsManager.bak file created earlier. Since we are moving to a new server leave everything else default and Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh68ihIwDwx3L83dzIlhaAK9zWxg0jmJNQo_ZI_gN2pXgFM2XLoQom16qyoC1ntc8d0IFqQXCZcPboTdTLEfkBAHSA0ROR2azF-mRiupd0FgraoEG0W2Q9vVyGpg-08pBxAmoaB-BNwGfU/s1600/06.PNG" imageanchor="1"><img border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh68ihIwDwx3L83dzIlhaAK9zWxg0jmJNQo_ZI_gN2pXgFM2XLoQom16qyoC1ntc8d0IFqQXCZcPboTdTLEfkBAHSA0ROR2azF-mRiupd0FgraoEG0W2Q9vVyGpg-08pBxAmoaB-BNwGfU/s320/06.PNG" width="320" /></a></div>
<br />
Success is good<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcgHMnfgZ2aCmhxo8JFzprQQTWBwrSUv4D5MKZtxf5XTX5-oBbYmTi3yEBuyx-0AVgkEJfiCzdJvA_TvrDz27AAkPGWfYTskZYnCzP7LeHtf69TVwjtV8CCP-F8BcvzXipG66YdOinUgQ/s1600/07.PNG" imageanchor="1"><img border="0" height="135" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcgHMnfgZ2aCmhxo8JFzprQQTWBwrSUv4D5MKZtxf5XTX5-oBbYmTi3yEBuyx-0AVgkEJfiCzdJvA_TvrDz27AAkPGWfYTskZYnCzP7LeHtf69TVwjtV8CCP-F8BcvzXipG66YdOinUgQ/s320/07.PNG" width="320" /></a></div>
<br />
Verify that the database exists and it is running<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyrjB0hGUlYblNRrqawM8tjn1gigzJ2WOtcy50YoUjE1MewtH8lfRhHu5I64aFQxFnc-i6D7Yr88-b_ERFrL5wNW-hOgOxJNDKwkiEmLIaHAtZhcgpiKM1CDYhuDlP2qIMpMw-etJfFOg/s1600/08.PNG" imageanchor="1"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyrjB0hGUlYblNRrqawM8tjn1gigzJ2WOtcy50YoUjE1MewtH8lfRhHu5I64aFQxFnc-i6D7Yr88-b_ERFrL5wNW-hOgOxJNDKwkiEmLIaHAtZhcgpiKM1CDYhuDlP2qIMpMw-etJfFOg/s320/08.PNG" width="320" /></a></div>
<br />
<b>Update the Registry and Configuration Files:</b><br />
The following steps will need to be performed on <span style="color: yellow;">ALL</span> management servers to ensure they will be able to connect to the new SQL server successfully.<br />
<ol>
<li>Run regedit on the management servers from an elevated command prompt. Navigate to HKEY Local Machine > Software > Microsoft > System Center > 2010 > Common > Database. Change DatabaseServerName to the ServerName\InstanceName,PortNumber of the new SQL server. If you left it default, the PortNumber should be 1433.</li>
<li>Now navigate to HKEY Local Machine > Software > Microsoft > Microsoft Operations Manager > 3.0 > Setup. Change DatabaseServerName to the ServerName\InstanceName,PortNumber of the new SQL server.</li>
<li>Next go to %ProgramFiles%\System Center 2016\Operations Manager\Server\ Open the ConfigService.config file in notepad and change the following:</li>
<ol>
<li><Category Name="Cmdb"> Change ServerName value to ServerName\InstanceName of the new SQL server. ChangePortNumber to 1433</li>
<li><Category Name="ConfigStore"> Change ServerName value to ServerName\InstanceName of the new SQL server, Change PortNumber to 1433</li>
</ol>
</ol>
<div>
<b>Update the Database Tables:</b></div>
<div>
Now go back to SQL Server Management Studio on the new SQL Server. In Object Explorer expand Databases > OperationsManager > Tables</div>
<div>
<br /></div>
<div>
Right Click on dbo.MT_Microsoft$SystemCenter$ManagementGroup and Edit Top 200 Rows. Scroll to the right and find the column SQLServerName. Change it to the new SQL ServerName\Instance,PortNumber</div>
<div style="text-align: center;">
</div>
<div style="text-align: center;">
<div style="text-align: left;">
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU3oDGUb4eHW5NRw4IjN1So64WeKHUQps_eZ6-3pDEgsOREhjgwz_jX2JT6gtPZewomNw0TXq4nzSaYPN2G9GFWJ5FJeH-ym5RmjII3ORM3-oVAAh3vYqYD5ZFGlUjzi4OvtXISXpK3gM/s1600/09a.PNG" imageanchor="1"><img border="0" height="116" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgU3oDGUb4eHW5NRw4IjN1So64WeKHUQps_eZ6-3pDEgsOREhjgwz_jX2JT6gtPZewomNw0TXq4nzSaYPN2G9GFWJ5FJeH-ym5RmjII3ORM3-oVAAh3vYqYD5ZFGlUjzi4OvtXISXpK3gM/s320/09a.PNG" width="320" /></a></div>
Right Click on dbo.MT_Microsoft$SystemCenter$OpsMgrDB$AppMonitoring and Edit Top 200 Rows. Scroll to the right and find the column MainDatabaseServerName. Change it to the new SQL ServerName\Instance,PortNumber</div>
</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlvkN98J90-tZnU66XS7QMbIAmEM1_ng_niHwGFuzP9ocoZrukl99tq9yd6BfafJmuDTwUw7y0aH0q1au0jdZm8qKklKw-EzULz3u7Q7gjLVUKyRU8DB6tHTc9jGJD1QNlQ8P1R4ecrHo/s1600/10.PNG" imageanchor="1"></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUo3NJG5T4WCNk-tY5-4TqlS2Qk4AYx0oPrEbl2aVVcGpkz1HaCFVUGN4a3JQzuDjVxLmVlpqzFtMi4eP-5u6qm5wfEfehVPzwAvn-9kyyVEFBRhIfZjqUddxy7gwreeHKpuEWDFY3iuY/s1600/10a.PNG" imageanchor="1"><img border="0" height="101" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUo3NJG5T4WCNk-tY5-4TqlS2Qk4AYx0oPrEbl2aVVcGpkz1HaCFVUGN4a3JQzuDjVxLmVlpqzFtMi4eP-5u6qm5wfEfehVPzwAvn-9kyyVEFBRhIfZjqUddxy7gwreeHKpuEWDFY3iuY/s320/10a.PNG" width="320" /></a><br />
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Update Credentials in SQL:</b></div>
<div style="text-align: left;">
Collapse Databases and expand Security > Logins. Add the following accounts and associated user mappings (if the account did not exist previously, the restore should have set these permissions for you):</div>
</div>
<ol>
<li>SCOM Read</li>
<ol>
<li>apm_datareader</li>
<li>apm_datawriter</li>
<li>db_datareader</li>
<li>dwsynch_users</li>
</ol>
<li>SCOM Write</li>
<ol>
<li>db_datareader</li>
<li>db_datawriter</li>
<li>db_ddladmin</li>
<li>dbmodule_users</li>
</ol>
<li>SCOM DAS</li>
<ol>
<li>ConfigService</li>
<li>db_accessadmin</li>
<li>db_datareader</li>
<li>db_datawriter</li>
<li>db_ddladmin</li>
<li>db_securityadmin</li>
<li>sdk_users</li>
<li>sql_dependency_subscriber</li>
</ol>
</ol>
</div>
Run the following command on the new SQL instance were the OperationsManager db is now running<br />
<pre class="brush: csharp">sp_configure 'show advanced options', 1;
GO
RECONFIGURE;
GO
sp_configure 'clr enabled', 1;
GO
RECONFIGURE;
GO</pre>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEU78XdIBMSamwd5BLBzuslpa_WBuCl5wb_A-i0GDOxz1E-9O88dM2TKsvpWOtcy6iN92LPoYFI_o0XacCoUDWjIxZb_RoPYE4lXUU5nXa6_HiiVlnpc2mwH6JuU5jMHrw4Zg65_qGFmw/s1600/11.PNG" imageanchor="1"><img border="0" height="116" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEU78XdIBMSamwd5BLBzuslpa_WBuCl5wb_A-i0GDOxz1E-9O88dM2TKsvpWOtcy6iN92LPoYFI_o0XacCoUDWjIxZb_RoPYE4lXUU5nXa6_HiiVlnpc2mwH6JuU5jMHrw4Zg65_qGFmw/s320/11.PNG" width="320" /></a></div>
<br />
Then run the following SQL query<br />
<pre class="brush: csharp">SELECT is_broker_enabled FROM sys.databases WHERE name='OperationsManager'
</pre>
If the result of is_broker_enabled = 1 skip the following commands and go to the final step<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr3d8Z0EJBjv2RMiAvI_guI8a31TWVnQomEZUFuof8j4olSlC4S9L9a8t-T6ffJvbVoeLIKL8L9aAKd5iiVZYZkmy6PlYIoRIBCVuxOHlWOWSRz2FRSolhWvNHtqDTnvu8gCza5QdsWP0/s1600/12.PNG" imageanchor="1"><img border="0" height="104" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjr3d8Z0EJBjv2RMiAvI_guI8a31TWVnQomEZUFuof8j4olSlC4S9L9a8t-T6ffJvbVoeLIKL8L9aAKd5iiVZYZkmy6PlYIoRIBCVuxOHlWOWSRz2FRSolhWvNHtqDTnvu8gCza5QdsWP0/s320/12.PNG" width="320" /></a>
</div>
If the result of is_broker_enabled = 0 run the following commands<br />
<pre class="brush: csharp">ALTER DATABASE OperationsManager SET SINGLE_USER WITH ROLLBACK IMMEDIATE
ALTER DATABASE OperationsManager SET ENABLE_BROKER
ALTER DATABASE OperationsManager SET MULTI_USER
</pre>
Run the first command again and verify you are set to is_broker_enabled = 1, if not, rerun the commands<br />
<br />
<b>Start the Operations Manager Services:</b><br />
On <span style="color: yellow;">ALL </span>of your management servers go to services and start the following:<br />
<ul>
<li>System Center Data Access</li>
<li>Microsoft Monitoring Agent</li>
<li>System Center Management Configuration</li>
</ul>
<div>
Give it a minute for the Data Access service to initialize and open up the console. If everything was done properly you shouldn't get any errors. If you do then review the changes you made, specifically the areas where ServerName\Instance,PortNumber are involved. A typo in any of these places can prevent you from reconnecting to the database.</div>
<div>
<br /></div>
<div>
In the next segment we will move the Data Warehouse database</div>
<br />
<br />
More to come!<br />
<br />
If you like this blog give it a g+1<br />
<br />
<br />
<br />
<br />
Contributing Documentation:<br />
<a href="https://docs.microsoft.com/en-us/sql/relational-databases/backup-restore/create-a-full-database-backup-sql-server">Create a Full Database Backup</a><br />
<a href="https://docs.microsoft.com/en-us/sql/relational-databases/backup-restore/restore-a-database-backup-using-ssms">Restore a Database Backup</a><br />
<a href="https://docs.microsoft.com/en-us/system-center/scom/manage-sqlserver-communication#how-to-configure-the-operations-manager-operational-database">How to configure Operations Manager to communicate with SQL Server</a>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-30670049809541930762017-06-21T11:13:00.002-07:002017-06-22T09:48:38.084-07:00SCOM 2016 - Enable Proxy on all AgentsSo if you are setting up a new instance of SCOM 2016 and have started getting Agent proxy not enabled alerts. You are not alone.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimQf5pKHSaRJhUW11YvhIfiVTZkJ4wC05R84zsDs1w_-jJTIu9fs4t3nrDIRmgAtKhya8MeAkCNN98FS2BXkRfYwPQECvcXhLDo8Y6kMKq5Tcvzjep20ued6NfnSxQxE37AN0C22XWvXg/s1600/01.PNG" imageanchor="1"><img border="0" height="64" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimQf5pKHSaRJhUW11YvhIfiVTZkJ4wC05R84zsDs1w_-jJTIu9fs4t3nrDIRmgAtKhya8MeAkCNN98FS2BXkRfYwPQECvcXhLDo8Y6kMKq5Tcvzjep20ued6NfnSxQxE37AN0C22XWvXg/s320/01.PNG" width="320" /></a></div>
<br />
By default SCOM does not configure all new agents to act as proxy's for other agents. This is an odd thing that Microsoft for some reason has not corrected in the last four versions. Fortunately there is an easy way to fix this.<br />
<br />
Open up PowerShellISE on your SCOM server and run the following command:<br />
<pre class="brush: csharp">Get-SCOMAgent | where {$_.ProxyingEnabled.Value -eq $False}</pre>
<br />
This will give you a list of all the servers that do not have Proxy enabled in your environment. <br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmL2qkbPBR8RRhVlHULfnnNo5gYLUxBUErfsq0kfhm_f_Fy-mu97UWHds21YXXdGE3QhtXWQn_vhwwX-B8QCWfSNEGNmQm2uJg9JHUjQn23ogfxqbNDL45-LbCApkwbKo7wuK6DHBfZSo/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="48" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmL2qkbPBR8RRhVlHULfnnNo5gYLUxBUErfsq0kfhm_f_Fy-mu97UWHds21YXXdGE3QhtXWQn_vhwwX-B8QCWfSNEGNmQm2uJg9JHUjQn23ogfxqbNDL45-LbCApkwbKo7wuK6DHBfZSo/s320/02.PNG" width="320" /></a></div>
<br />
To enable existing agents to run as proxy run the following:<br />
<pre class="brush: csharp">Get-SCOMAgent | where {$_.ProxyingEnabled.Value -eq $False}|Enable-SCOMAgentProxy</pre>
<br />
If you run the first command again you should come back with no results. Change the <span style="color: red;">$False</span> to <span style="color: #38761d;">$True</span> and it will give you a list of all the agents that are Proxy Enabled (should be all of them).<br />
<br />
One final step. There is an easy way to enable proxy by default so you never have to set this again. <span style="color: yellow;">Be sure to add the FQDN of your management server on the second line</span>.<br />
<pre class="brush: csharp">add-pssnapin “Microsoft.EnterpriseManagement.OperationsManager.Client”
new-managementGroupConnection -ConnectionString:FQDN of your management server
set-location “OperationsManagerMonitoring::”
Set-DefaultSetting -Name HealthService\ProxyingEnabled -Value True</pre>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBwD-JockUkns1ysF2G2kHUIHI7mHio3whq42E47h_wpBa6AwAhIQqs3nJ9Nbd1p4SgPuQ6eeYiPZp8P6NJPL8yCXiCIso9EhXy-BBqmRiKxcjbWM1m7g8t-_vx3AAQAzhrcn-pQxdvaA/s1600/03.PNG" imageanchor="1"><img border="0" height="100" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBwD-JockUkns1ysF2G2kHUIHI7mHio3whq42E47h_wpBa6AwAhIQqs3nJ9Nbd1p4SgPuQ6eeYiPZp8P6NJPL8yCXiCIso9EhXy-BBqmRiKxcjbWM1m7g8t-_vx3AAQAzhrcn-pQxdvaA/s320/03.PNG" width="320" /></a></div>
<br />
Now every machine that gets added to the management group will be Proxy Enabled by default.
<br />
<br />
<br />
More to come!<br />
<br />
If you like this blog give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-67142453093172093332017-06-05T21:58:00.001-07:002017-06-05T22:02:18.972-07:00SQL 2014 SP2 - Configuring SSRS for SCOM 2016Writing this as an update to a post I did a while back <a href="http://jimmoldenhauer.blogspot.com/2012/11/sql-2008r2-configuring-ssrs-for-scom.html">SQL 2008 R2 - Configuring SSRS for SCOM 2012</a>. This post supersedes that one and should be used instead. There are a few changes in the process and it has been streamlined a bit.<br />
<br />
Open SQL Server Reporting Services Configuration Manager. You will be prompted to connect to a server. Click Connect<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFvusr3zypYgKqqkNZ2txg4dJ4Hf0z_oJCD_X7CgszkgmOLst3ZDtpsQmHB539TdQaL04UkTBsarPGr1ielxiO18iBRDcRlFawv1Yl7eKfKySiOAGuaPPBZ7I97bsXnRHAd_I_I0YlxCo/s1600/01.PNG" imageanchor="1"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFvusr3zypYgKqqkNZ2txg4dJ4Hf0z_oJCD_X7CgszkgmOLst3ZDtpsQmHB539TdQaL04UkTBsarPGr1ielxiO18iBRDcRlFawv1Yl7eKfKySiOAGuaPPBZ7I97bsXnRHAd_I_I0YlxCo/s320/01.PNG" width="320" /></a></div>
<br />
On the Report Server Status page make sure that the status is Started. If it is not, start it and Apply.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAu5Zp7wq96Qz9p5O0JGtwSUtoKOR6Op8XJ7E5cKe_plTdLpZCC2OK1rYqv0M1dEGZcJH0AwKDKmN7vTybrFbIJVVOJ6nK1kv0ReMnn2l6gnXWLnM-QMOc9gNL0GgjP1yX8jwvkfLoR2s/s1600/02.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAu5Zp7wq96Qz9p5O0JGtwSUtoKOR6Op8XJ7E5cKe_plTdLpZCC2OK1rYqv0M1dEGZcJH0AwKDKmN7vTybrFbIJVVOJ6nK1kv0ReMnn2l6gnXWLnM-QMOc9gNL0GgjP1yX8jwvkfLoR2s/s320/02.PNG" width="320" /></a></div>
<br />
On the Service Account page change the radio button to Use Another Account: Enter the SCOM Read account and password. Click Apply<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX_T81HHmwkRF8oLANbnq9fgC1ROkgBS6nBT0gswGJmPUFXHTSmvYv8QsB8yIBOu_5Pc5pdsEV7nkBYhm51f15Kza8ze7CemRUg8O8kzW_wJKBSTyFtZbR3zb30CgG5KSKc9PapdQ80YE/s1600/03.PNG" imageanchor="1"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX_T81HHmwkRF8oLANbnq9fgC1ROkgBS6nBT0gswGJmPUFXHTSmvYv8QsB8yIBOu_5Pc5pdsEV7nkBYhm51f15Kza8ze7CemRUg8O8kzW_wJKBSTyFtZbR3zb30CgG5KSKc9PapdQ80YE/s320/03.PNG" width="320" /></a></div>
<br />
In the Web Service URL page we can change the Virtual Directory (or leave it default). Click Apply. If you are successful the Report Server Web Services URLs link will become active.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjn5Zj6hkybMMjtqV62Yuj0aQzk0xukAcJiYpoyo6700MvV-qIBgMrPuDypYk4EmjfUQe3HeNHdJoDa8F-LAt-zscCl7MJFEMQEMCCzjTPgwkUKf6Wc2hb9lLezE2sgtmVNl9UzIur0HPA/s1600/3.5.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjn5Zj6hkybMMjtqV62Yuj0aQzk0xukAcJiYpoyo6700MvV-qIBgMrPuDypYk4EmjfUQe3HeNHdJoDa8F-LAt-zscCl7MJFEMQEMCCzjTPgwkUKf6Wc2hb9lLezE2sgtmVNl9UzIur0HPA/s320/3.5.PNG" width="320" /></a></div>
<br />
Click on the link and you should see something similar to this. If you don't, repeat the previous step.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEX2siHY68x2NQ7nQs1fL0DL50HzAwUdd0Sx8JPGy-XL9ey-zAazjr8f3Pduj4fx6GsdlWNzcwt7GDyTeMyPrccqDTm1iFPPUn0a76gzoV4Kk12EzA7U0FIAWhRlpgViuEkpOgDTVU9Q/s1600/3.6.PNG" imageanchor="1"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDEX2siHY68x2NQ7nQs1fL0DL50HzAwUdd0Sx8JPGy-XL9ey-zAazjr8f3Pduj4fx6GsdlWNzcwt7GDyTeMyPrccqDTm1iFPPUn0a76gzoV4Kk12EzA7U0FIAWhRlpgViuEkpOgDTVU9Q/s320/3.6.PNG" width="320" /></a></div>
<br />
For Database, Click Change Database.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzyWmaAEOsAMumTXsXnohYCurwGbQ83nt-YjAjbR9D5KUepPgMlTwnGyyssX2N0DIvJ2gQd4FT-XVl7ZikhaHsmBfyRMPmJgVqiHaAcFAWfIhn0IRgLdV95x3f7-GcfZhIs7f3zMG_qEc/s1600/04.PNG" imageanchor="1"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzyWmaAEOsAMumTXsXnohYCurwGbQ83nt-YjAjbR9D5KUepPgMlTwnGyyssX2N0DIvJ2gQd4FT-XVl7ZikhaHsmBfyRMPmJgVqiHaAcFAWfIhn0IRgLdV95x3f7-GcfZhIs7f3zMG_qEc/s320/04.PNG" width="320" /></a></div>
<br />
When the Report Server Database Configuration Wizard starts Select Create a new report server database and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_AFvU6WleBlyIjYRuri1Se3rv_IqaVj1HW9r-eqmx90iz_Anr9n4CghsXa8cMw_a_a4WbBSw4LiPrEIiIYQCB2vycACzAKyfYYFbu8grpsS_FAa4K7k1NrgB2I3fhZ4odamVH4zXILHw/s1600/05.PNG" imageanchor="1"><img border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_AFvU6WleBlyIjYRuri1Se3rv_IqaVj1HW9r-eqmx90iz_Anr9n4CghsXa8cMw_a_a4WbBSw4LiPrEIiIYQCB2vycACzAKyfYYFbu8grpsS_FAa4K7k1NrgB2I3fhZ4odamVH4zXILHw/s320/05.PNG" width="320" /></a></div>
<br />
Make sure your SQL server name is correct and Click Test Connection.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBatqhErdI5plUeLdfElTN_uHsl7ikQV1GqcQMA8kR8-pCu7tUYskeYfYVGPUhD9Vspkx2HMoZBgqXINKoVnemzPH5olW5Bnlur9FIz5dDepQCFXrrk6oZd9bD6KXdYde09IOA_jZLg1Q/s1600/06.PNG" imageanchor="1"><img border="0" height="233" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBatqhErdI5plUeLdfElTN_uHsl7ikQV1GqcQMA8kR8-pCu7tUYskeYfYVGPUhD9Vspkx2HMoZBgqXINKoVnemzPH5olW5Bnlur9FIz5dDepQCFXrrk6oZd9bD6KXdYde09IOA_jZLg1Q/s320/06.PNG" width="320" /></a></div>
<br />
Assuming you have the name correct and the user account has access it should be successful. Click OK and then Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCYz4XMyx2sIhtjFhlpCkCGGKrTa1b5sva0bzFaF6QaCSwNn-KHi66xvL-YrOaT4xOtlGQWc4xo-C_09e3x_04gjMnkhpNN9dItFqw8GqalREDWRVAJPN78utgkP7V37ZIMXHEKcrlQaE/s1600/07.PNG" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCYz4XMyx2sIhtjFhlpCkCGGKrTa1b5sva0bzFaF6QaCSwNn-KHi66xvL-YrOaT4xOtlGQWc4xo-C_09e3x_04gjMnkhpNN9dItFqw8GqalREDWRVAJPN78utgkP7V37ZIMXHEKcrlQaE/s400/07.PNG" /></a></div>
<br />
You can change the report name or leave it default but I recommend giving it a clear name so you know what it is later. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgimSlGbl2bHTDveiQLvxQF8RCSgycdVVq1U2m_oKvTg5NJ-GIrYyAHQVjxqLvuWpC8AewVw72LzRoxZC8KTy9VZae-kD4siivKmMkRASsk426oh5KDJR0yvDTLl5_VcsPX_xDUj6Q_yDg/s1600/08.PNG" imageanchor="1"><img border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgimSlGbl2bHTDveiQLvxQF8RCSgycdVVq1U2m_oKvTg5NJ-GIrYyAHQVjxqLvuWpC8AewVw72LzRoxZC8KTy9VZae-kD4siivKmMkRASsk426oh5KDJR0yvDTLl5_VcsPX_xDUj6Q_yDg/s320/08.PNG" width="320" /></a></div>
<br />
Again, use the SCOM read account and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1ZNsMNBR3CNnvimM0oy2bBz0azNDPpFkA7Bezg724gkpMJ5C_v-OQGuAknfBb7_WaVDiHTH4AlYTi5JOcYcXe7KieF5KGrQSE9x9KC1EV7hGHYWtIbeqXIGmZtpxJ81onLf_hX7ohL4Y/s1600/09.PNG" imageanchor="1"><img border="0" height="233" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1ZNsMNBR3CNnvimM0oy2bBz0azNDPpFkA7Bezg724gkpMJ5C_v-OQGuAknfBb7_WaVDiHTH4AlYTi5JOcYcXe7KieF5KGrQSE9x9KC1EV7hGHYWtIbeqXIGmZtpxJ81onLf_hX7ohL4Y/s320/09.PNG" width="320" /></a></div>
<br />
If you are happy with the settings Click Finish<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHh2YbpI2I6rHfiuyxpu0oSpCG4xPVuoCH5alIQ_x6a0Ki_dpVPpHTP4uOH50Y2WnBd4VlCRxGvyLEnNXDEO-g5nFWig1vn2Maw1ubY43sAKQ1NYnx6sfL2sLQOCYhZTWUclZe6ihLEAU/s1600/10.PNG" imageanchor="1"><img border="0" height="234" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHh2YbpI2I6rHfiuyxpu0oSpCG4xPVuoCH5alIQ_x6a0Ki_dpVPpHTP4uOH50Y2WnBd4VlCRxGvyLEnNXDEO-g5nFWig1vn2Maw1ubY43sAKQ1NYnx6sfL2sLQOCYhZTWUclZe6ihLEAU/s320/10.PNG" width="320" /></a></div>
<br />
Looks good! Click Finish<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjh5K4O6bbyu0Tx-TT5u2ezlBGj9UxCqL6odX6PT3p0dLGcnwCvrP3KOKXNYW-eqSWzpVR4oie49-ypGuP2MieFOUMXEnLaw5E6_ozaqbLG5usmoE2mt7gLx5wxv5Ul_RNgG4Vrjz8xGo/s1600/11.PNG" imageanchor="1"><img border="0" height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjh5K4O6bbyu0Tx-TT5u2ezlBGj9UxCqL6odX6PT3p0dLGcnwCvrP3KOKXNYW-eqSWzpVR4oie49-ypGuP2MieFOUMXEnLaw5E6_ozaqbLG5usmoE2mt7gLx5wxv5Ul_RNgG4Vrjz8xGo/s320/11.PNG" width="320" /></a></div>
<br />
Click Apply<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDavVI2fNJxGIfMHAk13lhpjKrcVsVdjPa1A8csy9FzltSqHbfRYipstXQQ9TSwcbzdyHsgNfx-caYfQy39GnyjnqFMvLocsJkQR_FKyxdFz4U67cbW-JiVPDgeYVb0CkCyE1Tz5c_ldw/s1600/12.PNG" imageanchor="1"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDavVI2fNJxGIfMHAk13lhpjKrcVsVdjPa1A8csy9FzltSqHbfRYipstXQQ9TSwcbzdyHsgNfx-caYfQy39GnyjnqFMvLocsJkQR_FKyxdFz4U67cbW-JiVPDgeYVb0CkCyE1Tz5c_ldw/s320/12.PNG" width="320" /></a></div>
<br />
For Report Manager URL you can change the virtual directory or leave it default. Click Apply.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqn_4RRWEep3JeQul1hj81Ek7PjpEWLr9G4B3SFvZZCwt61HAnt5NTWH3bQl2VtGxlJVrPu_8P3ZKjhaMwajCouKwuMc7qpIzVQSJ5UMxsfTjG2jycVVugnVH-cGWZzEGxHSJ6IDNEmA0/s1600/15.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqn_4RRWEep3JeQul1hj81Ek7PjpEWLr9G4B3SFvZZCwt61HAnt5NTWH3bQl2VtGxlJVrPu_8P3ZKjhaMwajCouKwuMc7qpIzVQSJ5UMxsfTjG2jycVVugnVH-cGWZzEGxHSJ6IDNEmA0/s320/15.PNG" width="320" /></a></div>
<br />
The URL link should become active. Click on it and you should see something similar to this.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9hckEluoMCUoNif2S8tPY-oFvPmA4exr4cTxzHcKdYehZfVadBTKj8qO2sj_N4SJ620FntB3kIuleylnq_xhBxwDvDi0vrlJVIiWBnxwuN33by9hI-5nPV3aLuQMOy0E-onaSxzqVbpY/s1600/15.1.PNG" imageanchor="1"><img border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9hckEluoMCUoNif2S8tPY-oFvPmA4exr4cTxzHcKdYehZfVadBTKj8qO2sj_N4SJ620FntB3kIuleylnq_xhBxwDvDi0vrlJVIiWBnxwuN33by9hI-5nPV3aLuQMOy0E-onaSxzqVbpY/s320/15.1.PNG" width="320" /></a></div>
<br />
For Email settings you can add your relay information or skip it if you are not ready to configure this yet. Click Apply<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIXKgPyFN1JYQcawld_EjCUpDEj1ZFN8eIZRUdrHGLX_pbah6NVeDuxFA8YG1pS4MjSEUJw3nm1LlYYg_XzoR5-eT6TGGIT1lTu4WkMJURHizruiPAwuAfCYO83UG8uS5fh8zE5PgRxBE/s1600/16.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIXKgPyFN1JYQcawld_EjCUpDEj1ZFN8eIZRUdrHGLX_pbah6NVeDuxFA8YG1pS4MjSEUJw3nm1LlYYg_XzoR5-eT6TGGIT1lTu4WkMJURHizruiPAwuAfCYO83UG8uS5fh8zE5PgRxBE/s320/16.PNG" width="320" /></a></div>
<br />
Execution account should also be SCOM read. Click Apply<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh5jE37rcbqlcmhKNfA2KVIqZ5k-a3J7aWLHBkNTlN4Nxz_S2hJlINY011qVoKgf0zRnkl4NldB0b0pZAL1ayMrKuWFDeVerIBAjpt-AC_v8EA-WTbhhSQOM8RosBGkLGnlYO257GSlAs/s1600/13.PNG" imageanchor="1"><img border="0" height="245" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhh5jE37rcbqlcmhKNfA2KVIqZ5k-a3J7aWLHBkNTlN4Nxz_S2hJlINY011qVoKgf0zRnkl4NldB0b0pZAL1ayMrKuWFDeVerIBAjpt-AC_v8EA-WTbhhSQOM8RosBGkLGnlYO257GSlAs/s320/13.PNG" width="320" /></a></div>
<br />
We aren't using encryption keys so you can skip that. On Scale-Out Deployment you need to make sure that the Status is Joined. If not you will need to double check the execution account information to make sure it is correct.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgInEEmq6WIlbd_M5ZpSSRFxUJGPBGiDkVCjGPenUrmTKYoavtICgj3XD5hR3tW4ioOTVBwKMbOBVIej_jEo_rgrxvDyux9Phr2He1kZ25dt_qHqWMR0IpMsaoazFNEpLeFg8GKaPjGYyE/s1600/17.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgInEEmq6WIlbd_M5ZpSSRFxUJGPBGiDkVCjGPenUrmTKYoavtICgj3XD5hR3tW4ioOTVBwKMbOBVIej_jEo_rgrxvDyux9Phr2He1kZ25dt_qHqWMR0IpMsaoazFNEpLeFg8GKaPjGYyE/s320/17.PNG" width="320" /></a></div>
<br />
More to come!<br />
<br />
If you like this blog give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-54704151323575335512017-05-26T10:12:00.001-07:002017-05-26T10:30:20.743-07:00SCOM 2016 - Setting Up External Email RelayThere will come times when you need to use an external email relay service to send notifications from SCOM. If you are working with a smaller company that uses a third party mail service for example. This is also very helpful if you are building SCOM in a lab and want to use a personal email, like Gmail to test notifications.<br />
<br />
There are a few things you will need before we begin:<br />
<ul>
<li>SMTP Username (usually your email address)</li>
<li>SMTP Password</li>
<li>SMTP server name<span style="color: yellow;">*</span> </li>
<li>SMTP port<span style="color: yellow;">*</span></li>
</ul>
<span style="color: yellow;">*I have added several common email providers to the end of this post that may help you out. If your provider isn't on the list please feel free to add it in the comments and I will update the list.</span><br />
<br />
<b>Create the Run As Account:</b><br />
First thing we need to do is setup a Run As account. This will be used later for SMTP authentication. Go to Administration > Run As Configuration > Accounts and Create Run As Account. When the Create Run As Account Wizard starts Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieRTFLYsWKymk0Xxk2jtxSS1HCeAIRCRim38dlRi3Mqv1kZafOZM5dCHLRDchflo9a6UK8oFPThosuriwMP1CAtIF4wCRv2qIFKujHeelwoEnELjru9_m6UoO3zSw0qaQWoDaMsJPkWdo/s1600/01.PNG" imageanchor="1"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieRTFLYsWKymk0Xxk2jtxSS1HCeAIRCRim38dlRi3Mqv1kZafOZM5dCHLRDchflo9a6UK8oFPThosuriwMP1CAtIF4wCRv2qIFKujHeelwoEnELjru9_m6UoO3zSw0qaQWoDaMsJPkWdo/s320/01.PNG" width="320" /></a></div>
<br />
Set Run As account type to Simple Authentication. Display name should be easy to remember and recognize. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhELvym7g6JWsKm5oSXob3YAFiaSvEeHfC8RFVl0GfQT08f2ZlyigIgwBCTDyBfZe6j0JaNBlDR5HqBXy7uVw8vce3Drlao5gxTI4IVwQRatvlxu4IDpZpXERdRJ5Nhdkq2FX9Pov7_Irk/s1600/02.PNG" imageanchor="1"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhELvym7g6JWsKm5oSXob3YAFiaSvEeHfC8RFVl0GfQT08f2ZlyigIgwBCTDyBfZe6j0JaNBlDR5HqBXy7uVw8vce3Drlao5gxTI4IVwQRatvlxu4IDpZpXERdRJ5Nhdkq2FX9Pov7_Irk/s320/02.PNG" width="320" /></a></div>
<br />
For Credentials you would enter the account name and password you use to log into your mail provider. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfAwKLPVzfAmVlc1RPl2ZdJrLqdmcqdn84NBngRAUGMkC2CO8HxnUNJd4N2hMz5nPAKwsrK_lmRD9JWVS_dmjREwd8vcNZAd1JBdxlbYwrXDXh0SQU8GR9uMs0id80FSQaSm_SWlCB5To/s1600/03.PNG" imageanchor="1"><img border="0" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfAwKLPVzfAmVlc1RPl2ZdJrLqdmcqdn84NBngRAUGMkC2CO8HxnUNJd4N2hMz5nPAKwsrK_lmRD9JWVS_dmjREwd8vcNZAd1JBdxlbYwrXDXh0SQU8GR9uMs0id80FSQaSm_SWlCB5To/s320/03.PNG" width="320" /></a></div>
<br />
More Secure, Click Create<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSlkpN8p9xxCvqCQzOMMzVlFhhvavcGpQS4-xUKq15EX8sOlaVVCjjfYW-zF_2_zUILtl9woaN6ei5djuf_TI66c5sXCX2U9wivQ5z7OhxZW8LeUQX8b1iFUzcq8o7nBQ_olZSk-E-KtQ/s1600/04.PNG" imageanchor="1"><img border="0" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSlkpN8p9xxCvqCQzOMMzVlFhhvavcGpQS4-xUKq15EX8sOlaVVCjjfYW-zF_2_zUILtl9woaN6ei5djuf_TI66c5sXCX2U9wivQ5z7OhxZW8LeUQX8b1iFUzcq8o7nBQ_olZSk-E-KtQ/s320/04.PNG" width="320" /></a></div>
<br />
Click Close<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgF5i1QZqAyBetnUXNFbs-IMZVhZTaIqOLGebpdCcFUa32i5pwQueg337t3Z26LiDoh94LZ0jdIHs2v2KuFESNw7JIRuN_QUQXB1IG9bITkQ1opKDK-SVjFVMkNc1TdmiEtgTldG0r2VXw/s1600/05.PNG" imageanchor="1"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgF5i1QZqAyBetnUXNFbs-IMZVhZTaIqOLGebpdCcFUa32i5pwQueg337t3Z26LiDoh94LZ0jdIHs2v2KuFESNw7JIRuN_QUQXB1IG9bITkQ1opKDK-SVjFVMkNc1TdmiEtgTldG0r2VXw/s320/05.PNG" width="320" /></a></div>
<br />
Once it is created Right Click on it and select Properties. Go to the Distribution tab and Click Add<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqRnM8vQh0j0vPi6l3Y-EZU6OAOQ4hAlANy_5GIAET2jXTota-LCIJPSyop4iz9NG-bEBUczS9M4rSpgvyVJVRzP5saknSw6DsjnrjK08pLvSSFqfaJ5uwBinhpiZCqsk9ANNIrExFUUA/s1600/06.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqRnM8vQh0j0vPi6l3Y-EZU6OAOQ4hAlANy_5GIAET2jXTota-LCIJPSyop4iz9NG-bEBUczS9M4rSpgvyVJVRzP5saknSw6DsjnrjK08pLvSSFqfaJ5uwBinhpiZCqsk9ANNIrExFUUA/s320/06.PNG" width="312" /></a></div>
<br />
Under Options select Search by resource pool name and Click Search. Select Notification Resource Pool and Click Add. Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPpAQR3M65ALlWMVP8AuoXel1Dm0JD5wbeUkUYVPlhHYtfHcMRXcb5tzat391QmdD0Zp3n7nm-p4z8oh9w-zIqjjdfSc9tdaJGDn5IzShCYYnlNogiS_VX9eFuesGNSEFYcYTtrBmtAa8/s1600/07.PNG" imageanchor="1"><img border="0" height="310" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPpAQR3M65ALlWMVP8AuoXel1Dm0JD5wbeUkUYVPlhHYtfHcMRXcb5tzat391QmdD0Zp3n7nm-p4z8oh9w-zIqjjdfSc9tdaJGDn5IzShCYYnlNogiS_VX9eFuesGNSEFYcYTtrBmtAa8/s320/07.PNG" width="320" /></a></div>
<br />
You should see Notification Resource Pool in the list. Click Apply
<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUaxIJtQ5FkU8MwE-T2UnBbBLVjnKKSkOHo8oGLcxPQdEQaExPnYUNBQWZlShA-ZJxpBDEYJXL8pmx4dcKOmFiiRL7UA8MNbCu4FdX97N2h55oWwT2Fm2hoq9ou6MNitD2oyoIrAc185s/s1600/08.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUaxIJtQ5FkU8MwE-T2UnBbBLVjnKKSkOHo8oGLcxPQdEQaExPnYUNBQWZlShA-ZJxpBDEYJXL8pmx4dcKOmFiiRL7UA8MNbCu4FdX97N2h55oWwT2Fm2hoq9ou6MNitD2oyoIrAc185s/s320/08.PNG" width="313" /></a></div>
<br />
<b>Create Run As Profile:</b><br />
Next thing we need to do is setup the Run As Profile. In Administration > Run As Configuration > Profiles select Create Run as Profile... Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2Qh4zEdOjqNj_Ai3Tz0s4PzjDjyO0TXYc201m1XFUvrmCHLwWwEvHJJNpfdSMuL8-0ADuNdyH8Rd6PvK7TauNK1K18pN0huXT3vYcgJJdWCBQzjYaubRNGXtRJLvsQmoqVytrmRfitC0/s1600/09.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2Qh4zEdOjqNj_Ai3Tz0s4PzjDjyO0TXYc201m1XFUvrmCHLwWwEvHJJNpfdSMuL8-0ADuNdyH8Rd6PvK7TauNK1K18pN0huXT3vYcgJJdWCBQzjYaubRNGXtRJLvsQmoqVytrmRfitC0/s320/09.PNG" width="320" /></a></div>
<br />
Give it a nice clear name, select or create a management pack and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3xQ_0FaFB8pOMYTqK8uKa00a8thL_hRmAz8teeKhkNsA7myJ8b-0xOqqruG0QxY9V6ZqFmMTmHshV8ktb4sF9nu2nqa7gxUke5MMQu8hwtsLKE8gwboiAwLANnJlWj_3sWihrZ2Po0aA/s1600/10.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj3xQ_0FaFB8pOMYTqK8uKa00a8thL_hRmAz8teeKhkNsA7myJ8b-0xOqqruG0QxY9V6ZqFmMTmHshV8ktb4sF9nu2nqa7gxUke5MMQu8hwtsLKE8gwboiAwLANnJlWj_3sWihrZ2Po0aA/s320/10.PNG" width="320" /></a></div>
<br />
For Run As Accounts Click Add<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2IDXmNtXAu5EJ5m3zyL4SxhhePPouWWqle-xylhrvlMWfNBNqdeCkPuu_XtD7wHgWi_OEo8eN0QuZQVMSnZXre_H9Gzk-Clqu_9lHiYomdS6cn1GZXxa6jO3v8BzilYy6EGyjwB4byzk/s1600/11.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2IDXmNtXAu5EJ5m3zyL4SxhhePPouWWqle-xylhrvlMWfNBNqdeCkPuu_XtD7wHgWi_OEo8eN0QuZQVMSnZXre_H9Gzk-Clqu_9lHiYomdS6cn1GZXxa6jO3v8BzilYy6EGyjwB4byzk/s320/11.PNG" width="320" /></a></div>
<br />
Choose the Run As account you just created and Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAb8_l4p-5MdT44-DQ1_SBTjkaRtdxL3ejFHK2icxC31v0xG87GVHpSdcuPklt6Wo6s_fd3pweAA4UBxsfX4nOR4Xu740hmJKFoL-g3bS2ArzJNNCp8_OdKsjVapFL2St4MJ0SnLVaB-8/s1600/12.PNG" imageanchor="1"><img border="0" height="183" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAb8_l4p-5MdT44-DQ1_SBTjkaRtdxL3ejFHK2icxC31v0xG87GVHpSdcuPklt6Wo6s_fd3pweAA4UBxsfX4nOR4Xu740hmJKFoL-g3bS2ArzJNNCp8_OdKsjVapFL2St4MJ0SnLVaB-8/s320/12.PNG" width="320" /></a></div>
<br />
All good, click Create<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-H1aYjlQ2Jesv-ZcdJFxiKxXAwDj42Vi9eYE9to_UOH1i52Cxelqaw79vzwUVqVR1T-X3XSVLanD0bD8VSZGIIWP54dsKf1Rn3sh0_05GbEMpNqxcmMqW9z5kW6SkC3R-4DSLBZ2cq0Y/s1600/13.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-H1aYjlQ2Jesv-ZcdJFxiKxXAwDj42Vi9eYE9to_UOH1i52Cxelqaw79vzwUVqVR1T-X3XSVLanD0bD8VSZGIIWP54dsKf1Rn3sh0_05GbEMpNqxcmMqW9z5kW6SkC3R-4DSLBZ2cq0Y/s320/13.PNG" width="320" /></a></div>
<br />
This isn't a Run As account we will be using internally so you can disregard this. Click Close<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGgbhavNgID-DuWCj_Dh3dfgUwSpx7dzOECwwKfFdSUmsZkK7qnnY0mXVm1ya4td1TUrsIFMQLxemQVefVl_Q7k03oWcp-jc9DDI5e6emNhFOAwnWQMX_ZDrEYj7YSQjQGjV69PN1y-iQ/s1600/14.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGgbhavNgID-DuWCj_Dh3dfgUwSpx7dzOECwwKfFdSUmsZkK7qnnY0mXVm1ya4td1TUrsIFMQLxemQVefVl_Q7k03oWcp-jc9DDI5e6emNhFOAwnWQMX_ZDrEYj7YSQjQGjV69PN1y-iQ/s320/14.PNG" width="320" /></a></div>
<br />
<b>Create SMTP Channel:</b><br />
Next thing we need is to setup the SMTP Channel. In Administration > Notifications > Channels Select New > E-Mail (SMTP)... Give it a good clear name and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDOrxxJLdxe2io1OvMX2BrfF-cUtNGLUFlkSOSL59Qh8nHjQOJZkvCx7Dlj7FDXL7ckIWK7MuL_24T9Ns1R3XVGt6qcRYKlEB9byc8PtNoCtas4W7FPk89BV3hGgsyOyX20gVWR0ubAa4/s1600/15.PNG" imageanchor="1"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDOrxxJLdxe2io1OvMX2BrfF-cUtNGLUFlkSOSL59Qh8nHjQOJZkvCx7Dlj7FDXL7ckIWK7MuL_24T9Ns1R3XVGt6qcRYKlEB9byc8PtNoCtas4W7FPk89BV3hGgsyOyX20gVWR0ubAa4/s320/15.PNG" width="320" /></a></div>
<br />
In Settings Click Add<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfk-3pbasOsNpWjS-JM-SDsAMudL1pGD0hlZiJYIuIG4x3Bj5kGDWTzqWD-QkRIe5eos8wwUrMuwU-JHjCYT4hWcBerlwfYMxl7LngmJPwXiUhCmyfebZuIEOd3flor61jSAEdn-6AjQ/s1600/16.PNG" imageanchor="1"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfk-3pbasOsNpWjS-JM-SDsAMudL1pGD0hlZiJYIuIG4x3Bj5kGDWTzqWD-QkRIe5eos8wwUrMuwU-JHjCYT4hWcBerlwfYMxl7LngmJPwXiUhCmyfebZuIEOd3flor61jSAEdn-6AjQ/s320/16.PNG" width="320" /></a></div>
<br />
In SMTP server (FQDN): enter the relay server information. Port number should be what was provided by your email service. Authentication method: External Email Authentication and Run as profile of external email account: should be the Run As account created earlier. Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhc_MecakeizZ2vZ4Y2R3LXRxDmQBeCL1Abi0rxGW2HhTLfTP__PcHDAUTbLWxGg61DBJjI4Ex0gGQ8aA8WLFN58SSGx5df0yrX6BumNzgQpDxUPD0NlbhQV3QatoPPJzRN4KcDWm5euJE/s1600/17.PNG" imageanchor="1"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhc_MecakeizZ2vZ4Y2R3LXRxDmQBeCL1Abi0rxGW2HhTLfTP__PcHDAUTbLWxGg61DBJjI4Ex0gGQ8aA8WLFN58SSGx5df0yrX6BumNzgQpDxUPD0NlbhQV3QatoPPJzRN4KcDWm5euJE/s320/17.PNG" width="320" /></a></div>
<br />
You should see the SMTP server in the list. Enter a return address and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSdSPEeEUoXdZ0gEZFICqmYd_P93esJEpceCKHRcV9PwErpXqXk6oMP651E6Ktq7iEB6EUtwIoldSZU4zniga1L6cQTHhmWL-ulKotKJMixPBJt-9vYBLCSGOwNOEu8mVH8ic434E5J7M/s1600/18.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSdSPEeEUoXdZ0gEZFICqmYd_P93esJEpceCKHRcV9PwErpXqXk6oMP651E6Ktq7iEB6EUtwIoldSZU4zniga1L6cQTHhmWL-ulKotKJMixPBJt-9vYBLCSGOwNOEu8mVH8ic434E5J7M/s320/18.PNG" width="320" /></a></div>
<div style="text-align: center;">
</div>
<br />
Click Finish<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwLB98l59DhDGoeyBWq7V8-k6FOjBhkWRbN-1fbagPNwdlQ35Abn-AZV-U6J-UPGcloW5g6sshh0yWIAEEr7UH_Lxo0yBqnjUO5mCftzYGRSLmRQR-tGu2-GM8GOqOqskD28duqKqz7C4/s1600/19.PNG" imageanchor="1"><img border="0" height="270" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhwLB98l59DhDGoeyBWq7V8-k6FOjBhkWRbN-1fbagPNwdlQ35Abn-AZV-U6J-UPGcloW5g6sshh0yWIAEEr7UH_Lxo0yBqnjUO5mCftzYGRSLmRQR-tGu2-GM8GOqOqskD28duqKqz7C4/s320/19.PNG" width="320" /></a></div>
<br />
From here you can setup the Subscribers and Subscriptions normally.<br />
<br />
Next thing to do is to test it. Generate an alert and see if everything processes correctly. If it does that's great!<br />
<br />
Now for Gmail (and probably others) there will be an additional step you need to do. After the alert was created and SCOM attempted to send the email Gmail will have blocked it. You probably got an email right after similar to this.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIj65iusu0mYhHWJUtyLRce8v8Ja6ACDK4VOqt8h2uKlfhmoof8VGs1edtVWj7LGLzvN5ZHwmN3b-6RMH4GBinWs4WhxENuF5aLWX49X4IsDCKzHvK-SV7Py7iwVv-QMYrbKjrv6b0K3c/s1600/20.PNG" imageanchor="1"><img border="0" height="297" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIj65iusu0mYhHWJUtyLRce8v8Ja6ACDK4VOqt8h2uKlfhmoof8VGs1edtVWj7LGLzvN5ZHwmN3b-6RMH4GBinWs4WhxENuF5aLWX49X4IsDCKzHvK-SV7Py7iwVv-QMYrbKjrv6b0K3c/s320/20.PNG" width="320" /></a></div>
The wonderful people at Gmail are trying to protect your security and in doing so have blocked third party relay that is unrecognized. To allow this click the allowing access to less secure apps link.<br />
<br />
Turn Allow less secure apps to On<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0msyz_t1daMlUG31eKoWcNnjX_mNEFerKCmCrNIU3k6ZcFmxGSs1y0w281S8bY4ZeEOcM4-r54NAksmnAFQFrxV9T3WGcTS2l2sRCbrBJ_RbPs3ynVEoJkpaaYejvksgSAdstxrIfCAs/s1600/21.PNG" imageanchor="1"><img border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0msyz_t1daMlUG31eKoWcNnjX_mNEFerKCmCrNIU3k6ZcFmxGSs1y0w281S8bY4ZeEOcM4-r54NAksmnAFQFrxV9T3WGcTS2l2sRCbrBJ_RbPs3ynVEoJkpaaYejvksgSAdstxrIfCAs/s320/21.PNG" width="320" /></a></div>
<br />
Close the alerts you have in SCOM and you should start seeing the mail flow.<br />
<b><br /></b>
<b>Common Mail Providers:</b><br />
Here is a list of a few providers I found information for.<br />
<br />
Google (Gmail):<br />
Gmail SMTP Server Name: <span style="color: yellow;">smtp.gmail.com</span><br />
Gmail SMTP port: <span style="color: yellow;">587</span><br />
<br />
Hotmail:<br />
Hotmail SMTP Server Name: <span style="color: yellow;">smtp.live.com</span><br />
Hotmail SMTP port: <span style="color: yellow;">25</span><br />
<br />
Yahoo:<br />
Yahoo SMTP Server Name: <span style="color: yellow;">smtp.mail.yahoo.com</span><br />
Yahoo SMTP port: <span style="color: yellow;">587</span><br />
<br />
Cox:<br />
Cox SMTP Server Name: <span style="color: yellow;">smtp.cox.net</span><br />
Cox SMTP port: <span style="color: yellow;">587</span><br />
<br />
Comcast:<br />
Comcast SMTP Server Name: <span style="color: yellow;">smtp.comcast.net</span><br />
Comcast SMTP port: <span style="color: yellow;">587</span><br />
<br />
Microsoft (O365):<br />
O365 SMTP Server Name: <span style="color: yellow;">smtp.office365.com</span><br />
O365 SMTP port: <span style="color: yellow;">587</span><br />
<br />
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-38362365213779801102017-05-24T14:57:00.001-07:002017-05-26T10:42:45.224-07:00SCORCH 2016 - Protecting Active Directory Security GroupsSo last year I did a fun segment for SCOM on <a href="http://jimmoldenhauer.blogspot.com/2016/06/scom-2012-r2-how-to-monitor-domain.html" target="">How to Monitor Domain Administrators Group</a> to detect unauthorized modifications to the Domain Admins, Schema Admins and Enterprise Admins groups in Active Directory. Now that we have SCORCH setup in our lab its time to take it to the next level. Once SCOM detects the change we can use SCORCH to disable the offending account, remove it from the security group and make a notation as to why the action was taken.<br />
<br />
<b><u>Modifying the Rule:</u></b><br />
First thing we need to do is make a change to the rule we created in SCOM so SCORCH knows what to look for. In Authoring > Rules do a search for the rule you created. Right Click and select Properties. When the Properties window opens go to the Configuration Tab. Under Responses select Edit<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPL4X2n0ZvTbK50x5vtUpJxi_HNnxI0cL2NV30YH1Abo3wiYGo84pwKdIZpWelSvjOPFwOYvWSJLJEg9toq2SVTaWK5xepmphE50Htmu9U1J71BLtwDxTYO7mm-JI62pxJltu1kEfIq5A/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPL4X2n0ZvTbK50x5vtUpJxi_HNnxI0cL2NV30YH1Abo3wiYGo84pwKdIZpWelSvjOPFwOYvWSJLJEg9toq2SVTaWK5xepmphE50Htmu9U1J71BLtwDxTYO7mm-JI62pxJltu1kEfIq5A/s320/01.PNG" width="305" /></a></div>
<br />
In the Alert - Properties Click Custom alert fields<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinj484b21DQHm7qLAuB-2U0jfUtUWf3Nqd87yEhiqy-RbvynxB5_DAX_m0wt0jRG3ob2aEXupQKhALlSGVX-LqWU9VJQkyfZviN2B5VH8Vl-gV9eXBChKDdDarCmQEQrQ_HkdE0Aet70w/s1600/02.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinj484b21DQHm7qLAuB-2U0jfUtUWf3Nqd87yEhiqy-RbvynxB5_DAX_m0wt0jRG3ob2aEXupQKhALlSGVX-LqWU9VJQkyfZviN2B5VH8Vl-gV9eXBChKDdDarCmQEQrQ_HkdE0Aet70w/s320/02.PNG" width="311" /></a></div>
<br />
In Custom Alert Fields add DAModAdd to Custom field 1 and $Data/Params/Param[1]$ (the distinguished name of the user who was added to the group) to Custom field 2. This will tell SCORCH what and who to look for so it will kick off the Runbook when this alert is generated. Click OK to everything and you are done with SCOM for the moment.<br />
<div style="text-align: center;">
</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7kzWTP3IDktLUgDgZLRfqNqluAZjQijGILh3cOkuIRUIpiaGAlwpLfrWFDuJNi2hfUAs9x1C091NCcVRUWFfHh4e8cRLNlmra6SXosj9Ue9XpLqva2Mikfa7zTA5MA7C4pB9EAmb6Chk/s1600/03.PNG" imageanchor="1"><img border="0" height="205" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7kzWTP3IDktLUgDgZLRfqNqluAZjQijGILh3cOkuIRUIpiaGAlwpLfrWFDuJNi2hfUAs9x1C091NCcVRUWFfHh4e8cRLNlmra6SXosj9Ue9XpLqva2Mikfa7zTA5MA7C4pB9EAmb6Chk/s320/03.PNG" width="320" /></a></div>
<br />
<b><u>Creating the Runbook:</u></b><br />
This is what the Runbook looks like:<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWIgzNaymOD4UabvgHB_ZLe8AXiU24-geVa0VVyuUn-nei6p8E91llEP4-JERb592BgZ3YReIiVGZtF-R2boMv3i280eQdgGQeFkSDDZ_Z4dSsZzBm9CnJE0npcmDvn8S2pDmPz3Dodcs/s1600/05.PNG" imageanchor="1"><img border="0" height="75" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWIgzNaymOD4UabvgHB_ZLe8AXiU24-geVa0VVyuUn-nei6p8E91llEP4-JERb592BgZ3YReIiVGZtF-R2boMv3i280eQdgGQeFkSDDZ_Z4dSsZzBm9CnJE0npcmDvn8S2pDmPz3Dodcs/s320/05.PNG" width="320" /></a></div>
We are monitoring SCOM for a specific alert. It then pulls the user data from the alert and disables the account. Then we make a notation in the account as to why it was disabled. It is removed from the Domain Admins group and we then update the alert in SCOM. I also used two variables which I will get to in a moment.<br />
<br />
<b>Monitor Alert:</b><br />
We are looking for DAModAdd from SCOM so we want CustomField1 Equals DAModAdd<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtSNiR1w4HFONvQqn_6xExkpuwFaJONPAiB58mBQQ7uEkWULuTP_teriMKAzs554c8RYArrz8rTYT2Hd0JghF40ia2V3Sl67Db9lTAVlCy1Jw-wX5Rj_D5iKJR-d-Z9o7N15L0Q3FPJMw/s1600/06.PNG" imageanchor="1"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtSNiR1w4HFONvQqn_6xExkpuwFaJONPAiB58mBQQ7uEkWULuTP_teriMKAzs554c8RYArrz8rTYT2Hd0JghF40ia2V3Sl67Db9lTAVlCy1Jw-wX5Rj_D5iKJR-d-Z9o7N15L0Q3FPJMw/s320/06.PNG" width="320" /></a></div>
<br />
<b>Disable User:</b><br />
For Disable User you need the distinguished name which we setup in the parameters of the SCOM Alert earlier.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf4_Q0f4qhQV_cplYJd_JfKHIRUI7h7I9us0SRxRQCH-IKlN3cVpkZ0A6sRSjuJD_3DF8rhC1UzDZIU2To0SvjOZ63d9cgPzKeEkmC74CLIvfmShI_-a7XfpOYPjplWomEP60d_vjQ6kI/s1600/07.PNG" imageanchor="1"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf4_Q0f4qhQV_cplYJd_JfKHIRUI7h7I9us0SRxRQCH-IKlN3cVpkZ0A6sRSjuJD_3DF8rhC1UzDZIU2To0SvjOZ63d9cgPzKeEkmC74CLIvfmShI_-a7XfpOYPjplWomEP60d_vjQ6kI/s320/07.PNG" width="320" /></a></div>
<br />
<b>Update User Properties:</b><br />
The same custom field used again to identify the user to change. Then added Notes from Optional Properties. In the notes field I put (you can put whatever you like):<br />
<div style="text-align: center;">
Unauthorized Group Access! User disabled by Orchestrator {<span style="color: blue;"><u>Date</u></span>}</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVj-92-PSVaIvbO3LQQaKLXet6tN122kdGKOcinOnAfHCArWYRuYC0OxCabESGV2shkzAtKU7jW1LJKn6QrfpmqiSA6jAF32rseC5RnmwzavdDl69Ax2XGtJHbYfLNsq9aFiKEeuvTD4s/s1600/08.PNG" imageanchor="1"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVj-92-PSVaIvbO3LQQaKLXet6tN122kdGKOcinOnAfHCArWYRuYC0OxCabESGV2shkzAtKU7jW1LJKn6QrfpmqiSA6jAF32rseC5RnmwzavdDl69Ax2XGtJHbYfLNsq9aFiKEeuvTD4s/s320/08.PNG" width="320" /></a></div>
<br />
Where date is the first variable I added. I invoked the NOW() wildcard in order to date stamp the account so you could tell when the account was disabled.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRki_qNWa-NIr6kLdNYuR8yB6v5qmCcXwHITK3sO3TEZo_0wm_2Ds29dvTvBeoE-A5-H6jJ-zooqWbafYmMbt9ZFeI8QqfUVf2Rs4IAN1177W2GKPrG6A890SMx6W4QKkAMu3NK-ay_rk/s1600/08a.PNG" imageanchor="1"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRki_qNWa-NIr6kLdNYuR8yB6v5qmCcXwHITK3sO3TEZo_0wm_2Ds29dvTvBeoE-A5-H6jJ-zooqWbafYmMbt9ZFeI8QqfUVf2Rs4IAN1177W2GKPrG6A890SMx6W4QKkAMu3NK-ay_rk/s320/08a.PNG" width="320" /></a></div>
<br />
<b>Remove User from Group:</b><br />
Now we pull the user out of Domain Admins.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNod9WQYh1zkIHa9d1fzf-AyLSf8snNMZE_EDdYgoHmGIiVarifsNp6-uH2xzwcq48eeu3C5UFKlDkSZ-g7xYmBkY-tYfts9zUc_CNLCuugWnoUzwRQf-dooljz0HAyyJn9Ak4pc5YcpM/s1600/09.PNG" imageanchor="1"><img border="0" height="220" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNod9WQYh1zkIHa9d1fzf-AyLSf8snNMZE_EDdYgoHmGIiVarifsNp6-uH2xzwcq48eeu3C5UFKlDkSZ-g7xYmBkY-tYfts9zUc_CNLCuugWnoUzwRQf-dooljz0HAyyJn9Ak4pc5YcpM/s320/09.PNG" width="320" /></a></div>
<br />
The second variable I created was {<span style="color: blue;"><u>Domain Admins</u></span>} as I plan to use it in later Runbooks.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9iciahXH-arYrmzEmW8Xs5PnV6usFAUukPaJMsgq9GDaLHS2twVusbFsK-dsMCk1WXzfqC5YVOQK-GmSLyzbYsE0DwTmOVrbSfl9ALL_I3vFOlNqss3ZzzHNM6bEx3hFltWa6SSgVbk4/s1600/09a.PNG" imageanchor="1"><img border="0" height="218" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9iciahXH-arYrmzEmW8Xs5PnV6usFAUukPaJMsgq9GDaLHS2twVusbFsK-dsMCk1WXzfqC5YVOQK-GmSLyzbYsE0DwTmOVrbSfl9ALL_I3vFOlNqss3ZzzHNM6bEx3hFltWa6SSgVbk4/s320/09a.PNG" width="320" /></a></div>
<br />
<span style="color: yellow;">Note: At the time of this writing there is a bug in the Active Directory Integration Pack. Administrators are reporting an error when trying to add or remove a user from an AD Group. The error "unknown exception caught" shows up in Runbook Tester and fails at this step. The only known fix that I was able to find is to either roll back to a previous version of the ADIP or use the PowerShell IP with the following syntax and variables described earlier:</span><br />
<br />
Remove-ADGroupMember -Identity "{Domain Admins}" -Members "{CustomField2 from "Monitor Alert"}" -Confirm:$False<br />
<br />
<span style="color: yellow;">If someone finds a fix for this please feel free to share it in the comments. </span><br />
<br />
<b>Update Alert:</b><br />
Finally we update the SCOM alert. Some people like to just close the alert at this point but I would rather change the Resolution State and close it myself. I created a custom state called User Disabled. You can refer to <a href="http://jimmoldenhauer.blogspot.com/2012/11/scom-2012-creating-setting-resolution.html">Creating and Setting Resolution States</a> for help with that.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR1AvYUP25PvlVT5YLIvCTVxxV-efrsB-k5rT7tI1A7oV-HMDcarNOD-zaSn2WQHudjwPs-mBK-rBldMVI2GjsY_p2N0RHUWu0VUgkcqVwuBnfGF4Yp2b8BChvwUnmAF1olw_2q57QGco/s1600/10.PNG" imageanchor="1"><img border="0" height="219" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR1AvYUP25PvlVT5YLIvCTVxxV-efrsB-k5rT7tI1A7oV-HMDcarNOD-zaSn2WQHudjwPs-mBK-rBldMVI2GjsY_p2N0RHUWu0VUgkcqVwuBnfGF4Yp2b8BChvwUnmAF1olw_2q57QGco/s320/10.PNG" width="320" /></a></div>
<br />
Go ahead and run it in Runbook Tester. When it executes we should get a disabled user with this in the notes:<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu8PVfIi5qUb20jTm0jXrNEYCEJ5tUZJU_26dMoL6rdhnYWvnr3nbLy98SdJizYdy-Xa5mxrq24mmdIC1CJ9cLiRZoIkEvhaFC5C46y66i3L9yi8tWi4delqHcvTgLiTwCuawRsV07kco/s1600/11.PNG" imageanchor="1"><img border="0" height="127" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu8PVfIi5qUb20jTm0jXrNEYCEJ5tUZJU_26dMoL6rdhnYWvnr3nbLy98SdJizYdy-Xa5mxrq24mmdIC1CJ9cLiRZoIkEvhaFC5C46y66i3L9yi8tWi4delqHcvTgLiTwCuawRsV07kco/s320/11.PNG" width="320" /></a></div>
<br />
And an updated alert<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-LfWGHSJiGq9_YFpFf3NDKZwfpwfMEPG73JUoEBNrMpbvpcgATLBrpZFGALru2fXwLJ0UYY3xQI7zfB5e3ZiVJa7UgsK-wNcePnxJCgFe7U_gUR42lyWfGv0cxCoPvJee2q7qMy8YJW0/s1600/12.PNG" imageanchor="1"><img border="0" height="27" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-LfWGHSJiGq9_YFpFf3NDKZwfpwfMEPG73JUoEBNrMpbvpcgATLBrpZFGALru2fXwLJ0UYY3xQI7zfB5e3ZiVJa7UgsK-wNcePnxJCgFe7U_gUR42lyWfGv0cxCoPvJee2q7qMy8YJW0/s400/12.PNG" width="400" /></a></div>
<br />
As we did with the monitoring of Domain Admins, Schema Admins and Enterprise Admins you can do the same here. Just change the Custom field 1 to:<br />
<br />
<span style="color: yellow;">SAModAdd</span> - User Added to Schema Admins<br />
<span style="color: yellow;">EAModAdd</span> - User Added to Enterprise Admins<br />
<br />
From there you can create the appropriate Runbooks.<br />
<br />
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-20378128659962201032017-05-22T17:40:00.001-07:002017-05-23T10:59:15.447-07:00SCORCH 2016 - Integration PacksNow that we have <a href="http://jimmoldenhauer.blogspot.com/2017/05/scorch-2016-installation.html">SCORCH installed</a> and ready to create some Runbooks lets go ahead and setup the System Center Integration Packs so that we can plug SCORCH into some of the tools in our environment like SCOM and SCCM. You can download the IPs from Microsoft <a href="https://www.microsoft.com/en-us/download/details.aspx?id=54098">here</a>. Extract them to your hard drive and you should have several .oip files.<br />
<br />
Now that we have them downloaded it's time to register them. Double check the .oip files and make sure they are not set to Read-only as this may cause issues later. Open the SCORCH Deployment Manager.<br />
<br />
Expand the Orchestrator Management Server and Right Click on Integration Packs. Select Register IP with the Orchestrator Management Server...<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUTF2iQEwr9SExA6ZZr773IW2LJl-9i00ZjjKtXSiqlhLXHFL-SzK772-et6uO3xwfMipxPnVSUjObvhW_Qhwu8b22c3C2xrYtusAXQ21HiV1OVqBFmqZGVByM3E73NGNJxl70AIlultM/s1600/01.png" imageanchor="1"><img border="0" height="80" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUTF2iQEwr9SExA6ZZr773IW2LJl-9i00ZjjKtXSiqlhLXHFL-SzK772-et6uO3xwfMipxPnVSUjObvhW_Qhwu8b22c3C2xrYtusAXQ21HiV1OVqBFmqZGVByM3E73NGNJxl70AIlultM/s320/01.png" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
The Welcome to the Integration Pack Registration Wizard will start. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRTfkIot1NMbiqqMxZyCwebqsugaGroLKDzIUgbGrlQj7ZW55_Z1ghZ5jPf5vnLRGAGRbp9_iPoqCHL2CLjGabgA96oXqsJ0_nq-Um-FE5rHZcU6BMYuDUNnLUk5QzFOKMCcLghm3lEIM/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRTfkIot1NMbiqqMxZyCwebqsugaGroLKDzIUgbGrlQj7ZW55_Z1ghZ5jPf5vnLRGAGRbp9_iPoqCHL2CLjGabgA96oXqsJ0_nq-Um-FE5rHZcU6BMYuDUNnLUk5QzFOKMCcLghm3lEIM/s320/02.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
On The Select Integration Packs or Hotfixes screen navigate to where you extracted the .oip files and select the ones you plan to use. I chose SCCM, SCOM, SCSM and AD. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd-YjFZ38E_mwgEIlAC_AVOMFFpJ8azkHcE1qi2_MwhpdHhrnaFV2VkBfRVhd2lN0P4yiRPJOMKDPdweMCCNazQzZQxLWyQSdzP9JKjigNeRleSLUtsO6vwwuYvNVaSosfZoTu657EfBg/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd-YjFZ38E_mwgEIlAC_AVOMFFpJ8azkHcE1qi2_MwhpdHhrnaFV2VkBfRVhd2lN0P4yiRPJOMKDPdweMCCNazQzZQxLWyQSdzP9JKjigNeRleSLUtsO6vwwuYvNVaSosfZoTu657EfBg/s320/03.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Confirm your choices and Click Finish</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIcEwpWP5knMrPbI9PvJi5gs6uQnDrHHXKKRaNuozChXBIBOFySg1wBzX0LAJvb8irc78s8GanwdjLtDHt8bbww9NXTchCJLUIJoAniwbvHUlUNnzYLnM90Uw_sCWep_4y-DZZWfgHgVE/s1600/04.PNG" imageanchor="1"><img border="0" height="208" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhIcEwpWP5knMrPbI9PvJi5gs6uQnDrHHXKKRaNuozChXBIBOFySg1wBzX0LAJvb8irc78s8GanwdjLtDHt8bbww9NXTchCJLUIJoAniwbvHUlUNnzYLnM90Uw_sCWep_4y-DZZWfgHgVE/s320/04.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Accept the EULA times however many IPs you selected</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPK-kXmYG-rFENsJajre3RqYt3SsAP9HvNNiZoQSDHfNBJRoPeh6Nu8nC3ydDRf8sSHPZOi2maJ_iA6VDxuiWJA5d7tslXqUoRk86g_W3xCRSLLx7aftxUVu9zstP8cta97O3OMjyPlUQ/s1600/05.PNG" imageanchor="1"><img border="0" height="289" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPK-kXmYG-rFENsJajre3RqYt3SsAP9HvNNiZoQSDHfNBJRoPeh6Nu8nC3ydDRf8sSHPZOi2maJ_iA6VDxuiWJA5d7tslXqUoRk86g_W3xCRSLLx7aftxUVu9zstP8cta97O3OMjyPlUQ/s320/05.PNG" width="320" /></a></div>
<br />
<div style="text-align: left;">
Now you should see all of the IPs that you installed.</div>
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzdywwJmmJ6w6oa-6OZKgwustjqHw9kkrOw0Ejv0WiZ9gWsl6Al1bXOWhHDKgFVQK2c4cnTfJzsfwE7HLPM4uBLLph2_zhZdgwZ8rCZlEr-DPZelSbV7SMw2lzD2ngu0SClqtLFvOnwC0/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzdywwJmmJ6w6oa-6OZKgwustjqHw9kkrOw0Ejv0WiZ9gWsl6Al1bXOWhHDKgFVQK2c4cnTfJzsfwE7HLPM4uBLLph2_zhZdgwZ8rCZlEr-DPZelSbV7SMw2lzD2ngu0SClqtLFvOnwC0/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="60" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzdywwJmmJ6w6oa-6OZKgwustjqHw9kkrOw0Ejv0WiZ9gWsl6Al1bXOWhHDKgFVQK2c4cnTfJzsfwE7HLPM4uBLLph2_zhZdgwZ8rCZlEr-DPZelSbV7SMw2lzD2ngu0SClqtLFvOnwC0/s400/06.PNG" width="400" /></a></div>
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<br /></div>
Right Click on Integration Packs. This time choose Deploy IP to Runbook Server on Runbook Designer.
<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfQJyXz8uKhMR-XaFp8UHtwdLgvcKLqeLTdWL6DeEcp9yudloitbDDSkSkAQkv8zgfz998A8XDcRGXsKXiNxvXXbY68NW6zpPIdfT90yISYCskh4rJ3I-MMC-KjORL29Bp6y9mIg4oByc/s1600/07.png" imageanchor="1"><img border="0" height="53" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfQJyXz8uKhMR-XaFp8UHtwdLgvcKLqeLTdWL6DeEcp9yudloitbDDSkSkAQkv8zgfz998A8XDcRGXsKXiNxvXXbY68NW6zpPIdfT90yISYCskh4rJ3I-MMC-KjORL29Bp6y9mIg4oByc/s320/07.png" width="320" /></a></div>
<br />
This time the Welcome to the Integration Pack Deployment Wizard will start. Click Next
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRDvyVEEBaFdoZt_F-NJtGRJDHtWfH2Xelev2amg1Q-YcmhIyyHezvYbiBPbpQidutBKg8rBFgFP8ow9GZsj1a8okGC8ca1vH4swrJgIz8MWq-GJiBZCx9GitimlrYk38P2zk4z4ror-0/s1600/08.PNG" imageanchor="1"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRDvyVEEBaFdoZt_F-NJtGRJDHtWfH2Xelev2amg1Q-YcmhIyyHezvYbiBPbpQidutBKg8rBFgFP8ow9GZsj1a8okGC8ca1vH4swrJgIz8MWq-GJiBZCx9GitimlrYk38P2zk4z4ror-0/s320/08.PNG" width="320" /></a></div>
<br />
Select all of the new IPs you need to deploy. Click Next
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKRKfveVjPtfCcmfgVVOvfpNPvLqBF-T3IcA4MDXM8OIJs4QszFZMDfXxuLoAYgzXyLbtXwhZVHWqsI1NSU9gzp7mgFL_PiH6gOf1bvszohVL8fzSGlYXeQU23bFpz0BVWf2rfbwE3KMM/s1600/09.PNG" imageanchor="1"><img border="0" height="249" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKRKfveVjPtfCcmfgVVOvfpNPvLqBF-T3IcA4MDXM8OIJs4QszFZMDfXxuLoAYgzXyLbtXwhZVHWqsI1NSU9gzp7mgFL_PiH6gOf1bvszohVL8fzSGlYXeQU23bFpz0BVWf2rfbwE3KMM/s320/09.PNG" width="320" /></a></div>
<br />
Enter the name of the server that has Runbook Designer installed on it and Click Add. Then Click Next
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEUwz2xyk-YKGMcSO12I6nFxaQHcMkvvuvd-dBlthGWR40nF8fHxsyZvJDG9QOIoGavWci3UnttMQN2pTre75CVdaBz-qQzwMDyvGN2erP9DCMKblgrprg3wOOtas-l0Mn7xZuKsuHpKE/s1600/10.PNG" imageanchor="1"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEUwz2xyk-YKGMcSO12I6nFxaQHcMkvvuvd-dBlthGWR40nF8fHxsyZvJDG9QOIoGavWci3UnttMQN2pTre75CVdaBz-qQzwMDyvGN2erP9DCMKblgrprg3wOOtas-l0Mn7xZuKsuHpKE/s320/10.PNG" width="320" /></a></div>
<br />
You can schedule a time when the SCORCH server is not busy or in our case we have a new server with no active Runbooks so we are going to install now. Click Next
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDkKeNVdUm4UOY33xlj5aOJ_iqahPV1i8WXYPo7adkTcl8_NJkwZOYVt-cCihlJNRZ84chwUDf8nVuV6BiGgM3QYYUN8mPKUXFOogigQdrVQQRx0a4D3sh5gyq_M_G8VQsTccv0rtVE_I/s1600/11.PNG" imageanchor="1"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDkKeNVdUm4UOY33xlj5aOJ_iqahPV1i8WXYPo7adkTcl8_NJkwZOYVt-cCihlJNRZ84chwUDf8nVuV6BiGgM3QYYUN8mPKUXFOogigQdrVQQRx0a4D3sh5gyq_M_G8VQsTccv0rtVE_I/s320/11.PNG" width="320" /></a></div>
<br />
Review your install choices and Click Finish
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggKE76pnJNdH7rOtZ2eFHLbcHDGViMzaOgILLyqicTgwlYsryrEsJCPKdI0GNW1w1NSQTjJZ6m-1-lDBiCJUm6tCzqQmzasdrReExKoVL4RxdrWu-fLrFq52LPeBBfTfOTBlGoDdjdfjw/s1600/12.PNG" imageanchor="1"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggKE76pnJNdH7rOtZ2eFHLbcHDGViMzaOgILLyqicTgwlYsryrEsJCPKdI0GNW1w1NSQTjJZ6m-1-lDBiCJUm6tCzqQmzasdrReExKoVL4RxdrWu-fLrFq52LPeBBfTfOTBlGoDdjdfjw/s320/12.PNG" width="320" /></a></div>
<br />
The deployment will walk through all the chosen IPs
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-dpQQgN4hajiZyv2b4uzHOsnwD598MxnewYjcxFK-z8xQVKjuRZ1lm3mPMFSzE22DsDkUWrP20akM4c4dCRmN-gyEadaugwKyejF1U5EwzBRdVYdwdAwisSBGncbH9MIO-BRTtTzRirI/s1600/13.PNG" imageanchor="1"><img border="0" height="127" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-dpQQgN4hajiZyv2b4uzHOsnwD598MxnewYjcxFK-z8xQVKjuRZ1lm3mPMFSzE22DsDkUWrP20akM4c4dCRmN-gyEadaugwKyejF1U5EwzBRdVYdwdAwisSBGncbH9MIO-BRTtTzRirI/s320/13.PNG" width="320" /></a></div>
<br />
When it is finished you should see in the logs
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjz_6PuEoyw1cIa7zH1IvrJcl4azSCJnPW6zZ5tHgc9PQj1N_T4AZAEuzIFlEkG5frPngzIV-nqY9YS8iEGz_rvYVBrb8Bg9jX1R_-uyzXU6ClxL4yPi0SZLOV17nuBXKgT0DwD4GxVbw/s1600/14.PNG" imageanchor="1"><img border="0" height="102" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjz_6PuEoyw1cIa7zH1IvrJcl4azSCJnPW6zZ5tHgc9PQj1N_T4AZAEuzIFlEkG5frPngzIV-nqY9YS8iEGz_rvYVBrb8Bg9jX1R_-uyzXU6ClxL4yPi0SZLOV17nuBXKgT0DwD4GxVbw/s320/14.PNG" width="320" /></a></div>
<div style="margin-left: 1em; margin-right: 1em; text-align: left;">
<br /></div>
Close Runbook Designer and reopen it. You should now see the new IPs under Activities
<br />
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiva3HVFFFPhW9qXTZYDZdfpjTEWcKJsmdzIaznBPbiMiChOl0TtH9JGfrFrGCOR7R0cqVFDBMXz_axPQr1gVgEk4Kqr59E0RSKAaEdN22HfjL9SgXvavbxdpgRciEcMGs2gONRgewptb0/s1600/15.PNG" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiva3HVFFFPhW9qXTZYDZdfpjTEWcKJsmdzIaznBPbiMiChOl0TtH9JGfrFrGCOR7R0cqVFDBMXz_axPQr1gVgEk4Kqr59E0RSKAaEdN22HfjL9SgXvavbxdpgRciEcMGs2gONRgewptb0/s400/15.PNG" /></a></div>
<br />
Last thing to do is make the connection between SCORCH and the other Components. In Runbook Designer Select the Options drop down and select one of the IPs.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVrdfuQmmy3tJgSkgO0Emj9yxDjfsezGqaYcV5KF3mnrY2drqrtW7oYrO4T-sJwGHG3ADK5JQkjhIZc01OdZ-X5Xcpv3Ln31p7uLACUGvOAgcC_War5AeeM1rdvHk0Aaq9cP4IzXTwIJ8/s1600/16.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="190" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVrdfuQmmy3tJgSkgO0Emj9yxDjfsezGqaYcV5KF3mnrY2drqrtW7oYrO4T-sJwGHG3ADK5JQkjhIZc01OdZ-X5Xcpv3Ln31p7uLACUGvOAgcC_War5AeeM1rdvHk0Aaq9cP4IzXTwIJ8/s320/16.png" width="320" /></a></div>
<br />
In the Connection Wizard Click Add and populate the connection with your server data and account credentials to be used to make the connection. Be sure to Test the connection to ensure it will work. Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEEfvxgBjLXelYCRhV8FXd2myGEu3kKSt8iF5AwG9b8TDL5F4VPz3HdWHISvMGSR6y4r3D4MirIhvSoiZC8Bk0V9FqkqosD3lzk0JXSe5JOqAFq6QhCi1iZ8qHYcBGqSqzD9roX7g_D9E/s1600/17.PNG" imageanchor="1"><img border="0" height="295" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEEfvxgBjLXelYCRhV8FXd2myGEu3kKSt8iF5AwG9b8TDL5F4VPz3HdWHISvMGSR6y4r3D4MirIhvSoiZC8Bk0V9FqkqosD3lzk0JXSe5JOqAFq6QhCi1iZ8qHYcBGqSqzD9roX7g_D9E/s320/17.PNG" width="320" /></a></div>
<br />
Click Finish<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgff7WTE6MVVfZuApLREzaueCcHdb92PTKawVjIpulFD5bSfC1cg2ufzPRftqNRAQ4YBiU8b8PLiKpax6iSpedhYAzP0iCPhRceOhes4vKElDYaSDYVuHUvmcHqr5KzNZrWphzFsNDTwuk/s1600/18.PNG" imageanchor="1"><img border="0" height="219" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgff7WTE6MVVfZuApLREzaueCcHdb92PTKawVjIpulFD5bSfC1cg2ufzPRftqNRAQ4YBiU8b8PLiKpax6iSpedhYAzP0iCPhRceOhes4vKElDYaSDYVuHUvmcHqr5KzNZrWphzFsNDTwuk/s320/18.PNG" width="320" /></a></div>
<br />
Repeat this step for all IPs and you are ready to start making some Runbooks!<br />
<br />
<br />
More to come!
<br />
<br />
If you like this blog, give it a g+1
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-26137735355547322052017-05-22T15:19:00.000-07:002017-05-23T10:54:17.989-07:00SCORCH 2016 - InstallationSo I have been wanting to do segments on Orchestrator for a while now and I thought no better time than the present. So lets begin.<br />
<br />
<b><u>Prerequisites</u></b>:<br />
There are a few things that need to be setup before we begin.<br />
<br />
<b>Service Accounts/Groups</b><br />
You need two service accounts and a security group<br />
<ul>
<li>SCORCHAdmin - This will run your SCORCH management, runbook and be your admin account. This account needs to be local admin on all SCORCH servers</li>
<li>SCORCHSql - This will be your SQL service account</li>
<li>SCORCHUsers- This will be your global security group to give user access to SCORCH. This group needs to be local admin on all SCORCH servers</li>
</ul>
<div>
<b>Servers</b></div>
You will need two servers, SCORCH Runbook Server and a database server. They will need the following:<br />
<br />
1. SCORCH<br />
<ul><ul>
<li>1 GB Ram (min)</li>
<li>.net 3.5</li>
<ul>
<li>Add-WindowsFeature NET-Framework-Core</li>
<li>Add-WindowsFeature NET-Framework-Core -source D:\sources\sxs</li>
</ul>
<li>IIS Role (setup will add this if not installed previously)</li>
<li>.net 4.0 </li>
<li>.net 4.5</li>
</ul>
</ul>
<div>
2. SQL</div>
<ul><ul>
<li>Install SQL Server 2014 SP1 (for additional information please see <a href="http://jimmoldenhauer.blogspot.com/2016/05/sql-server-2014-sp1-installation.html">SQL 2014 SP1 - Installation</a>)</li>
<ul>
<li>Database Engine Services</li>
<li>Full-Text and Semantic Extractions for Search</li>
<li>Reporting Services - Native</li>
<li>Management Tools (basic and complete)</li>
</ul>
</ul>
</ul>
<div>
<b><u>Installation:</u></b></div>
The installation is one of the more straight forward System Center installs. After you extract the install files go ahead and run the SetupOrchestrator.exe file and Click Install<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizD-T1aho3ONc9UvmJnChAsOuENwUmdwrDuDL4MQbl2Q30Ckr3EQmMB_jA7gXC-IxqJOoCEImrlsViNTtGsGNvU2EFSztSL4c9iiIYV5nSyXQ1z1d8p-xG22KgByvpqk1wA9ksfkwEATY/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizD-T1aho3ONc9UvmJnChAsOuENwUmdwrDuDL4MQbl2Q30Ckr3EQmMB_jA7gXC-IxqJOoCEImrlsViNTtGsGNvU2EFSztSL4c9iiIYV5nSyXQ1z1d8p-xG22KgByvpqk1wA9ksfkwEATY/s320/01.PNG" width="299" /></a></div>
<br />
You can enter a product key or run as evaluation edition. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfalNBvfu_Te0pizalsF573auWPrOH3DEDmYdFwVtfuAlladNjOyVraZXVUmqACnf9IdxorgLnM5ZNnsCR-fTpfr9imyaHvY52i6opgsY36KSJa_vSgYsylATFJ9m9HmKbvayQPImAYKA/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfalNBvfu_Te0pizalsF573auWPrOH3DEDmYdFwVtfuAlladNjOyVraZXVUmqACnf9IdxorgLnM5ZNnsCR-fTpfr9imyaHvY52i6opgsY36KSJa_vSgYsylATFJ9m9HmKbvayQPImAYKA/s320/02.PNG" width="320" /></a></div>
<br />
Accept the EULA and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKuPW1ymrApwGXO9xIJUIvsiQhHntNOnGBJa4CX1jGXuCkhctjt6nSFKbpbFWMTc9yX-ErWk8I5ZDhD4RdMlEaCfWW1SBYdyD2V7GQd2U-Wg4TGoa_fq-cYJwMhl5z6kgAOa_adsRZ6DI/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKuPW1ymrApwGXO9xIJUIvsiQhHntNOnGBJa4CX1jGXuCkhctjt6nSFKbpbFWMTc9yX-ErWk8I5ZDhD4RdMlEaCfWW1SBYdyD2V7GQd2U-Wg4TGoa_fq-cYJwMhl5z6kgAOa_adsRZ6DI/s320/03.PNG" width="320" /></a></div>
<br />
If you want to disable this I will show you how at the end of the segment. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6AEABwX_xREIYfrG8bEZFUzIP4oJ5vv6lwsP8Se9M8hkSBRxlypyMtuDPj7UwN3PKTXTGxXze3-vRKJbdFrsErIOF7et1FXTqP3Chcmme7stMYe7fhfKX42KB3W5gxGwXbTbZzmrRZ5c/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj6AEABwX_xREIYfrG8bEZFUzIP4oJ5vv6lwsP8Se9M8hkSBRxlypyMtuDPj7UwN3PKTXTGxXze3-vRKJbdFrsErIOF7et1FXTqP3Chcmme7stMYe7fhfKX42KB3W5gxGwXbTbZzmrRZ5c/s320/04.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
We are going to install all the features. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzf474JIgQSH_8RpHr0fzMQHbfWrla4HaXuCghxHIGDAahixwdYiVNw1LgtbXATcqitWBNUjflG7dPM_IMg86hWssDkgFPHfumyfXzrr5c4fzc_JUOU-K7XVGOs6M6eow3F2K7Usscj6c/s1600/05.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzf474JIgQSH_8RpHr0fzMQHbfWrla4HaXuCghxHIGDAahixwdYiVNw1LgtbXATcqitWBNUjflG7dPM_IMg86hWssDkgFPHfumyfXzrr5c4fzc_JUOU-K7XVGOs6M6eow3F2K7Usscj6c/s320/05.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
I intentionally left out the IIS roles to show that it will install any prerequisite components if needed. Select any missing features and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-QvBNjuT-9LzWAn9HdCEiNB6QggLti-wn0N8hnvvta133wiciTt5P9VdBCinuKpJW-gC03tBOM993upebB_p81RvYEeeDmrn9KS3w2cs6DRrWc68xESTksHvJBNggpBMQV8KH7VtRhQ/s1600/06.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS-QvBNjuT-9LzWAn9HdCEiNB6QggLti-wn0N8hnvvta133wiciTt5P9VdBCinuKpJW-gC03tBOM993upebB_p81RvYEeeDmrn9KS3w2cs6DRrWc68xESTksHvJBNggpBMQV8KH7VtRhQ/s320/06.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Installing Prerequisites</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFcgEIVMMfz-TYyuSq4Yfrfv-fQMKQ9zqMXjzJY6S2d-I6CwXJ1shcYDFgM4Alpkhro16UnngwyECBWXZpNQN1up0NV7UIbUa6ns-kJxQSYiabUZsWYDjJqfuNJR3pqwCoN4WbMniTEk8/s1600/07.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFcgEIVMMfz-TYyuSq4Yfrfv-fQMKQ9zqMXjzJY6S2d-I6CwXJ1shcYDFgM4Alpkhro16UnngwyECBWXZpNQN1up0NV7UIbUa6ns-kJxQSYiabUZsWYDjJqfuNJR3pqwCoN4WbMniTEk8/s320/07.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
If No prerequisites are missing or post install Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8aoYSjiSMc9H35hPPJxhx-c65w6iedRgSYQyeEDtJvbGCwWnk9LJkR5FIVO8mnbsBlkP-6aydjUMCVWrriU38W0230UuXrqo2Bkg9CRx5cN1mgFr-P1hm8Kx9XYK7yh29xKmGWUbKgAE/s1600/08.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8aoYSjiSMc9H35hPPJxhx-c65w6iedRgSYQyeEDtJvbGCwWnk9LJkR5FIVO8mnbsBlkP-6aydjUMCVWrriU38W0230UuXrqo2Bkg9CRx5cN1mgFr-P1hm8Kx9XYK7yh29xKmGWUbKgAE/s320/08.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter the SCORCH Admin account you created earlier and Click Text. If all is well Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjq-Bdb8GuWHEt-lwYvq9613p3kBPMnCfcv0FlA6idvO3z01oVCETM-emllD1L1MJvQ_6awccFmk67GxFEIu1j72yppg6j0lDPRy5TPrNnWTo15AgIa-uptNZ4U1fBQealDyTP0E3t5Aqo/s1600/09.PNG" imageanchor="1"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjq-Bdb8GuWHEt-lwYvq9613p3kBPMnCfcv0FlA6idvO3z01oVCETM-emllD1L1MJvQ_6awccFmk67GxFEIu1j72yppg6j0lDPRy5TPrNnWTo15AgIa-uptNZ4U1fBQealDyTP0E3t5Aqo/s320/09.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter the Server\Instance of the second SCORCH server when you installed SQL. Depending on how you setup the user accounts you may need to select SQL Authentication and enter the SQL account that has access. Click Test Database Connection. If all is well Click Next. Otherwise you will need to troubleshoot the connection</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9uUUCpgs5Jup_4C79X5Gfx92s_radIlH7eddSnZuHZ5djM-TYAwoQ7QlP-t1Ew0mxo1-DGuKood1SNGMhz6zBDdKFjUujX2rVd6CXK5H3HYuVOy0umPUbbhekU_2e2WC5kQtdJUrxiwA/s1600/10.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9uUUCpgs5Jup_4C79X5Gfx92s_radIlH7eddSnZuHZ5djM-TYAwoQ7QlP-t1Ew0mxo1-DGuKood1SNGMhz6zBDdKFjUujX2rVd6CXK5H3HYuVOy0umPUbbhekU_2e2WC5kQtdJUrxiwA/s320/10.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter the database name you want to use. I kept the default. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdBbo_giFV81YvEPdUJ-RMCZMVP4gYJeZS6hGCSr5RK-VtCMMb2IpHqtgim0X_jTvfbi48UnEBhal3fVlOC49dekSJbdX4wJfg8XQHC9m1GbOUS99IG9k7kULKRp_qZP3CmiUbszqY50E/s1600/11.PNG" imageanchor="1"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdBbo_giFV81YvEPdUJ-RMCZMVP4gYJeZS6hGCSr5RK-VtCMMb2IpHqtgim0X_jTvfbi48UnEBhal3fVlOC49dekSJbdX4wJfg8XQHC9m1GbOUS99IG9k7kULKRp_qZP3CmiUbszqY50E/s320/11.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter the SCORCH User group created earlier and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiy8pyg9vPT8sa5erZqL7qJKDfjA3NhMXXg3iWYb9R-mTlpAstrVUAxaCWFu7hwJJFPzBFNLUCvJbOz6_bVwYSIELp53CgJkXe76VjXrdMOXZCqSVjMK8uckQWCc_VWSotHtb4A090hbY/s1600/12.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiy8pyg9vPT8sa5erZqL7qJKDfjA3NhMXXg3iWYb9R-mTlpAstrVUAxaCWFu7hwJJFPzBFNLUCvJbOz6_bVwYSIELp53CgJkXe76VjXrdMOXZCqSVjMK8uckQWCc_VWSotHtb4A090hbY/s320/12.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
I kept the defaults. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5IZcG6gqToe1EdoEqo1MxKRLsyR_xqLySCONCnoNdDsBiuGETmqTqJeriMsActEyMigqEF7P4CPMvSFkpC1gXRz1svp9LVqCiUuOyFTBKw5Qs9BrEqdGnP437ysPOlMBuyKBCRQPaTtI/s1600/13.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5IZcG6gqToe1EdoEqo1MxKRLsyR_xqLySCONCnoNdDsBiuGETmqTqJeriMsActEyMigqEF7P4CPMvSFkpC1gXRz1svp9LVqCiUuOyFTBKw5Qs9BrEqdGnP437ysPOlMBuyKBCRQPaTtI/s320/13.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvUFBf3r_npM7CHGS5mXCw_hXLuIzaslZc2KBs9wfxNS4iE-1YPmceu1MTM5SZl8IPW5TwhSPdJGwUONZH8nyuBzFljY3h3xf1R6sXXCSXmJgmYgPKpfXvkwRcUbxa1AeZNcwbdLMQV2g/s1600/14.PNG" imageanchor="1"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvUFBf3r_npM7CHGS5mXCw_hXLuIzaslZc2KBs9wfxNS4iE-1YPmceu1MTM5SZl8IPW5TwhSPdJGwUONZH8nyuBzFljY3h3xf1R6sXXCSXmJgmYgPKpfXvkwRcUbxa1AeZNcwbdLMQV2g/s320/14.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Dealers choice. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhyphenhyphenTw2NeukAy9pKeE-vn3c_gvUiQOLeqBMaGro1WAXCpJJFAq3q93NdMToH5PkGkxQQx6L_fYoG0WnbEMT7UYlH-2-6b5Zwz43arAhyphenhyphenFmKuhq1Et5KLEd5utugTppi1AD66vG-Aenug7c/s1600/15.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhyphenhyphenTw2NeukAy9pKeE-vn3c_gvUiQOLeqBMaGro1WAXCpJJFAq3q93NdMToH5PkGkxQQx6L_fYoG0WnbEMT7UYlH-2-6b5Zwz43arAhyphenhyphenFmKuhq1Et5KLEd5utugTppi1AD66vG-Aenug7c/s320/15.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Dealers choice again. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTgOmlvAZf_jADkePSpyOsZ0UwgI1YwzfllVPjf3sNXja77mqkS6pNJ9Ur6THDP-g74M__nndFg207Vh2hibVsBYPv2IiCmAG3PAH1xJK3xglCMnyVFBlhUumnfGiuhD7NWQU9R3sCBlQ/s1600/16.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTgOmlvAZf_jADkePSpyOsZ0UwgI1YwzfllVPjf3sNXja77mqkS6pNJ9Ur6THDP-g74M__nndFg207Vh2hibVsBYPv2IiCmAG3PAH1xJK3xglCMnyVFBlhUumnfGiuhD7NWQU9R3sCBlQ/s320/16.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Review the installation settings you selected and Click Install</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiazbGmuLwqDnEvyTtLAXegdYSGhg9tZjfS0QU7CYiUlWxVwPthaCfUFe17i1e3Lh4TELysEoCRjUufE1lEJvvPVMgX4W90XefgTvxSlc29JRCKjW0audmteJLW9nZsxNEyuFmw5q9_Nx4/s1600/17.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiazbGmuLwqDnEvyTtLAXegdYSGhg9tZjfS0QU7CYiUlWxVwPthaCfUFe17i1e3Lh4TELysEoCRjUufE1lEJvvPVMgX4W90XefgTvxSlc29JRCKjW0audmteJLW9nZsxNEyuFmw5q9_Nx4/s320/17.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
When the install is finished Click Close</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vmm5gew_9KC9RvggFgJwkd22AhS1mmB3ewp8r5aVTHLZF0ftMDomJcVQ4J7Q9c78NTtYkZrbZlq3eo_p-UJkBc5cio96l1bHWGXrShzoZt9aMVfhumI6K4nnh8vT7VZ6-CXhOcgFwv0/s1600/19.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vmm5gew_9KC9RvggFgJwkd22AhS1mmB3ewp8r5aVTHLZF0ftMDomJcVQ4J7Q9c78NTtYkZrbZlq3eo_p-UJkBc5cio96l1bHWGXrShzoZt9aMVfhumI6K4nnh8vT7VZ6-CXhOcgFwv0/s320/19.PNG" width="320" /></a></div>
<br />
When the Runbook Designer opens there is one final step if you want to disable Diagnostic and Usage Data. Click Help > Diagnostic and Usage Data.. Select No and Click OK<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkKGGTe-CaRX8FWuOqJ1KFV3P8fmIiPJfhzXraAtUzAKVoBiwsZxs4TKPubJo2encR9EXAIUR3tzgvBtGMDPe13cF86txpuM06Ylw7mTQTKCoOfP42fIU_ZuweKv-66KzZUxiynY-y_mU/s1600/20.PNG" imageanchor="1"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkKGGTe-CaRX8FWuOqJ1KFV3P8fmIiPJfhzXraAtUzAKVoBiwsZxs4TKPubJo2encR9EXAIUR3tzgvBtGMDPe13cF86txpuM06Ylw7mTQTKCoOfP42fIU_ZuweKv-66KzZUxiynY-y_mU/s320/20.PNG" width="320" /></a></div>
<br />
All Finished!<br />
<br />
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-31388246921178883092017-05-19T11:09:00.000-07:002017-05-22T08:22:37.763-07:00SCOM 2016 - Deployed Agent on Domain Controller Grayed OutSo I have been going through the process of setting up SCOM 2016 and came across an interesting issue. I deployed the SCOM agent to my Domain Controller using the install as other account method which, in my opinion is the preferred method. Agent installed successfully and reported back to SCOM as healthy. A short time later it went gray on me.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdvXPcpFD-YTHFgneFIry6hzXgpFoIiViiRQyBTXLtXPdm5OHVsKUeUyiKSdwBldCC_hopMs1KqwifjXRiTzeegdXVEK8ukPFJV5MkaWuYvt1Qw6P0TVm56ZPrAsUP1CrRF35qRiOOsoc/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="89" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdvXPcpFD-YTHFgneFIry6hzXgpFoIiViiRQyBTXLtXPdm5OHVsKUeUyiKSdwBldCC_hopMs1KqwifjXRiTzeegdXVEK8ukPFJV5MkaWuYvt1Qw6P0TVm56ZPrAsUP1CrRF35qRiOOsoc/s320/01.PNG" width="320" /></a></div>
<br />
OK, this happens sometimes. I ran the repair using the same account (maybe I fat fingered it). Repair was successful but agent was still gray. I did an uninstall and re-install, watching it the whole time. Came back as green then a short time later it was gray again. Checked on the domain controller. Agent was running and pointing to the correct management group.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEharClZlTJNP7iJZl1pxTFZwLZH5x0UA0OdWo26yLDS-ipWg-FRSeuqWXkDjs-w4xKojbfWrt_J4VspkimNO_MV5PPNxcLSdCQfGA5lERZCy_z_i7qxClM5FStM9bV96Cpws4s8K2BuXKY/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="108" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEharClZlTJNP7iJZl1pxTFZwLZH5x0UA0OdWo26yLDS-ipWg-FRSeuqWXkDjs-w4xKojbfWrt_J4VspkimNO_MV5PPNxcLSdCQfGA5lERZCy_z_i7qxClM5FStM9bV96Cpws4s8K2BuXKY/s320/02.PNG" width="320" /></a></div>
<br />
After some digging I came across this <a href="https://support.microsoft.com/en-us/help/946428/the-operations-manager-health-service-does-not-process-configuration-files-and-logs-event-ids-7022-and-1220">KB article</a> which explains what is happening. In short when you use the install as other account method the service itself does not actually run using the Domain Level account specified. It only uses that account to do the physical installation and configuration. Once installed the service runs as Local System or NT Authority\System. At some time between 2012 and 2016 the security approach to agent accounts changed an according to the article "only the NT AUTHORITY\Authenticated Users security principal is allowed access to the Health Service. But when the Active Directory is hardened, or the agent is misconfigured, the Local System account cannot authenticate through the Authenticated Users security principal, therefore the agent cannot process Health Service configuration information."<br />
<br />
So at this point there are two ways to fix this. Create a Run-As Account and deploy that to all your domain controllers or use the HSLockdown tool. I only have one DC in my lab so I opted to do the latter.<br />
<br />
On your Domain Controller navigate to C:\Program Files\Microsoft Monitoring Agent\ Shift-Right Click on the Agent folder and select Open Command Window Here. Type hslockdown.exe /l this will list all users authenticated to access the management group.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMVT_jeCj-0Ji4FzrX41yI7srMMWERLg6BG3fe1xZTQsIHCGCNm3iH5DTOSl9yUzbxWJgn8TRAcwmrge5GonZAZoukYP5tkvbUnBh_QHHR1QgGD32C2ee11-2w8IubLDjGJlmCwSEa57U/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMVT_jeCj-0Ji4FzrX41yI7srMMWERLg6BG3fe1xZTQsIHCGCNm3iH5DTOSl9yUzbxWJgn8TRAcwmrge5GonZAZoukYP5tkvbUnBh_QHHR1QgGD32C2ee11-2w8IubLDjGJlmCwSEa57U/s320/03.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Voila! Access has been denied to NT Authority\System. So we need to grant access to it in order to fix this. Type hslockdown.exe /a "NT Authority\System" </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmSSzEcX8Z11pRxqZcL1Ge7BH-Zj09sCbjOvNKeqWe5VvQdwjQo7vBRMmUHoet3tWlsIWQuQiUM13o_oQ7P8vKWbRKBDJRJwkggZEVnYv-WhyphenhyphenINBKWPiPuKpUVn5IyRnCtliKxYAtLSVw/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="163" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmSSzEcX8Z11pRxqZcL1Ge7BH-Zj09sCbjOvNKeqWe5VvQdwjQo7vBRMmUHoet3tWlsIWQuQiUM13o_oQ7P8vKWbRKBDJRJwkggZEVnYv-WhyphenhyphenINBKWPiPuKpUVn5IyRnCtliKxYAtLSVw/s320/04.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
You will be prompted to restart the Health Service in order for the change to take effect.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjotS-iY__2RrkbTlii9eKQV6GzEcAyYFkeHXBpX8MOk5d3fqgVxi8IFGl7d9TvLUliFpUWdpklQkXtCK7JbLLxLMvz2U3eZE3-jzGLtNhaEZAM-Ts7BW2CfmSaLhzNqwyLp0sNlw8m82U/s1600/05.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="134" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjotS-iY__2RrkbTlii9eKQV6GzEcAyYFkeHXBpX8MOk5d3fqgVxi8IFGl7d9TvLUliFpUWdpklQkXtCK7JbLLxLMvz2U3eZE3-jzGLtNhaEZAM-Ts7BW2CfmSaLhzNqwyLp0sNlw8m82U/s320/05.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Give it a few minutes to start reporting in again, and there you go!</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWfSHUWrSe_uEkIwj1HzOvMWGzOSCHaISTqGOZEMDbWAFWjcNDR89AHhoWONq8Er-k-V3kxT5xssBMkzcc9-570Cs_52xQogjrjDXtIFI5IZQ_-NdlDwT0uVZl0r8bPjsdMDWq3QTpcvc/s1600/06.PNG" imageanchor="1"><img border="0" height="96" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWfSHUWrSe_uEkIwj1HzOvMWGzOSCHaISTqGOZEMDbWAFWjcNDR89AHhoWONq8Er-k-V3kxT5xssBMkzcc9-570Cs_52xQogjrjDXtIFI5IZQ_-NdlDwT0uVZl0r8bPjsdMDWq3QTpcvc/s320/06.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
It's strange that I have installed the agent on literally hundreds of Domain Controllers and never had to do this before... Odd...</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both;">
More to come!</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
If you like this blog, give it a g+1</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-12494598658468907332017-05-08T15:09:00.001-07:002017-05-24T22:30:35.360-07:00AD 2012 R2 - Deploy BGInfo via Group PolicySo for those of you who have never worked with BGInfo before it is a free product that Microsoft bought a few years back to help identify servers that you are logged into by modifying the desktop image with a customizable file that can pull system info. It can be downloaded from Technet <a href="https://technet.microsoft.com/en-us/sysinternals/bginfo.aspx?f=255&MSPPError=-2147217396">here</a>. Below is a simple example of how I setup mine for my lab.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXpwH-Fpi91phneTvG_AV__4aXaEEJLgIDFBeNBA9sRKDnkcuYztnb6m0rCZSYOBRbnfsoOcAyuiJLis0wKETIiVhH5ZavFlNE1-I4ic3_zAz2TxgVeGiCkxw4o8mduMdXMpGHt9uqTcM/s1600/01.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXpwH-Fpi91phneTvG_AV__4aXaEEJLgIDFBeNBA9sRKDnkcuYztnb6m0rCZSYOBRbnfsoOcAyuiJLis0wKETIiVhH5ZavFlNE1-I4ic3_zAz2TxgVeGiCkxw4o8mduMdXMpGHt9uqTcM/s320/01.PNG" width="275" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Nothing fancy but very helpful. So once you have it looking the way you want and have saved your .bgi file, copy it and the .exe file to your SYSVOL (or other shared location). I use SYSVOL because it is shared to all user and computer accounts by default and works very well for this application. </div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
If you don't know the location of the SYSVOL you can find it locally on your Domain Controller at C:\Windows\SYSVOL\domain\scripts or at \\domain.TLD\sysvol\domain.TLD\scripts\ if you are working remotely.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
I created a new folder called BGInfo and copied the files there.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Now we need to open Group Policy Manager and create a new GPO called BGInfo. Edit that file and go to Computer Configuration > Preferences > Windows Settings </div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
First we need to create the new folder which we will copy the files to. Right Click on Folders and Select New > Folder</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguUXRXm7tHvi-vayRMKvPDV86aO0IBQnh7KAcTke8e8uzuzE2x0Rs-mCV3111FS8Z7ESCvy_jhsbWpA9eMfRVwchWG9XdWIgdH-Z_mHG1-nkW56UHj7WTrLRZl-OHycEbPIYHM0UFqkpw/s1600/02.png" imageanchor="1"><img border="0" height="204" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguUXRXm7tHvi-vayRMKvPDV86aO0IBQnh7KAcTke8e8uzuzE2x0Rs-mCV3111FS8Z7ESCvy_jhsbWpA9eMfRVwchWG9XdWIgdH-Z_mHG1-nkW56UHj7WTrLRZl-OHycEbPIYHM0UFqkpw/s320/02.png" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Set Action to Update and Path to C:\BGInfo Click OK</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWVzapQJnHIqeHDlv42kCGHLmRuI4tqFNf3R-9fHj56sbZDRuPRJuePnPBhg9s-2pa8j_1239UNiz0CCA01JQQ8SnOEgS6n4FPP1wzGzh0PS1ltZesR-A0Yz8_88vnUyQj56cu2QrSavk/s1600/03.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWVzapQJnHIqeHDlv42kCGHLmRuI4tqFNf3R-9fHj56sbZDRuPRJuePnPBhg9s-2pa8j_1239UNiz0CCA01JQQ8SnOEgS6n4FPP1wzGzh0PS1ltZesR-A0Yz8_88vnUyQj56cu2QrSavk/s320/03.PNG" width="285" /></a>\</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Now Right Click on Files and Select New > File</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHRoPtfKJAZ5pp2WOxCHdA0LBc-PCiSeGhL8jz1XHOZUXLKp2Erm0hOzkCiKsIWIukZ7Z1Dfix8xBjbfLIzJJ8yQx7lx__heolTVEitYzb4V2oBg5Pt4TNUa6zS7ajA34VvVQG5t1KIqM/s1600/04.png" imageanchor="1"><img border="0" height="204" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHRoPtfKJAZ5pp2WOxCHdA0LBc-PCiSeGhL8jz1XHOZUXLKp2Erm0hOzkCiKsIWIukZ7Z1Dfix8xBjbfLIzJJ8yQx7lx__heolTVEitYzb4V2oBg5Pt4TNUa6zS7ajA34VvVQG5t1KIqM/s320/04.png" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
In Action Select Update. For Source file use the URL path to your .exe file. In Destination file use C:\BGInfo\file.exe</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_prRXw7abQenTnB88vunFPoEyN1T3GiXLNFWRtR5LABKQZ-JVzvT2fEBgfcyv_vFmSHmKIltYYmAM1AaIJABUvCHCrqQebF4wpEMCq2djSLgcxNCTY2RW95MQq9BP_DYsdRzcXK_FeTA/s1600/4.1.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_prRXw7abQenTnB88vunFPoEyN1T3GiXLNFWRtR5LABKQZ-JVzvT2fEBgfcyv_vFmSHmKIltYYmAM1AaIJABUvCHCrqQebF4wpEMCq2djSLgcxNCTY2RW95MQq9BP_DYsdRzcXK_FeTA/s320/4.1.PNG" width="285" /></a></div>
<div style="text-align: left;">
So Source file(you will need to change the path):<br />
<span style="color: yellow;">\\lab.com\sysvol\lab.com\scripts\BGInfo\file.exe</span></div>
<div style="text-align: left;">
Destination: <span style="color: yellow;">C:\BGInfo\file.exe</span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Repeat this step for the .bgi file and you should have something similar to the following</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqumD_sM6XfyY154wYJOUjIdAGR0uNHAUy4TPSyPr3Nxg0FU6PIMHLxdFmubCoSEZRAby1iFlQaLKhgIhD_YuCIXqWKmb80yebOpr8hWSzar_Oq35ff1pFGFHAnza-c5f0BkLACrD-O9o/s1600/05.PNG" imageanchor="1"><img border="0" height="44" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqumD_sM6XfyY154wYJOUjIdAGR0uNHAUy4TPSyPr3Nxg0FU6PIMHLxdFmubCoSEZRAby1iFlQaLKhgIhD_YuCIXqWKmb80yebOpr8hWSzar_Oq35ff1pFGFHAnza-c5f0BkLACrD-O9o/s320/05.PNG" width="320" /></a></div>
<div style="text-align: left;">
<span style="color: red;">5/22/17 Update - </span>After a good deal of testing in my lab I have determined that because GPP does not update in the same manner as GPO, that you will have issues if you ever try and update the .bgi file with any changes. It will not update those changes on the local machines the way you would expect it to. As a result I added another step in the file copy process. First step is to copy the .exe. Second step is to delete the .bgi file on the local computer. Third step is to download the new file. This will help to distribute changes as they occur.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB1XR9JFYjUmGQROwM4jbcpA12h8rSELFqnDIjj6KnWA8AGQ1ZQYofMNXBTYoRH3ztz_yLcuFbXRUTk0hjoBGAVIUrmz_a33DB9VDgYQszd0BlWspqyVKiywm6pyLxY-pwV3fVZu-dN3U/s1600/05a.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="46" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB1XR9JFYjUmGQROwM4jbcpA12h8rSELFqnDIjj6KnWA8AGQ1ZQYofMNXBTYoRH3ztz_yLcuFbXRUTk0hjoBGAVIUrmz_a33DB9VDgYQszd0BlWspqyVKiywm6pyLxY-pwV3fVZu-dN3U/s320/05a.PNG" width="320" /></a></div>
<br /></div>
<div style="text-align: left;">
Final step is to create a shortcut to run the file when a user logs onto the system. Right Click on Shortcuts > New > Shortcut. Set Action to Update, Name it BGInfo, Target Type is File System Object and Location is All Users StartUp.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkTEXjhlzWOLucAyE2gEZUKT1g4H6D-rUspE5x-YiTgE_G3-_niDl_K1oYwkFm-fe0CTVczHZZR1GQB6YzuK28Wy3BBho-QBhmx0qOECaQ6rV98NCUqU6_e6EQriWO1lUNpB9WNMcfghM/s1600/07.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkTEXjhlzWOLucAyE2gEZUKT1g4H6D-rUspE5x-YiTgE_G3-_niDl_K1oYwkFm-fe0CTVczHZZR1GQB6YzuK28Wy3BBho-QBhmx0qOECaQ6rV98NCUqU6_e6EQriWO1lUNpB9WNMcfghM/s320/07.PNG" width="284" /></a></div>
<div style="text-align: left;">
Target path:<span style="color: yellow;"> C:\BGInfo\file.exe</span></div>
<div style="text-align: left;">
Arguments: <span style="color: yellow;">C:\BGInfo\file.bgi /SILENT /TIMER:0 /NOLICPROMPT</span></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
You want to make sure you pass the arguments along so end users are not constantly prompted when they log in. </div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Finally you need to apply the GPO to a test OU and run it on a test machine by doing a gpupdate /force.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
The files will download and you can validate that by checking for C:\BGInfo and the .exe and .bgi files. In order for it to work you will need to log out and log back in. It takes a second but it should refresh the desktop with the new image.<br />
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-72386701539897110982016-06-17T09:45:00.001-07:002017-05-24T15:10:19.058-07:00SCOM 2012 R2 - How to Monitor Domain Administrators GroupSo one of the requests I get fairly regularly when working with SCOM is can SCOM alert when users are added to the Domain Administrators group. The answer is YES, and as it turns out this is quite an easy thing to accomplish. It is very similar to the blog I wrote a while back on <a href="http://jimmoldenhauer.blogspot.com/2013/03/scom-2012-how-to-generate-alerts-from.html">How to Generate Alerts from Event Logs</a>. The major difference is we will be doing this with a Rule, not a Monitor.<br />
<br />
<b>Build the Custom Rule</b>:<br />
Open up the SCOM console and go to Authoring > Management Pack Objects > Rules. In the Tasks window Click Create a Rule<br />
<br />
When the Create Rule Wizard runs, drill down to Alert Generating Rules > Event Based and Select NT Event Log (Alert). Select a custom management pack, or create one if you don't have one yet. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvgAyegABLWWKk3nNwZUlSg8Zl0cjHxGKeun9ztuLdlnirdlZWK2evzl_B_VT4tAdkzx8-FDAOtmpL7vdRQ7qeO3NE0-t7_bTIXW5mFxyI7vxSiYY0zhhyKSrWihSbDtvyKHdYoI6Cx7Q/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvgAyegABLWWKk3nNwZUlSg8Zl0cjHxGKeun9ztuLdlnirdlZWK2evzl_B_VT4tAdkzx8-FDAOtmpL7vdRQ7qeO3NE0-t7_bTIXW5mFxyI7vxSiYY0zhhyKSrWihSbDtvyKHdYoI6Cx7Q/s320/01.PNG" width="320" /></a></div>
<br />
Give it a unique name similar to below. I worded it this way as I will also setup a rule to monitor when users are removed from this group (discussed later in this segment). Add a clear description as well. Rule Category is Alert and be sure to set Windows Domain Controller as the Rule target. Check Rule is enabled and Click Next.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNdeADcxi6JmZiezCVUAG5ktsaB608fCWktx-AGcU4CG8wDDW91J5bxFIu95Zc6d38jdsuvfPv7a2Y1V9hRdAP0Atd4UBP_FBs3pq332Yh_taeLfYaz7ekK5QjVY1MM50uggm-KF6E_30/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNdeADcxi6JmZiezCVUAG5ktsaB608fCWktx-AGcU4CG8wDDW91J5bxFIu95Zc6d38jdsuvfPv7a2Y1V9hRdAP0Atd4UBP_FBs3pq332Yh_taeLfYaz7ekK5QjVY1MM50uggm-KF6E_30/s320/02.PNG" width="320" /></a></div>
<br />
For Event Log Name click the ... on the right. Be sure one of your domain controllers is in the Computer field. Then select the Security log. Click OK<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6Rhp6iFmN3B2RvTkdp19j5GYqnKxyjj3-eG7DF9B5_3N3-Gn7Rf2V-tfHPcGpZm4LbmFo8FWvqZSZLerryZ35aXhgb9uqCcM5049aOQGyu2ONbPpxUABslRtYYdtfLpVFGZc9DUQAnE0/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="312" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6Rhp6iFmN3B2RvTkdp19j5GYqnKxyjj3-eG7DF9B5_3N3-Gn7Rf2V-tfHPcGpZm4LbmFo8FWvqZSZLerryZ35aXhgb9uqCcM5049aOQGyu2ONbPpxUABslRtYYdtfLpVFGZc9DUQAnE0/s320/03.PNG" width="320" /></a></div>
<br />
Log name should read Security. If not repeat the previous step. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwguIdTd0Mf-eZ-cI-JD1l1tCznukArC1GOyX6mBz5BOAeLFbGrpSdtM55TtDWYWRL9jP4CZt8rBpGZ0mQ5ux8YnhfiWTxt7WPx-6f4WEiq4YCtIcLjFBb-epUHHIQvf4PnIZLjio-X8M/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwguIdTd0Mf-eZ-cI-JD1l1tCznukArC1GOyX6mBz5BOAeLFbGrpSdtM55TtDWYWRL9jP4CZt8rBpGZ0mQ5ux8YnhfiWTxt7WPx-6f4WEiq4YCtIcLjFBb-epUHHIQvf4PnIZLjio-X8M/s320/04.PNG" width="320" /></a></div>
<br />
For Event ID you want 4728 and change Event Source to Parameter 3 and equals Domain Admins. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAa9VDYyj6IyrjeH7OwwNz_O3mgRQN3o8RnwH-MlEOXXy7nwyCMb4yJuEomCbFJJGl2WJX4aunz6-qTaetD63sziHWoqgO3l85GCt4YY450K_EMCxXH1Yq2DeWOmLduBqaYlI1Vr9lL7U/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAa9VDYyj6IyrjeH7OwwNz_O3mgRQN3o8RnwH-MlEOXXy7nwyCMb4yJuEomCbFJJGl2WJX4aunz6-qTaetD63sziHWoqgO3l85GCt4YY450K_EMCxXH1Yq2DeWOmLduBqaYlI1Vr9lL7U/s320/05.PNG" width="320" /></a></div>
<br />
I modified the Alert Description a little bit to pass through additional information. I also changed the Priority to High. Click Create<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLR-E5n5bfzcc5ZAwSGz8Y2GR1kiiG37GRzT8FkAA_aqppMNU1HE_tS3WoEMa3yaiS0R5YwQIMkcjKW3U_I-Z9e66OVw_Pb651PJZA8-bmArGBTwyMRYFdh2y34_-nRxMnQCMmlA1PLDk/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLR-E5n5bfzcc5ZAwSGz8Y2GR1kiiG37GRzT8FkAA_aqppMNU1HE_tS3WoEMa3yaiS0R5YwQIMkcjKW3U_I-Z9e66OVw_Pb651PJZA8-bmArGBTwyMRYFdh2y34_-nRxMnQCMmlA1PLDk/s320/06.PNG" width="320" /></a></div>
<br />
Give it a bit of time to propagate throughout your environment and test it by adding someone to the DA group.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS0wjAvX-HlzsvKLDTv62yNOZx0n8zWQy56D6Ga2qqiVpnyHP3yvBabyfMQ748RiStkLqxqbijk5p1atgN2JRkLmlD7IU1GIJ-leZ80tUAQ3z_vOQQhDuDNKBLSn55zI_3jF1gw6Pd2ds/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgS0wjAvX-HlzsvKLDTv62yNOZx0n8zWQy56D6Ga2qqiVpnyHP3yvBabyfMQ748RiStkLqxqbijk5p1atgN2JRkLmlD7IU1GIJ-leZ80tUAQ3z_vOQQhDuDNKBLSn55zI_3jF1gw6Pd2ds/s320/07.PNG" width="320" /></a></div>
<br />
This process can be expanded to removing users from the Domain Admins group as well as adding / removing from Schema Admins and Enterprise Admins by using the information below:<br />
<br />
<b>Domain Admins</b><br />
Security Group Alert - User <span style="color: yellow;">Added </span>to <span style="color: yellow;">Domain</span> Admins<br />
Event ID = <span style="color: yellow;">4728</span><br />
Parameter 3 = <span style="color: yellow;">Domain</span> Admins<br />
<br />
Security Group Alert - User <span style="color: yellow;">Removed </span>from <span style="color: yellow;">Domain </span>Admins<br />
Event ID = <span style="color: yellow;">4729</span><br />
Parameter 3 = <span style="color: yellow;">Domain </span>Admins<br />
<br />
<b>Schema Admins</b><br />
Security Group Alert - User <span style="color: yellow;">Added </span>to <span style="color: yellow;">Schema </span>Admins<br />
Event ID = <span style="color: yellow;">4756</span><br />
Parameter 3 = <span style="color: yellow;">Schema </span>Admins<br />
<br />
Security Group Alert - User <span style="color: yellow;">Removed </span>from <span style="color: yellow;">Schema </span>Admins<br />
Event ID = <span style="color: yellow;">4757</span><br />
Parameter 3 = <span style="color: yellow;">Schema </span>Admins<br />
<br />
<b>Enterprise Admins</b><br />
Security Group Alert - User <span style="color: yellow;">Added </span>to <span style="color: yellow;">Enterprise </span>Admins<br />
Event ID = <span style="color: yellow;">4756</span><br />
Parameter 3 = <span style="color: yellow;">Enterprise </span>Admins<br />
<br />
Security Group Alert - User <span style="color: yellow;">Removed </span>from <span style="color: yellow;">Enterprise </span>Admins<br />
Event ID = <span style="color: yellow;">4757</span><br />
Parameter 3 = <span style="color: yellow;">Enterprise </span>Admins<br />
<br />
In <a href="http://jimmoldenhauer.blogspot.com/2017/05/scorch-2016-protecting-active-directory.html">the next segment</a> I will show you how to protect the security groups using SCORCH.<br />
<br />
More to come!<br />
<br />
<br />
If you like this blog, give it a g+1<br />
<br />Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com10tag:blogger.com,1999:blog-2586169794745881237.post-68806307782667435562016-06-07T10:33:00.000-07:002017-05-23T15:08:17.838-07:00SCCM 2012 - How to Deploy SCOM 2012 AgentSo now that we have SCCM 1511 up and running I wanted to setup up a deployment for the SCOM agent. This is actually a very simple application to setup.<br />
<br />
<b>Gather SCOM Agent Files</b>:<br />
So the first thing we need is the SCOM Agent files. On your SCOM server navigate to %ProgramFiles%\System Center 2012\Operations Manager\Server\AgentManagement. You will see AgentLogs, amd64, UnixAgents and x86. Since all the servers in my lab are 64bit I am going to copy the amd64 folder over to my app catalog on my SCCM server. I plan to cover multi-platform deployment in the next segment.<br />
<br />
<b>Create the Application</b>:<br />
Since this is an .msi we will be building an Application. On your SCCM server go to Software Library > Application Management > Applications. Right Click on Applications and choose Create Application. Type is .msi and you will need to browse to the share location of the MOMAgent.msi. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_Z4XpNq9lK7HyuxY-m77csLv3BKagizmkQQ9lzS9SM_MoDbANTAyYDCDW5H9141DrX_NCN-7wMg89vA231SQuKcw9-rfYfi6OKL92EffNimRUI-JEGOBpmvosmiof0t4jq1fxvonND-M/s1600/01.PNG" imageanchor="1"><img border="0" height="283" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_Z4XpNq9lK7HyuxY-m77csLv3BKagizmkQQ9lzS9SM_MoDbANTAyYDCDW5H9141DrX_NCN-7wMg89vA231SQuKcw9-rfYfi6OKL92EffNimRUI-JEGOBpmvosmiof0t4jq1fxvonND-M/s320/01.PNG" width="320" /></a></div>
<br />
If you copied the entire amd 64 folder, all of your install files should be discovered successfully. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0PRUZSgrJkrY1XzfSqRVqi-V6ySK54fRrN1K4uupYrkMWM7VDc5grjeA0J7GCCaad7u_YC0-SsFk_wp7mAwD-pbIc7gHWuuLP0zzUHTQ-R6iQPlCJnU7uqI86thcm0WQjeRGDlN_LN54/s1600/02.PNG" imageanchor="1"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0PRUZSgrJkrY1XzfSqRVqi-V6ySK54fRrN1K4uupYrkMWM7VDc5grjeA0J7GCCaad7u_YC0-SsFk_wp7mAwD-pbIc7gHWuuLP0zzUHTQ-R6iQPlCJnU7uqI86thcm0WQjeRGDlN_LN54/s320/02.PNG" width="320" /></a></div>
<br />
I like to be fairly detailed when building Applications. It makes it easier to manage them in the long run. Fill out the Application information as you feel is necessary. For Installation program you should fill it out as follows (updating the yellow text for your enveronment):<br />
<br />
msiexec /i momagent.msi /qn USE_SETTINGS_FROM_AD=0 USE_MANUALLY_SPECIFIED_SETTINGS=1 MANAGEMENT_GROUP=<span style="color: yellow;">Management Group Name</span> MANAGEMENT_SERVER_DNS=<span style="color: yellow;">FQDN of RMS Server</span> ACTIONS_USE_COMPUTER_ACCOUNT=1 AcceptEndUserLicenseAgreement=1<br />
<br />
Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ9oBzT6_HK2qQ8qkV3Thr6ru5C9a1MmaZtREtUJA_Uv5q2d-f5i2G2xtstTIkmUacogQLr6n3mcLtkRP6dk_xccYcnEcvmSCUVaw1oqz0C6y74a2Vh-rFWQpiKRcSmcMOYinQ3OE9vfI/s1600/03.PNG" imageanchor="1"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJ9oBzT6_HK2qQ8qkV3Thr6ru5C9a1MmaZtREtUJA_Uv5q2d-f5i2G2xtstTIkmUacogQLr6n3mcLtkRP6dk_xccYcnEcvmSCUVaw1oqz0C6y74a2Vh-rFWQpiKRcSmcMOYinQ3OE9vfI/s320/03.PNG" width="320" /></a></div>
<br />
Review the summary and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqxCNZaUQbDUJzGEvZdGhnD2nQwmlHoaSsEvwbNUtW156WAIuvZHVSRB6TltuYQXU1IQA434Cc0Y1yUQ2qhWdYu6BDBRfXi8AjcI_6NZiUa8w3DHON2clPu0n68ESblTHv4mC4Rj-L79M/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqxCNZaUQbDUJzGEvZdGhnD2nQwmlHoaSsEvwbNUtW156WAIuvZHVSRB6TltuYQXU1IQA434Cc0Y1yUQ2qhWdYu6BDBRfXi8AjcI_6NZiUa8w3DHON2clPu0n68ESblTHv4mC4Rj-L79M/s320/04.PNG" width="320" /></a></div>
<br />
Wait for it...<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioQ_m4zVknJ7x_4cqnJ66NiLLlrX9Dmimp18aH8UYiH4vIvD_9OaBWaGXgI1dEfdaGmp4AUi7zqkw_N3VVLUbSqfhIXWxaPz_wwqMvLRmmTD-4cdVUcxJ7PtT8E3q71Guw4F5arlJtVYE/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="281" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioQ_m4zVknJ7x_4cqnJ66NiLLlrX9Dmimp18aH8UYiH4vIvD_9OaBWaGXgI1dEfdaGmp4AUi7zqkw_N3VVLUbSqfhIXWxaPz_wwqMvLRmmTD-4cdVUcxJ7PtT8E3q71Guw4F5arlJtVYE/s320/05.PNG" width="320" /></a></div>
<br />
And Done!<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qE5NJ5duxc32Tu_TRMy-zqAHnEMs_GxN_-jA_-O3Zrsr6kJ3THer-W5MYV37c-US43WBHvOKTkzIicw4Z687TF9JHQboiFn6zwtLg_hYKIBoFjBIXX8-HjsjvcmVTja3hW5xy40dC1g/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qE5NJ5duxc32Tu_TRMy-zqAHnEMs_GxN_-jA_-O3Zrsr6kJ3THer-W5MYV37c-US43WBHvOKTkzIicw4Z687TF9JHQboiFn6zwtLg_hYKIBoFjBIXX8-HjsjvcmVTja3hW5xy40dC1g/s320/06.PNG" width="320" /></a></div>
<br />
One final step. Open the SCOM console and go to Administration > Settings > Security. Change the radio button to Review new manual agent installations in pending management view and Check Automatically approve new manually installed agents. This will allow all newly installed clients to be accepted into the Management Group without any administrator intervention.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsSV9MXhBZhqryAHdPmBtj08lJwV6Fu0GjgrTt3wJLhcCNRJhKxtqsJXnKvjXCZn_L5yewobyX0MCgyg0U-yMaliaU90xqtrqHj_fj7Xqgt4-QisrfJxHvVYR6ggm2Sga01kX6n4Ga3Ho/s1600/15.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsSV9MXhBZhqryAHdPmBtj08lJwV6Fu0GjgrTt3wJLhcCNRJhKxtqsJXnKvjXCZn_L5yewobyX0MCgyg0U-yMaliaU90xqtrqHj_fj7Xqgt4-QisrfJxHvVYR6ggm2Sga01kX6n4Ga3Ho/s320/15.PNG" width="316" /></a></div>
<br />
Distribute the content and deploy to your servers collection and you are all set!<br />
<br />
More to come!<br />
<br />
<br />
If you like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-241170293434509762016-05-31T11:05:00.000-07:002017-05-23T15:52:24.291-07:00SCCM 1602 - UpdateSo one of the really cool things they introduced with 1511 is Updates and Servicing. Remember in <a href="http://jimmoldenhauer.blogspot.com/2016/05/sccm-1511-installation.html">SCOM 1511 - Installation</a> when we mentioned that you want to use the Configuration Manager cloud service?<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjb9alCQ6p27s-xMa8XYMWRoSXTqSU8crGA5WzKUUEC75-b88uYmur8l6lqIInQ9HkHQtK326RfzPaUxvp_Vze8EiG84nOkNABaSIoun9pscHhr50S6XgF3v1yr2VE0RRiTLUiPZzDTBc/s1600/34.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjjb9alCQ6p27s-xMa8XYMWRoSXTqSU8crGA5WzKUUEC75-b88uYmur8l6lqIInQ9HkHQtK326RfzPaUxvp_Vze8EiG84nOkNABaSIoun9pscHhr50S6XgF3v1yr2VE0RRiTLUiPZzDTBc/s320/34.PNG" width="320" /></a></div>
This is part of that. It gives you the ability to do in place upgrades of SCCM as part of the SCCM "Current Branch". Minor version upgrades will come on a monthly basis, and Major upgrades will happen once every four months. Gone are the days of the service pack and update rollup. One think to note, all of the minor upgrades are included in the major update. So you can elect to skip the minors if you want and just install the majors. There were a few minor releases in 2015 but in November Microsoft released the first major, 1511. Get it? November of 2015. Microsoft actually did something that made sense. So in February of this year Microsoft released 1602 Below is a summary of the high points of the release. You can read the entire <a href="https://technet.microsoft.com/en-us/library/mt622084.aspx?tduid=(eb00743db484912b1c85bbde96fc77c5)(256380)(2459594)(TnL5HPStwNw-Ts9BDm8qc5vJzNq1UwIPfg)()">Technet article</a> for additional information.<br />
<br />
<b>Whats New</b>:<br />
<ul>
<li>Client Online Status: You can now view the online status of devices in Assets and Compliance. New icons indicate the status of a device as online or offline.</li>
<li>Support for SQL Server AlwaysOn Availability Groups: Configuration Manager now supports using SQL Server AlwaysOn Availability Groups to host the site database.</li>
<li>Windows 10 Device Health Attestation Reporting: You can now view the status of Windows 10 Device Health Attestation in the Configuration Manager console to ensure that the client computers have a trustworthy BIOS, TPM, and boot software.</li>
<li>Office 365 Update Management: You can now natively manage Office 365 desktop client updates using the Configuration Manager Software Update Management (SUM) workflow. You can manage Office 365 desktop client updates just like you manage any other Microsoft Update.</li>
<li>New Antimalware Policy Settings: New antimalware settings that can now be configured include protection against potentially unwanted applications, user control of automatic sample submission, and scanning of network drives during a full scan.</li>
<li>Windows 10 Servicing: New improvements were added based on your feedback such as filters in servicing plans for upgrades that meet specified criteria, integration with deployment verification and a dialog in Software Center when starting an upgrade.</li>
</ul>
This update also includes new features for customers using System Center Configuration Manager integrated with Microsoft Intune. Some of the features that you can expect to see are:<br />
<ul>
<li>Conditional Access for PCs Managed by Configuration Manager: You can now use conditional access capabilities to help secure access to Office 365 and other services on PCs managed with Configuration Manager agent. Conditions that can be used to control access include: Workplace Join, BitLocker, Antimalware, and Software Updates.</li>
<li>Windows 10 Conditional Access Enhancements: For Windows 10 devices that are managed through the Intune MDM channel, you can now set and deploy an updated Compliance Policy that includes additional compliance checks and integration with Health Attestation Service.</li>
<li>Microsoft Edge Configuration Settings: You can now set and deploy Microsoft Edge settings on Windows 10 devices.</li>
<li>Windows 10 Team Support: You can now set and deploy Windows 10 Team configuration settings.</li>
<li>Apple Volume Purchase Program (VPP) Support: You can now manage and deploy applications purchased through the Apple Volume Purchase Program for Business portal.</li>
<li>iOS App Configuration: You can now create and deploy iOS app configuration policies to dynamically change settings such as server name or port for iOS applications that support these configurations.</li>
<li>iOS Activation Lock Management: New capabilities include enabling iOS Activation Lock management, querying for the status, retrieving bypass codes, and performing an Activation Lock bypass on corporate-owned iOS devices.</li>
<li>Kiosk Mode for Samsung KNOX Devices: Kiosk mode allows you to lock a managed mobile device to only allow certain apps and features.</li>
<li>User Acceptance of Terms and Conditions: You can now see which users have or have not accepted the deployed terms and conditions.</li>
</ul>
<div>
<b>How to install 1602</b>:</div>
<div>
In Administration > Overview > Cloud Services > Updates and Servicing you should see this:</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhnzkQmDaNUU4LT7B19dCRcpHUM5YrPfEcyNXXAH2CGe-y4MRIVd2TEYLg4eGvzVHzl9Mh9iLkUjLCITge_mvAwMeRUz-J9q2BUwI9a0ZatKKq23qXUGV9MMW_GgQNHAKqozja-DZcRuc/s1600/02.PNG" imageanchor="1"><img border="0" height="93" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhnzkQmDaNUU4LT7B19dCRcpHUM5YrPfEcyNXXAH2CGe-y4MRIVd2TEYLg4eGvzVHzl9Mh9iLkUjLCITge_mvAwMeRUz-J9q2BUwI9a0ZatKKq23qXUGV9MMW_GgQNHAKqozja-DZcRuc/s400/02.PNG" width="400" /></a><br />
<div style="text-align: left;">
<span style="color: yellow;">Note - </span>If the update seems to be stuck in the "downloading" state for an extended period, restart the smsexec service to get it to finish.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Now that we have it downloaded we want to Right Click and select Run prerequisite check.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4mAhBiVPb3l1fiSK23KZhPul6TlNyZaDlrWbN3hzttDKXDCoOdX2_blyE6ufowbHDfVoncnZA0WzJCFZY9UbCtiawMk39B7IV-4GuknlKuXXwekZGbm70gjbHSPesxHuivap8Yzab_wQ/s1600/03.png" imageanchor="1" style="clear: left; display: inline !important; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="126" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4mAhBiVPb3l1fiSK23KZhPul6TlNyZaDlrWbN3hzttDKXDCoOdX2_blyE6ufowbHDfVoncnZA0WzJCFZY9UbCtiawMk39B7IV-4GuknlKuXXwekZGbm70gjbHSPesxHuivap8Yzab_wQ/s320/03.png" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
While the prerequisite checker is running you will see the state change to checking prerequisites. Once it is finished you will see prerequiste check passed.</div>
<div style="text-align: left;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvB8hTtYX-Hav5MM3a9-OR7emg4qTToSzQgxmc8d6iY07z2_Nmi1vQIlykkDaEiU73kJoXOWHRv2wvTgjoiSxo3SrrsSoh-cwkqZj5rMcFlBTH3F34ghi3japCuRuttdaBSJz3M3IZ3Uk/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="55" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvB8hTtYX-Hav5MM3a9-OR7emg4qTToSzQgxmc8d6iY07z2_Nmi1vQIlykkDaEiU73kJoXOWHRv2wvTgjoiSxo3SrrsSoh-cwkqZj5rMcFlBTH3F34ghi3japCuRuttdaBSJz3M3IZ3Uk/s400/04.PNG" width="400" /></a></div>
<br /></div>
<div style="text-align: left;">
Right click on the update again and Click Install Update Pack<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizxmZ0m2LfNahXxwCluIeH4dXGj2kPy4K0_W6gtgJ6m24gUNxX0TdFWwznOvaKnAKwU0Um4CjHzhlqboeOYwlBOTG0slBxxl31sX_UeitGvKQWj7OSP_9P03FIuMZz3NFIMDDYp3h1Anw/s1600/05.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="92" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizxmZ0m2LfNahXxwCluIeH4dXGj2kPy4K0_W6gtgJ6m24gUNxX0TdFWwznOvaKnAKwU0Um4CjHzhlqboeOYwlBOTG0slBxxl31sX_UeitGvKQWj7OSP_9P03FIuMZz3NFIMDDYp3h1Anw/s320/05.png" width="320" /></a></div>
<br />
On the Updates Wizard Click Next</div>
<div style="text-align: left;">
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxOLH9ZovHiYSzSXDWBYeJo68v1Hlkuy5RmSEft5BfgQluUo2DdI2bmXtNzcR3ge4_nYO_aRbceNGDYkcVuEMqX9A6BMgU3EPo2ELCtmNjgAIFR7iSVKkqeTLPMLU4lakJ942FQg92Ubw/s1600/06.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxOLH9ZovHiYSzSXDWBYeJo68v1Hlkuy5RmSEft5BfgQluUo2DdI2bmXtNzcR3ge4_nYO_aRbceNGDYkcVuEMqX9A6BMgU3EPo2ELCtmNjgAIFR7iSVKkqeTLPMLU4lakJ942FQg92Ubw/s320/06.PNG" width="320" /></a></div>
<br />
Check the features you want and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfTh4la6JlrpfTvy7kW8aSnKpbqN0rOKu0KZg0vwsyYwOkQO0M69ICLy7uPjAoyILy6J6kWBNWxbOmBHWh6233-9PlAxkmv8SMXGUEgqKRDipIuQR-EVa9Ocx8aJsz2bsduxyyuHKW484/s1600/07.PNG" imageanchor="1"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfTh4la6JlrpfTvy7kW8aSnKpbqN0rOKu0KZg0vwsyYwOkQO0M69ICLy7uPjAoyILy6J6kWBNWxbOmBHWh6233-9PlAxkmv8SMXGUEgqKRDipIuQR-EVa9Ocx8aJsz2bsduxyyuHKW484/s320/07.PNG" width="320" /></a></div>
<br />
You can choose how you want to update the clients, either all or by testing on a specific collection. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEim0shUhC65iS24TWVLl5ySNi9xn_0j4mXLmILztpXEO-ADi-4rC6bSSYnE6VGrbCYqNMIMZBB9gpriaWnDbNpLvEnV2hbnIhXyl5trzOpC05gIgsPx9PRjU51qwbpot3L2GCR5bcukdxc/s1600/08.PNG" imageanchor="1"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEim0shUhC65iS24TWVLl5ySNi9xn_0j4mXLmILztpXEO-ADi-4rC6bSSYnE6VGrbCYqNMIMZBB9gpriaWnDbNpLvEnV2hbnIhXyl5trzOpC05gIgsPx9PRjU51qwbpot3L2GCR5bcukdxc/s320/08.PNG" width="320" /></a></div>
<br />
Accept the EULA and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyTMm8Lc1LYFof4IkvyCpTQ8sDDLp5omf5Xl6g4ARNQYfkTs351r1393cMW1o8wN-YVRAYEh8lh_fFBxxdrt4W2rosaxc9-Bmmypnya6YXAuPihn3SJyTJ5pOqh9DWnG0hHn-zFQ8ygXY/s1600/09.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyTMm8Lc1LYFof4IkvyCpTQ8sDDLp5omf5Xl6g4ARNQYfkTs351r1393cMW1o8wN-YVRAYEh8lh_fFBxxdrt4W2rosaxc9-Bmmypnya6YXAuPihn3SJyTJ5pOqh9DWnG0hHn-zFQ8ygXY/s320/09.PNG" width="320" /></a></div>
<br />
Review the summary and Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRsxuFfj-keNxNdX2FM5B8MBz1Z1XZKw7Nd7zgc1Kjv7AkcfQSo0fPBmxTV9cs666CeS0F7vJ3dfzTjYsGJQMf7UX19g4D1y-QMskT5Cfk9Y6CxJuDeF5KMLwfLuWAOAa05WXty3fEFdw/s1600/10.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRsxuFfj-keNxNdX2FM5B8MBz1Z1XZKw7Nd7zgc1Kjv7AkcfQSo0fPBmxTV9cs666CeS0F7vJ3dfzTjYsGJQMf7UX19g4D1y-QMskT5Cfk9Y6CxJuDeF5KMLwfLuWAOAa05WXty3fEFdw/s320/10.PNG" width="320" /></a></div>
<br />
Click Close and wait<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4Vsha-L3zz4DR0TUivUhHas_IA0TGRu13kRjPdurZ5qfQHkSxVBPlFYh-vFC1LUH3edhgWlcHMWafhCHpqwr7R7Hg_3N0cDAKTGkBbuVquloEeolCzgiJI6RwzCtBYIdKbpBdr4D79V4/s1600/11.PNG" imageanchor="1"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4Vsha-L3zz4DR0TUivUhHas_IA0TGRu13kRjPdurZ5qfQHkSxVBPlFYh-vFC1LUH3edhgWlcHMWafhCHpqwr7R7Hg_3N0cDAKTGkBbuVquloEeolCzgiJI6RwzCtBYIdKbpBdr4D79V4/s320/11.PNG" width="320" /></a></div>
<br />
There is a console upgrade in 1602 so as soon as the install finishes you will be prompted to update the console. Anyone who has a remote installation of the console will also be prompted.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTdUQ0ZdkTt9TVF0wpD7xWJxva_P7A2HoP8kCwaWEodguaOq5ImH8Br8Dc7irqgBhPwcduPFMuQ4CZq5U0NkH45wrl4BnvRw4-XKAOmUltwYp2a10GaIL5onFAS2nU-HTNp3zhbcJ08ps/s1600/12.PNG" imageanchor="1"><img border="0" height="131" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTdUQ0ZdkTt9TVF0wpD7xWJxva_P7A2HoP8kCwaWEodguaOq5ImH8Br8Dc7irqgBhPwcduPFMuQ4CZq5U0NkH45wrl4BnvRw4-XKAOmUltwYp2a10GaIL5onFAS2nU-HTNp3zhbcJ08ps/s320/12.PNG" width="320" /></a></div>
<br />
When the console update finishes it will open back up again and you can track the progress of the client updates. You will notice that the Hierarchy Site Version<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg77ia0LdG8HvFChLxQEUlmqjl_KiWcA-MblcuJ0wY1wNsCqZKNgbbD0jgjPiT99GHjZGsqFNBZcEqnAosgqARSbR5gva4J8jyqqPVOgPKG7SaYNl2GuxhiFWzPLsowmvM_JY5BQuerGv4/s1600/14.5.PNG" imageanchor="1"><img border="0" height="75" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg77ia0LdG8HvFChLxQEUlmqjl_KiWcA-MblcuJ0wY1wNsCqZKNgbbD0jgjPiT99GHjZGsqFNBZcEqnAosgqARSbR5gva4J8jyqqPVOgPKG7SaYNl2GuxhiFWzPLsowmvM_JY5BQuerGv4/s400/14.5.PNG" width="400" /></a></div>
<br />
matches the Client version<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC65To0BDKydhKphRrYsS54FydiO47OA0JMGJgWvSuusfKYMTLTw02yEiP2qSohJWDxYXGZc3tPgpqfo9CEK0wwRMon7R7z-gHxDVrQh0YT9AePZUy6jjChcvpq7Zsp6pmeHrxay9RCiA/s1600/15.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="63" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgC65To0BDKydhKphRrYsS54FydiO47OA0JMGJgWvSuusfKYMTLTw02yEiP2qSohJWDxYXGZc3tPgpqfo9CEK0wwRMon7R7z-gHxDVrQh0YT9AePZUy6jjChcvpq7Zsp6pmeHrxay9RCiA/s320/15.PNG" width="320" /></a></div>
<br />
Please keep in mind the size of your environment will dictate how long this process takes. Very large builds could take days or even weeks to update all of the clients.<br />
<br />
Also, if you have not enabled automatic client updates Administration > Overview > Site Configuration > Sites > Hierarchy Settings > Client Upgrade Tab and check Upgrade all clients in the hierarchy using production client, the clients will not update on their own.<br />
<br />
More to come!<br />
<br />
<br />
If you like this blog, give it a g+1<br />
<br /></div>
</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-5637439062956301472016-05-26T08:20:00.001-07:002017-05-23T15:51:52.451-07:00SCCM 1511 - InstallationSo a few years ago I did three segments on how to install SCCM 2012. It covered the <a href="https://jimmoldenhauer.blogspot.com/2013/05/windows-2008r2-wsus-installation.html">WSUS installation and configuration</a>, the <a href="https://jimmoldenhauer.blogspot.com/2013/05/sccm-2012-installation-part-1.html">SCCM prerequisite installs</a> and the actual <a href="https://jimmoldenhauer.blogspot.com/2013/05/sccm-2012-installation-part-2-install.html">SCCM install</a>. Since the time of those writings that method has become obsolete. A man by the name of <a href="http://www.scconfigmgr.com/">Nickolaj Andersen</a> wrote a very cool PowerShell based tool called the <a href="https://gallery.technet.microsoft.com/ConfigMgr-2012-R2-e52919cd#content">ConfigMgr Prerequisites Tool</a> to run through all the pre-installation steps required. At the time of this writing it was on version 1.4.2 which supports SCCM 2012, SCCM 2012 R2 and SCCM Current Branch (1511+). So I am going to run through the updated 1511 install using this tool.<br />
<br />
<b>What you need before you begin</b>:<br />
<ol>
<li>Download the tool (linked above)</li>
<li>On your SCCM server set your PowerShell execution policy to Unrestricted. </li>
<ul>
<li>Set-ExecutionPolicy Unrestricted</li>
</ul>
<li>In Active Directory identify the Schema Master server</li>
<li>In Active Directory create a service account called SCCMAdmin. This needs to be a SysAdmin on your SQL server and a Local Admin on all SCCM servers</li>
<li>In Active Directory create a security group called SCCM Site Servers and add all the SCCM servers and the SCCM Admin account to this group</li>
</ol>
<span style="color: yellow;">Note -</span> There are a few caveats to using the ConfigMgr Prerequisites Tool, however. You can only run it on Server 2012 and Server 2012 R2 and it <u><b>should not</b></u> be run on a Domain Controller (If you are trying to install SCCM on a DC please slap yourself and rethink that plan). The account you use to run the tool needs to be a member of Domain and Schema Admins in order to execute a couple of the steps (described below).<br />
<br />
When you first run the tool it does a validation check to see if reboots are required, you are on a supported server, you have a supported version of PowerShell and the account you are using is a local administrator on this machine. You will also notice the current supported SCCM versions in the lower left.<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDOZpH3dCmwiJ4V90jv5dUrgt1G4VZGgSqtKXWjT4YMkbBm4wa-l8yhWWJFOxmMUZuR7qBBZAGCtrdlrXUiNfCORrSrqDlMX7WNR62tq6F3TKYU6I1pV6NB2dCJkfcTEvgRxDOyjNKoI8/s1600/01.PNG" imageanchor="1"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDOZpH3dCmwiJ4V90jv5dUrgt1G4VZGgSqtKXWjT4YMkbBm4wa-l8yhWWJFOxmMUZuR7qBBZAGCtrdlrXUiNfCORrSrqDlMX7WNR62tq6F3TKYU6I1pV6NB2dCJkfcTEvgRxDOyjNKoI8/s320/01.PNG" width="320" /></a></div>
<div>
Since we have Green Check marks across the board, lets begin!</div>
<div>
<br /></div>
<div>
<b>System Management Container</b>:</div>
<div>
If you click on the Other tab at the top and Select System Management Container. Check the box Create the System Management container and select Search.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinI5qvBhEOHOLPRTMeLP0Z2tWFh5f-fsKfvQP3J5dHAe_9inpDRzTPOW2ZpePZzD4P662lpRhZBqtB54irv0uwfoJAIvsPouGNt6li1uG4f7aPjkcKZjPlM80NotKJYeLJZhpjs81PWaE/s1600/02.PNG" imageanchor="1"><img border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinI5qvBhEOHOLPRTMeLP0Z2tWFh5f-fsKfvQP3J5dHAe_9inpDRzTPOW2ZpePZzD4P662lpRhZBqtB54irv0uwfoJAIvsPouGNt6li1uG4f7aPjkcKZjPlM80NotKJYeLJZhpjs81PWaE/s320/02.PNG" width="320" /></a></div>
<div>
<br /></div>
<div>
Enter in the name of the security group created above and Click Search. Once it is found select it in the window below and Click OK. If you are not a member of Domain Admins you will not be able to add the selected group when you search.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZIRm5FBR9A-kbykBXJishOOHu4TWFwfMWpAoLevMpgHS9sl9H65hIb4wOI02kQ-zFmSyesqkLOh773QfwmOQJyuxmbF6e-eRnR9tOpQs0r_dVwLc0GI5WeE2P5MYImzCtKOGbpxSsDcg/s1600/03.PNG" imageanchor="1"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZIRm5FBR9A-kbykBXJishOOHu4TWFwfMWpAoLevMpgHS9sl9H65hIb4wOI02kQ-zFmSyesqkLOh773QfwmOQJyuxmbF6e-eRnR9tOpQs0r_dVwLc0GI5WeE2P5MYImzCtKOGbpxSsDcg/s320/03.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
This will go out to ADSI, create the Systems Management Container. It will then go to AD and add the security group defined above and set delegation permissions for it.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBl-A8kntzP4VZjRvh1cE24F6FaIqc2rxRd0jFzTvzVIw-C34ka2lZatE4fEyRLRI-TaQ6kxKwRwIkQbFdOmYDNXQQQlqWN6miY92PhdEZtmoG_uH78rWk4hoj4zVBvXeKiXkcK9bofnw/s1600/04.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBl-A8kntzP4VZjRvh1cE24F6FaIqc2rxRd0jFzTvzVIw-C34ka2lZatE4fEyRLRI-TaQ6kxKwRwIkQbFdOmYDNXQQQlqWN6miY92PhdEZtmoG_uH78rWk4hoj4zVBvXeKiXkcK9bofnw/s320/04.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Extend Active Directory Schema</b>:</div>
<div style="text-align: left;">
Now click on the Extend Active Directory Schema radio button. You will be asked for the name of the Schema Master server name. Once you enter it in Click Extend. If you are not a member of Schema Admins you will get an error at this point.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlC2mO7YTAoV9FrNFdpMb4lz2-5HVTvjIcgnUcwXxOEzINkgIOc6ZM8UGhuVOt5eD00YUDca-tHpZ0n0cI1AuDemNxzkvXkUv01pHBz5fr6vFRBTEboZp1DYTmKpytCauXSz_FXih5QA/s1600/05.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXlC2mO7YTAoV9FrNFdpMb4lz2-5HVTvjIcgnUcwXxOEzINkgIOc6ZM8UGhuVOt5eD00YUDca-tHpZ0n0cI1AuDemNxzkvXkUv01pHBz5fr6vFRBTEboZp1DYTmKpytCauXSz_FXih5QA/s320/05.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
You will be prompted for the location of the SMSSETUP\BIN\X64 folder so it can locate the extadsch.exe file to execute the AD Schema extension.</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimvY57Rfg9kA6aN4ODfFJZPSuKkQYrgGpcFlFIPVatd8hr7AAL7BZ88sORH28gZujXROLGfOCXlyqitRAriX90nY9IPzdWxC_IY4VS7etSwnr5znOtUxil2PjhgmNJUiNCoL-KyKU5hbg/s1600/06.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimvY57Rfg9kA6aN4ODfFJZPSuKkQYrgGpcFlFIPVatd8hr7AAL7BZ88sORH28gZujXROLGfOCXlyqitRAriX90nY9IPzdWxC_IY4VS7etSwnr5znOtUxil2PjhgmNJUiNCoL-KyKU5hbg/s320/06.PNG" width="276" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Verify that it was successful</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirLVYuYPm54NjUgYMEZNpsmoGuOmqWC0V-92s2pP8VnFXtj5AqlIzh3jCi_PWGN1z95o6rWvVsMRSaMd95KCh9000Qd6ItKeOne8QDjawesskAikz4t3554Z3-2R1B3O0WAA8oh5WUWVs/s1600/07.PNG" imageanchor="1"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirLVYuYPm54NjUgYMEZNpsmoGuOmqWC0V-92s2pP8VnFXtj5AqlIzh3jCi_PWGN1z95o6rWvVsMRSaMd95KCh9000Qd6ItKeOne8QDjawesskAikz4t3554Z3-2R1B3O0WAA8oh5WUWVs/s320/07.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Windows ADK</b>:</div>
<div style="text-align: left;">
Next we will install the Windows Assessment and Deployment Kit. Select the Install Windows ADK radio button. You will see that you have two installation Methods available to you, Offline and Online. If you have already downloaded the ADK you can do an offline install, otherwise select Online. You can also install either ADK 8.1 or ADK 10. Since we are going to install SCCM 1511, ADK 10 is required. Click Install</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHGjAwslFW1ujz4vgB8RbWHpUBw8VgK6DovqTj6HgI3m-kbPpm_9fxo0QctgW0kX8Wh5WutzIAU8eo37Knxl9V1PG2EAot-htkq3LOt8923GNXn3UfdN4kfq6zU6OiQXps76wRKOFFL84/s1600/7.5.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHGjAwslFW1ujz4vgB8RbWHpUBw8VgK6DovqTj6HgI3m-kbPpm_9fxo0QctgW0kX8Wh5WutzIAU8eo37Knxl9V1PG2EAot-htkq3LOt8923GNXn3UfdN4kfq6zU6OiQXps76wRKOFFL84/s320/7.5.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Verify it was successful</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihmJloTCESQrFi-oRWFz9tHsBJp_B6v4lG3xeJbxxi4VuB1IfGUNuh5-XHW4_-NUNUgHT4dzVcMNoASLmRRkSNRE_Z0X7XBGPy3v90pD3L40-kkcvFj9Lw-u6yn3Zhos457YhmuRDEzm8/s1600/08.PNG" imageanchor="1"><img border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihmJloTCESQrFi-oRWFz9tHsBJp_B6v4lG3xeJbxxi4VuB1IfGUNuh5-XHW4_-NUNUgHT4dzVcMNoASLmRRkSNRE_Z0X7XBGPy3v90pD3L40-kkcvFj9Lw-u6yn3Zhos457YhmuRDEzm8/s320/08.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Install WSUS</b>:</div>
<div style="text-align: left;">
Now select the Install WSUS radio button. Since I already have SQL 2014 SP1 installed I am going to leverage that for the WSUS install. You can also use the Windows Internal Database if you choose. After filling in the appropriate information Click Install</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEismF-qqklSmSSv11xVeVAahOqkNtT_oT5N-pqLXW44W2Nx1u3NCU01C0-X4rHL0ot-eLfnu9U-1yEF90DN7nbDIsMNj3Gk6Ww3yDoSBxniiOBNqp_skGUbcwPfTn7G5uN8KKIInf68_fc/s1600/09.PNG" imageanchor="1"><img border="0" height="210" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEismF-qqklSmSSv11xVeVAahOqkNtT_oT5N-pqLXW44W2Nx1u3NCU01C0-X4rHL0ot-eLfnu9U-1yEF90DN7nbDIsMNj3Gk6Ww3yDoSBxniiOBNqp_skGUbcwPfTn7G5uN8KKIInf68_fc/s320/09.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
You will be prompted for a save location for the WSUS Content. I created a new folder on c:\ called WSUS Content and Clicked OK</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHyFWnojo8R9eup15G8idqFjMbmwYD0G6FwpOgiUz2PvuHQspLHf-6xXORzh9_DVdtsIVTERFStDHZCO3NX9RRTSnq4guXRY_gV7AUhhBdl-4MI9GiqAkhd4G7rrSWysYTvpMDX7CDR-c/s1600/10.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHyFWnojo8R9eup15G8idqFjMbmwYD0G6FwpOgiUz2PvuHQspLHf-6xXORzh9_DVdtsIVTERFStDHZCO3NX9RRTSnq4guXRY_gV7AUhhBdl-4MI9GiqAkhd4G7rrSWysYTvpMDX7CDR-c/s320/10.PNG" width="277" /></a></div>
<div style="text-align: left;">
<span style="color: yellow;">Note -</span> This is obviously not an ideal configuration. In a production environment you would not want this on the c:\ but since this is just a lab it didn't matter</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
All good!</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqXYpd9Is53Bm0g0yjF27kO4WucoG2v81KVc5fU8GwVKkZzJqiAKsLPrS84Kn7dQ9hIJeN3gRIKZvUKZqQCjvV4qIFqAE5nOlx-2vQHdyh-FaEv9jA23MI3-pplbLtLgeRtBL-HOAAod8/s1600/11.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqXYpd9Is53Bm0g0yjF27kO4WucoG2v81KVc5fU8GwVKkZzJqiAKsLPrS84Kn7dQ9hIJeN3gRIKZvUKZqQCjvV4qIFqAE5nOlx-2vQHdyh-FaEv9jA23MI3-pplbLtLgeRtBL-HOAAod8/s320/11.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<span style="color: yellow;">Note -</span> Since we are also going to be supporting Windows 10 in this lab you will need to download and install <a href="https://support.microsoft.com/en-us/kb/3095113">KB3095113</a> which provides WSUS support for Windows 10 feature upgrades.</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>Primary Site Prerequisite Installs</b>:</div>
<div style="text-align: left;">
We are going to be building a Primary site so Click on the Primary Site Tab. Be sure to Check the box Download prerequisite files and Click Install</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9gNs-lCgyGMn0LQvjcQhX7Qz0-Kzpzf0IQIOsE9qYxxF_Ssul3-oqlDXdMzfw1FxOBUnhopNXwyJz_Sx1RJl7X9GCyQtzDP-1T8BklTPDfhyphenhyphenk_zybl-TZMl0uvByAehTA2lwhAYCEImU/s1600/12.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9gNs-lCgyGMn0LQvjcQhX7Qz0-Kzpzf0IQIOsE9qYxxF_Ssul3-oqlDXdMzfw1FxOBUnhopNXwyJz_Sx1RJl7X9GCyQtzDP-1T8BklTPDfhyphenhyphenk_zybl-TZMl0uvByAehTA2lwhAYCEImU/s320/12.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
You will be prompted for a save location for the downloads after all the roles and features are installed. I created a new folder c:\downloads</div>
<div style="text-align: left;">
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS80ESo5ZSNm7Pj555oXCV18NPdTHBb_Je1UFZs6VF84yd7vgmyQj3lRbfK_53IK6ZKt6ECSxub3oF0UBLNLrzOU_0QEUD8ngW883FyXgtXQU1-3t9jJSdOp9X8P4t18Nib5F_L3dynLU/s1600/13.5.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS80ESo5ZSNm7Pj555oXCV18NPdTHBb_Je1UFZs6VF84yd7vgmyQj3lRbfK_53IK6ZKt6ECSxub3oF0UBLNLrzOU_0QEUD8ngW883FyXgtXQU1-3t9jJSdOp9X8P4t18Nib5F_L3dynLU/s320/13.5.PNG" width="252" /></a></div>
</div>
<div style="text-align: left;">
<br />
Then you will also be prompted for the \SMSSETUP\BIN\X64 folder so it can verify version information for the download<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm2uWXeU7THpNgrbwx2f7xPsA_ygg1IY9uZn9EWMl-zcZdtV91suCNKw2WyaGiIiU1owPRnvcTEdznbUno1z4IKiInxhONDWCIa2MbxjNk746YzVvyVQO5vpi4xQbAEq-UdjzxqIfuoMQ/s1600/13.6.PNG" imageanchor="1"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm2uWXeU7THpNgrbwx2f7xPsA_ygg1IY9uZn9EWMl-zcZdtV91suCNKw2WyaGiIiU1owPRnvcTEdznbUno1z4IKiInxhONDWCIa2MbxjNk746YzVvyVQO5vpi4xQbAEq-UdjzxqIfuoMQ/s320/13.6.PNG" width="254" /></a></div>
<br />
A lot better than doing it the hard way!</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDM3SR4mtoRn0NnVyzv59SHMj680arsP1CP72U5kPG7jJKV-sq5gMA1pcPBY0wWQ_BobKNHkesbGuaeAtNZHEhV0wdYysK9tqFJ3MLgqhSWVaUa3y7iG4NIzDg04b2GZhq5O8X8MkhaKs/s1600/13.PNG" imageanchor="1"><img border="0" height="211" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDM3SR4mtoRn0NnVyzv59SHMj680arsP1CP72U5kPG7jJKV-sq5gMA1pcPBY0wWQ_BobKNHkesbGuaeAtNZHEhV0wdYysK9tqFJ3MLgqhSWVaUa3y7iG4NIzDg04b2GZhq5O8X8MkhaKs/s320/13.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<b>SCCM Install</b>:</div>
<div style="text-align: left;">
Now that the server is prepped (and in record time), we are ready to run the SCCM install. If you are not logged in as the SCCMAdmin account do so now. Double Click on splash.hta. Make sure you have Version 1511. Click Install<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghm291k_sB-hW-3Otsp7rJLHZJ7MhiamiCBB6rmE5gt4oA9v5WCG_Q3-iURrmYSXhix2SoxU2qWhFwMjAUyIrfCpRq6bcpls6c_IBhc8fRWkKLtD8kqO-Dj-0e7jPZqZgrYmfbaD47K1A/s1600/15.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghm291k_sB-hW-3Otsp7rJLHZJ7MhiamiCBB6rmE5gt4oA9v5WCG_Q3-iURrmYSXhix2SoxU2qWhFwMjAUyIrfCpRq6bcpls6c_IBhc8fRWkKLtD8kqO-Dj-0e7jPZqZgrYmfbaD47K1A/s320/15.PNG" width="320" /></a></div>
<br />
Click Next<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwXL0l2PHKWeVj0gaWfOfEuQeEJzwYDV0QYXlDgJbL4wAoQ5oH-EL2TK8tBzby-Xd_EStTYhv4rP4MUdwauG933s6LDZUDPlVjwGMkiDSbSsTmljf0__eoTk55p9PaO1SwvxhB2SbO-f4/s1600/16.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwXL0l2PHKWeVj0gaWfOfEuQeEJzwYDV0QYXlDgJbL4wAoQ5oH-EL2TK8tBzby-Xd_EStTYhv4rP4MUdwauG933s6LDZUDPlVjwGMkiDSbSsTmljf0__eoTk55p9PaO1SwvxhB2SbO-f4/s320/16.PNG" width="320" /></a></div>
<br />
Select Install a Configuration Manager primary site and Click Next</div>
<div style="text-align: left;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggbYhSHbtpjqV06aNVCa0w4_ij9VNsifyvAwegpLsGSlp__rvVKLb8xMgqIWFdJq71bBYakx2WU9wNjFNzCehaQ2x69HrQCbDtR27VZ9SdMm3Inb1RDIITPBAvZd3ZlMb2wCl8_e-oU80/s1600/17.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggbYhSHbtpjqV06aNVCa0w4_ij9VNsifyvAwegpLsGSlp__rvVKLb8xMgqIWFdJq71bBYakx2WU9wNjFNzCehaQ2x69HrQCbDtR27VZ9SdMm3Inb1RDIITPBAvZd3ZlMb2wCl8_e-oU80/s320/17.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter your license key and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiY2wdD9BK218kB8KISMGtj1CxOTXqKkZc5qgTtlq4k6rpoVL66ewvcerpex-FceWPzGJh1HT-St950zAvmFVP3m_d7K6Kr79P804RkwNfeKxdZjJzd0Uum2o7zMxInWz13bBq8wQhDK00/s1600/18.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiY2wdD9BK218kB8KISMGtj1CxOTXqKkZc5qgTtlq4k6rpoVL66ewvcerpex-FceWPzGJh1HT-St950zAvmFVP3m_d7K6Kr79P804RkwNfeKxdZjJzd0Uum2o7zMxInWz13bBq8wQhDK00/s320/18.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Accept the EULA and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgto7jSy5waPc_aen0SNmOcYFy8t8Y-6m0LUGdOyqMEce95nkpNiDvpAU7BHNJEujRPwsmAtTsTMGtaQ6jPKmKKFHP65iBgckjXJZ0PXFYsQOVzg099ktFnXgMRcumN2Zsgrv0skEiE0NM/s1600/19.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgto7jSy5waPc_aen0SNmOcYFy8t8Y-6m0LUGdOyqMEce95nkpNiDvpAU7BHNJEujRPwsmAtTsTMGtaQ6jPKmKKFHP65iBgckjXJZ0PXFYsQOVzg099ktFnXgMRcumN2Zsgrv0skEiE0NM/s320/19.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div style="text-align: left;">
I am still surprised this has not been changed. Accept all three (even though we wont be using SQL Server Express). Click Next</div>
<div style="margin-left: 1em; margin-right: 1em; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKQ2NNKPHn7rKf32GdaBBM154q7crUgqrarlwMynM0YyQwNpXcCuaCiHMt63wb3UkmUBav0kjcc2iFKIfuJIkrNe1k6cclmpNfYeRg7kDIOoVaEEqbl1Ba9vRS4zSHD5UtXQEMuPq2lic/s1600/20.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKQ2NNKPHn7rKf32GdaBBM154q7crUgqrarlwMynM0YyQwNpXcCuaCiHMt63wb3UkmUBav0kjcc2iFKIfuJIkrNe1k6cclmpNfYeRg7kDIOoVaEEqbl1Ba9vRS4zSHD5UtXQEMuPq2lic/s1600/20.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKQ2NNKPHn7rKf32GdaBBM154q7crUgqrarlwMynM0YyQwNpXcCuaCiHMt63wb3UkmUBav0kjcc2iFKIfuJIkrNe1k6cclmpNfYeRg7kDIOoVaEEqbl1Ba9vRS4zSHD5UtXQEMuPq2lic/s320/20.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
Since we have already downloaded the install files Select Use previously downloaded files and browse to the download location. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFyxUOUDIWU8XrB9CMFaE1GsLfRV9AtG69jqe0N5FJj61d81fHUN5-8m4nKu__LllIVodTWFzxTd653ZYTK8XoPfp1GhWTCDjhxpY8NlczmItGk6p2boTlUt2QemYuf2uZGptUMVaVGhc/s1600/21.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFyxUOUDIWU8XrB9CMFaE1GsLfRV9AtG69jqe0N5FJj61d81fHUN5-8m4nKu__LllIVodTWFzxTd653ZYTK8XoPfp1GhWTCDjhxpY8NlczmItGk6p2boTlUt2QemYuf2uZGptUMVaVGhc/s320/21.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
The install will verify that all files needed are present</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7Jjkikp8q639WhWLzxDP4jpS9YtERhyphenhyphengfWw1v-2VswzDfa8yOkCX7ON24BALXymVLb9b0Hs3tTMBR8o9s6mcuJS8avvpI6AWjTQlIaMqMF32IwR8wMXZLTlCH-tHHF9t3J_Fm6-ug1eI/s1600/22.PNG" imageanchor="1"><img border="0" height="139" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7Jjkikp8q639WhWLzxDP4jpS9YtERhyphenhyphengfWw1v-2VswzDfa8yOkCX7ON24BALXymVLb9b0Hs3tTMBR8o9s6mcuJS8avvpI6AWjTQlIaMqMF32IwR8wMXZLTlCH-tHHF9t3J_Fm6-ug1eI/s320/22.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Select all appropriate server languages and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUoW5yTBXYl_wkOu-ImPKYarZS0xd3fgqqiGK1_ny2_NhF2m8gtj1B23-2EK-ExosksH-qA5DdwIa6swFa6xkfXGxzbfBuo6Jj7fFz8Abg3Qgf7fb0ghqXxMXIqd1ZohD_QfLheqdsOq0/s1600/23.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUoW5yTBXYl_wkOu-ImPKYarZS0xd3fgqqiGK1_ny2_NhF2m8gtj1B23-2EK-ExosksH-qA5DdwIa6swFa6xkfXGxzbfBuo6Jj7fFz8Abg3Qgf7fb0ghqXxMXIqd1ZohD_QfLheqdsOq0/s320/23.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Select all appropriate client languages and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi18GNhY-M8ocrk1bOb7DDxy_0_9oXq6gtTn_M9hsj18wAKT-hOKi6z7Cmn6ZhEs73Ul3P2qZYAsjUuZJ-nxC_kZQt0F8CAxwihmY05fEfTAjkWdKpUbn1mkM7tkH533uZJesIfEbUQa20/s1600/24.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi18GNhY-M8ocrk1bOb7DDxy_0_9oXq6gtTn_M9hsj18wAKT-hOKi6z7Cmn6ZhEs73Ul3P2qZYAsjUuZJ-nxC_kZQt0F8CAxwihmY05fEfTAjkWdKpUbn1mkM7tkH533uZJesIfEbUQa20/s320/24.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Enter a site code and site name. You can also modify the install location. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCZJRoXInhz6S-q8keC9urt4ixlJiJZbMoZpOdOoaCi5kR2PoQ9tcJJnKnAyaPZTv76I-PUOgejVsP50ON7elk_Z6gJbZabXzlbpOAu1Ju2GJRUd8x-w4O-6zPxz1ZYvv3aVIgaM9gaMQ/s1600/25.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiCZJRoXInhz6S-q8keC9urt4ixlJiJZbMoZpOdOoaCi5kR2PoQ9tcJJnKnAyaPZTv76I-PUOgejVsP50ON7elk_Z6gJbZabXzlbpOAu1Ju2GJRUd8x-w4O-6zPxz1ZYvv3aVIgaM9gaMQ/s320/25.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
This is going to be a new stand alone primary so select Install the primary site as a stand-alone site and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM7u61_FZqxqp52V1YvPZ-iim9VAZn74zA7DTMLwUpVsiql0EFS5_R62G1ZEiJFaPWpYH0lLABCsg5xq33A_pLHfrT6nRpz_Qb4DNbI1vVj-T7Uts2k6kyazzTDKlfS-u0Rx-3saopQw0/s1600/26.PNG" imageanchor="1"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM7u61_FZqxqp52V1YvPZ-iim9VAZn74zA7DTMLwUpVsiql0EFS5_R62G1ZEiJFaPWpYH0lLABCsg5xq33A_pLHfrT6nRpz_Qb4DNbI1vVj-T7Uts2k6kyazzTDKlfS-u0Rx-3saopQw0/s320/26.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Nice feature added in 2012 R2. You can add additional members of the hierarchy at a later time if you need to. Select Yes</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7D2l9KfYwp56_F-3ybxLW9QjGrYZHDjMWrg9Hj70DOSX_YC3MWIEcVsXpMdzWhUp_y_k6tyaMEx2wFUD3GPJS4UE0-ehRR8uzj-gbWxxhnAn0tbXRaMmQpNtvF7TqPwTY6jIZhrdv508/s1600/27.PNG" imageanchor="1"><img border="0" height="120" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7D2l9KfYwp56_F-3ybxLW9QjGrYZHDjMWrg9Hj70DOSX_YC3MWIEcVsXpMdzWhUp_y_k6tyaMEx2wFUD3GPJS4UE0-ehRR8uzj-gbWxxhnAn0tbXRaMmQpNtvF7TqPwTY6jIZhrdv508/s320/27.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Verify your SQL installation information and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi0voDe6ToUvV_4HypB5ELQ2W63OwaZSGEVDdM3DiJv0zBC6q7VCS2qwVwkYa-eI4DPlmWBrdEjp6YmTLg6TueSmK1u-woJ9RgSdnC1X-OWWEuzcARQoT4PcywX_kOKw-32NBhrK_93cM/s1600/28.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhi0voDe6ToUvV_4HypB5ELQ2W63OwaZSGEVDdM3DiJv0zBC6q7VCS2qwVwkYa-eI4DPlmWBrdEjp6YmTLg6TueSmK1u-woJ9RgSdnC1X-OWWEuzcARQoT4PcywX_kOKw-32NBhrK_93cM/s320/28.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
You can modify the file locations if your SQL procedures dictate. Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkTiNC6fGSnhCgOklelm1-exU7EOINKq-dFpHfC2orEJ7Vg8ivd_pjnSePK07wRxMct6zTIOakE7Yu4TypYEVBOJrlpprAGVUpCO0vhg0xdl9gQl1RE7D1JVlVa7x-J9RdvntGncauhlw/s1600/29.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkTiNC6fGSnhCgOklelm1-exU7EOINKq-dFpHfC2orEJ7Vg8ivd_pjnSePK07wRxMct6zTIOakE7Yu4TypYEVBOJrlpprAGVUpCO0vhg0xdl9gQl1RE7D1JVlVa7x-J9RdvntGncauhlw/s320/29.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Since we only have the one Primary, Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh56fOQN-OwVa67kGu2Gyp_LhFLgbmYDOhMCjsjNQ0ONQQDEX3EUMOnDeDaWlBXlyJGHY34NtEphtzNdBw2cjrTLkBEqRC5R0UwwowB6JvqLdJyDEy3DR7eGXEuNaBkfUURE-_1U6-HxFk/s1600/30.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh56fOQN-OwVa67kGu2Gyp_LhFLgbmYDOhMCjsjNQ0ONQQDEX3EUMOnDeDaWlBXlyJGHY34NtEphtzNdBw2cjrTLkBEqRC5R0UwwowB6JvqLdJyDEy3DR7eGXEuNaBkfUURE-_1U6-HxFk/s320/30.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Choose Configure the communication method on each site system role and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmsHgbmZmRMAMOAJUcHkBDwIrnjtALuxTd9aKc17F6wbFVn53cZrTD-MaJS791ceJD9cScc6khze1ceGPtMoOpNmQBRRUaaHTl7tQXxII2qAc31X7AUUobzWF_hn1nv5HufmgQ706PS2Y/s1600/31.PNG" imageanchor="1"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmsHgbmZmRMAMOAJUcHkBDwIrnjtALuxTd9aKc17F6wbFVn53cZrTD-MaJS791ceJD9cScc6khze1ceGPtMoOpNmQBRRUaaHTl7tQXxII2qAc31X7AUUobzWF_hn1nv5HufmgQ706PS2Y/s320/31.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
We want this server to be a Management Point and a Distribution Point so Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXnUxIgJ0OYh91gNvFQ9c8lTEqhdeeEGEsm3a69emb2__L0Yib8Jf4bA92UVeQolcPS3qdUQeLh7Mvm1nCeokVXTS6uvVnv6NgM0I6zzC_65PAmIojAWoZcdeR2R9XxE9lrJlzojonjrY/s1600/32.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXnUxIgJ0OYh91gNvFQ9c8lTEqhdeeEGEsm3a69emb2__L0Yib8Jf4bA92UVeQolcPS3qdUQeLh7Mvm1nCeokVXTS6uvVnv6NgM0I6zzC_65PAmIojAWoZcdeR2R9XxE9lrJlzojonjrY/s320/32.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQK8iCfB-e0GedAKcgkldX8TGGF8_1CyriUtfgdJdH11vgVZ4ZT1op0t0dah6555AC700mZvlkT0ob9joTaImdaR3CxV09jbkYiQiQBLnTIFIhkPfWNXiX3ezh0uvavOuEGaa5bXxNxWc/s1600/33.PNG" imageanchor="1"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQK8iCfB-e0GedAKcgkldX8TGGF8_1CyriUtfgdJdH11vgVZ4ZT1op0t0dah6555AC700mZvlkT0ob9joTaImdaR3CxV09jbkYiQiQBLnTIFIhkPfWNXiX3ezh0uvavOuEGaa5bXxNxWc/s320/33.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
This is a great new feature which I will cover in a subsequent segment. Select Yes, let's get connected and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj92lAJJCXff8ehR7LCKKzC9OqiaHx59NddyaNE8jpWViB1n9c8Zo3SeUo3Fq0ofpt0y4EsOl_SDBWNEs7Hk9Qs_VwWsa3aY-FGdsCy10vOonXSMhxgpIbFNue9_MzBNV3uKNx-OWqdHjQ/s1600/34.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj92lAJJCXff8ehR7LCKKzC9OqiaHx59NddyaNE8jpWViB1n9c8Zo3SeUo3Fq0ofpt0y4EsOl_SDBWNEs7Hk9Qs_VwWsa3aY-FGdsCy10vOonXSMhxgpIbFNue9_MzBNV3uKNx-OWqdHjQ/s320/34.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Review your install summary and Click Next</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuS_7TaOkpzkMqPfUVPdfIPV0RLtXzF-1D69KnCBEA9U2FusD_RiKyHUbVSKyhEKkmfaz3gUvso3eUFd-FVvsRcMwIsaMPbIBXNGdHWK2yOaO_yviQtSpugJRQOorM0Nr0sGXucFhNwO8/s1600/35.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuS_7TaOkpzkMqPfUVPdfIPV0RLtXzF-1D69KnCBEA9U2FusD_RiKyHUbVSKyhEKkmfaz3gUvso3eUFd-FVvsRcMwIsaMPbIBXNGdHWK2yOaO_yviQtSpugJRQOorM0Nr0sGXucFhNwO8/s320/35.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
I had to change the SQL Server Service to Network Service or Local System to resolve the failure. Click Run Check</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOOvqdDOrjJ-aEFVT4zH6TUozff0SM2XK7bytJXQxkLnRwWWhEz8rwCWy3SHI1OqP0s0JeDmQVadLBI6xqIvUkSE2v98LtSoL0lgLdzPKCJm_f4w_m1jfxlrmXyhTSvM3HQZ2iBXpuSf8/s1600/36.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOOvqdDOrjJ-aEFVT4zH6TUozff0SM2XK7bytJXQxkLnRwWWhEz8rwCWy3SHI1OqP0s0JeDmQVadLBI6xqIvUkSE2v98LtSoL0lgLdzPKCJm_f4w_m1jfxlrmXyhTSvM3HQZ2iBXpuSf8/s320/36.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
These warnings can be ignored. Click Begin Install</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXsrWCUq55j4imulKhCpIaclGKWoPZI1KEuUAhNQovMGJswFF7RIeNfGs2PfUfzgzfntn6y35pMAdT_h4knI3Fo0w9XBps2EL4UJmRfJ1Bk-N41lmQoAWH60FrDj3j5s019a8eoVq8RQw/s1600/37.PNG" imageanchor="1"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXsrWCUq55j4imulKhCpIaclGKWoPZI1KEuUAhNQovMGJswFF7RIeNfGs2PfUfzgzfntn6y35pMAdT_h4knI3Fo0w9XBps2EL4UJmRfJ1Bk-N41lmQoAWH60FrDj3j5s019a8eoVq8RQw/s320/37.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
Eighteen minutes later (more or less) and we are all done! Click Close and Exit from the installer</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8y2OuuYsuO89YUZmBR_A0QpuqFQDxW2fsO7dTjQDVvcS-5dXT4CiNcXvnOJuqzRKAm1Bpowui4l2U76aFCNV6Zcl9UWaPbTfmcYOCe3P5zgdh3c-otypakjErOZ0qwhmo_KbogBRTtRY/s1600/38.PNG" imageanchor="1"><img border="0" height="242" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8y2OuuYsuO89YUZmBR_A0QpuqFQDxW2fsO7dTjQDVvcS-5dXT4CiNcXvnOJuqzRKAm1Bpowui4l2U76aFCNV6Zcl9UWaPbTfmcYOCe3P5zgdh3c-otypakjErOZ0qwhmo_KbogBRTtRY/s320/38.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
From here you can open the console and begin using SCCM 1511!</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
More to come!</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
If you like this blog, give it a g+1</div>
<br />
<div style="text-align: center;">
<br /></div>
</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-84359218602512481412016-05-25T15:07:00.001-07:002016-05-25T15:07:46.829-07:00SQL Server 2014 SP1 - InstallationAs part of my rebuilding my lab I need a SQL install for SCCM. Since I am installing Current Branch (1511+) I am going to use SQL 2014 SP1 since it is supported.<br />
<br />
You can download the trial version of SQL Server 2014 <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-sql-server-2014">here</a>.<br />
<br />
<b>Hardware/Software Requirements</b>:<br />
To see a full list of requirements you can visit the <a href="https://msdn.microsoft.com/en-us/library/ms143506%28v=sql.120%29.aspx?f=255&MSPPError=-2147217396">Technet Article</a>, but here is the short list:<br />
<ul>
<li>.NET 3.5</li>
<li>.NET 4.0</li>
<li>PowerShell 2.0</li>
<li>6 GB of disk space</li>
<li>1 GB of memory</li>
</ul>
<br />
<b>Installation</b>:<br />
So once you have the install media and done the prerequisites installed you are ready to go. Right Click on setup.exe and run as administrator.<br />
<br />
When the install wizard starts select Installation from the menu on the left.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisVpoWuqlm8bqIb3L7GZNREvDQRGg-v4Mr_xbVztHvMPkA-Ih4p4vhes8-iQUBGrIiXEDcVUxgMx-Tnil-AnV7J5yrxwQnhLWEyhKgXjbN1ymuostyeqY5EIbChvJIH4dxv56lEd9-2c4/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisVpoWuqlm8bqIb3L7GZNREvDQRGg-v4Mr_xbVztHvMPkA-Ih4p4vhes8-iQUBGrIiXEDcVUxgMx-Tnil-AnV7J5yrxwQnhLWEyhKgXjbN1ymuostyeqY5EIbChvJIH4dxv56lEd9-2c4/s320/01.PNG" width="320" /></a></div>
<br />
On the installation page select New SQL Server stand-alone installation<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHG8ThxtTiTG3v7jNZT3mltfKcww2MKfbPm4_Pc2LkJRpX4agUSU0pX-MKqfmf_CyvaCh6TwbqHjB0_1CRXI4gZGtIT1XSiLqW6Gm_pF6LQo1Pbc_RlXzyyhWwcnhQid4BHjJ2NaNl-E/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuHG8ThxtTiTG3v7jNZT3mltfKcww2MKfbPm4_Pc2LkJRpX4agUSU0pX-MKqfmf_CyvaCh6TwbqHjB0_1CRXI4gZGtIT1XSiLqW6Gm_pF6LQo1Pbc_RlXzyyhWwcnhQid4BHjJ2NaNl-E/s320/02.PNG" width="320" /></a></div>
<br />
Enter in your product key or select the evaluation version and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFTiQPcMbF-aS9cRtqdjADyv7TjNFdjjFmhWzY0HNELaa4E2Qemxy9-u8oH9-rjI1WnL5xqO7D-usZG0qdoZrhAE9-jm8d6AwvQwySpNmXD8GKAXQClEw2eTM0si7BBgdHiDQ-mS8hOcI/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFTiQPcMbF-aS9cRtqdjADyv7TjNFdjjFmhWzY0HNELaa4E2Qemxy9-u8oH9-rjI1WnL5xqO7D-usZG0qdoZrhAE9-jm8d6AwvQwySpNmXD8GKAXQClEw2eTM0si7BBgdHiDQ-mS8hOcI/s320/03.PNG" width="320" /></a></div>
<br />
Accept the EULA and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZMdRnyAD5FUSOQUHmpXO9-9PXTpm3jOiBAFEslO6PJ4XK5gDUQAHaywxwc-sTjairHEC-Z3r5-jhCbaA7K3N8QUnjv0I6cgau-S9ni1xA7G3XZFDbNVv_wPTDUP18XG913u487J4pr1Y/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZMdRnyAD5FUSOQUHmpXO9-9PXTpm3jOiBAFEslO6PJ4XK5gDUQAHaywxwc-sTjairHEC-Z3r5-jhCbaA7K3N8QUnjv0I6cgau-S9ni1xA7G3XZFDbNVv_wPTDUP18XG913u487J4pr1Y/s320/04.PNG" width="320" /></a></div>
<br />
You can chose to do the Use Microsoft Update feature if you wish. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikGv98Ab231HstdHdHdX0QMui8JMG0m-4JCyM7E_8nCpO8OguPHNx_Ko51U9716KMF5e7_VegoO_5W77437breVfC5M6SZcNGNzdb_uUhkFXvVg1JzPFyWMT38rhcGMeOzB_ipO9b4AA4/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikGv98Ab231HstdHdHdX0QMui8JMG0m-4JCyM7E_8nCpO8OguPHNx_Ko51U9716KMF5e7_VegoO_5W77437breVfC5M6SZcNGNzdb_uUhkFXvVg1JzPFyWMT38rhcGMeOzB_ipO9b4AA4/s320/05.PNG" width="320" /></a></div>
<br />
Assess and remediate any failures and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGAdL_1UlLvuB597xpj7K8MFhntJQ2SmGAPLE1P770I5NFKx095iUEL1BkSJ8DYXPnaPYqqii6O_evDN0PNomdRf8gQBT2-COJmupA08xsZ2WSxnS_eXdIxHzCZpSMEOM3u9hvsKT3cRc/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGAdL_1UlLvuB597xpj7K8MFhntJQ2SmGAPLE1P770I5NFKx095iUEL1BkSJ8DYXPnaPYqqii6O_evDN0PNomdRf8gQBT2-COJmupA08xsZ2WSxnS_eXdIxHzCZpSMEOM3u9hvsKT3cRc/s320/06.PNG" width="320" /></a></div>
<br />
Select SQL Server Feature Installation and Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4OCBsyYCXLJFxJ3lIaJ9pOY9-IMBANQLAmunHq_INP24fvqDNUcPK5hrvzMKpYkVYkQGHllsRJtWVuBfm0sURilh52Nz4yQtUvmldYmvE5-4suC_FKDLG5kvBY8eG8jnUxHHVoy7dADY/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4OCBsyYCXLJFxJ3lIaJ9pOY9-IMBANQLAmunHq_INP24fvqDNUcPK5hrvzMKpYkVYkQGHllsRJtWVuBfm0sURilh52Nz4yQtUvmldYmvE5-4suC_FKDLG5kvBY8eG8jnUxHHVoy7dADY/s320/07.PNG" width="320" /></a></div>
<br />
Since we are doing this for SCCM we need:<br />
<ul>
<li>Full-Text and Semantic Extractions for Search</li>
<li>Reporting Services - Native</li>
<li>Management Tools - Complete</li>
</ul>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5zuK1YWPmKdhm-bWsunw2WaNuJJLwnrJzdIe_2qrE8N2wLb2pi-NIAbetWB0sa40P0bEG6AfbuB2EcWRvO9K0-traW9InjHhC6GQygMNxCPzzU3XGqvB1WeCZH6wXwTQbd4x8Vz9EPKw/s1600/08.PNG" imageanchor="1"></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5zuK1YWPmKdhm-bWsunw2WaNuJJLwnrJzdIe_2qrE8N2wLb2pi-NIAbetWB0sa40P0bEG6AfbuB2EcWRvO9K0-traW9InjHhC6GQygMNxCPzzU3XGqvB1WeCZH6wXwTQbd4x8Vz9EPKw/s1600/08.PNG" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5zuK1YWPmKdhm-bWsunw2WaNuJJLwnrJzdIe_2qrE8N2wLb2pi-NIAbetWB0sa40P0bEG6AfbuB2EcWRvO9K0-traW9InjHhC6GQygMNxCPzzU3XGqvB1WeCZH6wXwTQbd4x8Vz9EPKw/s320/08.PNG" width="320" /></a></div>
You also have the option to change the installation directories at this time. Click Next<br />
<br />
For our needs today we will keep the default instance name. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhY3xi9f0-0QVoyVXAPQ3t3pfPD2VBJvs6h9PNIVwUFXbljRyKW4x7NkWBtpKBIsnVABXF_7QgnG7Cz8fepy0us2JvFp2axZr8KPeFY1rbxwRnsZna8ieYGcYaFAVKA-E-NxxK4kqYGNBo/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhY3xi9f0-0QVoyVXAPQ3t3pfPD2VBJvs6h9PNIVwUFXbljRyKW4x7NkWBtpKBIsnVABXF_7QgnG7Cz8fepy0us2JvFp2axZr8KPeFY1rbxwRnsZna8ieYGcYaFAVKA-E-NxxK4kqYGNBo/s320/09.PNG" width="320" /></a></div>
<div style="text-align: center;">
<br /></div>
I left the default accounts here. If you change them an SPN will need to be registered for the new account. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6AzlyFAl1qcsnpYKBMwk2fgsaI8zjlJYhDPNZwSf89yN_gUGjfN9zUPA0lZbCVopsEXTOJsh_VS0J5dynGlLFqpZEsGZVkpG-mvcwdzBvseN-wQvjB7xZ53QG3DjsDDh-dfWnJo5dJYw/s1600/10.PNG" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi6AzlyFAl1qcsnpYKBMwk2fgsaI8zjlJYhDPNZwSf89yN_gUGjfN9zUPA0lZbCVopsEXTOJsh_VS0J5dynGlLFqpZEsGZVkpG-mvcwdzBvseN-wQvjB7xZ53QG3DjsDDh-dfWnJo5dJYw/s320/10.PNG" width="320" /></a></div>
<br />
I left this in Windows Authentication mode and added current user. Click Next<br />
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVWh8btP9XMMm7lvodTDzyU_CuFgPk8YNQ-qnYTPjFxCcmqtItKzBii2bQ7j8tcLhWSDmoKoJOQusGJFjC8hhox8NvqtLTdLyn-K0L40D1989Jmir3SgJX1-uA9F8cvkd2NPQZ6j2fcBs/s1600/11.PNG" imageanchor="1"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiVWh8btP9XMMm7lvodTDzyU_CuFgPk8YNQ-qnYTPjFxCcmqtItKzBii2bQ7j8tcLhWSDmoKoJOQusGJFjC8hhox8NvqtLTdLyn-K0L40D1989Jmir3SgJX1-uA9F8cvkd2NPQZ6j2fcBs/s320/11.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
For Reporting Services I left Install and default configuration. Click Next</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfgnpODtvYOo9PRHsmFF1nptmA4hhlFsIqaenx0Ae8Uf8c4ZvFs2CfEWzs3NSJv2rYvifu0zJelBQ6Ya6mswk14DYD1wVa9syhUnPPJe-PkX7A9qaWOhUVfilcpTR4ChMahvChcXGrRbI/s1600/12.PNG" imageanchor="1"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfgnpODtvYOo9PRHsmFF1nptmA4hhlFsIqaenx0Ae8Uf8c4ZvFs2CfEWzs3NSJv2rYvifu0zJelBQ6Ya6mswk14DYD1wVa9syhUnPPJe-PkX7A9qaWOhUVfilcpTR4ChMahvChcXGrRbI/s320/12.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Review the install summary. If you have several servers to install SQL on you can capture the unattended .ini file from the Configuration file path at the bottom. Click Install</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqOmAXHoCPHxKR98QG-LrAnJR2La6o3hyphenhyphenCy3yRPE7tbozsSj7JALOHmYdIfkCy8fIMOSJNzJKWbcSz0iFifPmKy0GB0sgQqaDorLd8U6Qv9N-KYxrumIS7S_U_dNV2ZpmNUWfY6hGuKIs/s1600/13.PNG" imageanchor="1"><img border="0" height="239" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqOmAXHoCPHxKR98QG-LrAnJR2La6o3hyphenhyphenCy3yRPE7tbozsSj7JALOHmYdIfkCy8fIMOSJNzJKWbcSz0iFifPmKy0GB0sgQqaDorLd8U6Qv9N-KYxrumIS7S_U_dNV2ZpmNUWfY6hGuKIs/s320/13.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Installation will bake for a bit</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqy_4oe8BFqOSfpdFcOCmfIeQd0M9YS8j8NgS4MIU5jPx1cB1A0sA_3tN0fZvNWvUmW7zHRFVQjN5vuw-u4JqoMJw8EE7c_zml477xf1PzIUEDN3HS0-46Uvbqur6AGika8GAH8hQlFYQ/s1600/14.PNG" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhqy_4oe8BFqOSfpdFcOCmfIeQd0M9YS8j8NgS4MIU5jPx1cB1A0sA_3tN0fZvNWvUmW7zHRFVQjN5vuw-u4JqoMJw8EE7c_zml477xf1PzIUEDN3HS0-46Uvbqur6AGika8GAH8hQlFYQ/s320/14.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Success!</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPWLWHdfJXY0OvrsHrV_d70PwUGvbW1EzTfmDqMTz8zvqgil3Lkx0OVgDK7a9XvWMcEpgXeYAlP08MrjrsnYpUj0fdluMOHhh-CzEvxB4SrtYHb-bO7YCuuJ8rRxIyEivPT-xDySAG40k/s1600/15.PNG" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPWLWHdfJXY0OvrsHrV_d70PwUGvbW1EzTfmDqMTz8zvqgil3Lkx0OVgDK7a9XvWMcEpgXeYAlP08MrjrsnYpUj0fdluMOHhh-CzEvxB4SrtYHb-bO7YCuuJ8rRxIyEivPT-xDySAG40k/s320/15.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
More to come!</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
If you like this blog, give it a g+1</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-89463238302041480662016-05-18T11:42:00.002-07:002016-05-18T14:39:42.731-07:00Hyper-V - Internal Network with Internet AccessSo one of the big things I wanted to do with my new lab is make sure that the servers have internet access. I wanted SCOM to be able to send notification email's and SCCM to access updates as well as other things I am planning for future expansion. I am using Hyper-V which comes free with Windows 10 Enterprise so I needed a way to do this simply and effectively. As it turns out there is a way. You can configure the Host network adapter to share its connection with a Hyper-V virtual switch and pass that connection to the guests.<br />
<br />
First thing you do is go into Hyper-V and create a new Virtual Switch. Click on Virtual Switch Manager, select Internal and Click Create Virtual Switch.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFteNyDlgGKaHwC2w1orO0g7xtnGLkfZ4lArKsjpXUj21y-ewbYVCxkU7TPJ4ieyiaIGS1ttlGyWwP6X1_k6m3RYYUFikCrlTNSfFKfmtIL_ZE9JVTrejXENHHPKUVoWWfvcwIIRU87HI/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFteNyDlgGKaHwC2w1orO0g7xtnGLkfZ4lArKsjpXUj21y-ewbYVCxkU7TPJ4ieyiaIGS1ttlGyWwP6X1_k6m3RYYUFikCrlTNSfFKfmtIL_ZE9JVTrejXENHHPKUVoWWfvcwIIRU87HI/s320/01.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
For the Virtual Switch Properties give it an easily identifiable name. I called mine Hyper-V Internal (w/ Internet). Maker sure Internal Network is selected and Click OK</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5kShUu2KD0MD3rolJq4QmQeauPu6Fi3aZzdx_oLX9OLYhEBzE1rM0o8btbZEMzuYHReTV-4EDYh2jyyLaCLb7-qypCOkwnYQtLJ25p3vhdX5lZ2RpdJVlL2b4-MCbJAQuPj0zUiXr9vM/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg5kShUu2KD0MD3rolJq4QmQeauPu6Fi3aZzdx_oLX9OLYhEBzE1rM0o8btbZEMzuYHReTV-4EDYh2jyyLaCLb7-qypCOkwnYQtLJ25p3vhdX5lZ2RpdJVlL2b4-MCbJAQuPj0zUiXr9vM/s320/02.PNG" width="320" /></a></div>
<div class="" style="clear: both; text-align: left;">
<br /></div>
<div class="" style="clear: both; text-align: left;">
Now that we have the virtual switch created:</div>
<div class="separator" style="clear: both; text-align: left;">
</div>
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi73Wf8CZaeRIIU4FDrSlBKDvj0HdkA7jd9aMCOEHgMdZ0AzKDkUod45k35cPv7WROdRcEk_Zu8RExceqktVOTFnars5pDooGbIyenpPSLBBBnJr1NyFn8-eTBAF-rl81PHea-RYrLn4V0/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi73Wf8CZaeRIIU4FDrSlBKDvj0HdkA7jd9aMCOEHgMdZ0AzKDkUod45k35cPv7WROdRcEk_Zu8RExceqktVOTFnars5pDooGbIyenpPSLBBBnJr1NyFn8-eTBAF-rl81PHea-RYrLn4V0/s400/03.PNG" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Next we need to enable Routing and Remote Access. On the Host machine open up services and find Routing and Remote Access. You will see that it is Disabled. Open Properties, change the startup type to Automatic (Delayed Start) and apply. Then Start the service and hit OK.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSv4S_miCNmwpBQCeAk-fm7rLDB-egpzsbcMA4M4HSzWEbtbQ2m6bv_4VwAOAoe8xCIILDNkq80C84qWeXfS8bRl7FoSp1qKFn2QL5QyoyvH2jevi4nqcofDvI6WWIkQ6VCDyCZW3Xc48/s1600/3.5.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="30" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSv4S_miCNmwpBQCeAk-fm7rLDB-egpzsbcMA4M4HSzWEbtbQ2m6bv_4VwAOAoe8xCIILDNkq80C84qWeXfS8bRl7FoSp1qKFn2QL5QyoyvH2jevi4nqcofDvI6WWIkQ6VCDyCZW3Xc48/s400/3.5.PNG" width="400" /></a></div>
<br />
Now we need to setup the network sharing. On the host machine open up Network and Sharing Center. You should see your newly created Virtual Switch:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjRs01SEHefGMwEbH6V-Ucl3mmcK_-uN_NjjU8nLNYYln0epsTUXfjmS6io9TNJTrBvxfEDu6oJAVqeT0PVa4wkdDWGyW8OOGboHC1OwLjZJ8Et8f2BRO1FqvVIv2tTotDUKFfCPFhEbg/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjRs01SEHefGMwEbH6V-Ucl3mmcK_-uN_NjjU8nLNYYln0epsTUXfjmS6io9TNJTrBvxfEDu6oJAVqeT0PVa4wkdDWGyW8OOGboHC1OwLjZJ8Et8f2BRO1FqvVIv2tTotDUKFfCPFhEbg/s320/04.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
If you open the connection status of the Virtual Switch, go to Properties, scroll down to Internet Protocol Version 4 and check the properties there you will see that the virtual switch has been given an IP address of 192.168.137.1. This is important so we will come back to this in just a second. </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGk_9xmi3o0-ymFtCjIpmz7h60sZfvg4GWJkzdcl2rkMEaJKW_vEG6wnCHJxkd5mje4QrYtSv3WDPXyJol40wXb5P8dJ1aJsd89nOQ-OdYE5ZTuw2pSxXZ_EJ1Cl5K_q6riO1KddTGRac/s1600/4.5.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGk_9xmi3o0-ymFtCjIpmz7h60sZfvg4GWJkzdcl2rkMEaJKW_vEG6wnCHJxkd5mje4QrYtSv3WDPXyJol40wXb5P8dJ1aJsd89nOQ-OdYE5ZTuw2pSxXZ_EJ1Cl5K_q6riO1KddTGRac/s320/4.5.PNG" width="280" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Now you want to open the network connection for the host. In my case it is the Wi-Fi connection. In Wi-Fi Status select Properties. In Wi-Fi Properties click the Sharing Tab:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDUUyAo-WwRd0L9vb2US5WE3d8qsAqzvCL_OP1eRxx41qJzORispY2Q9yyUG-pDrnlZ4e3ReelKhHyzJxUZJhWUSYU9rtmtKIABacEw7HRedqx-EuNwA_WHL77owAhPgMv5k3k6S3OYq8/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDUUyAo-WwRd0L9vb2US5WE3d8qsAqzvCL_OP1eRxx41qJzORispY2Q9yyUG-pDrnlZ4e3ReelKhHyzJxUZJhWUSYU9rtmtKIABacEw7HRedqx-EuNwA_WHL77owAhPgMv5k3k6S3OYq8/s320/06.PNG" width="247" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
In Internet Connection Sharing check the box Allow other network users to connect through this computer's Internet Connection. In the dropdown select the newly created Virtual Switch and Click OK.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijpl1V-1yzAq0ACLLlLSdAchN8x5uDK8Khqup2DoI2LrBFRgQ-HLMSDWz7MP4labOHDIWsv6ulak-CXTT8lD_RSGomb9gT_S_xiaNLk-e4NefE21B7kPAE9EJqyVeiMZ19xuOyKNFI8-g/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijpl1V-1yzAq0ACLLlLSdAchN8x5uDK8Khqup2DoI2LrBFRgQ-HLMSDWz7MP4labOHDIWsv6ulak-CXTT8lD_RSGomb9gT_S_xiaNLk-e4NefE21B7kPAE9EJqyVeiMZ19xuOyKNFI8-g/s320/07.PNG" width="248" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
All that is left to do is assign the network connection to the VM guests in Hyper-V. Right click on the VM and select Settings. In the Settings for your VM click on Network Adapter. In the virtual switch select the newly created Virtual switch and click OK</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikGmDqqI1wJp5WDb7iKNu_N7yGEwxtIdKd1DZlCKCZ0f40KKQq2evmB__kRmhWs8cIkKKA5gfPtIotnNKguDkptnb87GbtzVLaOxe1HgJdGnCOYgTq0YAST6k0mkAtsuW4utqtRvrIpA8/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikGmDqqI1wJp5WDb7iKNu_N7yGEwxtIdKd1DZlCKCZ0f40KKQq2evmB__kRmhWs8cIkKKA5gfPtIotnNKguDkptnb87GbtzVLaOxe1HgJdGnCOYgTq0YAST6k0mkAtsuW4utqtRvrIpA8/s320/08.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
Now for most servers you want to set up a static IP address. Even though DHCP is currently being handled by your internet router you will want to change this to static for servers. Since our Virtual Switch has an IP of 192.168.137.1 we will need to set the static IP of the guest VM to the same subnet. In my case the first machine I setup was the domain controller so I setup like the following:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMTQJboZtwNxPRBvMwVDV-coLQ0OChVtCcDL1KQPeVRJ3_wyW7rZ9E9OMXV4G4h37KCj4ZnoPxkzgzl6D3J-oVeFmKY4rszdzDSalFLOwpXFAT0rfkvuvETIA7ZTJVi4oHwrk7Eud9exg/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMTQJboZtwNxPRBvMwVDV-coLQ0OChVtCcDL1KQPeVRJ3_wyW7rZ9E9OMXV4G4h37KCj4ZnoPxkzgzl6D3J-oVeFmKY4rszdzDSalFLOwpXFAT0rfkvuvETIA7ZTJVi4oHwrk7Eud9exg/s320/09.PNG" width="285" /></a></div>
<div style="text-align: left;">
</div>
<div style="text-align: left;">
The Default Gateway must be set to the IP address of the Virtual Switch (192.168.137.1). Also I have DNS setup on my domain controller so it points to itself. All of the subsequent VM guests will need to have the same subnet, default gateway and DNS.<br />
<br />
<span style="color: yellow;">Note - </span> The IP address assigned to the Virtual Switch is more or less randomly assigned. You do not need to keep it 192.168.137.1. It can be changed to whatever you would like in your environment. Just remember to use the new address as the default gateway for your servers and they all must be on the same subnet. </div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
From here you can test by pinging google.com</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_KB5opJMmw8DwbNFyNOoU1Bp5cMfpPPFvhmcArjzqv7Ne8APq_S3M_1PYeDH83hKhFHo8Fy-Uplc0BgT7q-3wZO63ko12vDaULWNuo6cayrtk0iVnCBlUBwMgYMiyCx1emh-gRX850Mc/s1600/10.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_KB5opJMmw8DwbNFyNOoU1Bp5cMfpPPFvhmcArjzqv7Ne8APq_S3M_1PYeDH83hKhFHo8Fy-Uplc0BgT7q-3wZO63ko12vDaULWNuo6cayrtk0iVnCBlUBwMgYMiyCx1emh-gRX850Mc/s320/10.PNG" width="320" /></a></div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
All Set!</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
More to come!</div>
<div style="text-align: left;">
<br /></div>
<div style="text-align: left;">
If you like this blog, give it a g+1</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com1tag:blogger.com,1999:blog-2586169794745881237.post-24593379904465726842016-05-18T09:00:00.000-07:002016-05-18T09:00:27.354-07:00AD 2012 R2 - Disable Server Manager on Startup via Group PolicyIs anyone else annoyed with the Server Manager Dashboard opening up every time you log into a server? Me too.You can turn it off on each server manually by going to Manage > Server Manager Properties and Checking Do not start Server Manager automatically at logon:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitxxXDzaux4Vt5sMsD0GucPibgavP5TTkWcHZuNRbW5v7eb6p4ppJ4MEf5JXvW4UDuxyqDn_fr4d2bsmZLyxjVnPWfS2b8Dt2Cux-34r7dH5umR9lG76kOsJSYlb9bVOWkfIOk4wuzmo0/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="147" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitxxXDzaux4Vt5sMsD0GucPibgavP5TTkWcHZuNRbW5v7eb6p4ppJ4MEf5JXvW4UDuxyqDn_fr4d2bsmZLyxjVnPWfS2b8Dt2Cux-34r7dH5umR9lG76kOsJSYlb9bVOWkfIOk4wuzmo0/s320/01.PNG" width="320" /></a></div>
<br />
But that only sets it for your user account and you would have to do it for each server one at a time. Fortunately there is a Group Policy setting for that. Lets go ahead and open Group Policy Management, go to Domains > Your Domain > Right Click on Group Policy Objects and select New. Lets call this one Disable Server Manager on Startup.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZvsQKLHqamoynW6YbRwL7LLBCGfcE1fzjce-uWVkXQvaRcamzYtdNVf4K37TADykJYjliYpvyo4l4vjQB-gmUpMJUWzgL0QYvZ3F0B9c6KzxKSNjJhumUX5m2XbeD_iyJhPyrnigMGQE/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="148" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZvsQKLHqamoynW6YbRwL7LLBCGfcE1fzjce-uWVkXQvaRcamzYtdNVf4K37TADykJYjliYpvyo4l4vjQB-gmUpMJUWzgL0QYvZ3F0B9c6KzxKSNjJhumUX5m2XbeD_iyJhPyrnigMGQE/s320/02.PNG" width="320" /></a></div>
<br />
Right Click on the newly created GPO and select Edit. Navigate to Computer Configuration > Policies > Administrative Templates > System > Server Manager. Set Do not display Server Manager automatically at logon to <b>Enabled</b> and close the GPO. If you check the settings you should have:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqgX9UUX2ASmsu_uzhZU-nm0QRfYEujQYFRpGd_HZjsWsNgfijKtDxr9hsrZKXKEUtIvnStWN3gPqJJzSObavN2pGhL2uB0vAm7iADuYoslzAXOfP-94nDWRykT57cMOuHW9boiq6jdd4/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="138" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqgX9UUX2ASmsu_uzhZU-nm0QRfYEujQYFRpGd_HZjsWsNgfijKtDxr9hsrZKXKEUtIvnStWN3gPqJJzSObavN2pGhL2uB0vAm7iADuYoslzAXOfP-94nDWRykT57cMOuHW9boiq6jdd4/s400/03.PNG" width="400" /></a></div>
<br />
Link the GPO to your servers OU and that's it! Next time you log into your server you won't have to close out of Server Manager.<br />
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1<br />
<br />Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-38917010704720942802016-05-16T16:12:00.000-07:002016-05-16T16:12:08.102-07:00AD 2012 R2 - Enable Remote Desktop Connections via Group PolicyAnother helpful GPO I use is Enabling Remote Desktop. No matter how many times I add a server to a domain I always seem to forget this setting.<br />
<br />
So in Group Policy Management go to Domains > Your Domain > Right Click on Group Policy Objects and select New. In the Name field call it Enable RDP and Click OK. Right Click on the new GPO and select Edit.<br />
<br />
There are two areas to modify here. Under Computer > Policies > Administrative > Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections. You want to set Allow users to connect remotely by using Remote Desktop Services to <b>Enabled</b><br />
<br />
Then under Security set Require user authentication for remote connections by using Network Level Authentication to <b>Disabled</b> otherwise that checkbox will be checked by default.<br />
<br />
So if you check the settings you should have:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC6qJIXO7rdwfcY9fN8zvKPVKfJbxi1bHKiEh2pt9uXzFD_W9UBeH5TonjerNRjOOFPV-GZ2Gq_zzDXgY6DjM-g_oSDnnOixeF39rVuMerkPd1LW3eNDlfRFKBO142_bMsZ4c9zQ54PRI/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhC6qJIXO7rdwfcY9fN8zvKPVKfJbxi1bHKiEh2pt9uXzFD_W9UBeH5TonjerNRjOOFPV-GZ2Gq_zzDXgY6DjM-g_oSDnnOixeF39rVuMerkPd1LW3eNDlfRFKBO142_bMsZ4c9zQ54PRI/s400/01.PNG" width="400" /></a></div>
<br />
Link the GPO to your servers OU and do a GPUpdate /force on the server. If you did it correctly you should see that all three options are greyed out:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbCakryqKRIHiB9IavuCiLYSIkJo87WoFdJziC7IYyDrh1oPx0bm82UA_wj4kiov-mzTtMHEd61ogLSkYywRQa5TjebepuGZEAS5nu4hYWk7CmYUF5jnxIm4WASUyT_q-teB1LhEbKQkQ/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="178" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbCakryqKRIHiB9IavuCiLYSIkJo87WoFdJziC7IYyDrh1oPx0bm82UA_wj4kiov-mzTtMHEd61ogLSkYywRQa5TjebepuGZEAS5nu4hYWk7CmYUF5jnxIm4WASUyT_q-teB1LhEbKQkQ/s320/02.PNG" width="320" /></a></div>
<br />
More to come!<br />
<br />
If you like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-80558469840559214442016-05-16T15:39:00.002-07:002016-05-26T09:26:17.781-07:00AD 2012 R2 - Disable Windows Firewall Using Group PolicySo after a long hiatus I have decided to start blogging again. I am in the process of rebuilding my entire lab after a crash and I thought it would be good opportunity to start sharing some of my experiences in this process with you. I have several GPOs I use by default in my lab which make things a lot easier when working with different servers. One of which I have already posted. In <a href="http://jimmoldenhauer.blogspot.com/2012/12/ad-2008r2-gpo-for-adding-security-group.html">GPO for Adding a Security Group to Local Administrators</a> I talked about how to modify the Local Administrators group and add users or groups to it automatically. Another one I use is disabling the Windows Firewall via GPO.<br />
<br />
This is a fairly straight forward policy. Open Group Policy Management, go to Domains > Your Domain > Right Click on Group Policy Objects and select New. In the Name field call it Disable Windows Firewall and Click OK.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9Waa_ixUYTky5_2wmcuZ1lxtEamOdV3MDsTGawbGmSz-m5cFZuK4y1MpoTUtaw4jq-7nGt4ijTojdPvFBTZJSVqjpuJbRxh11YLULjp2zuUGauWVKkk25njRHhMJWxtKfAz2J_6dDGYI/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="149" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9Waa_ixUYTky5_2wmcuZ1lxtEamOdV3MDsTGawbGmSz-m5cFZuK4y1MpoTUtaw4jq-7nGt4ijTojdPvFBTZJSVqjpuJbRxh11YLULjp2zuUGauWVKkk25njRHhMJWxtKfAz2J_6dDGYI/s320/01.PNG" width="320" /></a></div>
<br />
Once you have the GPO created Right Click on it and choose Edit. There are two areas you want to modify. First go to Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile. Set Windows Firewall: Protect all network connections to <b>Disabled</b><br />
<br />
Then go into Standard Profile and do the same thing, set Windows Firewall: Protect all network connections to <b>Disabled</b><br />
<b><br /></b>
If you check the settings you should have:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh66XTwfc56OX688l3velxcqGFsSW9K_m0E3sm4Pg2kXSWE0BOuYYL6NtGEwj7dVDpV8z_TnL2NaYmvHVHS9FvfgHazU1cDTtXCNoEclrEp97XADRdqmCk0fO9uG-lVbSW3QLQTs_FFp4Y/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh66XTwfc56OX688l3velxcqGFsSW9K_m0E3sm4Pg2kXSWE0BOuYYL6NtGEwj7dVDpV8z_TnL2NaYmvHVHS9FvfgHazU1cDTtXCNoEclrEp97XADRdqmCk0fO9uG-lVbSW3QLQTs_FFp4Y/s1600/02.PNG" /></a></div>
<br />
Link the GPO to your servers OU and do a GPUpdate /force on the server and you should see that the policy has taken effect:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiprIOcLFTZt_wU88LwNFFCL236A0BF8q3Z2jYBFG7Zr5PVqp5K3qQtsbZcErWTbX-ZRyiNksesAMfcLSkZrUpUKtxOtVBkniU2PCiX_jt3XalZT9fVkzA3pL_QPiNvy2t9bf3A7xM8i4/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="317" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiprIOcLFTZt_wU88LwNFFCL236A0BF8q3Z2jYBFG7Zr5PVqp5K3qQtsbZcErWTbX-ZRyiNksesAMfcLSkZrUpUKtxOtVBkniU2PCiX_jt3XalZT9fVkzA3pL_QPiNvy2t9bf3A7xM8i4/s400/03.PNG" width="400" /></a></div>
<br />
More to come!<br />
<br />
If you like this blog give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-54185487826906021942014-01-10T09:32:00.001-07:002014-01-10T09:32:36.926-07:00Server 2012 R2 - Promoting Domain ControllerSo as part of my New Years Resolutions I have decided to rebuild my lab on Server 2012 R2 and SQL 2012 SP1 then upload the whole thing to Azure to make it a little easier to run client demo's and do testing, etc. I also plan to start a new series of segments for System Center Service Manager 2012 R2 as my first set of new servers in the lab.<br />
<br />
So starting at the beginning, I have created a new Server 2012 R2 template in Hyper-V and need to create a domain to work with.<br />
<br />
<b>Active Directory Domain Services:</b><br />
The installation is broken up into to parts, adding the Active Directory Domain Services and doing the server promotion. Now you remember in Server 2003/2008 days the old DCPROMO command which would run this all for you. Well that was done away with in Server 2012 and in Server 2012 R2.<br />
<br />
So In Server Manager <b>Click Add roles and features</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKZuo8Kus7iXI-G5k21TPkIXSFDivOlbJA0XBHMTPRE1WtSe-JxTLwZdCi6yV4pjM3X7HrgK1xMMH-LQC8y79bxfwjbXTwGDM_t1YfdYrxU-7bwB4VnR6xbyWTmk-_ACfLOxBQMGvAFfU/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKZuo8Kus7iXI-G5k21TPkIXSFDivOlbJA0XBHMTPRE1WtSe-JxTLwZdCi6yV4pjM3X7HrgK1xMMH-LQC8y79bxfwjbXTwGDM_t1YfdYrxU-7bwB4VnR6xbyWTmk-_ACfLOxBQMGvAFfU/s1600/01.PNG" height="235" width="320" /></a></div>
<br />
The Roles and Features Wizard will start, <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivasD2pE1zZgR9uQk8AdQS2QJqL76OLIZGELrOf3e4na3-_aGoCkp1jPVnAXnrDkqy7ThwwVbMT6K_9wQLUixcn3-htGf4VcrZlY9OigYYA6h_xGXtEJJ2OBROQesqLSFP_pphmXCpShw/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivasD2pE1zZgR9uQk8AdQS2QJqL76OLIZGELrOf3e4na3-_aGoCkp1jPVnAXnrDkqy7ThwwVbMT6K_9wQLUixcn3-htGf4VcrZlY9OigYYA6h_xGXtEJJ2OBROQesqLSFP_pphmXCpShw/s1600/02.PNG" height="226" width="320" /></a></div>
<br />
This is a Role-based or feature-based installation, <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9lhdx3UhmVvfbAxgk5jR-2WGD_AN2zh9_mft5UFugHeW6LbcFm00b9T6QEyELoV9To8r-wZqhyCJ090K2MEpEp1cvJvjthmoVGfKT8p6Y5LoQ1Xy_l5ELU24VG6DCrUaYo42pCVEi1L8/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9lhdx3UhmVvfbAxgk5jR-2WGD_AN2zh9_mft5UFugHeW6LbcFm00b9T6QEyELoV9To8r-wZqhyCJ090K2MEpEp1cvJvjthmoVGfKT8p6Y5LoQ1Xy_l5ELU24VG6DCrUaYo42pCVEi1L8/s1600/03.PNG" height="226" width="320" /></a></div>
<br />
Running this install on the local machine, <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaPnpr-PwbkzpP9MYQcK92Wn9wYSmaAw0pWmDsLcVkj2QKBbL52y86mJTovjcGE7TQVBLtHD8Cs9ngywBKAFWbGTiVzkjEZ13RMC09jiKmX9Za2mQN-UbnOmikdgm2QFORl7XMBbGBBUs/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaPnpr-PwbkzpP9MYQcK92Wn9wYSmaAw0pWmDsLcVkj2QKBbL52y86mJTovjcGE7TQVBLtHD8Cs9ngywBKAFWbGTiVzkjEZ13RMC09jiKmX9Za2mQN-UbnOmikdgm2QFORl7XMBbGBBUs/s1600/04.PNG" height="226" width="320" /></a></div>
<br />
Check <b>Active Directory Domain Services</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-iKpgQ7O6d04zYZgLdL-ksAjg3KOo8Q2DrJmqQttzbjUQmk-4kEwfGq7_6dI233UZ8ZNpNXWnJYmI5WTbxJMrTqSKichhqAsPRVhGSFx8OLP1j7b6HSPPh8yUdWI6YqoRF8h5VLKDNqY/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-iKpgQ7O6d04zYZgLdL-ksAjg3KOo8Q2DrJmqQttzbjUQmk-4kEwfGq7_6dI233UZ8ZNpNXWnJYmI5WTbxJMrTqSKichhqAsPRVhGSFx8OLP1j7b6HSPPh8yUdWI6YqoRF8h5VLKDNqY/s1600/05.PNG" height="226" width="320" /></a></div>
<br />
You will be prompted to install additional features, <b>Click Add features</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf0P4ZOO5H7EMR_AOTU4dWdxH-QTX3B07m8JqOXEGCn3OkEEaMEcisX-w3B7Qgfn-xRlJjxNDGAupeOVgVrPwrO5y6QQT7t84wr56OyB_bTSuXmTd7O7KtKrVxQOomPcqQQnK3MGdLtuM/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf0P4ZOO5H7EMR_AOTU4dWdxH-QTX3B07m8JqOXEGCn3OkEEaMEcisX-w3B7Qgfn-xRlJjxNDGAupeOVgVrPwrO5y6QQT7t84wr56OyB_bTSuXmTd7O7KtKrVxQOomPcqQQnK3MGdLtuM/s1600/06.PNG" height="320" width="306" /></a></div>
<br />
Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQL6sY2FK8f0h4NfqDoF6PvOoarr-_6e08d_effSFzX-6Zbo5RS1asdU71afx8GIlP3DrPOl9oH_w-s2gBVrKXSflBBnuoOugtQeoEqnKXC2WiYS8jRhx_rGbRf_RVgCwkYkTAKE2dIUk/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQL6sY2FK8f0h4NfqDoF6PvOoarr-_6e08d_effSFzX-6Zbo5RS1asdU71afx8GIlP3DrPOl9oH_w-s2gBVrKXSflBBnuoOugtQeoEqnKXC2WiYS8jRhx_rGbRf_RVgCwkYkTAKE2dIUk/s1600/07.PNG" height="227" width="320" /></a></div>
<br />
We are not adding features at this time, <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYEcpfMOtaeI0_ptzr9qw3S_-bra0NnoNvMaUNxL3UtZIX9Nna94-2k2b8ylQb7Hbv3r5cEofHes1dRNM6QoeToTJl_EYLo3I-VdDsAUrZyjdP0N0q2855b0UOXDFZjqYeAybZOqqgsI8/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYEcpfMOtaeI0_ptzr9qw3S_-bra0NnoNvMaUNxL3UtZIX9Nna94-2k2b8ylQb7Hbv3r5cEofHes1dRNM6QoeToTJl_EYLo3I-VdDsAUrZyjdP0N0q2855b0UOXDFZjqYeAybZOqqgsI8/s1600/08.PNG" height="225" width="320" /></a></div>
<br />
Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm5dSa9jxULDo2jtPIyhgbXMj7yGX_D9_tchlvjmxIYsnfX-eeANoMPHTXLmlpHwc0KG3w5jeHxujqTi_89r0aZTMaORQC8dqUGYjoAN5LgoZXrE1pA3EhZf2y5K3LJLsmXuoroODK_oY/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhm5dSa9jxULDo2jtPIyhgbXMj7yGX_D9_tchlvjmxIYsnfX-eeANoMPHTXLmlpHwc0KG3w5jeHxujqTi_89r0aZTMaORQC8dqUGYjoAN5LgoZXrE1pA3EhZf2y5K3LJLsmXuoroODK_oY/s1600/09.PNG" height="226" width="320" /></a></div>
<br />
You can check the Restart the destination server automatically if required box if you like. Click Install<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7gjflB7S2bjmy9WVlce1e6VceBEycWkEZ0YlMCanzKsUB-svPXhfnGkAXasICX8n0hti9VUh7OiCuUf_2a83iKihQnEx2bCX8wlF_dfLVwxunJ1geKyJK9D33Fjgjo1ba9QWLw7vT3y4/s1600/10.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7gjflB7S2bjmy9WVlce1e6VceBEycWkEZ0YlMCanzKsUB-svPXhfnGkAXasICX8n0hti9VUh7OiCuUf_2a83iKihQnEx2bCX8wlF_dfLVwxunJ1geKyJK9D33Fjgjo1ba9QWLw7vT3y4/s1600/10.PNG" height="227" width="320" /></a></div>
You can close this window once the install begins.<br />
<br />
<b>Promote to Domain Controller:</b><br />
When the install finishes you will get a new notification. Click on the Notification flag and you will see that the feature was installed successfully. <b>Click Promote this server to a domain controller</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXRgECop4Nd_4dw9qkHtnPRli_XlSr-t80bydp7M7FYIzQPRfLdnaWvB9aGp8Tq1L4bVWQR0TBCFsG6XrjnGzfh1znFTqWi77DgHOcND4HoSlAgXMiHhlvN7cKJimFiNkRxrKoYXYuQ-c/s1600/11.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXRgECop4Nd_4dw9qkHtnPRli_XlSr-t80bydp7M7FYIzQPRfLdnaWvB9aGp8Tq1L4bVWQR0TBCFsG6XrjnGzfh1znFTqWi77DgHOcND4HoSlAgXMiHhlvN7cKJimFiNkRxrKoYXYuQ-c/s1600/11.PNG" height="237" width="320" /></a></div>
<br />
The Active Directory Domain Services Configuration Wizard will kick off. This is a new domain/forest so we will <b>Select Add a new forest</b>, and call it lab.local<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR_jnCokIRv-x8BbxbyHZ7siTlE8GNeQx5Tx4rvjgDv88ssI_k31rMahLTFZ1oZznbHMVoOSeGKXDtA2g_81INQ1ibDycIRh3AYBBDAhRrj8c8L5EsJQLyG0zYKBtvp5r_PSptZY-C-YY/s1600/12.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR_jnCokIRv-x8BbxbyHZ7siTlE8GNeQx5Tx4rvjgDv88ssI_k31rMahLTFZ1oZznbHMVoOSeGKXDtA2g_81INQ1ibDycIRh3AYBBDAhRrj8c8L5EsJQLyG0zYKBtvp5r_PSptZY-C-YY/s1600/12.PNG" height="233" width="320" /></a></div>
<br />
I want this to be at the highest forest/domain functional level so we select Windows Server 2012 R2 for both. We also need to add a Directory Services Restore Mode password. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcqUFArU9wdssBPhFpcZ92y38GGEGtpbLB0GaHq4nKDVq2_r14eWtGCyTAQ4pd3JzvJssM0oTdq2T7xgQhB7CjIoED1NVDPY-mX55xBRcHgEXcAknph7UQc3furzq9DFLVToLqDgqtyKQ/s1600/13.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhcqUFArU9wdssBPhFpcZ92y38GGEGtpbLB0GaHq4nKDVq2_r14eWtGCyTAQ4pd3JzvJssM0oTdq2T7xgQhB7CjIoED1NVDPY-mX55xBRcHgEXcAknph7UQc3furzq9DFLVToLqDgqtyKQ/s1600/13.PNG" height="234" width="320" /></a></div>
<br />
Since this is the first DC in the forest/domain and we don't have DNS up and running you will see an error for DNS delegation. This error can safely be ignored. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgEe6UnyiFzNvNWcNiafvgpzUYimz13KS-clmnxqhZoFOaytG_8fb59xXjQ9A-vmxYlq_iwbOd_5SnBWQF1MGTWRwKCpRMKqfZHNAdNNEhDav0ViMo9F43Bcu8TwyLxD_yoQWJDiI0NtY/s1600/14.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgEe6UnyiFzNvNWcNiafvgpzUYimz13KS-clmnxqhZoFOaytG_8fb59xXjQ9A-vmxYlq_iwbOd_5SnBWQF1MGTWRwKCpRMKqfZHNAdNNEhDav0ViMo9F43Bcu8TwyLxD_yoQWJDiI0NtY/s1600/14.PNG" height="234" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
Your NetBIOS name should already be selected from the Root domain name selected earlier. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg96L3XJvxxRm5zqRA3T1AT9wKqHAQA5P96xdFIQ8xvfGpq4x4VNzIguUMqzSHfN631ok5VR5IN4AF7L5gQWn4jM7WzFMdi7_YFA-H09b3DFhFyKtstp2mYzwZULMJ5YpCuBv-7eyyGSYs/s1600/16.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg96L3XJvxxRm5zqRA3T1AT9wKqHAQA5P96xdFIQ8xvfGpq4x4VNzIguUMqzSHfN631ok5VR5IN4AF7L5gQWn4jM7WzFMdi7_YFA-H09b3DFhFyKtstp2mYzwZULMJ5YpCuBv-7eyyGSYs/s1600/16.PNG" height="234" width="320" /></a></div>
<br />
Leave these as default. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNmwua30L1sYNPltCf3SR_i-Cm3Ux00y-3ztYV44x3LNCXPo02BsQA896IXshamyhN6Z96hY-HK_2ebxst_JQGwvgTPQHJXdZ8xzv-UFru169GD2q0MMjajulK-_Om9I_EvqMsuZnS1y8/s1600/17.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNmwua30L1sYNPltCf3SR_i-Cm3Ux00y-3ztYV44x3LNCXPo02BsQA896IXshamyhN6Z96hY-HK_2ebxst_JQGwvgTPQHJXdZ8xzv-UFru169GD2q0MMjajulK-_Om9I_EvqMsuZnS1y8/s1600/17.PNG" height="234" width="320" /></a></div>
<br />
Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTHeMraqhhKxYn1f-feN0myoxJlRea2s4vtMw0guZLogpyf2EkeV7_9Y256nFrUkoeSemKgqMFOC_c8b3Y27vN7F1kJWIig9tZVmZKTsf1dKaJN3yR2V-7A5LgGxn2hLUWSFwUAk2ub74/s1600/18.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTHeMraqhhKxYn1f-feN0myoxJlRea2s4vtMw0guZLogpyf2EkeV7_9Y256nFrUkoeSemKgqMFOC_c8b3Y27vN7F1kJWIig9tZVmZKTsf1dKaJN3yR2V-7A5LgGxn2hLUWSFwUAk2ub74/s1600/18.PNG" height="235" width="320" /></a></div>
<br />
If prerequisite checks pass <b>Click Install</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisZ0iOCF0rc8tnxG-olvSlHnnfvQ1SyOZcLFKGrdQxJ6dLpuUOdBqc0T7DwE-au2xo7H_H0tEFesDprA6OgqMKdgcy1CVAqw5Hg0uCFv8s97Rv1IgPhDEI8vPPtjbfcZ45kDxUjLPmV6A/s1600/19.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisZ0iOCF0rc8tnxG-olvSlHnnfvQ1SyOZcLFKGrdQxJ6dLpuUOdBqc0T7DwE-au2xo7H_H0tEFesDprA6OgqMKdgcy1CVAqw5Hg0uCFv8s97Rv1IgPhDEI8vPPtjbfcZ45kDxUjLPmV6A/s1600/19.PNG" height="234" width="320" /></a></div>
And that's it. If you checked the box to reboot the server, it will do so automatically, otherwise you you will need to do so manually to finish the install. Once it does, you can log in normally.<br />
<br />
<span style="color: yellow;">Note: Up to 2008 R2 you were prompted to set the domain administrator password during the DCPROMO steps. For some reason this was done away with in 2012. The DA password defaults to the local administrator password. The last thing I do is log in and change it for security reasons.</span><br />
<br />
More to come!<br />
<br />
<br />
Like this blog, give it a g+1<br />
<br />Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-1402599094970501692013-12-17T09:19:00.000-07:002013-12-17T09:28:06.967-07:00SCCM 2012 - Deploying UpdatesIn <a href="http://jimmoldenhauer.blogspot.com/2013/11/sccm-2012-wsus-and-software-update-point.html">WSUS & Software Update Point</a> we installed WSUS and SUP, then we went on and did additional configuration in <a href="http://jimmoldenhauer.blogspot.com/2013/11/sccm-2012-changing-sup-settings.html">Changing SUP Settings</a>. Now that we SUP configured and have update definitions downloaded we are ready to deploy updates out to our clients.<br />
<br />
<b><u>Expired & Superseded Updates:</u></b><br />
First thing we need to do is get rid of any of the updates that are no longer valid. Before we do this I wanted to take a moment to explain the Update icons, what they are and what they mean.<br />
<br />
<b>The Normal Icon</b><br />
<div class="separator" style="clear: both; text-align: left;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7DjV28ye1jeK5aiCAwaMrPddVmgXKqIX1qEo7bVqW-5mVX-y20dkBCPL1eugK9dtuZxVcaYhWqZbaixAlb_N19sqY9nGSLMeFjN3U8JrJ8Sgy5g6UrOcyam5hlzpE0yWSlzcj_8g6oSE/s1600/01.PNG" /> The icon with the green arrow represents a normal software update.</div>
Description:<br />
Normal software updates have been synchronized and are available for software deployment.<br />
Operational Concerns:<br />
There are no operational concerns.<br />
<br />
<b>The Expired Icon</b><br />
<div class="separator" style="clear: both; text-align: left;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSWm6FZt8WE9Jr9Zwuo_0WoWe28xz29UA2Rp_MA0fvmh54IT-hW2lgjc6K2XuT6VkqnwZLM-LazrczG1U6RGoxW3cKjS_wGLfQzj9OeFIt9T7xF0bfEevCVBHMkxsq7g7VEXNmTu4HLSA/s1600/02.PNG" />The icon with the black X represents an expired software update. You can also identify expired software updates by viewing the Expired column for the software update when it displays in the Configuration Manager console.</div>
Description:<br />
Expired software updates were previously deployable to client computers, but once a software update is expired, new deployments can no longer be created for the software updates. Expired software updates contained in active deployments continue to be available to clients.<br />
Operational Concerns:<br />
Replace expired software updates when possible. When software updates become expired, Configuration Manager does not remove the software updates contained within active software update deployments. Configuration Manager continues to assess software update compliance on expired software updates in deployments, but they are considered “not required” for reporting purposes.<br />
<br />
<b>The Superseded Icon</b><br />
<div class="separator" style="clear: both; text-align: left;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivf7FCIaWlLPHLedJ0EUO804QgErLJTQkYZ08fIfKxuB7OiyE0tPzJAItNAbWlNTAw0Eq9hxhoYAyuVQIiQ63LT_HVqNrYvCc-RG3PzPnRRMPVxkJLUrnpVYohghUS3foPASTwN3LOFxY/s1600/03.PNG" />The icon with the yellow star represents a superseded software update. You can also identify superseded software updates by viewing the Superseded column for the software update when it displays in the Configuration Manager console.</div>
Description:<br />
Superseded software updates have been replaced with newer versions of the software update. Typically, a software update that supersedes another software update does one or more of the following:<br />
<ul>
<li>Enhances, improves, or adds to the fix provided by one or more previously released software updates.</li>
<li>Improves the efficiency of its software update file package, which clients install if the software update is approved for installation. For example, the superseded software update might contain files that are no longer relevant to the fix or to the operating systems now supported by the new software update, so those files are not included in the superseding software update's file package.</li>
<li>Updates newer versions of a product, or in other words, is no longer applicable to older versions or configurations of a product. Software updates can also supersede other software updates if modifications have been made to expand language support. For example, a later revision of a product update for Microsoft Office might remove support for an older operating system, but add additional support for new languages in the initial software update release.</li>
</ul>
Operational Concerns:<br />
When possible, deploy the superseding software update to client computers instead of the superseded software update. You can display a list of the software updates that supersede the software update on the Supersedence Information tab in the software update properties.<br />
<br />
<b>The Invalid Icon</b><br />
<div class="separator" style="clear: both; text-align: left;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhJris809rJ8lRYL7_oR3UcLkHzO6Cvr8aAvos_iwsWjVxGQ54GFWcUYfD5Eb88hLg3zu0s5TuRO47fS9c1JnQbvQ7nxBgo02fU9m0dWkIhaDJfFuOcuJcKdFUbz3H8gClubI6xgL5rMw/s1600/04.PNG" />The icon with the red X represents an invalid software update.</div>
Description:<br />
Invalid software updates are in an active deployment, but for some reason the content (software update files) is not available. The following are scenarios in which this state can occur:<br />
<ul>
<li>You successfully deploy the software update, but the software update file is removed from the deployment package and is no longer available.</li>
<li>You create a software update deployment at a site and the deployment object is successfully replicated to a child site, but the deployment package has not successfully replicated to the child site.</li>
</ul>
Operational Concerns:<br />
When the content is missing for a software update, clients are unable to install the software update until the content becomes available on a distribution point. You can redistribute the content to distribution points by using the Redistribute action. When content is missing for a software update in a deployment created at a parent site, the software update must be replicated or redistributed to the child site.<br />
<br />
<b><u>Folders & Filtering:</u></b><br />
So now we understand a little more about what we are dealing with. Lets isolate all of the Expired and Superseded updates so they won't interfere with the deployments. In the <b>Software Library</b> expand <b>Software Updates</b> and <b>Right Click on All Software Updates</b>. <b>Select Folder </b>then <b>Create Folder</b>. Call the folder Superseded & Expired<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigihZDLKUVTUI30MTZGXqV2H7iVzDvw5My0becbGpD7YZ-Ih6yVzy_FxewoDrhkCQ41R2SDNv0C0M1DqwXUEj8ofhHSRFZ4app_puw6uikOWSjvZ7f-NRW3kEQ7QbJbY4SpwoLtEBGDIU/s1600/05.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigihZDLKUVTUI30MTZGXqV2H7iVzDvw5My0becbGpD7YZ-Ih6yVzy_FxewoDrhkCQ41R2SDNv0C0M1DqwXUEj8ofhHSRFZ4app_puw6uikOWSjvZ7f-NRW3kEQ7QbJbY4SpwoLtEBGDIU/s1600/05.png" height="185" width="320" /></a></div>
<br />
Now we have a place to put the outdated updates lets go ahead and do that. In the upper right corner of the viewing pane you will see <b>Add Criteria</b>. Click on it to expand the selection window. Scroll down and <b>Check Superseded</b> then <b>Click Add</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibzUURxzdcc9fgAE-RTANIhNRs_CDxbNtvMSpGLDJHUytkKRUFBDHw_JpUMS_6Y05Kx3h5fY-FqL2nHwRfuT9sg5Qb0BEHbZ1Aw1eCpdXkJfMNDKxF1Zm2ML-erM1cF-g-vOkRRLiAa3g/s1600/06.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibzUURxzdcc9fgAE-RTANIhNRs_CDxbNtvMSpGLDJHUytkKRUFBDHw_JpUMS_6Y05Kx3h5fY-FqL2nHwRfuT9sg5Qb0BEHbZ1Aw1eCpdXkJfMNDKxF1Zm2ML-erM1cF-g-vOkRRLiAa3g/s1600/06.png" height="320" width="202" /></a></div>
<br />
You will now see below the Search Bar that we have scoped for <b>Superseded = Yes</b>. Hit Search to Filter out the items.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJ4R87pPswddrSZKaQ8QYw4U_Bv54z2IoYicipbT7nR4BnfvTtNPZUx7EU4xXkzdmKljsPQj762w2cv5KyMvoVycfUgw9BQX2cHyHNxVyqBR8P_nxaAVounm4Pee1Q5szQ-n1dYe2tXo8/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJ4R87pPswddrSZKaQ8QYw4U_Bv54z2IoYicipbT7nR4BnfvTtNPZUx7EU4xXkzdmKljsPQj762w2cv5KyMvoVycfUgw9BQX2cHyHNxVyqBR8P_nxaAVounm4Pee1Q5szQ-n1dYe2tXo8/s1600/07.PNG" /></a></div>
<br />
<span style="color: yellow;">Note: This is a search that you will use regularly so it is a good chance for you to save this search for easy reference later. Once you have your search results In the <b>Navigation Bar</b> on the <b>Search Tab Click Save Current Search As</b>. Call it Superseded = Yes. You will then be able to refer back to this search quickly by clicking on <b>Saved Searches</b> and then <b>Selecting Manage Searches for Current Node</b></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMmLJ7bNMezhDQrRqHZ1BTKTpVTNbvarh5JcIscDp0dYEILqfCOkbWgt1Nnq7Y2o61k8eB9bN0iWb4yLVWjR7_qdLRFS226iN7VuOPlZdl6fo8ptVxhjyN9wl0dfb_YJ5kSi8elWxODFU/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMmLJ7bNMezhDQrRqHZ1BTKTpVTNbvarh5JcIscDp0dYEILqfCOkbWgt1Nnq7Y2o61k8eB9bN0iWb4yLVWjR7_qdLRFS226iN7VuOPlZdl6fo8ptVxhjyN9wl0dfb_YJ5kSi8elWxODFU/s1600/08.PNG" height="53" width="320" /></a></div>
<br />
So now we have our filter in place and we have run it so all we should see are the updates that have been superseded. You can confirm that by checking the icons for each update on the left.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9UNVFSSaEFeCUO9WwyQGoNs9-3hF22ZsEnYcUhzSuCXzx0T3RZt0jXRjP5bkYmhtwaxeUSScHQ9hDVzQYeYKuy06P6ootcad8F7Jvn68QEQZdzPyJpIxJ71vvyKWyPTeth8a54KsNkLI/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9UNVFSSaEFeCUO9WwyQGoNs9-3hF22ZsEnYcUhzSuCXzx0T3RZt0jXRjP5bkYmhtwaxeUSScHQ9hDVzQYeYKuy06P6ootcad8F7Jvn68QEQZdzPyJpIxJ71vvyKWyPTeth8a54KsNkLI/s1600/09.PNG" height="265" width="320" /></a></div>
<br />
In the Display Window do a <b>Ctrl+A</b> to select all displayed updates. <b>Right Click</b> on the updates and <b>Select Move</b>.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBzuAVwCsQAj3LMukQOWUq8jl7eSI9akpT7zLbyrgLlI9XjvrNwM2z5XPTQy1WFXSnhZzii8wxiAABOe3psWTocm4etiYp5WX8gE2aukNPiP-rBh9F-HSIuSJMUONFrE0k90Qg1IStAzA/s1600/10.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBzuAVwCsQAj3LMukQOWUq8jl7eSI9akpT7zLbyrgLlI9XjvrNwM2z5XPTQy1WFXSnhZzii8wxiAABOe3psWTocm4etiYp5WX8gE2aukNPiP-rBh9F-HSIuSJMUONFrE0k90Qg1IStAzA/s1600/10.png" height="270" width="320" /></a></div>
<br />
The Move Selected Items window will open, Select the <b>Superseded & Expired</b> folder and <b>Click OK</b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHO6ItyNiJD9h5YkqY3Uxi765TxvoUCHq8SKkp3rCYesyOTY5AuSJ6DWAgpeTe5ubg4j1ZwUxra4OmAzlUS-0J2brBYEs5bcfKNScQ3Nx20v7yU2KCKrfazUNCzWprn5rA06-L6_K6ih4/s1600/11.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHO6ItyNiJD9h5YkqY3Uxi765TxvoUCHq8SKkp3rCYesyOTY5AuSJ6DWAgpeTe5ubg4j1ZwUxra4OmAzlUS-0J2brBYEs5bcfKNScQ3Nx20v7yU2KCKrfazUNCzWprn5rA06-L6_K6ih4/s1600/11.PNG" height="248" width="320" /></a></div>
<br />
This will move all the updates to the sub folder so you wont have to sift through them again.<br />
<br />
<b>Repeat these same steps for the the Expired items so all you are left with are active current updates.</b><br />
<br />
<b><u>Software Update Groups:</u></b><br />
So now we understand the updates a little better and know how to remove inactive updates, the next thing we need to do is create a Software Update Group. This is a grouping of like updates which we will use to deploy to our Test Device Collection.<br />
<br />
Lets go back into <b>All Software Updates</b> and create a new filter. For the purposes of this segment we will be working with updates for Server 2008 R2. So in Add Criteria select Product. You will notice that the default search for Product is Active Directory Rights Management Services Client 2.0 (its alphabetical).<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNpZqp_o2eJAaC-eYXbmy1CouWJUlXJ2x7zaZ24nd22B9CSO_9BLsWlFeFhSorz5xJ_5mbUEOSYakurKZprjIncqO-xBVppERhAqYwI4VNLJMZJ6Ujfz-9Md9XpIt-BB3bzElFBkLhm5E/s1600/12.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiNpZqp_o2eJAaC-eYXbmy1CouWJUlXJ2x7zaZ24nd22B9CSO_9BLsWlFeFhSorz5xJ_5mbUEOSYakurKZprjIncqO-xBVppERhAqYwI4VNLJMZJ6Ujfz-9Md9XpIt-BB3bzElFBkLhm5E/s1600/12.PNG" height="52" width="400" /></a></div>
<br />
Click on it and find <b>Windows Server 2008 R2</b> and <b>Click Search</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSgPEyYRmjAIs3IZ8ug9qJBorRaq8VfY0Vx-2pdZVyWhPtQxzYSDQWUUbjJbEaUah2KxwJJEnKZqgphdDdbB-W4WXYtMq119Da4CF_N48Clc6vKgeEuJJgOwyl5Zlbm9Zpm2MqdZAKPyo/s1600/13.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSgPEyYRmjAIs3IZ8ug9qJBorRaq8VfY0Vx-2pdZVyWhPtQxzYSDQWUUbjJbEaUah2KxwJJEnKZqgphdDdbB-W4WXYtMq119Da4CF_N48Clc6vKgeEuJJgOwyl5Zlbm9Zpm2MqdZAKPyo/s1600/13.PNG" height="60" width="320" /></a></div>
<br />
What you should be left with are all of the current Windows Server 2008 R2 updates. In the viewing pane select all of the updates (<b>Ctrl + A</b>), <b>Right Click</b> and <b>Select Create Software Update Group</b>.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj42nsMc4tbBcNlTibh-Z_HcKGaenIXRhkMDfS_vB2Nyp3Z6UxOoU3QsDbKpk5A5kyt9emX4NolG6iRsKKDFAjDsoLHHWvsYJxhpPQAwzJd73p5R3M9rAFCtTFMoFiQdBPlAusdQZP6YGg/s1600/14.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj42nsMc4tbBcNlTibh-Z_HcKGaenIXRhkMDfS_vB2Nyp3Z6UxOoU3QsDbKpk5A5kyt9emX4NolG6iRsKKDFAjDsoLHHWvsYJxhpPQAwzJd73p5R3M9rAFCtTFMoFiQdBPlAusdQZP6YGg/s1600/14.png" height="188" width="320" /></a></div>
<br />
Give it a descriptive name like Windows Server 2008 R2. You can optionally give it a more detailed description. <b>Click Create</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGMXn7BnZmLeYqqXnredZ30OoZtYuNQ2x4UdoiDFS0ZnB5EeAEwkzqssrpLbnr570XtZFxe6-Zu29ppTxKO5Fnu20hgZDETpwejH9dn4I1BgQVjxZh3qBcZEszjpqeJQ5G0fvLbeNDfGk/s1600/15.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGMXn7BnZmLeYqqXnredZ30OoZtYuNQ2x4UdoiDFS0ZnB5EeAEwkzqssrpLbnr570XtZFxe6-Zu29ppTxKO5Fnu20hgZDETpwejH9dn4I1BgQVjxZh3qBcZEszjpqeJQ5G0fvLbeNDfGk/s1600/15.PNG" height="94" width="320" /></a></div>
<br />
Now we are ready to do the deployment. In the navigation window go to <b>Software Update Groups</b>. Find your newly created group for Server 2008 R2. <b>Right Click</b> on it and <b>Select Deploy</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEkVZ4vTe4OW0GXzzCNc1IvT8F8JawDCxOSBXC0rthZMi4gIA6HPuv7fT6asNfh_OVhgly86bUFfpf-tqZnU902NNIy3hTMVFXQMt_PF2Da-c0NMwHkFJyVbN4BTNhTBWCNJqr_yQH3c0/s1600/16.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEkVZ4vTe4OW0GXzzCNc1IvT8F8JawDCxOSBXC0rthZMi4gIA6HPuv7fT6asNfh_OVhgly86bUFfpf-tqZnU902NNIy3hTMVFXQMt_PF2Da-c0NMwHkFJyVbN4BTNhTBWCNJqr_yQH3c0/s1600/16.png" height="190" width="320" /></a></div>
<br />
<b><u>Deploying Updates:</u></b><br />
The Deploy Software Wizard will start and you can begin providing information for the deployment. The Software Update/Software Update Group should already be selected. If this is your first deployment you wont have a Deployment Template available so you can skip that (don't worry we will make one shortly). Now you will remember in <a href="http://jimmoldenhauer.blogspot.com/2013/06/sccm-2012-creating-device-collections.html">SCCM 2012 - Creating Device Collections from an Organizational Unit</a> we discussed creating device collections. You should have a few already made. If not, stop now and go back and make some. You will need to have a collection of devices to deploy to. If you have them <b>Click Browse</b> and select your <b>Server 2008 R2 group</b>. Click Next<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEje2ELKsYecCrIvmUBo4WkOByGPO4EYsi5vQ9gfGVs06d6sofeZOsS65bOT9d-39E-eipV5_0MT0ttHXktlrEfmQIg7VgrjmqQ0LdzOpbw7Nb7o24O4O48x3VL1uBW3CrK7F3cnen9jE8Y/s1600/17.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEje2ELKsYecCrIvmUBo4WkOByGPO4EYsi5vQ9gfGVs06d6sofeZOsS65bOT9d-39E-eipV5_0MT0ttHXktlrEfmQIg7VgrjmqQ0LdzOpbw7Nb7o24O4O48x3VL1uBW3CrK7F3cnen9jE8Y/s1600/17.PNG" height="283" width="320" /></a></div>
<br />
For Type of deployment you can choose between Available and Required. Since this is for updates we want this to be <b>Required</b>. If your network is configured for Wake-on-LAN you can check that box, otherwise skip it. For Detail level select <b>Only Success and error messages</b>. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7GDY6j9rppylIMDCuGNHZ6gwq9g8aNc4AR91MNwqN2_o625ifwiGP2znPWj-9-iTTxU_geqESscHwaKvlYJK5GSz09rZ2S9Hs7ko7r60cBPeNcK14_ry1MV8n_oKz88KvPBpy3vMxk9w/s1600/18.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7GDY6j9rppylIMDCuGNHZ6gwq9g8aNc4AR91MNwqN2_o625ifwiGP2znPWj-9-iTTxU_geqESscHwaKvlYJK5GSz09rZ2S9Hs7ko7r60cBPeNcK14_ry1MV8n_oKz88KvPBpy3vMxk9w/s1600/18.PNG" height="283" width="320" /></a></div>
<br />
For <b>Time based on</b>, you can set it either way but I generally prefer UTC. For <b>Software available time</b> you can choose As soon as possible or Specific time. If you use ASAP it content for the client will become available individually as soon as the Distribution Point has it to deploy if you set a specific time it will come as a group of updates. <b>Installation deadline</b> dictates the install behavior. You can choose As soon as possible which means that as soon as the DP has distributed content the client will install (and reboot if necessary). If you use Specific time it will download update content but wait to install and reboot until the deadline. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjgHUlJCOLAQur0LHQXZ85A-sXW61i-2LD5OiNh2g5vEA0Caxbo_yvAasLsJwu28jevh6DJU2brGFxUr0xipysn5mrTullQkmmYtVUDfpEcvGZmGsGiO7afzTdMuozTixCAPjS9x4B2zs/s1600/19.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjgHUlJCOLAQur0LHQXZ85A-sXW61i-2LD5OiNh2g5vEA0Caxbo_yvAasLsJwu28jevh6DJU2brGFxUr0xipysn5mrTullQkmmYtVUDfpEcvGZmGsGiO7afzTdMuozTixCAPjS9x4B2zs/s1600/19.PNG" height="282" width="320" /></a></div>
<br />
<b>User visual experience</b> indicates what the end user will see in Software Center. Since these are Required updates (set previously) we don't really need to let the users know what is available as they won't have the authority to be selective anyway, so I set Hide in Software Center and all notifications. Deadline behavior indicates what happens when the client hits the deadline. You want to check both boxes. <b>Device restart behavior</b> is pretty clear. If there is an update that requires the client to reboot, it will. You also want to check Commit changes at deadline.<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkqeQoo9QDNp9p332OHbPlbMWBho6Zvs_hANHvfwZV20UX61FsW_Z6iEXfyDuiwUHY4kiZzzbVpi-kEEI3UZw-xmWaIB5s03aHUSe0pY_-lykMPRqouyTeqYs75J4ROBGMHqZNh_JjblA/s1600/20.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjkqeQoo9QDNp9p332OHbPlbMWBho6Zvs_hANHvfwZV20UX61FsW_Z6iEXfyDuiwUHY4kiZzzbVpi-kEEI3UZw-xmWaIB5s03aHUSe0pY_-lykMPRqouyTeqYs75J4ROBGMHqZNh_JjblA/s1600/20.PNG" height="282" width="320" /></a></div>
<br />
On Configuration Manager alerts, this can be determined by your update policy so adjust it as required. If you have SCOM configured in your install you can automatically suppress alerts during the update run and send notifications for failed alerts. You should probably check both boxes. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_nDLAVlbOHreMsyF7oQdZwBTINrilGjXIN_Wjo68FG_2YYcx8tiO7g87SqySwSUA8-AGl2wk9SP79IkZH8pcCnWQKauqW5T1q19O570GuVG0pyECWE7_380Wp7DXES0h9e_-kOZ7sVoo/s1600/21.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh_nDLAVlbOHreMsyF7oQdZwBTINrilGjXIN_Wjo68FG_2YYcx8tiO7g87SqySwSUA8-AGl2wk9SP79IkZH8pcCnWQKauqW5T1q19O570GuVG0pyECWE7_380Wp7DXES0h9e_-kOZ7sVoo/s1600/21.PNG" height="283" width="320" /></a></div>
<br />
You can determine what SCCM does with the actual updates in a slow site or boundary, whether to download or not. You can also dictate what the client does if content is not available from its primary server. It can either pull from a FSP or from other clients on the same subnet. If all else fails you can tell the client to pull directly from Microsoft. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1W-gFuLhxTHFL2f3h68yw8LuFDB7JB8oCFf8x-aMK3f2pkgoYLoHPRdKkUEyQ_QUV31qtgSuLvj4zuvDIdEEw8OM3rytTP1dMiYORw3l4MCnVzFgLjxkSOeT1OBfca3MOjjXnMM_pRqM/s1600/22.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1W-gFuLhxTHFL2f3h68yw8LuFDB7JB8oCFf8x-aMK3f2pkgoYLoHPRdKkUEyQ_QUV31qtgSuLvj4zuvDIdEEw8OM3rytTP1dMiYORw3l4MCnVzFgLjxkSOeT1OBfca3MOjjXnMM_pRqM/s1600/22.PNG" height="284" width="320" /></a></div>
<br />
If this is the first time you have deployed updates you will be required to create a Deployment package. This just determines where the updates are placed when you download them. Give the package a name and source location (this should be the WSUSContent folder created during the <a href="http://jimmoldenhauer.blogspot.com/2013/11/sccm-2012-wsus-and-software-update-point.html">SUP install</a>). <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYct5vNoNkaN8LvUavxs3kqCANDRYQkZZ1rnmrprzh-LgWaQEZ4LpaCN6rPX493b9K-nv-4tWtVcVfSw6n6oiveHEV0PhgjaIJ-xXgYcryZwT9JDia1r-xW7EcSgHHkQOLYGc2unhWu6o/s1600/23.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYct5vNoNkaN8LvUavxs3kqCANDRYQkZZ1rnmrprzh-LgWaQEZ4LpaCN6rPX493b9K-nv-4tWtVcVfSw6n6oiveHEV0PhgjaIJ-xXgYcryZwT9JDia1r-xW7EcSgHHkQOLYGc2unhWu6o/s1600/23.PNG" height="283" width="320" /></a></div>
<span style="color: red;">Gotcha - At the time of this writing there is a bug in SCCM 2012 SP1 related to downloading updates. If after you run through the downloads you experience an Access Denied error when trying to write to your WSUSContent folder this is part of that bug. To my knowledge Microsoft has not fixed this issue and it persists through CU3. The workaround is to close the console and re-open it running as administrator.</span><br />
<br />
You can also determine what distribution points to send content to. Add the DP's as needed and <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1KKmb8qolsQRrF563fW-K4j0bHD6gbEX-dnzSNV49_MdI7NjGRhcaPQ_jMVUYp82hHzl388qaYCkfmdw1VDxazPlXrqLJSDdxZVv8hX6W7zXt_Wnge5to_RaKIss93t5o2TOkEkz4kwE/s1600/24.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1KKmb8qolsQRrF563fW-K4j0bHD6gbEX-dnzSNV49_MdI7NjGRhcaPQ_jMVUYp82hHzl388qaYCkfmdw1VDxazPlXrqLJSDdxZVv8hX6W7zXt_Wnge5to_RaKIss93t5o2TOkEkz4kwE/s1600/24.PNG" height="283" width="320" /></a></div>
<br />
To reduce WAN traffic you can pull content straight from Microsoft as opposed to a site server. If you have a decent pipe between sites and boundaries this may not matter.<b> Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTXIb7lUgX9Sjr-OEqT8Toajd5V6N02HKRW00c26IK3mXaNR4cfJRsJVRtUGPilXrmGlP92pKk81_vhYx91wHDdYX5srUssSeUe5PzZhl8crK1KXz65VlAgx2NArQoC7GXL5MVg63COAs/s1600/25.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTXIb7lUgX9Sjr-OEqT8Toajd5V6N02HKRW00c26IK3mXaNR4cfJRsJVRtUGPilXrmGlP92pKk81_vhYx91wHDdYX5srUssSeUe5PzZhl8crK1KXz65VlAgx2NArQoC7GXL5MVg63COAs/s1600/25.PNG" height="283" width="320" /></a></div>
<br />
Choose the languages required by your environment. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTLRKDICOqAmTVQrEIEyYrmPLv3fPoVsfZX6HReuHTADre8EwykVDVU08LEUb_siRK1rVlOBzVxcZjqIUPnQoOh193MfQgJ7NbkS96XOGowgQr9OQCt1VbWHF9K5p6KmAtCNYOIBxUJjQ/s1600/26.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTLRKDICOqAmTVQrEIEyYrmPLv3fPoVsfZX6HReuHTADre8EwykVDVU08LEUb_siRK1rVlOBzVxcZjqIUPnQoOh193MfQgJ7NbkS96XOGowgQr9OQCt1VbWHF9K5p6KmAtCNYOIBxUJjQ/s1600/26.PNG" height="283" width="320" /></a></div>
<br />
On the summary page you have the option to save the update template as an answer file for later use. Click Save As Template.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1tw4OXKH1eltJSrYDrlRZ3733JEVJ_8ivKzZh4ObzEw0Tlsv4xrby8WVKm4Ago6De2kIN6WgbTZl3xjUAvE9TE_pcyyU5Cxs6zfzrGhgwKA_Nx0m2dsUHhi64Q6GYd7704iai1z9Pii4/s1600/27.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1tw4OXKH1eltJSrYDrlRZ3733JEVJ_8ivKzZh4ObzEw0Tlsv4xrby8WVKm4Ago6De2kIN6WgbTZl3xjUAvE9TE_pcyyU5Cxs6zfzrGhgwKA_Nx0m2dsUHhi64Q6GYd7704iai1z9Pii4/s1600/27.PNG" height="283" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
Give it a good descriptive name and <b>Click Save</b>. This will give you the ability to skip steps next time you run updates. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgi5F36GEcuedT1XrPk9ISka8XEalK0NJbPoo4Z7WT5XYTeUsOcT_VBDoHLC_i15fLxy-Fx8F-kWHnKtUoEPVfF-5mVr7SAYCKysvszFIF8O1GBQ0TJdG65GPq16Z21aZWV5NMjrQ96jo/s1600/24.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgi5F36GEcuedT1XrPk9ISka8XEalK0NJbPoo4Z7WT5XYTeUsOcT_VBDoHLC_i15fLxy-Fx8F-kWHnKtUoEPVfF-5mVr7SAYCKysvszFIF8O1GBQ0TJdG65GPq16Z21aZWV5NMjrQ96jo/s1600/24.PNG" height="198" width="200" /></a></div>
<br />
SCCM will process the request and download the required updates. Depending on how many are in the group this could take a few hours to kick off but in the end you should have something like below.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyuYhqWPSZKkbdkfAa1gpDD_MO3JxtIhA3shi5_fL9oGlFoHkq5NZVqH-Okz3LbxD65UBzUO6zY-G4-dRhOlKYv6vpwu22JvoGC727B1rslPiZ58XpaxwDl2RF5L3-j0z6YhimeR-oQKc/s1600/29.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjyuYhqWPSZKkbdkfAa1gpDD_MO3JxtIhA3shi5_fL9oGlFoHkq5NZVqH-Okz3LbxD65UBzUO6zY-G4-dRhOlKYv6vpwu22JvoGC727B1rslPiZ58XpaxwDl2RF5L3-j0z6YhimeR-oQKc/s1600/29.PNG" height="282" width="320" /></a></div>
<br />
I will cover how to monitor the deployment status in an upcoming segment.<br />
<br />
<br />
More to come!<br />
<br />
<br />
If you like this blog give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com3tag:blogger.com,1999:blog-2586169794745881237.post-69712893917252258142013-11-19T16:39:00.002-07:002013-11-20T11:37:27.715-07:00SCCM 2012 - Enable Asset IntelligenceIn this segment I am going to go over Asset Intelligence. AI is quite useful for keeping track of the assets within your environment including hardware and software inventory as well as licensing. When it comes time for true-up this can be quite beneficial. This information can be utilized via console and in reporting. There are a number of configuration steps before you can use Asset Intelligence in SCCM 2012.<br />
<br />
<b><u>Enable Asset Intelligence Hardware Inventory Reporting Classes:</u></b><br />
First we need to enable AI hardware inventory classes. In the Administration Space Click on Client Settings then highlight Default Client Settings. <b>Right Click</b> on it and <b>Select Properties</b>. In the Default Settings dialogue box<b> Click Hardware Inventory</b>. Set Enable hardware inventory on classes to <b>Yes</b>. You can adjust the inventory schedule as required or leave it set as the default.<br />
<br />
<span style="color: yellow;">Note: It is recommend to run the scans off hours or on the weekends when system resource utilization is lower as the scans can consume quite a bit of processor.</span><br />
<b><br /></b>
<b> Click Set Classes</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrGc23TE8rMCKRGBorm2TpRjd5luIhMCinxMLuUqOFPD7ZvEFEnDydcQdGeA30jlRosUzKuG_pV0UNBxuTrMkZzpPwOD64sXnvhqk_S1h1b0PCFD2LLALmsFyWobpXcP5prcadwvsqoZ4/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrGc23TE8rMCKRGBorm2TpRjd5luIhMCinxMLuUqOFPD7ZvEFEnDydcQdGeA30jlRosUzKuG_pV0UNBxuTrMkZzpPwOD64sXnvhqk_S1h1b0PCFD2LLALmsFyWobpXcP5prcadwvsqoZ4/s320/01.PNG" width="320" /></a></div>
<br />
In the Hardware Inventory Classes you can adjust what items you wish to collect data on from any number of possible items. For additional information regarding the classes refer to the <a href="http://technet.microsoft.com/en-us/library/gg682067.aspx#BKMK_HardwareInventoryDeviceSettings" target="_blank">Technet </a>article on them. <b>Click OK</b> then <b>Click OK</b> again.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMTe342hQMVNMyX8A3LqcgSDvIdETj9w0gyVHvWgqxozRLix3CN9i3ijxZEXPNNqgLmAA8uLQuZ-TprJWWOXHocGwieIuoEJ6mGadtfcZgzfWJJTj5WVyDcJv_cZM-pbMOvO5O0UsqOCs/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMTe342hQMVNMyX8A3LqcgSDvIdETj9w0gyVHvWgqxozRLix3CN9i3ijxZEXPNNqgLmAA8uLQuZ-TprJWWOXHocGwieIuoEJ6mGadtfcZgzfWJJTj5WVyDcJv_cZM-pbMOvO5O0UsqOCs/s320/02.PNG" width="320" /></a></div>
<br />
Now we need to enable Inventory Reporting Classes. In the <b>Asset and Compliance</b> space <b>Select Asset Intelligence</b>. On the Home Tab <b>Click Edit Inventory Classes</b>. When the Edit Inventory Classes opens Select Enable all Asset Intelligence reporting classes or you can select individual classes.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzsOUsYmMntf6CzOuS6dAbqAycaLQGWBE_Qi0XIjfI0CBblMO8VBoIPYSMDLhpYSoAIG9pPbsp6DS8hyGSI9Va27hlWLI2Ot5vG-ogrzcC92kTTmZ49BOZ7i_W_f-v3IMLNWMyBO6IVkY/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzsOUsYmMntf6CzOuS6dAbqAycaLQGWBE_Qi0XIjfI0CBblMO8VBoIPYSMDLhpYSoAIG9pPbsp6DS8hyGSI9Va27hlWLI2Ot5vG-ogrzcC92kTTmZ49BOZ7i_W_f-v3IMLNWMyBO6IVkY/s320/03.PNG" width="298" /></a></div>
<span style="color: yellow;">Note: If you intend to enable the Hardware Inventory Client Agent to inventory the information required to support these reports, SMS_SystemConsoleUser must be checked</span><br />
<br />
If you chose to enable all classes you will get a prompt warning you to about client system resources during the scan. Click Yes<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmlzi4j2H4YbOw3kWOG5GizGzrSVBD8ke4Q6wNhC2w6URqIV34nnGb219WRo0mPFoY8suw52rQQhN4tadoA5CTQGYREGiYMMBD_c_2YoDpKzE6fQHDFb5RhRxyEphOhZcwfBcAUI2K6vo/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="160" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmlzi4j2H4YbOw3kWOG5GizGzrSVBD8ke4Q6wNhC2w6URqIV34nnGb219WRo0mPFoY8suw52rQQhN4tadoA5CTQGYREGiYMMBD_c_2YoDpKzE6fQHDFb5RhRxyEphOhZcwfBcAUI2K6vo/s320/04.PNG" width="320" /></a></div>
<br />
<b><u>Install Asset Intelligence Synchronization Point:</u></b><br />
Next we need to install AI. In the <b>Administration Space</b> expand <b>Site Configuration</b> then highlight <b>Sites</b>. Select the site server you want to install AI on and <b>Right Click</b> and select <b>Add Site System Roles</b>. By now you should be all to familiar with the Add Site System Roles Wizard. Add the server name if not already present then select the Site code. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEeMhHsKgJn_1wHg4uh8mtBRd_7lU2wLmOtQsmexRbeVqHne0krUZeSJai3vaJ4Oe0UoCh9pjxy0oFw6apbbTTRJvhHH9E9ipJGTUIW5x7wkqrIIsqNfp_Utq-BDq0EpM2zfDnox6Azoc/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjEeMhHsKgJn_1wHg4uh8mtBRd_7lU2wLmOtQsmexRbeVqHne0krUZeSJai3vaJ4Oe0UoCh9pjxy0oFw6apbbTTRJvhHH9E9ipJGTUIW5x7wkqrIIsqNfp_Utq-BDq0EpM2zfDnox6Azoc/s320/05.PNG" width="320" /></a></div>
<br />
Add proxy information if required. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDPXexp9VNEvCmAQmyO0pQEH4cKHhn4rJE_tXZI0Jh2wCiOUdRRblQWmVYAhFhehGm6xRavxY-_VmraHKhgIp_VT3i9fUQWudBePELSHH5l00qE6QaOdE3xoj3lx1s2w8HB9wLbSwInRI/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDPXexp9VNEvCmAQmyO0pQEH4cKHhn4rJE_tXZI0Jh2wCiOUdRRblQWmVYAhFhehGm6xRavxY-_VmraHKhgIp_VT3i9fUQWudBePELSHH5l00qE6QaOdE3xoj3lx1s2w8HB9wLbSwInRI/s320/06.PNG" width="320" /></a></div>
<br />
<b>Select Asset Intelligence synchronization point</b>. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2zb1mebGr3amMVPbJQ3oOXtkWaCwXsMpvrpODpuZO3hVWR0yGRUGLAVUxm3xvMcKSiUpXbdPXFZSgZBcl7ZShvPvrxUPvatSt3ZoUDWRDRErtBXPyr7hH5_wegozlT0gEEFMIcZD6-J0/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2zb1mebGr3amMVPbJQ3oOXtkWaCwXsMpvrpODpuZO3hVWR0yGRUGLAVUxm3xvMcKSiUpXbdPXFZSgZBcl7ZShvPvrxUPvatSt3ZoUDWRDRErtBXPyr7hH5_wegozlT0gEEFMIcZD6-J0/s320/07.PNG" width="320" /></a></div>
<br />
By default, the Use this Asset Intelligence Synchronization Point setting is selected and cannot be configured on this page. System Center Online accepts network traffic only over TCP port 443, therefore the SSL port number setting cannot be configured on this page of the wizard. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDDdfRDXsd5tr5EJWZObfXR2PMDQZxa7WesXk5cALLxA6kzQ_D1hzHO3BrTHH_W1YjyFODP9zEPC0-Db3vxwjhvK_pEKDG9oV3TFjXgGYaU2uIcVNqY6DciIGoNaQIt5vA06xKEkceDFE/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDDdfRDXsd5tr5EJWZObfXR2PMDQZxa7WesXk5cALLxA6kzQ_D1hzHO3BrTHH_W1YjyFODP9zEPC0-Db3vxwjhvK_pEKDG9oV3TFjXgGYaU2uIcVNqY6DciIGoNaQIt5vA06xKEkceDFE/s320/08.PNG" width="320" /></a></div>
<br />
You can modify the synchronization schedule as required. Keep in mind to run scans in off hours if at all possible. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLihT-pgaDSCPcHVg0VtvRAA65BzvH057g4M6cpWOgHBoAc_GAVaEHvdybBs9xRrXysZ_LyM8ovSnaa7mxHr-zRVCU5rY5hdIClB7wGaGak3ACS8LwlfI-O85P3NHM2qDtYCCdnrIGLfU/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLihT-pgaDSCPcHVg0VtvRAA65BzvH057g4M6cpWOgHBoAc_GAVaEHvdybBs9xRrXysZ_LyM8ovSnaa7mxHr-zRVCU5rY5hdIClB7wGaGak3ACS8LwlfI-O85P3NHM2qDtYCCdnrIGLfU/s320/09.PNG" width="320" /></a></div>
<br />
Verify your settings and <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnReF8gP4WwNXNFipnyhY2DETqt022RVjhEPTZlgH0RgfWQrU2l9J-XmmGPzJSL5QLXlua2mbWQv1qx1vx9e8k6gw_UqzURBp1sJJm9p9HWBcZvMSw_Sjh7fLwICy7vgf0YSuz1hoRAnI/s1600/10.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnReF8gP4WwNXNFipnyhY2DETqt022RVjhEPTZlgH0RgfWQrU2l9J-XmmGPzJSL5QLXlua2mbWQv1qx1vx9e8k6gw_UqzURBp1sJJm9p9HWBcZvMSw_Sjh7fLwICy7vgf0YSuz1hoRAnI/s320/10.PNG" width="320" /></a></div>
<br />
You should get a success page. <b>Click Close</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiToxratumGOTDZEAWNmHZklL8CVnGxuvYPqKDMCn-pPLnvx2f5uccYeV61JkHt-GiMqP62Gg4lBX0dj6IvR-UUdqYjlmtSVYoOJPsKtixS9wHlfsJkBFLj0JwYoc4L22nG-se7Ofyzff8/s1600/11.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiToxratumGOTDZEAWNmHZklL8CVnGxuvYPqKDMCn-pPLnvx2f5uccYeV61JkHt-GiMqP62Gg4lBX0dj6IvR-UUdqYjlmtSVYoOJPsKtixS9wHlfsJkBFLj0JwYoc4L22nG-se7Ofyzff8/s320/11.PNG" width="320" /></a></div>
<br />
<b><u>Enable Auditing of Success Logon Events:</u></b><br />
In order for AI to display information gathered from Windows Security event logs on client computers in reporting you need to enable audit logging. If it is not enabled these reports would contain no data even if the appropriate hardware inventory reporting class is enabled.<br />
<br />
<span style="color: red;">Note: The following actions will need to be performed by someone with Domain Administrator level access in Active Directory.</span><br />
<br />
On your domain controller open Group Policy Management Editor. Find the SCCM policy that you created before you did the SCCM installation,<b> Right Click and Edit</b> (you can create a new policy if you prefer but I like to keep all my related policies together like this). Expand out Computer Configuration > Windows Settings > Security Settings > Local Policies > Audit Policy. Double Click on Audit Logon Events. <b>Check Define these policy settings</b> and then <b>Check Success</b>. <b>Click Apply</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu1_xuoO9qAtbmJbwjavlxt4QzP4JBuy_u3oIO6P8dTca-SzHJMMF7AaiR3VcV0qq8Rt_McgCcNkHhiW7R2RgyOu2ZLtFjzz7AqEg4l2ZtC120cGY9n9lXoDEwwNqFZxtUMshSSq9g6uM/s1600/12.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhu1_xuoO9qAtbmJbwjavlxt4QzP4JBuy_u3oIO6P8dTca-SzHJMMF7AaiR3VcV0qq8Rt_McgCcNkHhiW7R2RgyOu2ZLtFjzz7AqEg4l2ZtC120cGY9n9lXoDEwwNqFZxtUMshSSq9g6uM/s320/12.PNG" width="269" /></a></div>
<br />
<b><u>Import Software License Information:</u></b><br />
The Import Software License Wizard is used to import Microsoft Volume Licensing (MVLS) information and general license statements into the Asset Intelligence catalog. The MVLS license statement contains information about the license entitlements, or number of purchased licenses, for Microsoft products. A general license statement contains information about the purchased licenses for any publisher.<br />
<br />
<span style="color: yellow;">Note: The site server computer account needs <b>Full Control</b> permissions for the NTFS file system to the file share that is used to import software license information. </span><br />
<br />
One thing to keep in mind when importing license information. Existing software license information is overwritten so ensure that the information file that you use when you do the import contains a complete listing of all necessary data. This will only update information in the license file, not any other data.<br />
<br />
In the Assets and Compliance space Click Asset Intelligence. On the home tab Click Import Software Licenses. The Import Software License Wizard will start up. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2dCCCmUvbzocfXN7dlgcQWcv3YOMH2Tpc8VbMWd7X5B64bwCwz7OZY6ssChIc_Y6MtcAi42JXmKJxlTYqOITCHO14XRtqw2U4gNVOC6Jx4Ma-uUoLnxduOiawESFFUH79uvPgq_3OETA/s1600/13.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2dCCCmUvbzocfXN7dlgcQWcv3YOMH2Tpc8VbMWd7X5B64bwCwz7OZY6ssChIc_Y6MtcAi42JXmKJxlTYqOITCHO14XRtqw2U4gNVOC6Jx4Ma-uUoLnxduOiawESFFUH79uvPgq_3OETA/s320/13.PNG" width="320" /></a></div>
<br />
There are two possibilities to chose from here. Microsoft Volume License Statement and General License Statement.<br />
<br />
<b>Microsoft Volume License Statement</b><br />
The first is for importing Microsoft related product volume licenses (duh). The easiest way to gather this data is to pull it directly from the Microsoft partner website.<br />
<br />
Open up Excel (any version), rename Sheet 1 to License Data then delete sheets 2 & 3. In the Ribbon Select <b>Data </b>then <b>Click From Web</b>. Navigate to https://licensing.microsoft.com/ and enter in your Windows Live ID. Once you are logged in <b>Click View</b> your license summary, click the box to <b>Select License Data</b> then <b>Click Import</b>.<b> Click OK</b>. You will need to remove the first column then save the file as a normal .xlsx file for future reference. Then save the file as an .xml file to the NTFS share discussed previously.<br />
<br />
<b>General License Statement</b><br />
A General License Statement is used for all non Microsoft related products you have in AI and will need to be saved as a .csv file only.<br />
<br />
Open up Excel (any version), rename Sheet 1 to License Data then delete sheets 2 & 3. In Row 1 Column A enter the following (each in a new column). <span style="color: #6aa84f;">Green </span>items are required for all software on the list, the rest are not, but I leave them in there so I can remember the place holders and its nice to input the data if it is available.<br />
<br />
<ul>
<li><span style="color: #6aa84f;">Name</span></li>
<li><span style="color: #6aa84f;">Publisher</span></li>
<li><span style="color: #6aa84f;">Version</span></li>
<li><span style="color: #6aa84f;">Language</span></li>
<li><span style="color: #6aa84f;">EffectiveQuantity</span></li>
<li>PONumber</li>
<li>ResellerName</li>
<li>DateOfPurchase</li>
<li>SupportPurchased</li>
<li>SupportExpirationDate</li>
<li>Comments</li>
</ul>
Now that we have our 11 columns labeled we can add in the software information in row 2 down (as needed). The software names need to match up exactly to what you see in Inventoried Software, otherwise you will get an error when inputting data. Save the file as .cvs to the NTFS share discussed previously.<br />
<div>
<br /></div>
<div>
Now that we have our license file created select Microsoft or General depending on your need and browse to the file. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi36pd54m8wUTUdw0K6f1q9P5EChxlcvZ3cSPyfKFh5hm0PyrVLw5aBbWDLWX-Vat3MVc3HLX1owd189Fwq7l_9fEj9dS-krqSXsvQPEAdZ_Wk0JL2z8xQHaicPhM_j445VJV6yB0v2-Ig/s1600/14.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="269" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi36pd54m8wUTUdw0K6f1q9P5EChxlcvZ3cSPyfKFh5hm0PyrVLw5aBbWDLWX-Vat3MVc3HLX1owd189Fwq7l_9fEj9dS-krqSXsvQPEAdZ_Wk0JL2z8xQHaicPhM_j445VJV6yB0v2-Ig/s320/14.PNG" width="320" /></a></div>
<br />
You will get a summary, <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7N-V2dHbtao8Mz6fexYXL6T55hZt47ddfuqxV0ZvMyZQMXwrJnXchNYwHx7dCk6EyP-ClLoOhyQ4f6udW4v5N-da9InfBRuTnHuRqNtDxdGC1XB1T6viMqcHb7Hj0-z74tjWIv3V088w/s1600/15.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7N-V2dHbtao8Mz6fexYXL6T55hZt47ddfuqxV0ZvMyZQMXwrJnXchNYwHx7dCk6EyP-ClLoOhyQ4f6udW4v5N-da9InfBRuTnHuRqNtDxdGC1XB1T6viMqcHb7Hj0-z74tjWIv3V088w/s320/15.PNG" width="320" /></a></div>
<br />
Once you have success <b>Click Close</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhujHvn3oDioMWIwTNjcsSZuKQjgGorVr-b1UPLleVOXZTeqQb89HS-4193YyWPdz7WqEsLJuE6X5MOfSxv03oMp817rbhc5AKXqJSMIBFvL6q3T1LU0SYEu8PCDDA049tAZY5PVBBr1cI/s1600/16.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="269" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhujHvn3oDioMWIwTNjcsSZuKQjgGorVr-b1UPLleVOXZTeqQb89HS-4193YyWPdz7WqEsLJuE6X5MOfSxv03oMp817rbhc5AKXqJSMIBFvL6q3T1LU0SYEu8PCDDA049tAZY5PVBBr1cI/s320/16.PNG" width="320" /></a></div>
<br />
<b><u>Configure Asset Intelligence Maintenance Tasks:</u></b><br />
There are two types of Maintenance tasks available in AI. Check Application Title With Inventory Information and Summarize Installed Software Data<br />
<br />
<b>Check Application Title With Inventory Information</b><br />
This maintenance task checks that the software title that is reported in software inventory is reconciled with the software title in the Asset Intelligence catalog. By default, this task is enabled and scheduled to run on Saturday after 12:00 A.M. and before 5:00 A.M. This maintenance task is only available at the top-level site in your Configuration Manager hierarchy.<br />
<br />
<b>Summarize Installed Software Data </b><span style="color: red;">(Available only on Primary Sites)</span><br />
This maintenance task provides the information that is displayed in the Assets and Compliance workspace, in the Inventoried Software node, under the Asset Intelligence node. When the task runs, Configuration Manager gathers a count for all inventoried software titles at the primary site. By default, this task is enabled and scheduled to run every day after 12:00 A.M. and before 5:00 A.M. This maintenance task is available only on primary sites.<br />
<div>
<br /></div>
<div>
Go to the <b>Administration Space</b>, Expand <b>Site Configuration</b> then <b>Click Sites</b>. Highlight the server that has AI installed on it and and on the Home tab <b>Click Site Maintenance</b></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFWP0wdEGp3f8Swll-qXBm-cVHHCJpvuyAMC1nE9BT3sa3ZI0tCIXHUMVanO-8uUJ5iwSPZsSEgxxgXrNxg9teeP97yZdZRSSm_c5WRshzYXFlzLt891FtEXLZPYgyAlQkEPM0yZmpbZs/s1600/16a.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="110" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFWP0wdEGp3f8Swll-qXBm-cVHHCJpvuyAMC1nE9BT3sa3ZI0tCIXHUMVanO-8uUJ5iwSPZsSEgxxgXrNxg9teeP97yZdZRSSm_c5WRshzYXFlzLt891FtEXLZPYgyAlQkEPM0yZmpbZs/s320/16a.PNG" width="320" /></a></div>
<br />
Locate <b>Check Application Title With Inventory Information</b> and <b>Click Edit</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil4osZzbcOxsgHwFe3Gh3QxHIKOvA4z2Qus05kzfUkze3ljzbkw4o8ni7rnt5NPDLEapNIG_zwzB4u10D2XZiIMc23TnSJbaKBBgolYUI9w4Ig1jjILs5Nv9luFqqxIpAeRpGUEb1A2h4/s1600/17.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil4osZzbcOxsgHwFe3Gh3QxHIKOvA4z2Qus05kzfUkze3ljzbkw4o8ni7rnt5NPDLEapNIG_zwzB4u10D2XZiIMc23TnSJbaKBBgolYUI9w4Ig1jjILs5Nv9luFqqxIpAeRpGUEb1A2h4/s320/17.PNG" width="285" /></a></div>
<br />
<b>Check Enable this task</b> and set the schedule appropriate for your environment. <b>Click OK</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZpDZbDrN52XruztpIrvKI6dGa2gB9rVJpCFB18uK-Cs5oLKVNmIYDB95rtxEPxyIj8mlGeiWF2k-2030sp4WMgVDmuIHRHSN21B0yGGkuMQnp1iVc2oW6StQk-V_XS3xkUSS905AX7r4/s1600/18.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZpDZbDrN52XruztpIrvKI6dGa2gB9rVJpCFB18uK-Cs5oLKVNmIYDB95rtxEPxyIj8mlGeiWF2k-2030sp4WMgVDmuIHRHSN21B0yGGkuMQnp1iVc2oW6StQk-V_XS3xkUSS905AX7r4/s320/18.PNG" width="309" /></a></div>
<br />
<b>Summarize Installed Software Data </b><span style="color: red;">(Available only on Primary Sites)</span>. <b>Click Edit</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEdJvDD9y_L3BbhfG88_EbQgqrBKflpVPsUEphOkk4oX3VPiGZjhtzB9ABArDYPiQ3aC3Ngnv6w6k3NkbFtG9ph9S2xVXJIN26la1kh7VaeyvYp_0JeO6NQlvb9riK0lHIcNqwIj0aHWI/s1600/19.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEdJvDD9y_L3BbhfG88_EbQgqrBKflpVPsUEphOkk4oX3VPiGZjhtzB9ABArDYPiQ3aC3Ngnv6w6k3NkbFtG9ph9S2xVXJIN26la1kh7VaeyvYp_0JeO6NQlvb9riK0lHIcNqwIj0aHWI/s320/19.PNG" width="286" /></a></div>
<br />
<b>Check Enable this task</b> and set the schedule appropriate for your environment. <b>Click OK</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKVFBCvzjc3fBt_H3IQE1UtZCNCxWHfwfGGq5zO1XmbH1mM_79A8EH38WdAMtUkoq2ykOIXOPnJEdiGZlIck_2cWWWpOshdieB4StlrOEIE5Y4qczn0rOo9cyF8iphAoT68Ts19LUJMSg/s1600/20.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKVFBCvzjc3fBt_H3IQE1UtZCNCxWHfwfGGq5zO1XmbH1mM_79A8EH38WdAMtUkoq2ykOIXOPnJEdiGZlIck_2cWWWpOshdieB4StlrOEIE5Y4qczn0rOo9cyF8iphAoT68Ts19LUJMSg/s320/20.PNG" width="307" /></a></div>
<div>
<br /></div>
<div>
Congratulations Asset Intelligence is now up and running</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
More to come!</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
Like this blog, give it a g+1</div>
</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com6tag:blogger.com,1999:blog-2586169794745881237.post-47424808078483703622013-11-18T11:03:00.001-07:002013-11-18T11:05:17.625-07:00SCCM 2012 - Deploying Distribution Points.So in this segment I want to go over the process of setting up Distribution Points. DP's are helpful when you have an offsite office that has slow bandwidth to the hierarchy. You can distribute OS images and software packages through a DP which will reduce latency and bandwidth consumption. You replicate packages to the DP over the WAN once and the respective clients pull it from the local DP over the LAN.<br />
<br />
Setting up a DP is fairly straight forward, but there are a couple things that need to be done prior to the install. First you need to add the SCCM Admin account and the SCCM Site Server account to local administrators on the machine you will be making a DP. Otherwise you will get permissions errors during install.<br />
<br />
Next, if you are running a local firewall and plan on enabling PXE support on this DP you will need to open the following ports on the new Distribution Point, otherwise they will not be able to connect.<br />
<ul>
<li>UDP Port 67 </li>
<li>UDP Port 68</li>
<li>UDP Port 69</li>
<li>UDP Port 4011</li>
</ul>
<div>
<span style="color: yellow;">Note: Operating System installation utilizes UDP Port 69</span></div>
<br />
So once we have the previous steps completed lets move to the installation. In the SCCM console go to the Administration space and expand Site Configuration. Select Servers and Site System Roles then Click Create Site System Server.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4jxxc-sZHSUaMALjnB1KnAjGyh7l7jmfBgbcb6BSANDs1r1Mu1EcMkD0Nd1lAWYiiz1IjjfMac-BepmDoqfw3VHpc06stV3wEmPVI7YNQGuvzvyfhVpiXH_CGYJX-QmXYaLZXCzEXnUY/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="207" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4jxxc-sZHSUaMALjnB1KnAjGyh7l7jmfBgbcb6BSANDs1r1Mu1EcMkD0Nd1lAWYiiz1IjjfMac-BepmDoqfw3VHpc06stV3wEmPVI7YNQGuvzvyfhVpiXH_CGYJX-QmXYaLZXCzEXnUY/s320/01.PNG" width="320" /></a></div>
<br />
The Create Site System Server Wizard will open. Enter the name of the server you wish to add this role to, you can browse as well. Then select the Site it will be reporting to. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKEsb5Dkcb1VXEBY0mLRHod2_oMgS2IpbS3Hxf3XHHeb8VpQ77SBMxNZXifQXf40DVdE-lXgAcW9Aw3DKPiiL8VXi4HuUk_szEKX084MjKF96T8kvBuuJxpHMpPwfNuI5mg8tfHQDplBU/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKEsb5Dkcb1VXEBY0mLRHod2_oMgS2IpbS3Hxf3XHHeb8VpQ77SBMxNZXifQXf40DVdE-lXgAcW9Aw3DKPiiL8VXi4HuUk_szEKX084MjKF96T8kvBuuJxpHMpPwfNuI5mg8tfHQDplBU/s320/02.PNG" width="320" /></a></div>
<br />
Enter proxy information as required.<b> Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZXFLzqOasYI8xnoQnfDP1VcPS2wwvS3bPzOyT16Tw1jcpoKfFPGNDuYDu0hUZPZvmoI-jcOuG9YOkCyw2lgJ3ux-YMu4z6AW4L0-XZigCVM_rzb9ZQnNFYoxYeTzgPhC2DXtTJUF1Suw/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZXFLzqOasYI8xnoQnfDP1VcPS2wwvS3bPzOyT16Tw1jcpoKfFPGNDuYDu0hUZPZvmoI-jcOuG9YOkCyw2lgJ3ux-YMu4z6AW4L0-XZigCVM_rzb9ZQnNFYoxYeTzgPhC2DXtTJUF1Suw/s320/03.PNG" width="320" /></a></div>
<br />
<b>Select Distribution Point</b> and <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDk6MKABvn-pviqFFACx7dqglE5avcjm1syjodnSNLGztZx17Xryw_oFY_MWpigaA32M59UTvIZ1cdQvBkNWXzvHjUXJfTlMECtfamsrIP8YHs-ZthfNckdT9lxkvdM08RrWK3JkRtbjU/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDk6MKABvn-pviqFFACx7dqglE5avcjm1syjodnSNLGztZx17Xryw_oFY_MWpigaA32M59UTvIZ1cdQvBkNWXzvHjUXJfTlMECtfamsrIP8YHs-ZthfNckdT9lxkvdM08RrWK3JkRtbjU/s320/04.PNG" width="320" /></a></div>
<br />
<b>Check Install and configure IIS if required by Configuration Manager</b>. You can also choose between HTTP and HTTPS depending on your environmental requirements. If you have an existing certificate you can use that, otherwise <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjG-iQ_3JpRr66A5oUfOA2sSQYTw8oxUKAJuAp3Jj3XWTbhwPUdgxH9YroAJJeNe-jY1XOYNGcEdVaOXtWLZ-aqVzRSHACAyfBi-CMr-RHiYGXpel7jfnx6TX7Vls7l7MH08lNEzkT4QHk/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjG-iQ_3JpRr66A5oUfOA2sSQYTw8oxUKAJuAp3Jj3XWTbhwPUdgxH9YroAJJeNe-jY1XOYNGcEdVaOXtWLZ-aqVzRSHACAyfBi-CMr-RHiYGXpel7jfnx6TX7Vls7l7MH08lNEzkT4QHk/s320/05.PNG" width="320" /></a></div>
<br />
For drive settings you can use an alternate drive or leave the setting as Automatic which will create the catalog folders (discussed later) on the c:\ drive. Depending on the size of the c:\ drive and the number of software packages you may want to use an alternate drive. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXyJsszCW45_R0eJSGO2S96-azTbJvoU5kgpBg0_Tz5aYemJLeNfyn_M9oG4dVvqB9Ut_xPS2zfUNeDpWNgcEOa-8SM-2pzjl1dZTUSoh1pyuAo56MjmkOJ-iCLkp7XeQzavsoX-3xxGE/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXyJsszCW45_R0eJSGO2S96-azTbJvoU5kgpBg0_Tz5aYemJLeNfyn_M9oG4dVvqB9Ut_xPS2zfUNeDpWNgcEOa-8SM-2pzjl1dZTUSoh1pyuAo56MjmkOJ-iCLkp7XeQzavsoX-3xxGE/s320/06.PNG" width="320" /></a></div>
<br />
You can specify if you want this Distribution Point to pull content from other DP's in your hierarchy or only from CAS, Primary or Secondary site servers. <b>Click Next </b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi57pHqH38HlGPpE6XDBG5V8kQpkGwLWRpLHNVIRhSgNFaUMW2Kp82b5UlhDfTZVa4irf9oe9rQE2TN_NQm2zmE3-eR-940pjODHFDCtkboF-c7NzTv9FhrGy8MvgR4cUTIIfMM_O2o8EE/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi57pHqH38HlGPpE6XDBG5V8kQpkGwLWRpLHNVIRhSgNFaUMW2Kp82b5UlhDfTZVa4irf9oe9rQE2TN_NQm2zmE3-eR-940pjODHFDCtkboF-c7NzTv9FhrGy8MvgR4cUTIIfMM_O2o8EE/s320/07.PNG" width="320" /></a></div>
<br />
If you wish to use PXE Support <b>Check Enable PXE support for clients</b>. You will be prompted to open firewall ports which was discussed previously. Click Yes to the prompt.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgx7uCIi54MP5u1ZOX-uXsM-7yZ7ZLjAqRrsxRX5tD3IPvFsScBY588YA8cTlUpI0kvouelVC6hKj_i7NgWaP1SDRReopceOyHf9d7ksbrkopiymTpjEx9mXwpglzacuMNdLMs-NeSRHCA/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgx7uCIi54MP5u1ZOX-uXsM-7yZ7ZLjAqRrsxRX5tD3IPvFsScBY588YA8cTlUpI0kvouelVC6hKj_i7NgWaP1SDRReopceOyHf9d7ksbrkopiymTpjEx9mXwpglzacuMNdLMs-NeSRHCA/s320/08.PNG" width="320" /></a></div>
<br />
You now want to select Allow this distribution point to respond to incoming PXE requests. Since we are dealing with a small environment I unchecked require a password when computers use PXE (this can be changed later). <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRdZrrXDITKILnnJPz9Ven5xaccqxLMBTIvOcaaiOo0Wi0K50xdMmK8prt42miIaHRwi6t-_KM_3VWaeDpq4WuzvTymTOBqs02VIpqIoOa7evyrBM5Gx5bz8BNwzaoTqG-2wfcoRS4fAg/s1600/09.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRdZrrXDITKILnnJPz9Ven5xaccqxLMBTIvOcaaiOo0Wi0K50xdMmK8prt42miIaHRwi6t-_KM_3VWaeDpq4WuzvTymTOBqs02VIpqIoOa7evyrBM5Gx5bz8BNwzaoTqG-2wfcoRS4fAg/s320/09.PNG" width="320" /></a></div>
<br />
Now you can choose if you want to allow multicast. Multicast gives you the ability to disseminate package data to multiple clients simultaneously. You can select the number of clients and throttle data accordingly. If you are in a small office with limited bandwidth you may not want to enable this option.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX6IOcSB69uvbfqdqUOTQqzx_gn18Uye6ZXyTKexb5d4qsAfFWiX_A65ueQ5LhM8VGiElZkWc7hqCX9o_mT9Go6-ydE-n2lPx4LjdIh-Zwd2AkHaK4FaENRrvC1bN9PxdGHjBLynYvMRc/s1600/10.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX6IOcSB69uvbfqdqUOTQqzx_gn18Uye6ZXyTKexb5d4qsAfFWiX_A65ueQ5LhM8VGiElZkWc7hqCX9o_mT9Go6-ydE-n2lPx4LjdIh-Zwd2AkHaK4FaENRrvC1bN9PxdGHjBLynYvMRc/s320/10.PNG" width="320" /></a></div>
<br />
Content validation can be helpful if you are going through a lot of changes with the software packages in your environment. It verifies with the site server on a scheduled basis to confirm content. <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1_Lzlt2fG0ys-jFN6R_TWma0TF4c3dSp9i_QL2rz4eB74nw8rmBuFMevQFnDO5jQYeECj0fZ8xdINiEpH70kMohif4NMuQ3dcJAQk6zz0JFmDAEIBHmhxJ0342LaD0kwEkzZ6ODjlC5E/s1600/11.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1_Lzlt2fG0ys-jFN6R_TWma0TF4c3dSp9i_QL2rz4eB74nw8rmBuFMevQFnDO5jQYeECj0fZ8xdINiEpH70kMohif4NMuQ3dcJAQk6zz0JFmDAEIBHmhxJ0342LaD0kwEkzZ6ODjlC5E/s320/11.PNG" width="320" /></a></div>
<br />
Define the respecitve boundary group for this server and <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgazuWDlyyrxDiN4fg_VfczLfCXRcBIW8TyAQH54G-wmLosPzEGJw8S0PnmzThW4sYojmAu-xSvsRx0qq0RezogI-irUNAS_6jR0AY391KEdYuLaW2zMuHqQTELMYlZfBVgifILcHl-cVQ/s1600/12.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgazuWDlyyrxDiN4fg_VfczLfCXRcBIW8TyAQH54G-wmLosPzEGJw8S0PnmzThW4sYojmAu-xSvsRx0qq0RezogI-irUNAS_6jR0AY391KEdYuLaW2zMuHqQTELMYlZfBVgifILcHl-cVQ/s320/12.PNG" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
Review the install settings you selected and <b>Click Next</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWf8N8zGnGbl3Um1RntNiFlEKqajoHqX2rxoeH5UqjmzWKYWghGmvqRPRPn1oWP5IwWRS25dbjCVK-dGpEyRf1nYFx8N-PfLKpCacyAd97xNptOoGdKv3wqmsSmLZx7N3aX2USDyutVZI/s1600/14.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWf8N8zGnGbl3Um1RntNiFlEKqajoHqX2rxoeH5UqjmzWKYWghGmvqRPRPn1oWP5IwWRS25dbjCVK-dGpEyRf1nYFx8N-PfLKpCacyAd97xNptOoGdKv3wqmsSmLZx7N3aX2USDyutVZI/s320/14.PNG" width="320" /></a></div>
<br />
You should get a success. <b>Click Close</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAihKPMlZilOs2rCtjEhydkCNoF_dLRNV9Zt_uZceLX8nNaaU6JO1a8S6CxHOZ_QO2_tzNRvugAiqNwIxkU2-A8bacFojo5Vi5mxvNMUfeSo3pfyuwXfcUYi3_QwfK7kMYY2lKcdzSPg/s1600/15.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAihKPMlZilOs2rCtjEhydkCNoF_dLRNV9Zt_uZceLX8nNaaU6JO1a8S6CxHOZ_QO2_tzNRvugAiqNwIxkU2-A8bacFojo5Vi5mxvNMUfeSo3pfyuwXfcUYi3_QwfK7kMYY2lKcdzSPg/s320/15.PNG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
You can monitor the installation status of the DP if you go to the Monitoring space, expand Distribution Status and Click Distribution Point Configuration Status. Find the newly created DP and highlight it. In the bottom viewing pane you will see installation progress. You may see a few Failed to connect to remote distribution point errors initially. This is normal. What you are looking for is Distribution Point installation\upgrade successfully completed. If you get other errors you can highlight them and select More Details</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpBwiYqf9Ebkx4NCfeZuYxP_sx5j2EHnsfDRWK8edidHxWgYKQ3LEKg89eh6nJ8MdUWCVvSdQ1-NeX_RXG_HH8wAYF0ONRQg4NZQfNoeNE_c7ym-G3WxvJbPBC11kLy7vBeGJJJVRbtAE/s1600/16.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="178" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgpBwiYqf9Ebkx4NCfeZuYxP_sx5j2EHnsfDRWK8edidHxWgYKQ3LEKg89eh6nJ8MdUWCVvSdQ1-NeX_RXG_HH8wAYF0ONRQg4NZQfNoeNE_c7ym-G3WxvJbPBC11kLy7vBeGJJJVRbtAE/s320/16.PNG" width="320" /></a></div>
After the install completes the Primary server will request a synchronization. This may take some time depending on how many install packages you have in your environment.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
To further validate the install you can go to the newly created DP and go to the location you chose for install catalog directories (c:\ in our case) and you should see the following folders. You will also see the newly created inetpub folder.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRjAHsS-MnMpsL1CXfx36IyZXBzHJSmRqsoKTT6xjmPo3WXNWu-H3pjKkvHlq-iWwp1BCzHka8TU-y_0AJNWqRXkO7MCp15Q3js-NgOQjRQaiek3wTPDE5lkcSz8AdoO5xMX36UkkoQy0/s1600/17.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRjAHsS-MnMpsL1CXfx36IyZXBzHJSmRqsoKTT6xjmPo3WXNWu-H3pjKkvHlq-iWwp1BCzHka8TU-y_0AJNWqRXkO7MCp15Q3js-NgOQjRQaiek3wTPDE5lkcSz8AdoO5xMX36UkkoQy0/s320/17.PNG" width="320" /></a></div>
<span id="goog_1244835417"></span><span id="goog_1244835418"></span><span id="goog_1615716952"></span><span id="goog_1615716953"></span><span id="goog_1732699543"></span><span id="goog_1732699544"></span><br />
<br />
More to come!<br />
<br />
<br />
Like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-33071703349143770982013-11-12T11:19:00.001-07:002013-11-12T11:19:16.331-07:00SCCM 2012 - Changing SUP SettingsIn <a href="http://jimmoldenhauer.blogspot.com/2013/11/sccm-2012-wsus-and-software-update-point.html">WSUS & Software Update Point</a> we covered how to install and setup WSUS and SUP. In that segment I recommended we skip selecting any products as it would increase the amount of time it takes to complete the first sync. In this Segment I will show you how to go back and add products in manually and do another sync with the newly selected products.<br />
<br />
Adjusting these settings is actually quite simple. Once you have SUP installed go to the <b>Administration Space</b>, expand out <b>Site Configuration</b> then <b>Click Sites</b>. Highlight the server you installed SUP on and <b>Click Configure Site Components</b> then <b>Software Update Point</b>.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlPymXmq-PBNAJuJZKXEK7CWg2QnIzo4ZhVGPscEqrzsFAMa41_9PKyqy4LfYPB57pYvncIk0oILL0uFZlQCCiQUx9OB2pwFrTZwIVW18tQWDMLUuNOgiJbsCCjEpAvs_QQpo62D-kjI8/s1600/01.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="150" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlPymXmq-PBNAJuJZKXEK7CWg2QnIzo4ZhVGPscEqrzsFAMa41_9PKyqy4LfYPB57pYvncIk0oILL0uFZlQCCiQUx9OB2pwFrTZwIVW18tQWDMLUuNOgiJbsCCjEpAvs_QQpo62D-kjI8/s320/01.png" width="320" /></a></div>
<br />
From here you can adjust the Software Update Point Component Properties. In Sync Settings you can modify the upstream location for this SUP. Unless you are adding another server in your enterprise to handle the top level sync I wouldn't change this setting.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj7Yph4l8Et5higjeAkMGRyJTPk1ELi7CBdRmlBX_XYLAbk3Q_kRaP7u2daCRNEZC21Z8-zNNWhJBMBRzCffTO1CW8RTBmkzEGCaJedxn9X9y41Q9w-sf-tNiS0xHE8xsDeyIU1nEm33o/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhj7Yph4l8Et5higjeAkMGRyJTPk1ELi7CBdRmlBX_XYLAbk3Q_kRaP7u2daCRNEZC21Z8-zNNWhJBMBRzCffTO1CW8RTBmkzEGCaJedxn9X9y41Q9w-sf-tNiS0xHE8xsDeyIU1nEm33o/s320/02.PNG" width="275" /></a></div>
<br />
In Classifications you can add new or remove Classifications as needed. Remember, if you plan to deploy Endpoint Protection you need to keep Definition Updates.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg94aBDmYdKRZ5SVkJ_nnuth2VQfULUEjRKoa9vFTLLZYDQT4uJcIaNUFNyx1AavTBX-KUSFtqLi9UxfAkzqOH42WOcIlVtWTKmY_QF7O363Ru4FIfP5xUAaU6hAa5aeHeiaBLNLGn9buw/s1600/03.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg94aBDmYdKRZ5SVkJ_nnuth2VQfULUEjRKoa9vFTLLZYDQT4uJcIaNUFNyx1AavTBX-KUSFtqLi9UxfAkzqOH42WOcIlVtWTKmY_QF7O363Ru4FIfP5xUAaU6hAa5aeHeiaBLNLGn9buw/s320/03.PNG" width="275" /></a></div>
<br />
In Products you can add all relevant products to your environment or remove outdated items so they don't continue to take up storage space.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiiq8xwBCDv-eCiuR8RuxZfXHuHpAD0zfyD8ZjVd3hKoikrsKxvH1WiJ4PyzBFjucfE8DIXmt-DON7XfbnI_1mt1Ko-rriCOCHvx3meCDklM8e9HkTpH1VGPim1oMvRJot2N7pHR0KwOA/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiiq8xwBCDv-eCiuR8RuxZfXHuHpAD0zfyD8ZjVd3hKoikrsKxvH1WiJ4PyzBFjucfE8DIXmt-DON7XfbnI_1mt1Ko-rriCOCHvx3meCDklM8e9HkTpH1VGPim1oMvRJot2N7pHR0KwOA/s320/04.PNG" width="275" /></a></div>
<br />
In Sync Schedule you can modify when you do an upstream sync.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMx20ijX77Pob6RIgFXkEvS1C49nUHqk0saGZxKJ5RCk3QThzdxjcWMDTYUgdzHC6-nQU2sYdJw7bI6TFZG1qJ6rUh_S-MsaXxrJg0JgLSJGMI_WDPE5mBOtrDTCWCIef2tjkjCOqp5nc/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMx20ijX77Pob6RIgFXkEvS1C49nUHqk0saGZxKJ5RCk3QThzdxjcWMDTYUgdzHC6-nQU2sYdJw7bI6TFZG1qJ6rUh_S-MsaXxrJg0JgLSJGMI_WDPE5mBOtrDTCWCIef2tjkjCOqp5nc/s320/05.PNG" width="275" /></a></div>
<br />
On the Supersedence Rules you can modify when updates are removed once they have been superseded.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSrVEEAryuwUvQMDI3TWB9jzWARKdQykZ2dvk57de9AohKftncZ7pae8M51W-9-avBuZxdWDtoIR0c5mZ0051QD-UsNnfVnlQRls81oLvWcdRs2U5WLB9PXEPlKJ8PnzaAgBJnqutt9Ec/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSrVEEAryuwUvQMDI3TWB9jzWARKdQykZ2dvk57de9AohKftncZ7pae8M51W-9-avBuZxdWDtoIR0c5mZ0051QD-UsNnfVnlQRls81oLvWcdRs2U5WLB9PXEPlKJ8PnzaAgBJnqutt9Ec/s320/06.PNG" width="275" /></a></div>
<br />
In languages you can add new languages as needed.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGuZJCmn5n1PvgEn2sQJ7Vjv3fSUatDtsbY86lzMmy0xq22ctSDYmVPwwJ6JKTFhXLNhs2O1VB3s-bMmp1ATlXPwo2Fllz_qB2j-mOPBLcsFOyoDDe1ET_nEHzLVseBRkrHikdNA5KSjI/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGuZJCmn5n1PvgEn2sQJ7Vjv3fSUatDtsbY86lzMmy0xq22ctSDYmVPwwJ6JKTFhXLNhs2O1VB3s-bMmp1ATlXPwo2Fllz_qB2j-mOPBLcsFOyoDDe1ET_nEHzLVseBRkrHikdNA5KSjI/s320/07.PNG" width="274" /></a></div>
<br />
Once you have gone through and added all of the new Products needed in your environment you can do a manual sync or wait for the scheduled sync. If you want to do it right away go to the Software Library and expand Software Updates. Highlight All Software Updates and Click Synchronize Software Updates.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEXMaqUiGAL0tkLAsXLEG2ZmBZq7V5EMVDjuxgTmQneVudRYhj2YA8kUfshayE09IBn3FxqrVU-d_Dwf5KqwOMR6tLRospYDQhLnnwHMe_QpPHXoKATiWM03Snm4IUF3Vx_JZwlctNYSk/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEXMaqUiGAL0tkLAsXLEG2ZmBZq7V5EMVDjuxgTmQneVudRYhj2YA8kUfshayE09IBn3FxqrVU-d_Dwf5KqwOMR6tLRospYDQhLnnwHMe_QpPHXoKATiWM03Snm4IUF3Vx_JZwlctNYSk/s320/08.PNG" width="219" /></a></div>
<br />
<br />
More to come!<br />
<br />
Like this blog, give it a g+1Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0tag:blogger.com,1999:blog-2586169794745881237.post-64768784956967004662013-11-11T14:39:00.003-07:002013-11-11T14:41:25.585-07:00SCOM 2012 - Configure ACS ReportingIn <a href="http://jimmoldenhauer.blogspot.com/2013/11/scom-2012-deploying-acs.html">Deploying ACS</a> we discussed how to install and configure Audit Collection Services. Now we will discuss how to setup the reporting services for ACS so you can utilize the compiled data in a useful way. This requires that you have Reporting Services installed either locally or on a remote machine. If you have not setup Reporting Services refer back to my previous segment <a href="http://jimmoldenhauer.blogspot.com/2012/11/scom-2012-web-reporting-services-install.html">SCOM 2012 - Web & Reporting Services Install</a>. <br />
<br />
So the first thing we need to do is create a temp folder called c:\ACS. This will be deleted later but it will hold the install files. Next copy the contents of \ReportModels\ACS to the newly created temp ACS folder. In this folder there should be an .exe called ReportingConfig.exe. If it is not there go to \SupportTools and find it under your respective processor. Copy the file back to c:\ACS.<br />
<br />
The contents should look like this:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgct2I3joCGVehHec4aZLYnltxSPwqAzI18idyjzl9slRy9YMUfrJkPI4Ea-j702mE78GeNEyIxrfMi23geAD04cPFoSljFJ1jhzu_LoL6PC3l5756HEXIt1ko0chqmUdFSAjX0Z40mcI4/s1600/01.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgct2I3joCGVehHec4aZLYnltxSPwqAzI18idyjzl9slRy9YMUfrJkPI4Ea-j702mE78GeNEyIxrfMi23geAD04cPFoSljFJ1jhzu_LoL6PC3l5756HEXIt1ko0chqmUdFSAjX0Z40mcI4/s320/01.PNG" width="320" /></a></div>
<br />
From an administrative command prompt, run the following command:<br />
UploadAuditReports "<AuditDBServer\Instance>" "<Reporting Server URL>" "<path of the copied acs folder>"<br />
<br />
For example: UploadAuditReports "myAuditDbServer\Instance1" "http://myReportServer/ReportServer$instance1" "C:\acs"<br />
<br />
This example creates a new data source called Db Audit, uploads the reporting models Audit.smdl and Audit5.smdl, and uploads all reports in the acs\reports directory.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh98nK1wgGOcuGm8lEVXuuYdMDNnatW3wd2151GsAmgsopbLjPw6pQg-0-haFncKJ3lnq3edSKEGiorgvp9Q9Z9P65cVEkkYK7a8KK3MsL0yhKKTLSf9ZyPij-F33rR3s43QdJpzMYx39A/s1600/02.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="161" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh98nK1wgGOcuGm8lEVXuuYdMDNnatW3wd2151GsAmgsopbLjPw6pQg-0-haFncKJ3lnq3edSKEGiorgvp9Q9Z9P65cVEkkYK7a8KK3MsL0yhKKTLSf9ZyPij-F33rR3s43QdJpzMYx39A/s320/02.PNG" width="320" /></a></div>
<div>
<br /></div>
Once you get back to a command prompt you can close this window. Open up a web browser and navigate to your reporting page. It should be http://servername/reports_instancename. You will see the newly created Audit Reports. Click on it.<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixcLaNFElvQz7oJ2UYYrOB0ThM9C2uGULhIu-FcK4jPgJ-CfEixdE6M878r-ySjRtChkEZNvmwtW-ANzuzGF85Tymg7MbnHuxvHtLbNYMKWoX28S73bNnv-n4ZLnDE9PLlK4gHsPcmBuE/s1600/04.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="111" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixcLaNFElvQz7oJ2UYYrOB0ThM9C2uGULhIu-FcK4jPgJ-CfEixdE6M878r-ySjRtChkEZNvmwtW-ANzuzGF85Tymg7MbnHuxvHtLbNYMKWoX28S73bNnv-n4ZLnDE9PLlK4gHsPcmBuE/s320/04.PNG" width="320" /></a></div>
<div>
<br /></div>
<div>
In Audit Reports change the sort to <b>Details View</b></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWI9UCjP9epAqf1PL0lxQJhw65NN74FWAZ0qY4Lmupo141ding2s83fAFe76Xz3uGb2X9L0dxGFipkDIN-X8zQzeAdQ_hxkouY-Lcpk9fuI82PsBxbX28KjaEGBK40GZsRuivOWDsdvow/s1600/05.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="127" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWI9UCjP9epAqf1PL0lxQJhw65NN74FWAZ0qY4Lmupo141ding2s83fAFe76Xz3uGb2X9L0dxGFipkDIN-X8zQzeAdQ_hxkouY-Lcpk9fuI82PsBxbX28KjaEGBK40GZsRuivOWDsdvow/s320/05.PNG" width="320" /></a></div>
<div>
<br /></div>
<div>
<b>Right Click</b> on <b>DB Audit</b> and <b>Manage</b></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqXzAxYJGG59TZH31sFiAsJ0sd6ZtsOq3UN43r2IFYpc5shmozLbXlcFYHeRgmz8h5bhyphenhyphenU96uBO_9qR-picp6a3Mm8cnJo8CgNGrNeKcFQ_5CkIgb3CmSpqMSZnu6Z27PffJ7uEFBj4E/s1600/06.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqXzAxYJGG59TZH31sFiAsJ0sd6ZtsOq3UN43r2IFYpc5shmozLbXlcFYHeRgmz8h5bhyphenhyphenU96uBO_9qR-picp6a3Mm8cnJo8CgNGrNeKcFQ_5CkIgb3CmSpqMSZnu6Z27PffJ7uEFBj4E/s320/06.PNG" width="320" /></a></div>
<div>
<br /></div>
Make sure <b>Windows integrated security</b> is selected and <b>Test Connect</b>. If you are able to connect <b>Click Apply</b><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIM9n-8JakAn_CWEv3wRwGiG_IZVmaq9ovxrrEEyg-Fdr5l74-Nl7mQR3ZzIQL7bYONPhBVjlDvaQAbfySX5Mi8QFxJuq20eyxb8gupX3Pyui7U0S9RELO9PANQbs59xGv8uCQi2eZ_MM/s1600/07.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="274" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIM9n-8JakAn_CWEv3wRwGiG_IZVmaq9ovxrrEEyg-Fdr5l74-Nl7mQR3ZzIQL7bYONPhBVjlDvaQAbfySX5Mi8QFxJuq20eyxb8gupX3Pyui7U0S9RELO9PANQbs59xGv8uCQi2eZ_MM/s320/07.PNG" width="320" /></a></div>
<div>
<br /></div>
Back in the SCOM console go into the <b>Reporting Space</b>. You should see the new Audit Reports Section.<br />
<div>
<br /></div>
<div>
<span style="color: yellow;">Note: You may have to close the console and re-open it for this to to take effect. </span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO8yObMiWVInQ4bBUPuIJ5W4bEIPuo3ZT9OASS5GLO20RORH7GvEUnqU0hHQs09xykLheytwx2Q1eqr4XOmgNUuXgY0zSH4WD9NIQWMwf-tCctt52lWuFK13ZM5qfovK4cSXX6TxoepX0/s1600/08.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="273" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO8yObMiWVInQ4bBUPuIJ5W4bEIPuo3ZT9OASS5GLO20RORH7GvEUnqU0hHQs09xykLheytwx2Q1eqr4XOmgNUuXgY0zSH4WD9NIQWMwf-tCctt52lWuFK13ZM5qfovK4cSXX6TxoepX0/s320/08.PNG" width="320" /></a></div>
<div>
<br /></div>
You can now remove the c:\ACS folder as it is no longer needed.<br />
<br />
<div>
<br /></div>
<div>
More to come!</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
If you like this blog give it a g+1</div>
</div>
Jimhttp://www.blogger.com/profile/15355683251208854294noreply@blogger.com0