Académique Documents
Professionnel Documents
Culture Documents
Date: 11/17/10
Student Name: Martin G. Bobb
Student ID Number:
Student Degree Program: BS IT Network Design & Management Emphasis
Student Email:
Four Digit Assessment/Project Code: TWA1
Mentor Name: Mark Obremski, Les Vance
For Revisions Only Indicate Previous Grader:
Capstone Proposal Project Name: MS System Center Configuration Manager 2007 Install & setup
Signature Block
Students Signature
Mentors Signature
Table of Contents
Page 1
Outline the installation and configuration of SCCM in a representative Microsoft Server 2003
Standard version AD environment.
Outline the steps that are necessary in order to configure SCCM to deploy software
packages to Active Directory computer security groups and then access SCCM reports that
indicate whether the assigned program packages have installed correctly.
School District (
years. Of this, I have supported networks for 18 of those years in some capacity or another. Since the
early 1990s, my company chose to use Novell network software for the majority of their networking
needs. In 2002, Novells Zenworks for Servers and Desktops software was integrated into the existing
network infrastructure. Zenworks provided us with the ability to automate many server and client tasks
such as update installation, desktop imaging, software deployment, and automated hardware data
collection for inventory purposes. In addition, Zenworks contained valuable remote workstation
management tools that allowed helpdesk service technicians to assist end users with configuration and
Page 2
other software issues. With an ITSM of 14 people managing nearly 9000 computers and 22,000 + users
in over 50 different locations, tools like Zenworks were not a luxury but an absolute necessity.
In the spring of 2010, the decision was made to migrate the network to an Active Directory
environment, utilizing Microsoft Server 2008 as the core operating system. Naturally, a tool possessing
comparable functionality of Zenworks in the Novell network environment was now sought for active
directory. Microsofts SCCM 2007, with its ability to provide a complete management package for
servers and workstations, automate hardware and software inventory needs, and provide remote
desktop management tools, became a natural choice for the new AD environment in the
In my present capacity as a desktop support professional, I now utilize SCCM daily to help me to
perform my duties. It has become very important to understand SCCM and all of its capabilities. To this
end, I decided to study SCCM much more thoroughly. Books on SCCM have taught me a great deal, but
it has been my experience that books can only provide a base understanding of any subject matter in
the IT field. There is absolutely no substitution for hands on learning. Since my present duties with
the
do not permit administrative access to AD and SCCM on the network, I decided to setup a
similar system at home. I had access to Microsoft Server 2003 software and several pcs which I recently
utilized in completing my MCSE certification. Using these items, I decided to configure a pristine Server
2003 AD environment where I would install and configure SCCM 2007. In this way, I would have a test
environment, completely isolated from any production network components, providing a system where
I could poke and prod as much as I needed in order to understand many functions and configuration
issues of SCCM. Through this action, I would have the opportunity to perform each step in the SCCM
installation process, satisfying research needs for the first goal of my project. Once the SCCM
management point was up and running correctly, I would be able to complete the additional
configuration tasks for SCCM that would be necessary to accomplish the second goal of my project.
Page 3
As a means of completing the second goal of my project, I will map out each configuration task
that is necessary to complete, in order for SCCM to function as a Software Package Distribution Point.
Administrators want the ability to manage which workstations in the SCCM managed site receive certain
software packages. One of the standard ways in which this is accomplished is to query AD security
groups for workstation membership. If a workstation is, a member of AD security group A, SCCM makes
sure that it receives the proper software package that is dependent on membership in group A. In order
for SCCM to update collection membership with information on workstation AD security group
membership, a number of tasks need to take place in the proper order.
IT administrators need feedback to find out whether or not software installed on the intended
workstations. If a small network is involved, you could just ask the users if the software is present or
take the time to check the workstations yourself. When the size of the network increases beyond a few
servers and workstations, automatic reporting features are necessary. SCCM has the capability to
generate reports that will quickly show which workstations received a particular software package and
which did not. As the final part of this project, I plan to show what steps are necessary to complete in
order to configure SCCM to function as a reporting point. A web-based report indicating software
package success and distribution will be the deliverable item that signals the completion of this phase of
the project.
Page 4
Websites and books are plentiful that outline how to setup and configure a new Server 2003 AD forest
and domain. As an MCSE certified professional, I have consulted many of these sources over the past
years as I prepared for each exam. Microsofts technet website (technet.microsoft.com) has always
been an excellent source of information and is often the first place that I consult for answers to anything
Microsoft. This site is a storehouse of information on AD server installation and configuration, and
SCCM specific issues.
There are many how to books which cover the spectrum from merely providing a quick
overview of SCCM installation and features, to those that provide very in-depth coverage of all issues
pertaining the softwares installation and use. One source that fits into the first category is a paper I
located on the web, authored by UMN student Joe Artz. This 12-page project titled System Center
Configuration Manager (SCCM) 2007 SP1 Guide provides a quick reference for issues pertaining to SCCM
client configuration and SCCM management console installation. A section is included that provides a
quick overview of some of the necessary steps to follow when creating collections, packages, and
programs. One area of this paper that I found especially helpful is a table listing the names and specific
uses of 17 of the most important log files that relate to the SCCM workstation client software, its proper
installation, and configuration (Artz, 2008). Information here provides SCCM administrators of all skill
levels a good starting point for when the need arises to diagnose SCCM client-related software issues.
For very in-depth coverage of SCCM capabilities, configuration information, and
troubleshooting, System Center Configuration Manager (SCCM) 2007 Unleashed (Meyler, Holt, &
Ramsey, 2008) provides answers to most any question to anyone willing to take the time for detailed
study. This book could be considered the SCCM Rosetta stone, covering everything from server
hardware requirements and software prerequisites, to a systematic guide to writing WQL queries that
can be used to significantly extend the capabilities of SCCM. This source, written by some of the actual
Page 5
software engineers responsible for SCCM and its predecessor products, provided more than enough
detail on most every aspect of installing and using SCCM.
Software tools like SCCM not only make IT management easier, but also help IT professionals
manage more and do so more effectively. For many businesses, the most important tool an employee
can have is a properly configured workstation tailored to his or her individual talents and
responsibilities. Software requirements may differ widely between departments and employees within
each department. Having a myriad of different workstations to support can put extra stress on IT
personnel tasked with workstation deployment and software installation and upgrades. For those
responsible for software acquisition, keeping track of licenses and purchasing upgrades can be a
nightmare, even for a smaller business. For these reasons, efficient software distribution and the means
to maintain an accurate software inventory are growing in importance.
At one time, software distribution was good enough if it did just slightly better than you
could
do if you went from machine to machine manually. Now you bet your
business success on the ability to get software to the right systems at the right time
(Meyer, et al., 2008).
The ability to keep accurate records of purchased of, and the means of distributing software go
hand-in-hand. Often times, a business may purchase a volume license or too many seats, only to find
that they could operate legally, and just as well, with fewer licenses. In one example from 1997,
Lockwood Green Engineering of Spartanberg, SC. purchased and installed Microsofts System
Management Server (SMS), SCCMs progenitor, to manage software distribution and inventory at their
30 sites. In one year, they were able to realize a savings of between 30 and 40 % on software purchases,
thanks to SMS. For a mid-size company like this, that can mean a large savings indeed (Romeo, 2002).
SCCM 2007 has improved on SMS in many ways since then. With the ability to gather accurate
software use statistics and reliably control distribution of software to only where needed, SCCM can
Page 6
easily pay for itself in a short time. Software distribution packages can be assembled which allow
automated installation of software products where needed. Additional packages can be created that
will remove software when tracking statistics show that it is no longer needed. In this way, SCCM acts as
a means to redistribute licenses instead of requiring a business to purchase more.
Page 7
and pay dividends for years to come. Services provided by a qualified ITSM team are very important to
the overall success of any business. It been said that:
A companys IT service management team may not be responsible for key business activities
within a firm, but when these activities are processed on servers and workstations that it is
responsible for, the team becomes a very important part of the whole puzzle (Crumbaker, et al.,
2007).
A good car mechanic must have at his disposal the necessary tools in order to do his job and so
it is with those who work in the IT profession. To an IT professional that is part of a successful ITSM
team in an AD network environment, software tools like SCCM 2007 not only make tasks easier, but help
to insure the teams success in the many tasks that they are called upon to perform. I have worked in IT
for many years now and have seen first-hand the positive impact a good ITSM team can have on a
company. I am also keenly aware of the advantages obtained by using integrated tools like Microsofts
SCCM 2007 to perform server and workstation management tasks in an AD environment. It is my firm
conviction that success in ones chosen profession, whether a person is a car mechanic or an IT
professional, is directly proportional to their ability to use the tools of their trade. Therefore, if I am to
be the best AD network and workstation manager that I can be in my present job, I need to not only
know the capabilities of SCCM 2007, but also need to be able to implement management tasks properly
and use them to my best advantage. Learning to install and properly use SCCM will pay dividends not
only in the present, but will provide me with advanced network management skills that will assist in any
future job in IT network management I might apply for.
In 2006, when I decided to go back to school and get my degree in IT, it was an easy decision to
choose to concentrate my education and skills in the area of network management and design. I have
run miles of network cabling, and have installed and configured a wide variety of network equipment,
from hubs and switches, to routers and servers. I have installed and configured software which assisted
Page 8
in monitoring the health of network components, providing proactive service by identifying problems
and solving them before they had a chance to cause costly outages. I have faced many deadlines and
have been able to meet them by using the proper tools. Over the past 20 years with the
School District (
I have seen the ITSM team grow from 2 to 14 technicians, while the number of
workstations increased from 100 to over 9000. Our ITSM team now must manage over 9000
workstations and 22,000 users that are located in 50 separate locations. In my present position with
SLCSD, I am responsible for deploying workstations and the associated software at 6 different sites,
directly supporting over 700 workstations and nearly 1900 users. Tools like SCCM, which provide
remote management capabilities, help to push out OS updates, assist in properly distributing software,
and help with inventory tasks, are an absolute necessity to me. Delivering software when and where
needed, and maintaining an accurate software inventory are some of the tasks that SCCM helps me
accomplish. Knowing how SCCM is setup to deploy and inventory software will help me in these two
important areas and will quickly pay dividends as I am able to perform my duties better.
22 years of experience working in the IT industry have taught me many valuable lessons. One
thing I have learned is that in order to understand anything thoroughly in the IT industry, you must study
a wide variety of sources on the subject and provide yourself with plenty of opportunities for handson experience. The best way to understand a software package as capable as SCCM is to install and
configure it in an isolated environment where its capabilities can be investigated, and techniques to use
it perfected. In this type of environment, I have many opportunities to experiment with configuration
settings pertaining to software deployment, and reporting, and not run the risk of causing damage to an
operational SCCM managed network. I have had a Microsoft Windows Server 2003 environment up and
running since late August 2010. A short time later, I began the installation and configuration of SCCM
2007 management software on servers and workstations in my isolated network. Most recently, I have
been setting up SCCM in this test environment for software deployment and reporting. All along the
Page 9
way, I have encountered problems and setbacks, but each additional situation has taught me a great
deal. It is my hope that others might learn from my experiences and be able to deploy SCCM to manage
their AD network environments and know in advance, some of the issues that might cause grief.
Page 10
6. To provide a detailed document that shows all of the significant tasks that
require completion in order to achieve the first five goals of this project.
Project Objectives:
The project objectives show as sets of tasks that are required for each project goals completion. The
following objectives require completion in order to meet the first project goal:
Setup and configure two member servers within in the established AD domain.
Successfully install and configure Microsoft SQL 2008 Server on a member server in
domain OAK716.LOCAL. This server name is DB1.OAK716.LOCAL and will be the location
of the SQL database used by the SCCM master site OAK.
Properly install and configure SCCM 2007 R2 on one of the AD member servers. This
server will be setup as the master server in the managed site OAK and configured in
mixed mode. The name of the server will be SCCM.OAK716.LOCAL.
The following objectives require completion in order to reach the second project goal:
Assign proper rights to SCCM administrator and user groups in order for them to be able
to access reports generated by the SCCM management site server.
Page 11
The following objectives must be accomplished order to meet the third project goal:
A new workstation collection called Applications will be setup in the OAK SCCM site.
Two test workstations need configuring and then connected to the network. These
workstations are joined to the domain OAK716.LOCAL and be named WS1XP.OAK716.LOCAL and WS1-7.OAK716.LOCAL.
The fourth goal requires many tasks to complete. This shows as three distinct objectives that are
required. The five main objectives, along with additional information, are listed below:
A new workstation collection is created in the SCCM site OAK and is called
<New_Package>, where <New_Package> is the name of the new program package that
was created.
First, a workstation collection called Applications is created in the SCCM site
OAK using the ConfigMgr console. Next, a sub-collection, whose name
corresponds to the name of the new program package (<New_Package>, for
example) is created inside the Applications collection, again using the ConfigMgr
console.
Page 12
A new AD security group is created in the OAK716.LOCAL domain and the workstations
that will receive the new program package are assigned membership to this group.
Using the Active Directory Users and Computers (ADUC) mmc snap-in, a
domain administrator creates an AD security group called
SW_<new_program>_WS, where <new_program> corresponds to the name of
the new program package that was created in the SCCM site OAK.
A query, written in the WMI query language (WQL), is created that checks AD to find
which workstations are members of the SW_<New_Program>_WS AD security group.
This query is the link between SCCM management and AD and is used to
automatically populate the collection named <New_Program> with the names
of the workstations in the AD security group SW_<New_Program>_WS.
An advertisement is created for the new program package <New_Program> in the SCCM
site OAK, using the ConfigMgr console and is assigned to the collection <New_Program>
in the SCCM site OAK.
This advertisement is created by opening the ConfigMgr management
console
and navigating to Site Database (OAK SCCM) > Computer Management >
software Distribution > Packages > Advertisements, right-click, and
choosing New. The New Advertisement wizard is launched and the new
advertisement is assigned to the proper package and collection, along with
a schedule that can be set for running the advertisement.
The following objective is required in order to achieve the fifth goal of this project:
Page 13
This report is accessed using the ConfigMgr console by first navigating to Site
Database (OAK SCCM) > Computer Management > Reporting > Reports. Once
here locate and right-click on the report titled All advertisements for a Specific
Package and choose Run. Click on the Values button and then click on the
Package ID that corresponds to the program package that you want to check the
status of. When you click on Display, another screen will appear that will guide
you in locating the statistics that you are seeking to find.
The final goal of this project is to complete the documents shown in the project deliverables
section. This last goal is an important one. When setting up SCCM for the first time, I did not realize
how many tasks needed to be completed. Steps that needed completion before SCCM could be
installed, were not found in one easy to find place. Once SCCM was installed, I encountered a similar
problem while planning to distribute programs using SCCM. Many sources provided most of the steps
but still fell short by a couple of steps. By providing concise documents that outline these procedures,
along with running reports afterwards, I will have covered all of the goals for this project and will be able
to consider this project completed.
Project Deliverables
System Hardware & Software Requirements
This section will contain documents that outline Microsofts minimum and recommended hardware
requirements for the following server components:
Page 14
System Center Configuration Manager (SCCM) 2007 Master Site Server installed on a AD
member server
This section will outline Microsofts minimum & recommended requirements for workstation.
Hardware requirements
OS requirements
This section will contain a drawing that details placement of all component servers and workstations in
the test environment.
Page 15
Basic OS installation
Page 16
Use a GPO.
Manual installation
Setup Applications OU in AD and create new group to be used for software distribution
Configure SCCM using the ConfigMgr console to distribute a new software package
Configure program
Configure advertisement
Page 17
Conclusions:
In this section, I will include a closing document. Here I will outline things that I have learned, problems
that I encountered along the way, and things I might do differently when installing and configuring
SCCM 2007 again.
Page 18
Task Name
Duration
Start Date
Completion Date
55 Days
8/16/10
11/1/10
3 Days
9/3/10
9/6/10
3 Days
9/14/10
9/16/10
3 Days
9/8/10
9/10/10
2 Days
9/15/10
9/16/10
1 Day
9/13/10
9/13/10
1 Day
9/14/10
9/14/10
3 Days
9/29/10
10/1/10
2 Days
10/6/10
10/8/10
2 Days
10/5/10
10/6/10
2 Days
10/6/10
10/7/10
4 Days
10/22/10
10/26/10
5 Days
10/26/10
11/1/10
2 Days
10/26/10
10/28/10
4 Days
11/1/10
11/5/10
20 Days
10/19/10
11/13/10
Page 19
References
Artz, J. (2008). System Center Configuration Manager (SCCM) 2007 SP1 Guide. Retrieved October 28,
2010 from http://www1.umn.edu/umnad/current/SCCMi.pdf
Crumbaker, R., Mosby, C., & Urban, C. (2007). Mastering System Center Configuration Manager
[Books24x7 version]. Retrieved October 16, 2010 from
http://common.books24x7.com/book/id_31981/book.asp.
Information Technology. (2008) In New Oxford American Dictionary [Kindle Version]. New
York, NY: Oxford University Press.
Meyler, K., Holt, B., & Ramsey, G. (2008). System Center Configuration Manager (SCCM)
2007 Unleashed. [Kindle Version]. Retrieved 2010 from http://www.amazon.com.
Romeo, J. (2002). Keeping Tabs on Software Yields Efficiency and Savings. ENR: Engineering
News-Record, 249(24), 29. Retrieved September 14, 2010 from Academic Search
Complete database.
Page 20
Competency
Explanation
Leadership and
Professionalism
Importance of adhering to a
predefined timetable, despite other
projects and stress-inducing
situations. Good management skills
often require the ability to take on
and solve other problems and reassign priorities as situations dictate.
Language and
Communication
Quantitative Literacy
Quantitative Literacy
Page 21
Domain/Subdomain
Competency
Explanation
CIS IT Management
Information Technology
Management
Information Technology
Management
Technical Writing
Project Management
Project Management