Sunday, November 4, 2007

How to customize SCCM 2007 Software Metering data collection timing

If Software Metering Client Agent is enable in your desktop management environment, some of the administrators may wonder where to customize the schedule for software metering data collection timing? and how frequent the software metering run for data collection?

Well, in SMS 2003 and SCCM 2007, there is a Predefined Maintenance Task for data collection and database maintenance. In this predefined maintenance task, you can specific the schedule for Software Metering data collection time. There are under:

Summarize Software Metering File Usage Data
Default Schedule: Runs daily, between midnight and 5:00 A.M.
Function of this task: Software metering collect the daily usage for the metered applications and store it inside the database.

Summarize Software Metering Monthly Usage Data
Default Schedule: Runs daily, between midnight and 5:00 A.M.
Function of this task: Software metering summarized the data's more than one month old.

Friday, October 26, 2007

System Center Partner Airlift - Seattle (23-26 Oct 2007)

Microsoft is preapring a partner readiness for System Center Product.

We are lucky to be the only one to travel here from Malaysia. Be able to listen to the presentation from the product team and the development team is rewarding. We will share more on this blog.

Tuesday, August 7, 2007

New Server Role in SCCM 2007 - Branch Distribution Point

In SCCM 2007, a new role called branch distribution point (Branch DP) is introduced. Branch distribution point is function in the same manner as standard distribution point. The fantastic for branch dp is, it can be install on a workstation!

If your network got a branch office which only got few machines, branch distribution point will be your option for efficient package distribution to a small office with limited bandwidth by using a workstation.

Below is the steps how to enable Branch DP role on a workstation:

1. In the Configuration Manager console, expand System CenterConfiguration Manager > [site database] > Site Management > [site name] > Site Settings.
2. Right-click Site Systems, point to New, and then click Server.
3. In the New Site System Server Wizard first page, type in the workstation name, click Next. (Ensure the user account have right to install the site system on remote system)
4. On the System Role Selection page, check on Distribution point. Click Next
5. On the Distribution Point page, select option Enable as a branch distribution point. Click Next. (The package files store partition and limitation on target workstation can be specific over here)
6. Verify the settings, click Next and confirm the installation status.

Is done! Pretty straight forward. But in order to setup a workstation as a branch distribution point, make sure the workstation local hard drive got enough disk space to store the package files for deployment.

Wednesday, July 25, 2007

Manually create System Management Container in Active Directory Domain Services

SMS 2003 and SCCM 2007 does not create the System Management container in Active Directory Domain Services when the schema is extended. The container need to be prepared for each domain that includes SMS 2003 or SCCM 2007 site server that will publish site information to Active Directory Domain Services. There are two method to prepare the System Management container inside Active Directory Domain Services.

Method 1:

Grant the Site Server computer account full control permission on the System container in Active Directory Domain Services. (This method is not recommended. It is more secure to create the System Management Container manually)

Method 2:

Manually create the System Management container in Active Directory Domain Services using ADSIEdit. ADSIEdit is part of Windows Server Support Tools. Windows Server Support Tools can be found in Windows 2000 Server or Windows 2003 Server CD.

1. Install Windows Server Support Tools.
2. Open ADSIEdit snap-in using MMC, and connect to domain which you would like to create the System Management Container.
3. In the console pane, expand Domain [computer fully qualified domain name], expand , and right-click CN=System. On the context menu, click New and then click Object.
4. In the Create Object dialog box, select Container and click Next.
5. In the Value field, type System Management and click Next, and then click Finish.

Now, your Site Server is able to publish site information in the Active Directory once the System Management container is created.



Sunday, July 22, 2007

SMS 2003 & SCCM 2007 Security Mode

Everyone know there is 2 security modes in SMS 2003, which is Standard Security mode and Advanced Security mode. But what is the different between this 2 security mode? Let us share on this.

Standard security uses user accounts to run services, configure computers, and connect between computers. Advanced security make use of Active Directory. It uses the Local System Account (which is computer account) to run services, configure computers, and connect between computers. It is more secure, but it requires Active Directory and it does not require the schema to be extended.

You can switch from standard security mode to advanced security mode, but it cannot change back to standard security mode once the security mode is switch over to advanced security mode.

How about SCCM 2007, what is the different between SCCM 2007 and SMS 2003 on security mode? well, SCCM 2007 also provided 2 types of security modes, which is SMS 2003 compatibility security mode (Mixed Mode) and another is SCCM 2007 security mode (Native Mode).

Native mode is a higher level of security mode by integrating with a public key infrastructure (PKI) to help protect client-to-server communication. With this security mode enable, you are able to manage Internet-based client, which the client computer connect to your site server through public WAN connection. Thus, extra security is needed in order to implement this and you need to get a valid Certificate from certificate authority in order to accomplish this task.

Mixed mode provides backwards compatibility for hierarchies that have both SMS 2003 sites and Configuration Manager 2007 sites. With this security mode, you are unable to manage Internet-based client. You are allow to switch from Mixed mode to Native mode once all your site servers is migrated to SCCM 2007 and it is also possible to revert back to Mixed mode from Native mode. This is really a good fall back feature if you would like to perform a migration for your SMS 2003 to SCCM 2007.

Tuesday, July 17, 2007

How to Remove SMS Advanced Client using Msiexec /x

We had meet one scenario from one of the customer, we are trying to remove SMS Advanced Client from one of the Windows XP machine using Ccmclean tool (Ccmclean tool can be found in SMS toolkit). But unfortunately, it failed to remove the client by using Ccmclean.

There is another method to remove the SMS Advanced Client from the machine which is msiexec /x command.

Before executing that command, you must know what is the GUID for the SMS Advanced Client, the GUID value can be found inside the Registry editor under following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
\CurrentVersion\Uninstall

The correct GUID has SMS Advanced Client as the Display Name value.

After you get the SMS Advanced Client GUID value, execute the msiexec /x command at command prompt.

Msiexec /x {D8EF2D11-47CF-45E5-B423-47B29706DE12}
(the value behind Msiexec /x indicate the GUID of SMS Advanced Client)

After you execute the Msiexec /x on the machine, you may need to manually remove the VPCache folder for SMS Advanced Client. Below is the step by step how to complete the task:

1. Locate the following registry key in registry editor:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\VPCache

2. The Path value for VPCache is the location of the VPCache folder on the system drive. For example, %Windir%\System32\VPCache.

3. Locate the VPCache folder and then delete it from the hard drive.

4. Lastly, delete VPCache registry key from the registry editor.

Although this method need to spend more time to complete it, but it is a alternative for you to remove the SMS Advanced Client from the machine, no harm to have a try. :)


P/S: Please use Registry Editor with extra careful, or else it may crash your system. :)

Thursday, June 14, 2007

valuable benefits that System Center Essentials 2007 can provide

Guys, SC2007 now released. wondering what it can provide?

Recently we grab this info from Microsoft Website:

http://www.microsoft.com/systemcenter/sce/evaluation/topten.mspx?wt.svl=globalheadline


Here are the ten most valuable benefits that System Center Essentials 2007 can provide to your organization.

Unify your IT management experience
Essentials 2007 provides a single console for your core management needs. That means a single product to purchase, deploy and learn. Server, Desktop and Network monitoring, software and update management and asset inventory under a single, easy to use, unified experience.

Keep your applications and your network up and running
Essentials provides multiple views of the application data in your network. Track database growth in SQL Server™ databases or connectivity to Exchange servers using some of the many provided charts, tables and reports. Essentials also tracks the status of all the SNMP 2.0 devices in your network , allowing you to receive alerts when something important goes down.

Troubleshoot problems more quickly
Accidents happen, systems go down. That is why Essentials provides a rich knowledge base out of the box to help you diagnose and fix critical alerts for key products like Exchange Server and SQL Server™. These management packs are optimized so you only focus on those alerts that matter. Not only do you get in-depth explanations of problems, but more importantly, Essentials often provides simple in-line tasks to click and “fix it now.” Additional management packs are available from Microsoft and 3rd party providers for both Windows and non-windows environments.

Simplify your Patch Management
Essentials 2007 provides integrated patch management for Microsoft products in the Microsoft Update catalog. Additionally we’ve worked with key industry vendors to integrate their updates into Essentials providing a single point of control for patch Management. You can choose to automatically deploy critical updates or have them be subject for approval, and track compliance across your network. Want the patch deployed now? No problem, just click a button to initiate deployment real time.

Deploy Applications easily
Deploying applications has never been so easy. Using a simple 3 step wizard you can deploy applications to a target set of computers without worrying about having to deal with packaging or other complex processes. Ready for Office 2007? Essentials can help you deploy Office 2007 with your custom settings in a snap. Additionally Essentials uses Background Intelligent Transfer Service 2.0 (BITS) to optimize traffic over your network. Changed your mind? Don’t worry, it’s even easier to un-install a previously deployed application.

Keep track of hardware and software assets
No more spreadsheets to maintain - Essentials 2007 gathers more than 60 hardware attributes and a complete inventory of the applications running on each machine. A summary inventory is available for quick troubleshooting or in the detailed report by machine groups.

Improve your users up-time
Reduce the time you spend dealing with end-user issues with features like Agentless Exception Monitoring (AEM) which allows you to collect application and OS errors that would otherwise remain anonymous. Use built in tasks to remotely execute important tasks on user’s computers, from performing a simple ipconfig to a remote desktop session, all without leaving the management console.

Get up and running fast
Deploying Essentials 2007 couldn’t be easier; the smart setup will check for prerequisites to ensure you have a smooth and successful installation. Post-installation configuration is quickly completed using three simple wizards. The built-in integration with Active Directory will allow you to manage a computer automatically the moment it’s added to your environment without any intervention.

Gain visibility into your IT environment
Start your day with a Daily Health Report, providing a quick status of your IT environment and any action items required. For more detail, go to the Essentials console and consult the more than 180 reports out of the box that help you gain better insight into how your IT environment is performing. Get an affordable comprehensive IT Management solution designed for you
Essentials is priced for the budgets of midsize businesses, allowing you to purchase only what you need and then grow as your business requires it, with flexible licenses for up to 30 servers and 500 clients at a fraction of what typical management solutions cost.