Tuesday, June 18, 2013

SCCM to manage clients in a workgroup or untrusted domain


(Got this insightful write up from a friend’s Blog and thought adding few details and sharing it could help other SCCM Admins like myself; follow through and be blessed)
Fallback Status Point (FSP):
 A “catch all” Site System for Clients that cannot be installed because of various issues such as assignment, or their inability to communicate with their Management Point (MP).  Not required by default, but recommended to help with Client installation issues.
Management Point (MP) :
 SCCM Clients do not communicate directly with the SCCM Site Server and vice versa.  Instead all communication is facilitated via the Management Point.  A Default Management Point needs to be defined in every Site that has Intranet Clients.
Server Locator Point (SLP) :
 Responsible for informing SCCM Clients which MP they should access in order to install the SCCM Client software. Only required in some Client Deployment scenarios.
CCMCERTSEL :
Select domainname.com domain certificate that matches

Condition:
1. During client installation, the logged-on user must possess local administrator rights on
    the workgroup system.
2. Workgroup clients must be able to locate a server locator point for site assignment cause  they cannot query Active Directory Domain Services
 3. User targeted advertisements are not possible. 
4. Using a workgroup client as a branch distribution point is not supported.
 5. Workgroup clients cannot locate their default management point from Active Directory 
    Domain Services, and instead must use DNS or WINS
6. Global roaming is not supported, because clients cannot query Active Directory Domain
    Services for site information.
7. Active directory system, user or user group discovery is not possible
8. Use of software installation account is not possible
9. Client Push installation is not possible
10. Logon initiated installation is not possible
Required Host Entries
Once you have done this, from the run Command type C:\Windows\system32\drivers\etc
10.0.0.49                 SCCM                                                              #PRE
10.0.0.49                “SMS_SLP                            X1A”               #PRE
10.0.0.49                “MP_CA1                                X1A”            #PRE

Where;
10.0.0.49        is our SCCM server IP,
SCCM            is our SCCM server Hostname and
CA1                is site code.

N.B: There should be 20 spaces between the quotes ( ” ” i.e. ”MP_CA1 x1A”)
Go to File Menu and click on save as type the file name as “hosts” shown below
SCCM Client Installation
 C:\>cd  Client
C:\Client>CCMSETUP.EXE FSP=server name SMSMP=domainname.com SMSSLP= server name
SMSCACHESIZE=1000 CCMLOGMAXHISTORY=2 SMSSITECODE=Site code  CMCERTSEL=domainname.com
For Instance:
 C:\Client>CCMSETUP.EXE FSP=sccm SMSMP=expertise.com SMSSLP=sccm SMSCACHESIZE=1000 CCMLOGMAXHISTORY=2 SMSSITECODE=CA1 CCMCERTSEL= expertise.com
Start ->Run, Type Services.msc
After completed this process client will detect in the SCCM server  workgroup name.
Troubleshooting Tips
To troubleshoot the client push account, monitor the ccm.log file on the site server
To troubleshoot the network discovery,monitor the netdisc.log file on the site server
To troubleshoot the client assignment process,monitor the clientlocation.log file on the client

No comments:

Post a Comment