+ Post New Thread
Results 1 to 13 of 13
Enterprise Software Thread, SCCM 2012 Device Collections in Technical; Okay, so I've finally got around to using the SCCM server I setup some weeks ago. Now looking to get ...
  1. #1

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,761
    Thank Post
    860
    Thanked 908 Times in 753 Posts
    Blog Entries
    9
    Rep Power
    330

    SCCM 2012 Device Collections

    Okay, so I've finally got around to using the SCCM server I setup some weeks ago. Now looking to get our first one or two SCEP installations done. So, I created a new Device Collection called "Endpoint Protection Clients" and used a direct rule to add two test machines to it. So far so good. I then used the Client Push Wizard to install the Client Manager on the two machines. The Client manager installed without a hitch. But, now the Device Collection is empty? All firewalls on clients and server are disabled. The SMSAdmin user is a local and domain admin. The clients are installed. Why can't I see them anymore in the Device Collection? They appear in the "All Systems" Collection and show us being active there.

    Anyone got any ideas/pointers?

    I want to verify that SCEP is running correctly on these two machines before a roll it out to a wider audience.


    Also, any one got any pointers on how to set up windows updates through SCCM as I think that's the next part of this project?

    Thanks.

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    How are they members of the collection? Are you using a query?

  3. #3

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,761
    Thank Post
    860
    Thanked 908 Times in 753 Posts
    Blog Entries
    9
    Rep Power
    330
    No, no query. Just a straight manual direct add. Wasn't expecting to see any difference either with or without the client installed. Just reading Windows-noob now and it appears I have a few more steps to get SCEP working, but that doesn't answer this question.

  4. #4

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    Hmmm to be honest i dont see why that would happen. Where the machines discovered or the you manually add them with a MAC to SCCM?

  5. #5

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,761
    Thank Post
    860
    Thanked 908 Times in 753 Posts
    Blog Entries
    9
    Rep Power
    330
    Auto discovered, I assume by interrogating AD. It's almost as if there's a hidden rule or DNS issue but the only thing to have changed is the SCCM client has been installed on these machines. I haven't even done a restart.

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,104
    Thank Post
    891
    Thanked 1,752 Times in 1,511 Posts
    Blog Entries
    12
    Rep Power
    457
    @Gatt might know but i really don't know why that would happen

  7. Thanks to FN-GM from:

    tmcd35 (27th February 2013)

  8. #7

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    5,035
    Thank Post
    890
    Thanked 1,475 Times in 1,012 Posts
    Blog Entries
    47
    Rep Power
    647
    Do you just need to update membership on the collection? Or is the limiting collection for this collection incorrect?

  9. 2 Thanks to sonofsanta:

    CyberDrac (28th April 2014), tmcd35 (27th February 2013)

  10. #8

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,761
    Thank Post
    860
    Thanked 908 Times in 753 Posts
    Blog Entries
    9
    Rep Power
    330
    I've decided to ignore the problem until I really need it. At the moment I've gone back to Windows-noob and found that theres a lot more to do for SCEP, not least of which WSUS needs setting up first

    Still, live and learn.

  11. #9

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,761
    Thank Post
    860
    Thanked 908 Times in 753 Posts
    Blog Entries
    9
    Rep Power
    330
    Quote Originally Posted by sonofsanta View Post
    Do you just need to update membership on the collection? Or is the limiting collection for this collection incorrect?
    The limiting collection was "All Systems", I'm sure that was correct. As for updating membership I deleted the collection and recreated it, adding the two devices with SCCM Client manually, same problem. Not listing in the collection, although the collection does say it has 2 devices in it.

  12. #10

    sonofsanta's Avatar
    Join Date
    Dec 2009
    Location
    Lincolnshire, UK
    Posts
    5,035
    Thank Post
    890
    Thanked 1,475 Times in 1,012 Posts
    Blog Entries
    47
    Rep Power
    647
    Quote Originally Posted by tmcd35 View Post
    The limiting collection was "All Systems", I'm sure that was correct. As for updating membership I deleted the collection and recreated it, adding the two devices with SCCM Client manually, same problem. Not listing in the collection, although the collection does say it has 2 devices in it.
    All Systems should be fine, it was an outside shot anyway.

    I have no idea how it is reporting two devices but just not displaying them even after forced updates. Can't say I came across it

  13. #11

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,711
    Thank Post
    866
    Thanked 664 Times in 437 Posts
    Rep Power
    501
    Is the SCEP role installed (Administration -> Overview -> Site Configuration -> Servers and Site System Roles -> <server-FQDN> -> Endpoint Protection point
    (The only options are to accept the T's & C's and at least Basic Membership)

    Then, in Administration -> Overview -> Default Client Settings (or a custom one if used) -> Endpoint Protection - make sure at least the 1st THREE options are set to YES
    The other option you can configure as needed

    Once the clients to a Machine Policy refresh they should install the SCEP Client... and it will appear in the notification area

  14. Thanks to Gatt from:

    tmcd35 (28th February 2013)

  15. #12

    Gatt's Avatar
    Join Date
    Jan 2006
    Posts
    6,711
    Thank Post
    866
    Thanked 664 Times in 437 Posts
    Rep Power
    501
    Windows Update via SCCM is fairly easy in 2012 - a heck of a lot better in 2012 than it was in 2007
    in fact it does everything for you - including the installation of WSUS (if it doesn't install it but dont configure it)

    The Windows-Noob site has everything you need to get it up and running so I wouldn't stress too much about SUP in 2012!

  16. #13

    Join Date
    Nov 2012
    Posts
    13
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    As a rule, unless you are doing something quick and dirty you should not use "direct rule". Always use query based rules.

    The resource ID of a machine can change - for example, by re-imaging the machine from PXE boot. If you re-image via OSD through the OS then it'll maintain the resource ID. There are other circumstances in which the resource ID may change and in this instance a directly added resource will be lost from the collection.

    A better approach is to use a query based rule. So, let's say for example you want to add machines with name "1" and "2" to a collection, create a query based upon the machine name and use this to form the collection. On that basis, even if the resource ID of the machine should change, the device (although actually a different resource) will maintain its place within that collection.

    What I suspect has happened in your instance is that the resource ID has changed when the client installed on the machines. In SCCM 2007 this would have resulted in duplicate resources being shown (you may have seen multiple computer resources for one device), but in 2012 I think the behaviour is different and the duplicate is automatically removed.

    Does that help? :-/

SHARE:
+ Post New Thread

Similar Threads

  1. [SCCM 2012] Windows Update Collection Problem
    By deano in forum Enterprise Software
    Replies: 0
    Last Post: 11th February 2013, 03:13 PM
  2. SCCM 2012 is not pushing FEP to all Devices
    By Scott46517 in forum Enterprise Software
    Replies: 9
    Last Post: 5th December 2012, 09:13 PM
  3. SCCM 2012
    By synaesthesia in forum Network and Classroom Management
    Replies: 12
    Last Post: 9th July 2012, 02:09 PM
  4. sccm 2012
    By irsprint84 in forum Enterprise Software
    Replies: 11
    Last Post: 13th June 2011, 01:37 PM
  5. Anyone got an idea of the release date for SCCM 2012?
    By pete in forum Enterprise Software
    Replies: 1
    Last Post: 7th June 2011, 01:17 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •