+ Post New Thread
Results 1 to 12 of 12
O/S Deployment Thread, SCCM - Linking collections to Active Directory OU's in Technical; Hi all, I am just in the process of learning about SCCM and would like some advise please. I have ...
  1. #1

    Join Date
    Apr 2009
    Posts
    93
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    16

    SCCM - Linking collections to Active Directory OU's

    Hi all,

    I am just in the process of learning about SCCM and would like some advise please.

    I have heard that is possible to link your SCCM collections to your AD OU's so that when I place a computer in a certain OU (say Design technolgy) it automatically picks up the Design Technology specific software package advertisements and installs them.

    Has anyone successfully implemented this in a school environment?

    I found this guide earlier: Deploy software through AD Groups linked to Collections in SCCM - www.windows-noob.com

    Is that what I need to do? Any advise or tips or help would be greatly appreciated!

    Thanks all

  2. #2

    Join Date
    May 2007
    Location
    North Somerset
    Posts
    32
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16
    Sort of...
    If you want to link to OU's, you'll need to enable the "Active Directory System Group Discovery" and "Active Directory System Discovery" discovery methods.
    When the discovery has run (I think you can force it through fairly soon) create collections that use the below as your query statement;

    select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier ,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYST EM.Client from SMS_R_System where LOWER(SMS_R_System.SystemOUName) like "domain.forest.local/OU/OU/OU"

    Where domain.forest.local/OU/OU/OU is the Canonical name of the OU containing your machine accounts - this can be obtained from the 'Object' tab of the OU properties in ADUC.

    HTH

  3. #3
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,161
    Thank Post
    710
    Thanked 172 Times in 156 Posts
    Blog Entries
    78
    Rep Power
    86
    I was doing it this way, but moved on to using security groups instead. It meant that I didnt have to faff around with my AD structure to change the software lists.

  4. #4

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,278
    Thank Post
    13
    Thanked 235 Times in 223 Posts
    Rep Power
    69
    Isn't this was collections are for in SCCM?

  5. #5

    Join Date
    Apr 2009
    Posts
    93
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    16
    Quote Originally Posted by MatthewL View Post
    Isn't this was collections are for in SCCM?
    I think its fair to say that you can use collections however you want and dont have to have it linked to your AD structure in anyway if you didnt want to. Thanks for the advice Colditzz, I will have a play over the next couple of days and bump this thread if I get any questions.

  6. #6
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,161
    Thank Post
    710
    Thanked 172 Times in 156 Posts
    Blog Entries
    78
    Rep Power
    86
    Yes... and no. Take this scenario...

    Departmental software - except some rooms are used by more than one subject. Therefore - you want to be able to group the machines and have the right software automatically installed. With OUs this is a pain as you have to faff with the structure and it can get a bit messy. WIth Security Groups - its just add to group and it doesnt matter that where in AD the machines are. You are then using the SCCM collection queries to build the collections based on the AD groups - and advertise software to that collection. We also use partial name filtering too.

  7. #7

    Join Date
    Apr 2009
    Posts
    93
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    16
    Thanks guys, think I have it working nicely

    I am a bit confused by something though.

    I am currently in a test environment so I am constantly reimaging a PC for testing. When the images is complete, it is given a default name by SCCM (something like MININT-EC6D7AAH). I then rename it to "ICT-SPARE-01" and move it to the correct AD OU.

    SCCM then finds PC's named both MININT-EC6D7AAH and ICT-SPARE-01. If I look at the properites they both have the same IP address and same MAC address. However, the entry named MININT-EC6D7AHH is the 'live' entry and shows that the client is installed and approved etc (even though this is no longer the PC's actual name).

    If I then delete both these entries and reimage the PC, the same happens again.

    Hopefully that makes sense!

  8. #8

    Join Date
    May 2007
    Location
    North Somerset
    Posts
    32
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16
    @mjgreen;
    Sorry I hadn't replied before, no email notification of updates!

    When you image a new machine and install the SCCM client, a GUID is created and assigned to the PC. This is reported to your SCCM server and an entry is created in the Database. When you then rename the machine, it essentially adds another entry into the database! After 30 days (by default) the original record will be marked as obsolete, or you can just delete it from the 'All Systems' collection and force a re-load of all collections to remove it.
    For simplicity, set the name of the machine prior to installing the SCCM client.

    @the ScarfedOne
    The beauty of collections is that you can create them in many different ways, they are just query sets, so link them to OU's if your AD structure is setup to allow this, use Security Group memberships, use direct membership, or any of the above, they are flexible and some methods will suit some more than others!

  9. #9

    Join Date
    Apr 2009
    Posts
    93
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    16
    Thanks COlditz, found a great bit of code yesterday that allowed me to name my PC before Windows starts to install, therefore bypassing the issue of old names in the DB.

    Thanks very much for all your help

  10. #10

    Join Date
    May 2007
    Location
    North Somerset
    Posts
    32
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    16
    No worries :-)

  11. Thanks to Colditzz from:

    mjgreen (23rd November 2011)

  12. #11
    bart21's Avatar
    Join Date
    Aug 2009
    Location
    peterborough
    Posts
    405
    Thank Post
    79
    Thanked 54 Times in 52 Posts
    Rep Power
    20
    @mjgreen

    can you share that code?

    thanks

    nick

  13. #12

    Join Date
    Apr 2009
    Posts
    93
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    16
    Quote Originally Posted by bart21 View Post
    @mjgreen

    can you share that code?

    thanks

    nick
    Have a look at this:

    Script to Prompt for System Name in SCCM OSD « t3chn1ck

    I used this guys code

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 6
    Last Post: 14th November 2008, 03:44 PM
  2. Binding a Mac to Active Directory
    By simongrahamuk in forum Mac
    Replies: 3
    Last Post: 6th November 2008, 01:19 PM
  3. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  4. Forcing scheduled shutdown on Active Directory OU's
    By flexyjerkov in forum Windows
    Replies: 1
    Last Post: 8th August 2007, 01:05 PM
  5. Importing data to Active Directory
    By fooby in forum Wireless Networks
    Replies: 3
    Last Post: 16th February 2006, 05:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •