Creating an SCCM collection

[FN-GM]

Hello.

 

I wish to create a collection in SCCM based on computers in an OU and ones in the sub OU's. I have only managed to find methods that will allow me to create them based on the computers based in the parent OU. Does anyone know how i can create one that will include computers in the sub OU please?

 

Thanks

[sparkeh]

The way I would probably go about this is to have a query for each OU and just add them all to the membership rules of the collection.

Therefore you have several queries in the membership rules to construct the collection rather than one that pulls in all the machines.

[Gatt]

@FN-GM it should do this by default:

 

Membership rule is set top update on a schedule (1 day) and to dynamically add new resources

I then have a query to get the computers:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.SystemOUName = "/DOMAIN CONTROLLERS" or SMS_R_System.SystemOUName = "/PATH/TO/PARENT/COMPUTERS/OU"

 

What this does is:

 

Show the DCs in the DOMAIN CONTROLLERS Container

and starting at /PATH/TO/PARENT/COMPUTERS/OU and everything below that..

 

I then create more collections inside this collection to replicate my AD structure, but just deepening the OU Path (eg: /PATH/TO/PARENT/COMPUTERS/OU/SUB-OU1)

[FN-GM]

Hi guys, i think this is a discovery issue (This is my first day with SCCM so please go easy).

 

I followed this guide to discover computers in an parent OU called workstations - Making SMS 2007 collections based on organizational unit | TechRepublic - But the machine is not showing the the collection, i can see it in the all systems collection.

 

I have run update collection membership and refreshed.

 

Thanks

[Gatt]

Make sure you enable all the discovery rules and set them to do it immediately (Polling Schedule - Run full discovery as soon as possible) - then wait for it to compete (varies depending ont he network)

Then update your collections and refresh

 

Also on Discovery Methods - on the general tab - I use the local domain (point it to the root of the domain), recursive and to inlcude groups..

[FN-GM]

Make sure you enable all the discovery rules and set them to do it immediately (Polling Schedule - Run full discovery as soon as possible) - then wait for it to compete (varies depending ont he network)

Then update your collections and refresh

 

Also on Discovery Methods - on the general tab - I use the local domain (point it to the root of the domain), recursive and to inlcude groups..

 

The issue at the moment i dont want it to install the client on machines in the domain just a select few at the moment. At the moment i have only configured "Active Directory System Discovery" to the test machine OU

 

Also on Discovery Methods - on the general tab - I use the local domain (point it to the root of the domain), recursive and to inlcude groups..

 

I cant find any tabs under Discovery Methods.

 

Thanks

[Gatt]

Ah ok thats fair enough..

 

 

As for the tabs - the only 2 DM's that dont have tabs are Heartbeat and Network discoveries

 

This is a rough breakdown of what they do:

 

AD System Group = THis is for the OUs

AD Security Group = Finds all your Security Groups (Eg normal groups that you shove users and computers into)

AD System = THis finds all the Computers

AD User = Find the users..

 

Cant think off hand what heartbeat and network do

[FN-GM]

Ok, so what would i do to fix the issue in hand please?

[sparkeh]

Cant think off hand what heartbeat and network do

Network discovery just scans subnet looking for resources.

The heartbeat is a bit misleading as it doesn't actually discover new resources but its about keeping current resources checking in and keeping records up to date.

[Gatt]

Run all of them, but set the first 4 to the Test OU parent so as not to interfere with the rest of the AD (once you are ready to "go live" you can recreate the rule to change the location)

To get OU's and workstations you need to run:

 

AD System Discovery & AD System Group Discovery - set as above - and as soon as possible in the polling schedule

 

For network discovery (i think this discovers how AD is configured (Subnets, Domains, Sites, etc) set it up as follows:

 

General Tab: enable with the Topology, Client and Client OS

Subnets: I dont use

Domains - I have set to the NETBIOS of my domain

SNMP = Public (change if needed)

SNMP Devices = I dont use

DHCP = use if you have DHCP

Schedule = As appropriate - this is basically how often it runs (eg i have it every monday )

 

I would give it plenty of time to run - the bigger/slower the network - the longer it'll take

Hopefully it should start working after about an hour but if its only a few then it could even be minutes

[sparkeh]

Ok, so what would i do to fix the issue in hand please?

Sorry can I just clarify, you can see machines in the all systems collection but not in the collection you created?

[Gatt]

**Follow on from previous post as I cannot edit it for some reason**

 

Once its done this then SCCM will know how your network is setup and your custom collections / queries will start to work

 

**thanks for the update sparkeh**

[FN-GM]

@Gatt your a a gent! After enabling the first 4 it now works i can see my machine in my custom collection

 

I didnt do the network one. The site is set to find clients based on the sites in AD sites and services. I was told not to use the network one if setup like this.

 

Anyone know any good learning resources to get to grips with SCCM please?

 

Thanks

[sparkeh]

Yep this site is a Godsend: SCCM 2007 Guides - www.windows-noob.com

[Gatt]

Def recommend windows-noob - great guides for SCCM...

[FN-GM]

Just to Hijack slightly when you deploy an app where do you set the settings on a time to install it please? What happens when the timeslot has been missed (for example the machine is turned off or logged on at the time) Can you get some apps to install at start up please?

 

Thanks

[Gatt]

This is controlled by the advertisment for the application..

 

Go to the advertisment, right click and properties, then on the scheduling tab. In the middle box where it says "Mandatory Assignments" and click the New button

 

You can then set a date/time to deploy it or "After This event" and "As Soon as possible" - meaning that it'll deploy as soon as the client refreshes the policies.

 

As for reruns or missed -the machine will deploy the software as soon as the "Deadline" has passed

In the same tab - set the last dropdown box to "Rerun if failed previous" - which means that the client will continue to install the app until it is successful

 

I would recommend you set the program itself (packages -> package name -> packages -> program name -> Properties -> Environment tab) to run whether or not a user is logged in 0 this allows a client to install at any time (eg at the CAD screen and noone is logged in)

[sparkeh]

I would advise taking a look at Task Sequences to deploy software, the are a lot more flexible than the standard software adverts.

[Gatt]

Agreed - forgot about them - Only really used them for deploying Windows Live though and of course OSD

[FN-GM]

Thanks guys, i followed this to deploy the software, am i heading down the right path please?

 

 

Thanks

[FN-GM]

I have tried to deploy a package as shown in the video, but it doesnt seem to install on the worksation. Any thoughts please?

[Gatt]

Is it downloading to the client? (C:\Windows\System32\CCM\Cache\)

 

If it is - What's the command line?

 

You should be able to check the logs for the deployment under Computer Management -> System Status -> Advertisement Status > -> RC the entry in the Right Hand Pane -> Show Messages -> All

 

If its getting to the client then its likely the command line