Delegating administration for several primary sites

Hi everybody again!
Could you tell me, can one primary site admin help out in managing clients to other primary site admin. I've noticed that altought i granted him access to that site collection he could see only it's count not members....

I understand that deployment will bring up to all of these collections members.....but i won't see them in collections, it will not be able to use remote tools, resource explorer and etc....How should we work with other site collection members till we can't
see them?)))) I thought that RBA model makes users to work (i mean visibility of that computer resources) with any resources in hierarchy not in primary site only...
Torsten, you've made discuss about that here:
http://social.technet.microsoft.com/Forums/en-US/49894f4a-ccb4-462b-b58a-6718889c73fb/need-clarification-about-collection-resources-in-sccm-2012-compared-to-2007?forum=configmanagerapps

Similar Messages

Is 100K devices a hard cap for a Primary Site (or a guideline)?

Hi,
I'd like to know if the 'supports up to 100,000 devices' per Primary Site is a hard cap on the number of devices that SCCM 2012 R2 can handle or if it is a recommendation?
We are using SCCM 2012 R2 and currently have a single Primary Site with about 90K devices. Very soon, we will be looking at adding a CAS (with multiple Primary Sites) to support our ever growing number of devices.
Until we get there with the CAS, I'd like to know what to expect if we get over 100K devices.
Will we break SCCM?
Will any devices over 100K not be added (and therefore not be managed)?
Nothing much, but the system may perform more slowly?
Results will be unpredictable?
Something else?
Thanks, Joe.

Actually, it's not really a guideline either, it's an official statement of support from Microsoft meaning that if you go over this number, you may have issues that Microsoft will not provide support for.
This is officially documented at https://technet.microsoft.com/en-us/library/gg682077.aspx under the Clients per Hierarchy section.
Is your org simply close to this number or fearful of going over in the future?
Remember that a primary site can be expanded into a CAS with multiple primary sites under it if need be in the future.
Also note that the although the 100,000 client limit has been there since the launch of 2012, that was over three years ago and there are some upcoming releases.
Jason | http://blog.configmgrftw.com | @jasonsandys

BI Administrator for several SAP BI systems within SAP Portal

Hi!
I have activated BI Administrator function in SAP BI system and in SAP Solution Manager system as well.
I have connected both systems to SAP Portal as SAP_BW systems.
Per default I can see in SAP EP --> BI Administrator only the SAP BI system entry.
I have the following problem:
When I assign system alias "SAP_BW" in Portal for one of the systems I can see this system in drop down list on BI Administrator. BUT I can assign this system alias only for one system.
Is there a work around to solve my problem?
How can I see the SAP Solution Manager systen in drop down list within SAP EP --> BI Administrator?
Thank you very much!
regards
Jürgen

HI
You can call the BI Administration Cockpit from the BI Administration 1.0 business package in SAP Enterprise Portal
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90080703-4331-2a10-cd98-9c1e95acdea0
https://www.sdn.sap.com/irj/sdn/howtoguides
https://www.sdn.sap.com/irj/sdn/event/webinars?rid=/library/uuid/d09864c5-0bb0-2910-8e8a-a306a886dcd9
http://help.sap.com/saphelp_nw04s/helpdata/en/48/bc406a800a4226951dcc57428e03f2/frameset.htm
BI ADMINISTRATION COCKPIT
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/50f95b21-7fb8-2910-0c81-f6935d4c654b
Also Check the Note 934848 - Collective note: (FAQ) BI Administration Cockpit
Hope it helps

Portal and Delegated Administrator for Messaging

Hi,
I was wondering if anyone has managed to get the iPlanet Messaging server Delegated Admin working properly with the portal gateway.
In particular - was anyone able to adjust the gateway rewrite rules to prevent the gateway only from appending to the URL's in the left control frame? We have tried various rewriting combinations but none have worked so far. A rewrite of the hRefStr variable comes close does not work as it does not handle the escape character "\" properly and appends extra info as well. The URLs turn out like the following example:
https://gateway.com/http://portal.com/servlet/"/servlet/getPage?op=createMLM&mode=edit"
If anyone has suggestions on how to overcome this it would be greatly appreciated.

Can you tell the version of Portal Server that you use. There are some known issues with SP2, and it is rectified in sp3. Or else this should be an issue with iPlanet Delegated Admin.
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support

Multiple Primary Sites connected to a CAS

On a global deployment of SCCM 2012 we are planning on deploying a CAS in the global domain and Primary Sites in the sub domains and Secondary Site in the smaller subsidiaries where needed.
I understand that all collections, clients and packages come through to the CAS but could an administrator connected to Primary Site A see the collections and packages in Primary Site B? Are they independent of each other with the exception of the CAS or
do all sites in the hierarchy show everything from all sites?
If that is the case then ideally we would want administrators of Site A to not even be able to connect to Site B but am struggling to understand how this could be achieved?

"The use of a CAS was made due to the scale of the deployment."
So you mean you have more than 100k devices. Regardless of having a CAS and multiple primaries or having only 1 primary, if you have (let's say) a total of 3,000 devices; split up into 1k silos of responsibility.
you Essentially create 3 Collections, and those 3 silos get rights to their collection of devices. Connecting to the primary sites' for the console really isn't "normal" in CM12--it's called the Central Administration Site for a
reason--it really makes it less confusing for those people that need to use the console. You may not think so initially (coming from a CM07 point of view); but it really is the best in a CM12 world. If you have people in different locations which
need console rights, the easiest, IMO, is to have a Citrix-hosted console; and people just connect to that console remotely; where the citrix host is in the same data center as the Central Administration Site.
Now, if you do NOT have 100k devices, or you are nowhere near that number, please please please, I beg you, PLEASE rethink your perceived need for a cas and primary sites. T-shooting replication issues is no fun, no joy to be had there at ALL.
you need to setup RBA correctly regardless of a CAS and primaries, or just 1 primary--so having a CAS and primaries when there is ZERO NEED for it due to scale--well, all I can say is I sincerely hope you are a contractor, and are just setting this up and
then bailing never ever to return, and leaving the mess behind for the poor day to day admins to deal with.
Standardize. Simplify. Automate.

SCCM Primary Site installation fails

Hello!
In my organization we have two domain/forests. DomainA.local and DomainB.local
in one forest (DomainA.local) we have sccm 2012 sp1 CAS site. with dedicated database server on sql 2012 sp1 cu5
in other forest (DomainB.local) we want to setup primary site on sccm 2012 sp1 with dedicated database server on sql 2012 sp1 cu5
forests have trust both sided.
all installation accounts have administrative rights on all SC servers. in both domains.
when i try to install SCCM 2012 primary site in the hierarchy,
i receiving the errors:
INFO: Created SQL Server machine certificate for Server [S-SCDB-02.DomainB.local] successfully.
ERROR: Failed to open certificate store (HRESULT=0x35) Configuration Manager Setup 9/3/2013 11:56:19 AM 3268 (0x0CC4)
ERROR: Failed to write S-SCDB-02.DomainB.local SQL Server certificate to store (TrustedPeople) on site server (S-SCDB-01.DomainA.local).
ERROR: Failed to write certificate of primary site's SQL Server [S-SCDB-02.DomainB.local] to CAS SQL Server [S-SCDB-01.DomainA.local].
Install user from domainB.local has administrative rights on S-SCDB-01.DomainA.local and sysadmin rights in sql server.
Also, it has full administrator role on CAS.Of course, it has administrative rights on primary site server and sql server S-SCDB-02.DomainB.local and sysadmin rights.
WHY????

>Taking a step back: why? Are you using a CAS and multiple primary sites at all? Do you have 100,000+ clients to manage?
we need CAS due to our network infrastructure.
thank you for you help.
we solved problem today.
it was need to open "windows" ports on the firewall between SCCM Primary Site server and CAS SQL server to give SCCM
primary site installation process the ability to install the primary site's sql-server's self-signed certificate to CAS sql-server trusted people local store.
i did not remember this point in deploying documentation((((

How do I create a non-apple ID account for a new adminstrator for a Podcast Site Manager

http://myinfo.apple.com is inoperable. I need to create a new account for an Administrator for our Podcast Site Manager account. We have one that no one can access. Can someone assist or point me in the direction of someone at APPLE that can? I called their helpdesk and THEY couldn't even help.
Concerned...

I'm afraid I don't know anything about this: it doesn't appear to be relevant to ordinary podcasts. Is this an iTunes-U matter? - perhaps that forum would help.
https://discussions.apple.com/community/itunes_u/managing_itunes_u_sites

Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

Hi,
Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign 2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
IP for communicating with the CAS server which is in a different domain.?
Details:
1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
Thanks
Rajesh Vasudevan

First, it's not possible. You cannot attach a primary site to an existing CAS.
Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
no functional differences but does add complexity, latency, and additional failure points.
Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
for trouble IMO.
Jason | http://blog.configmgrftw.com | @jasonsandys

I need to remove myself as the primary administrator for a CC acount and assign to another administrator. How should I proceed?

I need to remove myself as the primary administrator for a CC acount and assign to another administrator. How should I proceed?

adobe forums, only to discover Adobe doesn't allow a primary admin to ever leave. This is rather silly as people leave workplaces, they don't stay for life. An answer in a different forum on this site said one must cancel their adobe account, then start a new one. Though... Adobe doesn't allow a person to cancel their adobe account. It all must be done via Adobe customer service, which has proved non existent. There is no email address to email a request, there is a chat option which claims 24/7 chat however this functionality doesn't seem to work on my new Lenovo computer, current IE explorer running Windows 8.
Adobe - you really need to sort this out. I have left the work place where I was the Team Administrator some months ago now and now I need to be removed from that workplace account completely. Currently, I still have full access to it, which is not good from a security point of view because if I were a disgruntled ex-employee I could play havoc with my workplaces subscription and access their confidential files stored in the cloud.
Looking through the Forum, there is a great deal of conversation on this exact point. I'd suggest you answer this one, then create a sticky so people don't keep creating new threads and then see about resolving the issue so that Primary Admins can change in future, and be removed when they leave the workplace.
Thanks
Geoff

I am running 10.6.8 and using iweb for my web site. After several SEO analysis they all indicate I need H1-6 header tags. After looking at the source code I see there are none in iweb. Is it necessary to add? If so, how do I add H Tags to iweb.

I am running 10.6.8 and using iweb for my web site. After several SEO analysis they all indicate I need H1-6 header tags. After looking at the source code I see there are none in iweb. Are they necessary to add? Why would one add these tags and how do I add H Tags to iweb? And are there examples to look at? I am slowly learning about simple web design and assumed that iweb was stand alone without having to write code. Is this one of the reasons iweb is no longer supported? Thanks for looking at this!

A simple text page like this:
Heading
    sub heading
          text paragraph ....
Is traditionally represented by html tags like:
<h1>Heading</h1>
     <h2>sub heading</h2>
          <p>text paragraph ... </p>
I would guess that the use of h1-h6 tags helps search engines to understand the structure of a page as the tags imply a certain structure.
This can be compared to more generic tags like <div> that could represent any kind of content - and may be what iWeb uses (you'll have to check yourself).
I would generally recommend that you use some kind of up to date blog/site building tool, perhaps Wordpress or Squarespace (I haven't used either one myself) that support current web technologies - this should reduce your SEO issues and make it easier to properly support mobile/tablet users.

Install "use typical installation options for a stand-alone primary site" All SQL Prerequisites Failed. Checks SQL before SQL is even installed?

So I select the install option to "Use typical installation options for a stand-alone primary site" which says it includes installation of SQL 2012 SP1 on the local server.
But then during the prerequisite checks it fails every SQL check.
Is it just me or a giant catch 22? Am I missing something here? How is this over looked if it is what it looks like? Why even have this simple install option if it can't work?

Take a look at my R2 install guide. This is for a stand alone primary. As Torsten states you pretty much need SQL installed and configured correctly prior to running the ConfigMgr install - along with a few other pre-reqs.
https://sccmentor.wordpress.com/2014/01/08/sccm-2012-r2-step-by-step-installation-guide/
Cheers
Paul | sccmentor.wordpress.com

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?

How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?
I have Direct Access implemented in my environment. I have Windows 8.1 machine connecting through direct access.
I want to manage the windows 8.1 through SCCM. How do I setup IPV6 boundary. Can someone guide me through?
Below are the Windows 8.1 client IP Configuration
C:\Windows\system32>ipconfig
Windows IP Configuration
Wireless LAN adapter Local Area Connection* 3:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Wireless LAN adapter Wi-Fi:
   Connection-specific DNS Suffix . : home
   Link-local IPv6 Address . . . . . : fe80::7466:11a5:39ed:ffb0%4
   IPv4 Address. . . . . . . . . . . : 192.168.1.5
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.1.1
Tunnel adapter isatap.home:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . : home
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1494:1339:93d6:439c
   Link-local IPv6 Address . . . . . : fe80::1494:1339:93d6:439c%9
   Default Gateway . . . . . . . . . :
Tunnel adapter iphttpsinterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:e1a7:9cc8:c3c7:d819
   Temporary IPv6 Address. . . . . . : fd64:fc00:d17b:1000:206c:f857:ddbe:2f2b
   Link-local IPv6 Address . . . . . : fe80::e1a7:9cc8:c3c7:d819%10
   Default Gateway . . . . . . . . . :
Below are the IPConfiguration details for Direct Access server
C:\Windows\system32>PsExec.exe \\MURA01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:3333::1
   Link-local IPv6 Address . . . . . : fe80::b1ad:1c29:b4a:9125%15
   IPv4 Address. . . . . . . . . . . : 10.192.1.25
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter Teredo Tunneling Pseudo-Interface:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter isatap.{3D6A5E86-D85A-46C8-B69B-FFCF6D5D849C}:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1:0:5efe:10.192.1.25
   Link-local IPv6 Address . . . . . : fe80::5efe:10.192.1.25%18
   Default Gateway . . . . . . . . . :
Tunnel adapter 6TO4 Adapter:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
Tunnel adapter IPHTTPSInterface:
   Connection-specific DNS Suffix . :
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::1
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::2
   IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:2552:e9f8:87d3:ed8e
   Link-local IPv6 Address . . . . . : fe80::2552:e9f8:87d3:ed8e%20
   Default Gateway . . . . . . . . . :
ipconfig exited on MURA01 with error code 0.
Below are the IPCONFIG Details for SCCM Server:
C:\Windows\system32>PsExec.exe \\sccm01 ipconfig
PsExec v1.98 - Execute processes remotely
Copyright (C) 2001-2010 Mark Russinovich
Sysinternals - www.sysinternals.com
Windows IP Configuration
Ethernet adapter Ethernet:
   Connection-specific DNS Suffix . :
   Link-local IPv6 Address . . . . . : fe80::9f0:86f9:441d:bc07%12
   IPv4 Address. . . . . . . . . . . : 10.192.1.30
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.192.1.1
Tunnel adapter isatap.{0749E47D-AE0A-4D47-9D37-BDDC848E56F6}:
   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . :
ipconfig exited on sccm01 with error code 0.
What will be the IPV6 values to configure boundary?

Depending on how the clients connect use the IPv6 prefix of their 6to4, Teredo, and/ or IP-HTTPS tunnel. Just keep in mind that it could become a long list...
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Issue getting WDS to Install for PXE in SCCM 2012 SP1 Primary Site

Hi All
I'm trying to get PXE boot working from our SCCM 2012 box but it never actually gets to the point of installing WDS when I check the box for PXE booting. I don't have SMSPXE.log since it never gets to that point and the distmgr.log never reaches
that point either. I've tried
uncheck pxe boot option - restart - re-check
uncheck pxe-boot - restart - install wds - leave it unconfigured - reboot - check pxe boot
uncheck pxe-boot - uninstall the vcredist 2008 packages - rebooting - install vcredist - check pxe boot option
the above with installing wds unconfigured
Below is the relevant portions of the distmgr.log file after I enable the pxe boot option no matter what manner of software is installed. We are running it on a VM in a Hyper-V 2012 enviornment in Windows 2008 SP2 x64. This issue is similar to this link
WDS PXE Secondary Site Issues but mine is on the Primary Site.
ConfigureDP SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:09 AM 4008 (0x0FA8)
DP registry settings have been successfully updated on TUSC2012.TALISKERUTAH.LOCAL SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
STATMSG: ID=9500 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=TUSC2012.TALISKERUTAH.LOCAL SITE=001 PID=2728 TID=4008 GMTDATE=Thu Mar 28 17:48:10.083 2013 ISTR0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
STATMSG: ID=9503 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=TUSC2012.TALISKERUTAH.LOCAL SITE=001 PID=2728 TID=4008 GMTDATE=Thu Mar 28 17:48:10.084 2013 ISTR0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
ConfigurePXE SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
CcmInstallPXE SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
RegQueryValueExW failed for Software\Microsoft\SMS\DP, PxeInstalled SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
RegReadDWord failed; 0x80070002 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
Running: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
Waiting for the completion of: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
Run completed for: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
Created the DP mutex key for WDS. SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
Finding Wimgapi.Dll SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
MsiEnumRelatedProducts failed SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
FindProduct failed; 0x80070103 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
MsiEnumRelatedProducts failed SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
FindProduct failed; 0x80070103 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
GetFileAttributesW failed for SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
FindWimgapiDll failed; 0x80070002 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
Running: msiexec.exe /quiet /i c:\program files\microsoft configuration manager\wim\wimgapi.msi /log c:\program files\microsoft configuration manager\wim\wimgapi.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
Waiting for the completion of: msiexec.exe /quiet /i c:\program files\microsoft configuration manager\wim\wimgapi.msi /log c:\program files\microsoft configuration manager\wim\wimgapi.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:29 AM 4668 (0x123C)
Created policy provider trigger for ID 16777217 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:29 AM 4656 (0x1230)
Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:34 AM 4668 (0x123C)
Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:39 AM 4668 (0x123C)

HI again, sorry for the late reply.
By saying that WDS don't get configured, I mean that when i enabled the PXE functionality, the WDS role got installed but the folder remote install wasn't created.
I ahve now actually gone back to an earlier snapshot from before I started play with the PXE settings of the VM and now nothing happens when activating PXE on the distribution point, but not even the smspxe.log is created.
The Account used is a local admin and the distribution point is located on the primary site server.
EDIT: in the events log, it states the following:SMS_SITE_COMPONENT_MANAGER on computer XXX.XXXX.XXX reported: SIte comoponent Manger failed to to install on this site system.
On error (source: MsiInstaller) below:
Product Application Web Service -- Internal Error 25001. 80070490
I havent mentioned it earlier, but the Server OS is Server 2012.
I hope this might help you help me :)

Using a custom certificate store for SCCM 2012 clients and primary site server

I have read what seems to be all the pki related documentation out there for SCCM 2012. I have a PKI infrastructure up and running issueing certificates with an offline root through group policy autoenrollment. The problem that i'm faced with is we are migrating
from SCCM 2007 that was in native mode and we chose not to use the CA that we used for the old SCCM environment. When the clients attempt to communicate with the M.P. it runs through all of the different certificates and adds a tremendous amount of overhead
to the M.P. We will have ten's of thousands of clients by migration end. Could someone please point me to a document that goes over how to leverage a custom certificate store that I could then tell the new 2012 environment to use? I know that it's in there,
I've seen it in the console. The setup is one primary site server with SQL on box and the pki I just mentioned as well as the old 2007 environment that is still live.
I read that you can try and use SAN as a method of identifying the new certs but I haven't found a good document covering exactly how that works. Any info you could provide I would be very grateful for. Thanks.

Jason, thank you for your reply. I'm getting the impression that you have never been in the situation where you had to deal with 2 different PKI environments. Let me state that I understand what your saying about trust. We have to configure the trusted root
CA via GPO. That simply isn't enough, and I have a valid example to backup this claim. When the new clients got the advertisement and began the ccmsetup process I used the /pki switch among others. What the client end up doing was selecting a certificate that
had the longest validity period which was issued by our old CA. It checked the authentication chain, found it to be valid and selected it for communication. At that point the installation failed, period, no caveats as you say. The reason the install failed
because the new PKI infrastructure is integrated into the new environment, and the old is not. So when you said " that
are trusted and they can use *any* cert that is trusted because at the end of the day, there is no
difference between two valid certs that have the same purpose as long as they are trusted. "
that is not correct. Both certs are trusted, and use the same certificate template, but only one certificate would allow the install to complete successfully.
Once I started using the CCMCERTISSUERS
switch the client install went swimmingly. The only reason I'm still debating this point is because someone might read this thread see your comments and assume "well I've got my new PKI configured as a trusted root CA, I should be all set" and their
deployment will fail, just as my pilot did.
About Intune I'm looking forward to doing a POC in the lab i built with my Note 3. I'm hoping it goes well as I really want to have our MDM migrated into ConfigMgr... I think the
biggest obstacle outside of selling it to management will be the actual device migration from the current MDM solution. From what I understand of the enrollment process manual install and config is the only path forward.
Thanks Jason for your post and discussion.

Installing SQL server for SCCM 2012 local vs on its own server (primary site enviorment only)

Hello,
When building a primary stand alone site server does Microsoft consider it best practice to install sql locally or on its own server. Is there an official statement from Microsoft suggesting this?
Thanks ins advance
Phil
Phil Balderos

There is no official statement either way from Microsoft as both configurations are fully supported. Generally speaking, it is easier to collocate SQL on the same system as the Primary Site so long as the server meets the hardware recommendations.
Among the trade-offs are reduced network traffic vs avoiding a single point of failure for the site itself. Since the CM site license also includes the license for SQL, licensing is not really an issue.

Delegating administration for several primary sites

Similar Messages

Maybe you are looking for