How to configure SCCM 2007 to deliver apps to DMZ servers

I'm needing some clarification and assistance here. I'm providing some background as well. This is my first foray in to this process, so the simpler and more thorough the explanations are, the better it will be for me.
We're running Config. Mgr. 2007 in Mixed Mode (can't go Native at this point) in our corporate domain. We also have 20 servers in our DMZ. Some are in workgroups. The rest are members of one
of three AD Domains in the DMZ. There is no trusted relationship with our internal corporate domain or between the domains in the DMZ. I want to use SCCM to distribute a limited number of applications to all the DMZ servers, automating the process
like we are currently doing, inside our firewall.
Here's the limited understanding I have from reviewing other posts, along with additional questions. Please feel free to correct any misconceptions and also fill in the blanks.
I'f I get the process correctly, the client is manually installed on DMZ servers. They will communicate over port 80 (HTTP). A SLP is required, which can be set up as part of the client command-line
installation. Alternatively we can set up a secondary site in the DMZ which will communicate over port 1433 to our internal network.
The questions I have are these. What box does the SLP have to be defined on if we not using a secondary site? Also, is it a component of the client installation that is enabled on one server in the DMZ, or is it inside the firewall? How
are DMZ servers directed to it?
If we use a secondary site in the DMZ, how does that affect our overall configuration? Currently we're using a single SCCM server, no children.
Thanks in advance for your assistance and information
Thanks, Dino

Here's a good guide to get you started :
http://blog.coretech.dk/wp-content/uploads/The-complete-guide-to-System-Center-Updates-Publisher-2011-V1.01.pdf
Benoit Lecours | Blog: System Center Dudes

Similar Messages

How to configure single web server instance to multiple application servers..

Hi all,
we are running single instance of IWS6.0 SP2 on solaris, we want to comfigure this single instance to multiple application servers(JRun). Can any one advise me whether it is possible to do.
Thanks
Raj

Hi Raj,
"how to configure single web server instance to multiple application servers.."
It's not possible for setting up multiple applicataion servers for Single iWS instance.
Thanks,
Dakshin.

How to configured mail Alerts in OEM 12c for WebLogic Servers up/down status?

Hi,
I am new in Oracle Enterprise Manager so please tell me How to configured mail Alerts in OEM 12c for WebLogic Servers up/down status?
Thanks,
Sagar Pawar.

Hi Sagar Pawar ,
First you need to set the email notification :
Kindly review :
12c Cloud Control: Steps to Configure Incident Rules to Send Notifications or
Manage Events / Incidents / Problems (Doc ID 1368036.1)
12c Cloud Control: Steps to Configure Email Notification Method (Doc ID 1368262.1)
Regards
Ansari

How to configure SCOM 2007 R2 universal connector to receive alerts from HP NNMi. Please help!

Hi,
I am in situation to configure HP NNMi to forward alerts to SCOM 2007 R2 console. Can someone guide how to achieve this task since I am quite lack of information on this integration.
Thanks.
-Raju

Hi,
I would like to share the following blog with you. It includes detailed information about installation and configuration.
http://blogs.technet.com/b/kevinholman/archive/2010/09/23/installing-the-opsmgr-r2-universal-connector.aspx
Niki Han
TechNet Community Support

How to configure database connectivity in OC4J App server.

Hi,
I am working on Oracle ESB flows. I have the flow inserting rows into database table using database connection that I have defined. I havent set up connection settings in OC4J EM console.
I dont wonder when JDeveloper is inserting rows into tables, as connection is explicitely defined in JDeveloper.
Now I login to EM enviroment and click on Home, click on Web Services tab, and when I use this flow as a Web Service end point and feed values through the form that it provided, it also works. But since I havent defined any connection properties in App Server explicitely, I wonder where is it getting connection properties(JNDI name) from.
I want to configure some settings in Testing Environment and am kind of stuck at this point.
Thanks,

Hi.
When you don't have JNDI configured, OC4J uses the design time connection defined in the Adapter's WSDL. Look for the following description in your Adapter WSDL:

Now, for JNDI configuration, you can use the SOA Suite tutorial as a reference:
http://download.oracle.com/docs/cd/B31017_01/core.1013/b28937/setting_up.htm#CIHBHEFC
There you can find the steps to create a connection pool, data source, etc.
Denis

How to configure domainValues file for BI apps?

Hi Experts,
I am configuring EAM analytics 7.9.6.4 with EBS R12.
I am following http://docs.oracle.com/cd/E35287_01/bia.7964/e35272.pdf
In Section 16.2.2 Domain Values and CSV Worksheet Files for Oracle Enterprise Asset
Management Analytics with Oracle EBS
It says...
If you have modified or extended a seeded list of values, you must configure the CSV
files for Oracle Enterprise Asset Management Analytics by mapping values from your
source systems to the domain values.
Now in one of the files (domainValues_Status_EAMAsset_ora11i) the seeded values are...
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EAM_ASSET_STATUS,1,ACTIVE,Active,Active,Item is Active
EAM_ASSET_STATUS,510,HOLD,Hold,Hold,Item is on Hold
and when i check in my EBS, the values are ..
EAM_ASSET_STATUS,1,EXPIRED,Expired,Expired,Item is Expired
EAM_ASSET_STATUS,510,CREATED,Created,Created,Item is Created
My Question is should i just add these new two lines below the seeded values like this...
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EAM_ASSET_STATUS,1,ACTIVE,Active,Active,Item is Active
EAM_ASSET_STATUS,510,HOLD,Hold,Hold,Item is on Hold
EAM_ASSET_STATUS,1,EXPIRED,Expired,Expired,Item is Expired
EAM_ASSET_STATUS,510,CREATED,Created,Created,Item is Created
OR Should i modify the existing seeded values like below?
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EAM_ASSET_STATUS,1,EXPIRED,Expired,Expired,Item is Expired
EAM_ASSET_STATUS,510,CREATED,Created,Created,Item is Created
Thanks
Ashish

I am going ahead with EBS values only now..
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EAM_ASSET_STATUS,1,EXPIRED,Expired,Expired,Item is Expired
EAM_ASSET_STATUS,510,CREATED,Created,Created,Item is Created
Now what is this column W_STATUS_CLASS? Do we have to punch in its values as EXPIRED OR CREATED
ie
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EXPIRED,1,EXPIRED,Expired,Expired,Item is Expired
CREATED,510,CREATED,Created,Created,Item is Created
or just keep it EAM_ASSET_STATUS only? ie
W_STATUS_CLASS,STATUS_CODE,STATUS_NAME,W_STATUS_CODE,W_STATUS_DESC,STATUS_DESC
EAM_ASSET_STATUS,1,EXPIRED,Expired,Expired,Item is Expired
EAM_ASSET_STATUS,510,CREATED,Created,Created,Item is Created
Thanks for helping me..

How to configure SCCM 2012 discover user group only?

Hi,
I'm wondering if there is a way to discover user group only (ignore computer group) in SCCM 2012?
Jason

Hi,
Also note that by default, only security groups are discovered. However, you can discover the membership of distribution
groups when you select the checkbox for the option Discover the membership of distribution groups on
the Option tab
in the Active Directory Group Discovery Properties dialog box.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2007 R2 Query - Look for Win2k8 servers where Terminal Services is installed.

Hi there.
I have been looking all over the net. That's how it feels ;-D. I'm trying to a find out how to create a query that I can use in a SCCM Collection. This query should result in only Windows 2008 Servers where Terminal Services have been installed.
So far I have tried at least ten different ways of doing this. With no prevail. So I hope you guys can assist me.
1) Create a collection.
2) Create a query.
a. The query should only find Windows 2008 Server where Terminal Services is installed.
3) Then I can distribute only to these servers.
Thank you. Your help is highly appreciated.
Regards.
/Lars
Red Baron

Hmm... Well, keeping in mind that from my point of view, there is no reason to not install the client on every box in the enterprise. What's the reason to not install the client? If there's a political reason, like those boxes belong to some other team who doesn't want you touching their servers, why are you responsible for ensuring Terminal Services is installed? Make *them* come up with an alternate method to confirm that.
Just deploy the client and move on.
I cannot think of a single way to determine if Terminal Services is installed without either the ConfigMgr Client installed, or a different administrative tool tell you that. Whether that other Admin tool is a remote script you design & run, or if you have some other tool available (would SCOM be able to be configured to report that? Maybe.), I have no suggestions for you other than logging into each server interactively and looking manually.
Which brings me full circle back to: just install the ConfigMgr client.
Slightly OT: once they have the client installed, you could then create a DCM Baseline so that you could run a report and see which ones might have 'drifted' from the approved configuration.Standardize. Simplify. Automate.

How to configure AMconfig.properties on gateway with 2 portal servers

Hello,
I run into an issue where I want to setup 1 portal gateway with 2 portal servers(+ access manager) all on separate machines. How can I define in AMconfig.properties that there are possible two portal servers.
All is version 2005Q1
Please see part of my actual AMconfig.properties :
# grep portal AMConfig.properties
com.iplanet.am.directory.host=portal1.domain.int
com.iplanet.am.server.host=portal1.domainl.int
com.iplanet.am.console.host=portal1.domain.int
com.iplanet.am.profile.host=portal1.domain.int
com.iplanet.am.naming.url=http://portal1.domain.int:80/amserver/namingservice
com.iplanet.am.notification.url=http://portal1.domain.int:80/amserver/notificationservice
com.iplanet.am.localserver.host=portal1.domain.int
com.sun.identity.liberty.interaction.wspRedirectHandler=http://portal1.domain.int:80/amserver/WSPRedirectHandler
Kind Regards
Roland Vlerick

See this thread.
Error Installing Groupware Portlets for WLP 10.3.2
Brad

"Enable distribution-point sharing for this source site" did not showing SCCM 2007 DPs as SCCM 2012 content shares for CM12 clients

Hi
We have one central site server and three primary site servers in SCCM 2007 and completed the SCCM 2012 migration as single hierarchy.
During the migration, We have configured SCCM 2007 Central site server as source hierarchy for data gathering process and configured the "Enable distribution-point sharing for this source site" to make SCCM 2007 distribution points
as SCCM 2012 content shares to serve SCCM 2012 migrated clients. Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this
source site" but data gathering process is completing successfully.
Is anyone have idea, why these SCCM 2007 DPs did not appearing as SCCM 2012 content shares under "Shared Distribution Points"
Thanks in Advance
srkr

Now we are facing a problem that one of the primary site server's data gathering process did not gather SCCM 2007 DPs even though we configured "Enable distribution-point sharing for this source
site" but data gathering process is completing successfully.
Earlier all the shared DPs are showing under Shared Distribution Points ? Or since starting itself these DPs are not showing down? Have you checked migmctrl.log for some clue?
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

SCCM 2007 to SCCM 2012 CLIENT upgrade

Hi,
We have some Windows XP machines with a SCCM 2007 client, connected to a SCCM 2007 server. Meanwhile some client are already migrated to Windows 7 but still connected to SCCM 2007 (and their packages/collections).
Now we would like to:
-migrate the Windows 7 machines to SCCM 2012 and keep their packages (so no re-run of advertisements) run
-migrate the Windows XP machines by migrating the SCCM 2007 clients then advertise a task sequence (Windows 7) to it
Questions:
-should we push the sccm client from 2007 or from 2012 server to keep the membership of collections?
-if we have to push from 2007, please advise howto: use ccmsetup.exe, the msi (is this the way to go: http://blog.metasplo.it/2012/10/how-to-upgrade-sccm-2007-clients-to.html)?
Please advise.
J.
Jan Hoedt

It doesn't seem to be published on the site.
I'll paste it here. Could you advise?
I would like to test with a cmd, so I made an install.cmd which contains.
@echo on
Cscript ConfigMgrStartup.vbs /ConfigMgrStartup.xml
pause
Then I edited the configmgrstartup.xml:
*Commmented lab1 since I'm not sure what to put there, why put a machine name and why the forward slash?
I'd expect domain\administrator.
*Commented out hotfixes since we don't need it
Launched the cmd but nothing happens, no loggings either.
!-- <Option Name="LocalAdmin" >lab1/dadmin</Option> -->
   <Option Name="SiteCode" >LTF</Option>
   <Option Name="CacheSize">8120</Option>
   <Option Name="AgentVersion">5.00.7804.1000</Option>
   <Option Name="MinimumInterval">0</Option>
   <Option Name="ClientLocation">\\oursccmserver\SMS_PRD\Client</Option>
   <Option Name="MaxLogFile">2048</Option>
   <Option Name="ErrorLocation">\\dfs\ErrorLogs\Clientinstall</Option>
   
   <Option Name="Delay" >5</Option>
   <InstallProperty Name="FSP">oursccmserver.fqdn</InstallProperty>
   <InstallProperty Name="SMSMP">oursccmserver.fqdn</InstallProperty>
   <CCMSetupParameter Name="BITSPriority">HIGH</CCMSetupParameter>
   <CCMSetupParameter Name="noservice" />
   <ServiceCheck Name="BITS" State="Running" StartMode="Auto" Enforce="True" />
   <ServiceCheck Name="winmgmt" State="Running" StartMode="Auto" Enforce="True" />
   <ServiceCheck Name="wuauserv" State="Running" StartMode="Auto" Enforce="True" />
   <ServiceCheck Name="lanmanserver" State="Running" StartMode="Auto" Enforce="True" />
   <ServiceCheck Name="RpcSs" State="Running" StartMode="Auto" Enforce="True" />
   <RegistryValueCheck Key="HKLM\SOFTWARE\Microsoft\Ole" Value="EnableDCOM" Expected="Y" Enforce="True" Type="REG_SZ"/>
   <RegistryValueCheck Key="HKLM\SOFTWARE\Microsoft\Ole" Value="EnableRemoteConnect" Expected="Y" Enforce="False" Type="REG_SZ"/>
   <RegistryValueCheck Key="HKLM\SOFTWARE\Microsoft\Ole" Value="LegacyAuthenticationLevel" Expected="2" Enforce="False" Type="REG_DWORD"/>
   <RegistryValueCheck Key="HKLM\SOFTWARE\Microsoft\Ole" Value="LegacyImpersonationLevel" Expected="2" Enforce="False" Type="REG_DWORD"/>
</Startup>
Jan Hoedt

Configuring Outlook 2007 and 10.6 Server - Email

Basically I would like to know how to configure Outlook 2007 when connecting to 10.6 server's email service. Any help would be gratefully accepted.

Hello,
When I tried to IMAP connect via Outlook 2007, it gave the following error:
"Log onto incoming mail server (IMAP): General authentication failed. None of the authentication methods supported by your IMAP server (if any) are supported on this computer."
I had the following authentication methods enabled on my Apple Mail Services: Kerberos and CRAM-MD5. I then enabled the checkmarks for both "Plain" and "Clear" and then I got the following error message when testing the connection:
"Send test e-mail message: An unknown error occurred, error code: 0x80040607"
If anyone knows how to fix this please help! =)
(This is officially my first post in Apple Forums! Yippee!!)

Can you deploy an application sequenced with App-V v5 with SCCM 2007?

We are currently in the process of upgrading to SCCM 2012. We are also embarking on testing App-V v5. Can we deploy sequenced applications from App-V v5 using SCCM 2007? What limitations will exist with SCCM 2007? What release of
SCCM 2007 should we be at for App-V v5 sequenced applications to be deployed and/or streamed?

This KB article is now available: Supported Configuration Manager and Microsoft Application Virtualization scenarios
Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
answer your question). This can be beneficial to other community members reading the thread.
This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
Twitter:
@stealthpuppy | Blog:
stealthpuppy.com |
The Definitive Guide to Delivering Microsoft Office with App-V

Configure WSUS for SCCM 2007 to received patchs and deploy

Dears,
I have installled SCCM 2007 and WSUS server in another server now i want to confiure for patching.
how to do that and and ensure SCCM 2007 server receiving patchs.
Please assist.
[email protected]

Hi,
Would suggest you read the below on how to create/configure a SUP
http://technet.microsoft.com/en-us/library/bb633236.aspx
Blog: http://theinfraguys.com
Follow me at Facebook
The Infra Guys Facebook Page
Please remember to click Mark as Answer on the answer if it helps you in anyway

How can I remove the SCCM 2012 client and reinstall SCCM 2007 client on all of our computers

Hello All
We have bit of a problem. Our virtual SCCM 2012 r2 server was deleted and the back solution we had in place keeps failing.
We do have our sccm 2007 server still in place but its only role was imaging as we transferred roles from one to another.
My question is now our support needs to remote into pcs but cant because the CM12 server is gone. How can I remove the 2012 client from all of our companies computers and reinstall the CM07 client so we can remote into computers again.
Thanks in advance!
Phil
Phil Balderos

Run a ccmsetup /uninstall on the clients. You may need to run via PSExec. Then push out the SCCM 2007 client via the 2k7 console.
Cheers
Paul | sccmentor.wordpress.com
Thanks Paul!
I have to do this on over 350 computers and 110 servers. How can I do it on a more massive scale?
Phil Balderos
I would check Torsten's approach first and see if the ccmsetup will uninstall the 2012 version. I'm not sure. Obviously the other way round is fine.
Using PSexec you can script this to call up a txt file of all your servers/computers and run the uninstall.
e.g.
for /f "tokens=*" %a in (computers.txt) do psexec \\%a %WINDIR%\ccmsetup\ccmsetup.exe /uninstall
If your account has privileges on all devices you won't need to add in any username/password credentials. Obviously only devices that are switched on and you have access to will run this.
Cheers
Paul | sccmentor.wordpress.com

How to configure SCCM 2007 to deliver apps to DMZ servers

Similar Messages

Maybe you are looking for