Multiple Configuration Manager environments, 2 AD sites, and overlapping boundaries

Good morning all.
A bit of background before my question, just because it's a little confusing (at least to me).
I have an environment with 4 AD sites (Alpha, Beta, Charlie, and Delta) We had, at one time, three separate ConfigMgr 2007 instances (one for each site and none for the remaining one) and it was in general a very bad thing. It was decided that
we should stand up a single, centralized ConfigMgr 2012 R2 instance and stop duplicating effort, wasting time, and spending money where we don't need to. Great! Everyone was on board except for Delta, who had political objections. We have
boundaries set based on AD Site names in the central ConfigMgr environment and everything has been humming along well for the past ~2 years.
One of the larger groups in the Delta domain have decided that they want in to the central ConfigMgr environment and want to know if it's possible. This is good for us (more business!) but bad because I'm not sure if it can happen.
Because of Political Reasons Delta's rogue ConfigMgr environment isn't going anywhere, so adding a boundary based on AD site is not an option.
Further, because of their network's complexity all of their machines share a number of very large DHCP ranges...so there is no way to draw a dividing line between a machine that should be managed by CM2012 vs CM2007. Also, politically, that is not
likely to change.
The only thing separating these machines from others are OU membership, which unfortunately can't be used to create boundaries.
I'd love to just throw their ranges into our SCCM, create collections based on their OU membership, and have them set their SCCM site information via group policy to point to ours--but it can't be that easy can it? I'm at a loss to determine if what
they want to have happen is even possible, so that's why I'm posting here and hoping that someone might be able to point me in the right direction. Thank you in advance for your help.

Thanks for the reply, Torsten.
Just create content location boundary groups only in CM12. Don't touch the CM07 ones.
Auto assignment is only needed when using either client push (using SMSSITECODE=AUTO. Workaround: use SMSSITECODE=ABC) or running ccmsetup.exe manually without providing the sitecode.
Torsten Meringer |
Okay, I'm completely on board here. Does any of this information change if they were to upgrade to CM2012 in their environment as well or is the information just a ConfigMgr rule of thumb?

Similar Messages

Oracle Configuration Manager (OCM) and Software Configuration Manager (SCM)

Hi
Has anyone been able to install OCM(Oracle Configuration Manager, v 10.2.7) and
successful upload new Software Configurations to Metalink 3?
We have managed to download the OCM software (version 10.2.7), version 10.3.0 does not seam to be available
although it is the default suggestion from the download manger for the
"Oracle Configuration Manager Family" products.
We have also been able to install the OCM software in out Windows 2003/Siebel 8.0 development
environment. The connection to Metalink/Oracle configuration server even trough a proxy is
looking fine. We even get confirm/success message for the upload.
The only problem is, we don't event one day after doing the upload, see the new
configuration in Metalink 3.
Has anyone else been able to get this to work?
Axel

We got the configuration upload to work today and it did show up rather fast on Metalink 3. What we ended up having to do, was to install the software twice on the server once in the c:\sba80\gtwysrvr and once in the c:\sba80\siebsrvr directory.
If you are behind a proxy remember to use the -p parameter when calling setupCCR.
Axel

Version control and configuration management

How is version control and configuration management done for iPlanet6 web
and app servers?

I'm not sure if I understand exactly what you are asking. Neither iWS or
iAS have built in version control or configuration management. But
pretty much everyone integrates them with version control or SCM in some
way. Ranging from the complex (say integrating iAS and Interwoven) to
the simplistic (using CVS to track HTML documents or source code).
David
Chris Valliere wrote:
How is version control and configuration management done for iPlanet6 web
and app servers?

Configuration Manager 2012 R2 - SRS Reporting Services not configuring Report Server

Hi all,
I am running stand-alone primary site and remote (shared) SQL 2012 SP1 on Windows 2012 R2 Standard. Remote SQL server is currently hosting multiple instances and Configuratoin Manager is running on a custom instance. SCOM databases also co-exist on the same
SQL environment (different instance with SSRS installed & running perfectly).
After setting up the Reporting Services role on Configuration Manager environment, srsrpsetup.log & srsrpMSI.log states installation is successful. However, when monitoring srsrp.log file, we encounter the below message -
SMS_EXECUTIVE started SMS_SRS_REPORTING_POINT as thread ID 5232 (0x1470).
SMS_SRS_REPORTING_POINT 02/12/2014
07:44:00 7828 (0x1E94)
This is a SRS Reporting Point Role as SRSRP registry key exists.
SMS_SRS_REPORTING_POINT 02/12/2014 07:44:15
5232 (0x1470)
Waiting for changes for 0 minutes SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Timed Out... SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Check state SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Check server health. SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Registry change SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Waiting for changes for 1 minutes SMS_SRS_REPORTING_POINT
02/12/2014 07:44:15 5232 (0x1470)
Timed Out... SMS_SRS_REPORTING_POINT
02/12/2014 07:45:15 5232 (0x1470)
Steps taken so far -
1. Switched reporting services to run from local system account to domain account.
2. Created new Report Server database on our instance and reconfigured Reporting Services to this DB.
3. Un-installed and re-installed Reporting Services role in Configuration Manager
4. Un-installed and re-installed SSRS on Configuration Manager (dedicated) SQL instance after removing Reporting Services role in CM12.
I have referred couple of links on forum and none seem to help resolve this issue.
Let me know if there is anything specific I missed out from my end. Appreciate any assistance.
Regards,
mittu

It seems that Reporting Services for SCOM and SCCM cannot co-exist on the same server (it sounds like a bad idea anyway)
http://www.systemcentercentral.com/system-center-2012using-a-common-sql-backend-database-sysctr-scom-scsm/
https://social.technet.microsoft.com/Forums/en-US/7e6b5ae9-04c8-4c5d-a77f-9f5208d4e65f/is-it-possible-to-deploy-2-scom-2012-r2-reporting-in-a-sql-server-which-already-has-scom-reporting?forum=operationsmanagerreporting
https://social.technet.microsoft.com/Forums/systemcenter/en-US/0332b156-bc36-4699-8775-a561915f35ab/scom-2012-reporting-components-with-a-shared-sql-cluster?forum=operationsmanagerdeployment
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Configuration Manager Error - (-9986)Session to local database...

Hello guys, I'm with a little problem.
When I try to open the Configuration Manager in a Sprowler Server, and appears this error: (-9986)Session to local database could not be opened.
But i try to resolve this problem at ODBC Connection (ODBC Data Source). But all connections is ok.
I saw that some processes of distributor are oscillating(Distributor rclient). So I saw in distributor log this error:
10:24:49 dis-nm ICM\ucce\Distributor node error checking health of process rtc.
Last API Error [109]: The pipe has been ended.
10:24:49 dis-nm Process rtc on ICM\ucce\Distributor is down after running for 0 seconds. It will restart after delaying 1 seconds for related operations to complete.
But in SQL Server, the Named Pipes is enable, in second position. I disable the Firewall but no success.
I don't able to open the Configuration Manager. Somebody can help me?
Thanks.

OK, very good.
Just so I completely understand this ... On the Distributor AW, part of your Sprawler, can you use the Config Tool OK? If so, this means that the real-time feed is established to the Distributor and it can see the local database and so on.
Is the rtdist process running?
Now on the AW Client. Assuming this is configured correctly, it connects to the Distributor. Check the rtdist process to see your client AW IP address connect. Do you see this?
(I feel like we have discussed this before)
Regards,
Geoff

Kerberos Configuration Manager for SQL Server is available

This thread describes the Microsoft Kerberos Configuration Manager diagnostic tool for SQL Server. This tool is available for download from the Microsoft Download Center:
Download the package now.
About Kerberos Configuration Manager
The Kerberos Configuration Manager for SQL Server is a diagnostic tool that helps troubleshoot Kerberos related connectivity issues with SQL Server, SQL Server Reporting Services (SSRS), and SQL Server Analysis Services (SSAS). It can perform the following
functions:
Collect information on operating systems and Microsoft SQL Server instances that are installed on a server.
Report on all Service Principal Name (SPN) and delegation configurations on the server.
Identify potential problems in SPNs and delegations.
Fix potential SPN problems.
More information
This tools helps troubleshoot the following exceptions:
401
Note: This error message is for http errors, SSRS errors, and some other similar errors.
Login failed for user 'NTAUTHORITY\ANONYMOUS'
Login failed for user '(null)'
Login failed for user ''
Cannot generate SSPI Context
For more information about Kerberos Configuration Manager, go to the following related blogs:
Released: Kerberos Configuration Manager for SQL Server
Kerberos Configuration Manager updated for Reporting Services
Kerberos Configuration Manager updated for Analysis Services and SQL Server 2014
Reference from the following KB article: Kerberos Configuration Manager for SQL Server is available
Elvis Long
TechNet Community Support

Thanks for posting, Elvis. Can you post this to the SQL Security forum too?
Dan Guzman, SQL Server MVP, http://www.dbdelta.com

Packaging Configuration Management Service of the portal

Hi:
I am writing a KM namespace filter to be applied to a CM
repository of news items. There is an 'admin console' for
this functionality. The 'Admin' in her/his admin console
iview does some selections regarding no. of items,name of
categories to display and saves them.
Since KM filter functionality or CM repository properties
can't be changed during runtime,ie.,any change of selections
done by the 'admin' needs restart of the servlet engine,
which is not an option in a production environment. So, I
thought of using 'Configuration Management Service' of the
portal to read from and write to all the selections during
the runtime.
<u>Everything is fairly easy regarding writing a configuration
management service, except packaging it and deploying it.
The documentation makes no sense if you compare it to the
example given along with the portal documentation.
Do we have to use any special plugin to package this
service ? Or is there any updated documention available ?</u>
Please help me with this problem,
Thank you very much,
Prasad Nutalapati.

Hi,
You can access through useradmin.
example: http://localhost:<port>/useradmin
Here, log-in to the application as an administrator. You can see the
"Identity Management".
Thanks
R.Murali

LiveCycle Configuration Manager

hi
i have installed LiveCycle Designer ES4 but i don't have the Configuration Manager to install the Mobil Form and Forms Manager.
the installation was made on a pc with with7/32.
where can i find the configuration manager
thanks

To avail Mobile Forms and Forms Manager, you need to install LiveCycle Server. Then you will be able to run configuration manager to choose these modules.
Download link: http://www.adobe.com/devnet/livecycle/downloads.html
Documentation link: LiveCycle Learn & Support

Configuring AD Sites and Services best practice for multiple office site ?

Hi People,
Can anyone here please suggest me or share the link of what is the best practice in configuring the AD Sites and Service for single AD domain with multiple office sites ?
I'd like to know more about the number and the direction of the connection between Domain Controllers in one site to the Data Center and vice versa.
Thanks.
/* Server Support Specialist */

Hi People,
Can anyone here please suggest me or share the link of what is the best practice in configuring the AD Sites and Service for single AD domain with multiple office sites ?
This series can be useful:
Active Directory Structure Guidelines – Part 1
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

Message (on one account) when logging in: The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database.

After installing the reportservice/database i cannot use the Configuration Manager Console 2012 anymore with my own AD account. (The accounts of my colleagues are stil working)
When i login i get the following message:
The user account running the Configuration Manager console has insufficient permissions to read information from the Configuration Manager site database. The account must belong to a security role in Configuration Manager. The account must also have
the Windows Server Distributed Component Object Model (DCOM) Remote Activation permission for the computer running the Configuration Manager site server and the SMS Provider.
I checked the following:
I am a administrative user in SCCM (Full Administrator)
I am a member of the administrator group on the server
Deleted HKEY_CURRENT_USER\Software\Microsoft\ConfigMgr10
I tried to start it on multiple workstations and deleted my roaming profile
Any more suggestions?

Hi,
Maybe you could have a look on the below blog.
http://blog.nimbo.com/how-to-disable-user-account-control-in-windows-server-2012/
(Note: Microsoft provides third-party contact information to help you find technical support. This contact information
may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.)
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Hyper-V - Sites and Services using multiple subnets

Good evening,
Im currently setting up a test domain where I want to use multiple subnets.
My current setup is the following
- Host PC running Hyper-V manager with 1 physical NIC that connects to my router (192.168.0.1)
- Virtual Machine running Windows Server 2012 R2 - This is my domain controller aswell as DNS and DHCP server. IP address for this is 192.168.0.200
Now what im wanting to do is also create 2 more domain controllers but 'pretent' that they are in two completely different locations running off multiple subnets. Lets say one is in America and one is in Australia.
I want the addresses of these two machines the following
DC (America) - 192.168.1.1
DC (Australia) - 192.168.2.1
The reason i'll be doing this is im going to be working with Sites and Services to give me a better understanding of it.
Please can someone give me help with how I can achieve this.
Thanks.

One way to do this is to:
Setup 1 internal vSwitch. We'll use a different VLAN and subnet for each AD Site. For example, you can use VLAN 101, 102, and 103, and subnets 192.168.101.0/24, 192.168.102.0/24, and 192.168.103.0/24. This consistency will be very helpful later on.
Create a VM to act as a router, with 3 vNICs. Configure each of the 3 vNICs on a different VLAN, with a static IP on the corresponding subnet, such as 192.168.101.5, 192.168.102.5, and 192.168.103.5. Setup static routing rules if needed using Route Add
for example.
Create 3 DCs. Each DC will have a single vNIC. It can be in its own domain and forest. For example, DC101 will have a vNIC on VLAN 101, with IP 192.168.101.10/24, GW 192.168.101.5. Setup DNS on each DC.
Setup DHCP on each DC with a scope that corresponds to its subnet. For example, on DC101 setup a scope that provides IPs from 192.168.101.100 to .150, with /24 mask, .5 gateway, and .10 DNS.
As you add other VMs, if you VLAN-tag its vNIC with VLAN ID 101, it will get IP address from DC101 on the 192.168.101.0/24 subnet since DHCP ARP broadcasts will not cross the router (VM we setup earlier) by default.
Sam Boutros, Senior Consultant, Software Logic, KOP, PA http://superwidgets.wordpress.com (Please take a moment to Vote as Helpful and/or Mark as Answer, where applicable) _________________________________________________________________________________
Powershell: Learn it before it's an emergency http://technet.microsoft.com/en-us/scriptcenter/powershell.aspx http://technet.microsoft.com/en-us/scriptcenter/dd793612.aspx

When converting over to HTTPS and PKI for clients, not all actions are available in configuration manager cpl

I'm not exactly sure which forum heading this should go under so if this isn't correct please let me know or move it on my behalf.
So I am trying to setup Internet Based Client Management in SCCM 2012 R2 and have come across a few articles on how to do so. I think I have mostly gotten it to work but I seem to be having a client issue when deploying new machines. My already
deployed servers seem to have picked up the PKI setting no problem. In the past when I would deploy a new windows client everything would be fine. When i converted over to PKI in my test environment I am now having issues when I go to deploy a
new windows client. I don't get all of the Actions listed in the Configuration Manager control panel. All I have are Discovery Data Collection, Machine Policy Retrieval and Eval, User Policy Retrieval and Eval, and Windows Installer Source list Update
Cycles, before all of them would populate no problem. I have let this machine sit here for several hours and nothing has changed yet. It does say PKI for client certificate. Sometimes when I would deploy new machines it would say NONE for
Client certificate. In my production environment it says self-signed. I have found if i uninstall the client and re-install the client it does populate all of the cycles but I don't understand why it is not working on deployment.
Ok so maybe not all the time that when i reinstall the client it fixes it. I just did an uninstall and reinstall on a test client and all it has under actions are machine and user policy cycles.
Does anyone have any ideas?

Hi,
I think SCCM client installed before the GPO applied, so you don't a certificate available when it is required.
You can export and import the certificate by using MDT integration, try this blog for PKI part:
How To: Build and Capture in Configuration Manager 2012 using HTTPS
And in addition, you can upload the log to your onedrive so you can share with us.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

"Configuration Manager cannot connect to the site" after site update from SP1 to R2

Our dev SCCM environment only has a single primary site with a remote SQL database. Initially, the dev primary site had SP1 Beta (5.00.7782.1000) installed but as everyone is aware there is no upgrade path available to SP1 or R2 from Beta; so, we uninstalled
the site and removed the database, re-installed SP1 non-Beta (5.00.7804.1000), then proceeded to update all devices with the latest client agent. Afterwards, we attempted to upgrade the site from SP1 non-Beta (5.00.7804.1000) to R2 (5.00.7958.1000).
All seemed well until we attempt to open the Configuration Manager console and we get the following error message:
Configuration Manager cannot connect to the site (Site Name)
The Configuration Manager Administrator console could not connect to the Configuration Manager site database. Verify the version of the console is compatible with the version of the site server you are connecting to and then try to connect again.
So we tried reinstalling the console directly from here...
"C:\Program Files\Microsoft Configuration Manager\tools\ConsoleSetup\AdminConsole.msi"
still the same error message persisted, so we tried installing it from here...
"C:\Program Files\Microsoft Configuration Manager\tools\ConsoleSetup\ConsoleSetup.exe"
still the same error message persisted, so then we tried installing it directly from the R2 (5.00.7958.1000) installation media, and afterwards the same error message persisted....
All along, we were checking the AdminConsole log from here:
"C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\AdminUILog\SmsAdminUI.log"
Here are the contents:
[4, PID:4836][04/22/2014 15:21:10] :Property: 'Features'\r\nSystem.Management.ManagementException\r\nNot found \r\n at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)
at System.Management.PropertyData.RefreshPropertyInfo()
at System.Management.PropertyDataCollection.get_Item(String propertyName)
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObjectBase.get_Item(String name)\r\nManagementException details:
[4, PID:4836][04/22/2014 15:21:10] :ReadExtraProperties: Failed to initialize extra properties
[4, PID:4836][04/22/2014 15:21:11] :Transport error; failed to connect, message: 'The Configuration Manager Administrator console could not connect to the Configuration Manager site database. Verify the version of the console is compatible with the version
of the site server you are connecting to and then try to connect again.'\r\nMicrosoft.ConfigurationManagement.ManagementProvider.SmsConnectionWithDetailException\r\nThe Configuration Manager Administrator console could not connect to the Configuration Manager
site database. Verify the version of the console is compatible with the version of the site server you are connecting to and then try to connect again.\r\n at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.ValidateConnectionParameters(ConnectionManagerBase
connection)
at Microsoft.ConfigurationManagement.AdminConsole.SmsSiteConnectionNode.GetConnectionManagerInstance(String connectionManagerInstance)\r\nNo details are available for this error.\r\n
Once again, we validated we could connect to the SQL database from this box, and that the console was at the same version as the site. Any help or guidance with getting our access to the console restored after the SP1 to R2 upgrade would be greatly
appreciated.

From the Primary Site Server, I tried uninstalling the Admin Console and re-installing using:
consolesetup.exe /q TargetDir="%ProgramFiles%\Microsoft Configuration Manager" EnableSQM=0 DefaultSiteServerName=<SiteServerName>
Of course replacing <SiteServerName> with the FQDN of my Primary Site Server. Console installed successfully however the same error message persists.
Also tried installing the console on a clean Windows Server 2008 R2 installation. I tried it from the R2 (5.00.7958.1000) installation media, from the "C:\Program Files\Microsoft Configuration Manager\tools\ConsoleSetup\" both without any luck, the
same error message persists. I verified I could ping the FQDN of the site server also, and that the firewall between the two permits communication over the ports listed here: http://technet.microsoft.com/en-us/library/hh427328.aspx
Any help would be greatly appreciated.

Multiple sites and personal domain

Hi everyone!
I'm having a problem with iWeb 08. Here's the details:
Using iWebsite and iWeb '08 I've created 2 websites, one for personal use and one for my business.
Now I'm interested in buying a personal domain for my business website.
How can I do to set the personal domain only to my business site, leaving the personal one unchanged?
Cheers,
Samuele

An easy way to manage multiple sites is either iWebSites or MultiSite.
I use iWebSites to manage multiple sites.. It lets me create multiple sites and multiple domain files.
If you have multiple sites in one domain file here's the workflow I used to split them into individual site files with iWebSites. Be sure to make a backup copy of your original Domain.sites files before starting the splitting process.
This lets me edit several sites and only republish the one I want. Works for me.
OT

Version of SQL Server Express for a Secondary Site in Configuration Manager 2012 R2

Hi,
I want to install a secondary site in my Configuration Manager 2012 R2. I want to install the SQL Server Express in a diferente drive. To do so, I want to previous install the SQL Server Express.
Can I use the SQL Server 2014 Express?
Thanks in advance...
Dmsousa

Sorry, going to be blunt here, but this is why "best practices" are useless. If you don't know the "why" of the best practice and when to apply it, it will cause you to do things that simply aren't necessary (or even harmful) by
blindly trying to apply them. It is simply is not necessary for secondary sites for perf or any other reason. Also, if this is a VM, then your virtual disks will most likely be on the same physical disks which means you do *not* in any way gain any perf benefits
anyway (perf benefits come from have additional physical spindles -- logical separation is just that *logical*).
You have far bigger challenges ahead of you, push the easy button on this one, let ConfigMgr deploy SQL Express for you and move on.
Jason | http://blog.configmgrftw.com | @jasonsandys

Multiple Configuration Manager environments, 2 AD sites, and overlapping boundaries

Similar Messages

Maybe you are looking for