Multiple primary site - Discovery issue

Hi,
I am working on a scenario where there is 1 CAS and 3 Primary sites(PS1,PS2,PS3). At PS1 site, Active directory system Discovery is only configured and all the OU for all the sites are added. On the other two Primary sites this discovery was not configured.
Now I wanted to ask is there any issue due to this , or should I have to configure this discovery on both sites??
Thanks
Pallavi

no, you can still control that. Site Assignment is either based on an AD Query or you hard coding the site code during the install process. Client deployment depends on the method, in this process content boundary Groups and DP's are being used.
Kent Agerlund | My blogs: blog.coretech.dk/kea and
SCUG.dk/ | Twitter:
@Agerlund | Linkedin: Kent Agerlund |
Mastering ConfigMgr 2012 The Fundamentals

Similar Messages

  • Do I need multiple primary sites? Some design questions..

    I have about a thousand users & devices, across two sites.   Setting up SCCM 2012 R2 and wondering if I need to have multiple primary sites?
    From everything I've read so far, it seems that a single standalone site will handle tens of thousands of users/devices or some very large number, so I'm not sure if I'd ever need a secondary site or what it's function would be - failover, backup, or is
    it just best practice to have different roles spread across multiple servers?
    I was originally thinking of just doing a single primary site on a single server.  But then I'm not sure if my DP should be separate.
    Can someone point me the the right direction to a high level planning document or blog?
    Thanks
    Nathan

    How many clients are there in total? How many at each location? What's the WAN speed in between?
    Multiple primaries are only needed for scale out purposes (>100k clients)!
    Torsten Meringer | http://www.mssccmfaq.de
    About 500 at each, T1 speeds connect the sites, so I want to enable software metering I think.
    Also - if I have a single server with DP role installed, what kind of RAM/HD requirements are needed?  I know this probably varies with the install/features, but are there any ballpark estimates/starting points posted?  Sorry I know this is probably
    on the MS site somewhere, the the volume of information is hard to weed through.   Update, I found some good guidelines here:
    http://myitforum.com/myitforumwp/2012/06/27/sccm-2012-site-hardware-requirements/
    For 1000 or less users, is a single Gb NIC sufficient?  Sounds like it might be?   Also, when using a virtual machine, do you need to still somehow separate SQL logs & data from OS?
    Update #2, looks like that above post answered that question too:
    If you’re in a VM, it’s not sufficient to have a single VHD file, and having the roles split among 4 virtual drives inside that file.  It’s not sufficient to have that single file on a shared set of remote disks.  It’s not sufficient to have that
    single file on a dedicated set of disks, regardless of the number and size of those disks.  Any VM should be configured to only run the OS, and the 3 other spindles should be dedicated sets of disks, attached to the VM.  Otherwise, it’s like painting
    with watercolors in a hurricane…you’re spending a lot of time, looking creative, with zero value.
    But I'll take any follow up comments or recommendations if you have them on proper VM setup.
    Thanks
    Nathan

  • Collection Evaluation - multiple primary sites

    Hello: 
    If I have a CAS and multiple primary sites and have a set of collections all created on the CAS, where is the collection evaluation done (I believe coll eval is done only on primary sites)?  Is it done on each primary site independent of others?  
    And then they replicate to CAS and CAS sorts out possible conflicts/discrepancies?   
    So if I set the collection evaluation schedule, is that based on the local time of that particular primary site?  
    Thank you, 
    Mustafa Hamid, System Center Consultant

    Thank you Jason, 
    I think I understand your comment about the managed systems - the systems that are assigned to that primary site.  To take a simple case to help me understand - So if I have a device collection that has a query based on OU name=Dallas and that collection
    evaluates on PS1 and also on PS2.   Both will send their results to the CAS.  Generally they should both evaluate to same result (maybe sometimes a bit different based on the DC they connect to).  It seems in this case they are repeating the
    same work since its all global data?  
    Thank you
    Mustafa Hamid, System Center Consultant

  • Multiple Primary Sites connected to a CAS

    On a global deployment of SCCM 2012 we are planning on deploying a CAS in the global domain and Primary Sites in the sub domains and Secondary Site in the smaller subsidiaries where needed.
    I understand that all collections, clients and packages come through to the CAS but could an administrator connected to Primary Site A see the collections and packages in Primary Site B? Are they independent of each other with the exception of the CAS or
    do all sites in the hierarchy show everything from all sites?
    If that is the case then ideally we would want administrators of Site A to not even be able to connect to Site B but am struggling to understand how this could be achieved?

    "The use of a CAS was made due to the scale of the deployment."
    So you mean you have more than 100k devices.  Regardless of having a CAS and multiple primaries or having only 1 primary, if you have (let's say) a total of 3,000 devices; split up into 1k silos of responsibility. 
    you Essentially create 3 Collections, and those 3 silos get rights to their collection of devices.  Connecting to the primary sites' for the console really isn't "normal" in CM12--it's called the Central Administration Site for a
    reason--it really makes it less confusing for those people that need to use the console.  You may not think so initially (coming from a CM07 point of view); but it really is the best in a CM12 world.  If you have people in different locations which
    need console rights, the easiest, IMO, is to have a Citrix-hosted console; and people just connect to that console remotely; where the citrix host is in the same data center as the Central Administration Site.
    Now, if you do NOT have 100k devices, or you are nowhere near that number, please please please, I beg you, PLEASE rethink your perceived need for a cas and primary sites.  T-shooting replication issues is no fun, no joy to be had there at ALL. 
    you need to setup RBA correctly regardless of a CAS and primaries, or just 1 primary--so having a CAS and primaries when there is ZERO NEED for it due to scale--well, all I can say is I sincerely hope you are a contractor, and are just setting this up and
    then bailing never ever to return, and leaving the mess behind for the poor day to day admins to deal with.
    Standardize. Simplify. Automate.

  • Unknown Computer collection with multiple Primary sites

    Hi All,
    We have a SCCM 2012 SP1 envionment with a CAS and 2 Primary sites in seperate countries. Last week the primary site server in site B was down, this affected PXE boot deployments to the Unknown Computers group across the whole environment eg: site A. PXE
    booting to existing collections worked fine but PXE booting to unknown computers would time out, like the deployment server was waiting for a response from both Site A and Site B site servers.
    Now my question is this expected behaviour? Do the primary site servers across the whole environment need to be up for the Unknown Computers collection to work properly?
    Another thing I noticed is that the admins for Site B have created their own site specific Unknown Computers collection so i'm wondering if this is getting referenced when Unknown Computers PXE boot in Site A.

    I doubt that there's something happening cross-sites, but - as Jason said - logs would be helpful.
    Torsten Meringer | http://www.mssccmfaq.de

  • Is 100K devices a hard cap for a Primary Site (or a guideline)?

    Hi,
    I'd like to know if the 'supports up to 100,000 devices' per Primary Site is a hard cap on the number of devices that SCCM 2012 R2 can handle or if it is a recommendation?
    We are using SCCM 2012 R2 and currently have a single Primary Site with about 90K devices.  Very soon, we will be looking at adding a CAS (with multiple Primary Sites) to support our ever growing number of devices.
    Until we get there with the CAS, I'd like to know what to expect if we get over 100K devices.
    Will we break SCCM?
    Will any devices over 100K not be added (and therefore not be managed)?
    Nothing much, but the system may perform more slowly?
    Results will be unpredictable?
    Something else?
    Thanks, Joe.

    Actually, it's not really a guideline either, it's an official statement of support from Microsoft meaning that if you go over this number, you may have issues that Microsoft will not provide support for.
    This is officially documented at https://technet.microsoft.com/en-us/library/gg682077.aspx under the Clients per Hierarchy section.
    Is your org simply close to this number or fearful of going over in the future?
    Remember that a primary site can be expanded into a CAS with multiple primary sites under it if need be in the future.
    Also note that the although the 100,000 client limit has been there since the launch of 2012, that was over three years ago and there are some upcoming releases.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 IP for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS which is in a different .Domain

    Hi,
    Can we assign 2 IPs for a SCCM 2012 primary site server and use 1 Ip for communicating with its 2 DPs and 2nd one for communicating with its upper hierarchy CAS . ?
    Scenario: We are building 1 SCCM 2012 primary site and 2 DPs in one domain . In future this will attach to a CAS server which is in different domain. Can we assign  2 IPs in Primary site server , one IP will use to communicate with its 2 DPs and second
    IP for communicating with the CAS server which is in a different domain.? 
    Details: 
    1)Server : Windows 2012 R2 Std , VM environment .2) SCCM : SCCM 2012 R2 .3)SQL: SQL 2012 Std
    Thanks
    Rajesh Vasudevan

    First, it's not possible. You cannot attach a primary site to an existing CAS.
    Primary sites in 2012 are *not* the same as primary sites in 2007 and a CAS is 2012 is completely different from a central primary site in 2007.
    CASes cannot manage clients. Also, primary sites are *not* used for delegation in 2012. As Torsten points out, multiple primary sites are used for scale-out (in terms of client count) only. Placing primary sites for different organizational units provides
    no functional differences but does add complexity, latency, and additional failure points.
    Thus, as the others have pointed out, your premise for doing this is completely incorrect. What are your actual business goals?
    As for the IP Addressing, that depends upon your networking infrastructure. There is no way to configure ConfigMgr to use different interfaces for different types of traffic. You could potentially manipulate the routing tables in Windows but that's asking
    for trouble IMO.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • SCCM Primary Site installation fails

    Hello!
    In my organization we have two domain/forests. DomainA.local and DomainB.local
    in one forest (DomainA.local) we have sccm 2012 sp1 CAS site. with dedicated database server on sql 2012 sp1 cu5
    in other forest (DomainB.local) we want to setup primary site on sccm 2012 sp1 with dedicated database server on sql 2012 sp1 cu5
    forests have trust both sided.
    all installation accounts have administrative rights on all SC servers. in both domains.
    when i try to install SCCM 2012 primary site in the hierarchy,
    i receiving the errors:
    INFO: Created SQL Server machine certificate for Server [S-SCDB-02.DomainB.local] successfully.
      ERROR: Failed to open certificate store (HRESULT=0x35)    Configuration Manager Setup    9/3/2013 11:56:19 AM    3268 (0x0CC4)
    ERROR: Failed to write S-SCDB-02.DomainB.local SQL Server certificate to store (TrustedPeople) on site server (S-SCDB-01.DomainA.local).
    ERROR: Failed to write certificate of primary site's SQL Server [S-SCDB-02.DomainB.local] to CAS SQL Server [S-SCDB-01.DomainA.local].
    Install user from domainB.local has administrative rights on S-SCDB-01.DomainA.local and sysadmin rights in sql server.
    Also, it has full administrator role on CAS.Of course, it has administrative rights on primary site server and sql server S-SCDB-02.DomainB.local and sysadmin rights.
    WHY????

    >Taking a step back: why? Are you using a CAS and multiple primary sites at all? Do you have 100,000+ clients to manage?
    we need CAS due to our network infrastructure.
    thank you for you help.
    we solved problem today.
    it was need to open "windows" ports on the firewall between SCCM Primary Site server and CAS SQL server to give SCCM
    primary site installation process the ability to install the primary site's sql-server's self-signed certificate to CAS sql-server trusted people local store.
    i did not remember this point in deploying documentation((((

  • Primary site server a single point of failure?

    I'm installing ConfigMgr 2012 R2, and employing a redundant design as much as possible. I have 2 servers, call them CM01,CM02, in a single primary site, and on each server I have installed the following roles: Management Point, Distribution Point, Software
    Update Point, as well as the installing the SMS Provider on both servers. SQL is on a 3rd box.
    I am now testing failover from a client perspective by powering down CM01 and querying the current management point on the client: (get-wmiobject -namespace root\ccm -class ccm_authority).CurrentManagementPoint . The management point assigned to
    the client flips to the the 2nd server, CM02, as expected. However, when I try to open the CM management console, I cannot connect to the Site, and reading SMSAdminUI log reveals this error: "Provider machine not found". 
    Is the Primary site server a single point of failure? 
    Why can't I point the console to a secondary SMS provider?
    If this just isn't possible, what is the course of action to restore console access once the Primary Site server is down?
    Many Thanks

    Yes, that is a completely false statement. Using a CAS and multiple primaries in fact will introduce multiple single points of failure. The only technical Eason for a CAD a multiple primary sites is for scale out; i.e., supporting 100,000+ managed systems.
    HA is achieved from a client perspective by adding multiple site systems hosting the client facing roles: MP, DP, SUP, App Catalog.
    Beyond that, all other roles are non-critical to client operations and thus have no built-in HA mechanism. This includes the site server itself also.
    The real question is what service that ConfigMgr provides do you need HA for?
    Jason | http://blog.configmgrftw.com

  • Issue getting WDS to Install for PXE in SCCM 2012 SP1 Primary Site

    Hi All
    I'm trying to get PXE boot working from our SCCM 2012 box but it never actually gets to the point of installing WDS when I check the box for PXE booting. I don't have  SMSPXE.log since it never gets to that point and the distmgr.log  never reaches
    that point either. I've tried
    uncheck pxe boot option - restart - re-check
    uncheck pxe-boot - restart - install wds - leave it unconfigured - reboot - check pxe boot
    uncheck pxe-boot - uninstall the vcredist 2008 packages - rebooting - install vcredist - check pxe boot option
    the above with installing wds unconfigured
    Below is the relevant portions of the distmgr.log file after I enable the pxe boot option no matter what manner of software is installed. We are running it on a VM in a Hyper-V 2012 enviornment in Windows 2008 SP2 x64. This issue is similar to this link
    WDS PXE Secondary Site Issues but mine is on the Primary Site.
    ConfigureDP SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:09 AM 4008 (0x0FA8)
    DP registry settings have been successfully updated on TUSC2012.TALISKERUTAH.LOCAL SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    STATMSG: ID=9500 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=TUSC2012.TALISKERUTAH.LOCAL SITE=001 PID=2728 TID=4008 GMTDATE=Thu Mar 28 17:48:10.083 2013 ISTR0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    STATMSG: ID=9503 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_DISTRIBUTION_MANAGER" SYS=TUSC2012.TALISKERUTAH.LOCAL SITE=001 PID=2728 TID=4008 GMTDATE=Thu Mar 28 17:48:10.084 2013 ISTR0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8="" ISTR9="" NUMATTRS=1 AID0=404 AVAL0="["Display=\\TUSC2012.TALISKERUTAH.LOCAL\"]MSWNET:["SMS_SITE=001"]\\TUSC2012.TALISKERUTAH.LOCAL\" SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    ConfigurePXE SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    CcmInstallPXE SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    RegQueryValueExW failed for Software\Microsoft\SMS\DP, PxeInstalled SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    RegReadDWord failed; 0x80070002 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    Running: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    Waiting for the completion of: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:10 AM 4008 (0x0FA8)
    Run completed for: C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist_x64.exe /q /l C:\Program Files\Microsoft Configuration Manager\bin\x64\vcredist.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    Created the DP mutex key for WDS. SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    Finding Wimgapi.Dll SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    MsiEnumRelatedProducts failed SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    FindProduct failed; 0x80070103 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    MsiEnumRelatedProducts failed SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    FindProduct failed; 0x80070103 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    GetFileAttributesW failed for SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    FindWimgapiDll failed; 0x80070002 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    Running: msiexec.exe /quiet /i c:\program files\microsoft configuration manager\wim\wimgapi.msi /log c:\program files\microsoft configuration manager\wim\wimgapi.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    Waiting for the completion of: msiexec.exe /quiet /i c:\program files\microsoft configuration manager\wim\wimgapi.msi /log c:\program files\microsoft configuration manager\wim\wimgapi.log SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:14 AM 4008 (0x0FA8)
    Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:29 AM 4668 (0x123C)
    Created policy provider trigger for ID 16777217 SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:29 AM 4656 (0x1230)
    Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:34 AM 4668 (0x123C)
    Sleep 30 minutes... SMS_DISTRIBUTION_MANAGER 3/28/2013 11:48:39 AM 4668 (0x123C)

    HI again, sorry for the late reply.
    By saying that WDS don't get configured, I mean that when i enabled the PXE functionality, the WDS role got installed but the folder remote install wasn't created.
    I ahve now actually gone back to an earlier snapshot from before I started play with the PXE settings of the VM and now nothing happens when activating PXE on the distribution point, but not even the smspxe.log is created.
    The Account used is a local admin and the distribution point is located on the primary site server.
    EDIT: in the events log, it states the following:SMS_SITE_COMPONENT_MANAGER on computer XXX.XXXX.XXX reported: SIte comoponent Manger failed to to install on this site system.
    On error (source: MsiInstaller) below:
    Product Application Web Service -- Internal Error 25001. 80070490
    I havent mentioned it earlier, but the Server OS is Server 2012.
    I hope this might help you help me :)
     

  • SCCM 2012 Primary Site server is piling up so huge

    Hello Folks,
    We recently implemented SCCM in our environment for a month ago. Its a stand-alone primary site model running DB on the primary site server itself. But, have segregated the drives for content, DB, and C drive for holding up the SCCM server related
    installations. I haven't noticed the data growth on the server, as a result the C drive ran out of space yesterday and increased 40 GB more than the earlier. As of now, C drive has about 120 gb in total and there is only 25% left on whereas it had 33%
    after expanding to 120 GB. When digging through the blogs, I doubted it could be BAD MIF inbox folder(screenshot attached), so went ahead and ran space check on the server, and looks like the major % of drive space is being occupied by the inbox folder and
    also it is increasing day by day. I need further more directions on how this can be monitored to find out growth % and fix this.
    I checked basic stuffs like clearing up profile & recycle bin data and any of this kind.
    Step by step guide in detail should be more helpful in this regard. And, I hope this should be helpful for a larger SCCM admin crowd like me in the universe.
    I also want to know what are the settings in SCCM console associates with these folders so that the settings can be streamlined to match the best practices (like inventory schedule for every 1 week & software inventory best practices) if at all, if we
    have enabled in the implementation phase to receive fast & large results.
    Thanks, V@s!m

    We are seeing a stable disk size nowadays.
    With that hopefully, this is a time to sum up the actions taken.
    1. SCCM 2012 implemented a couple of months ago.
    2. During the implementation phase, Client & Discovery settings were enabled to be quite an aggressive schedules to get good amount of results in a short period.
    3. Implementation had been successfully completed and the system was running just fine until I noticed the space crunch
    4. I thought it was normal and increased the disk space by 50% which got ate up in a couple of days and that's when I started suspecting about something is going wrong
    5. As an interim solution, have increased the disk space by 70% and started troubleshooting the SCCM buddy.
    6. Discovery settings were brought down to not to be aggressive (but this wasn't the issue) - still the issue was going on
    7. Inventory settings were too brought down to be nominal (Useful :
    http://www.informit.com/articles/article.aspx?p=1912064&seqNum=8)
    8. By this time, I brought my colleague who was involved during the Implementation. We did the clean-up on server, went through the Inbox\Auth folders and were trying to figure out still what is going wrong.
    9. We couldn't notice much improvement about the situation though we gave enough time for each and every fix that we applied.
    10. Through some warnings and errors in the site system status, remembered that the 'Configuration.mof' was modified for testing some customized inventory classes, during the implementation phase which was getting mismatched data from lot of different clients.
    - "Potential cause figured out"
    11. Replaced the original Configuration.mof, and we started noticing big differences - the space was no more increasing.
    12. Still we could see lot of old files in sub-folders of Inbox\Auth folder, we hope all these files would try to process for the information that we added in the 'Configuration.mof' > will fail > will go to respective 'Bad/Corrupt' folders and
    eventually will be removed as per the clean-up cycle.
    I will update the thread if anything goes wrong beyond this point. But, we believe it wouldn't as we have found the culprit and fixed.
    **** I appreciate all your responses to help me with this situation. Happy SCCMing..!
    Thanks, V@s!m

  • Single Primary Site with CAS

    Hello,
    I have a client with a single primary site server and a CAS. It was installed for some reason, doesn't really matter now why.
    They have two options, leave it up or migrate to a new Primary Site server.
    The questions is, if they leave it up (It's not needed or used), what harm will it do?
    Yes, I know it will make the site simpler to manage but other than that? What would compel them to go through the hassle of a migration to a new server?
    Thanks!
    John

    Short answer:  get rid of it.
    There are a host of complications introduced by having a CAS and it should really only be done if the environment demands it (massive device management count for example).
    In addition to patching complication increase and SQL replication monitoring you now have to do:
    1.  Many roles will need to be installed multiple times.  Example WSUS will be required to be installed on the CAS with a secondary on the Primary for proper functionality.
    2.  Some roles will be required on the CAS, some will be required on the Primary site.  If you aren't well-versed in your SCCM this can be a frustrating path of discovery.
    3.  Then there are roles that _can_ be installed in both locations but don't have to be ... like the reporting server.  This one comes down to login policies and if people will ever log directly into the PRI or just CAS box.
    All these architectural complications come before the "why" is asked ... which is usually driven by one of two things:
    1.  In SCCM 2012 RTM, the CAS had to be installed first or you could never use it.  Some clients did this to avoid potential problems.  This requirement has sense changed.
    2.  In 2007, people used to use multiple primaries as security boundaries.  With SQL replication, collections being uniform across all sites, and the general inclusion of RBAC .... this is now moot.
    Basically don't use CAS unless it absolutely fits the company.  It's a lot more pain than just "one more VM".

  • SCCM 2007 - All clients from primary site have vanished from central site collections

    Hi all,
    we have a SCCM 2007 R2 setup with one central site, one Primary Site (A) with a secondary site hanging off it and another Primary Site (B). Suddenly all the clients from the Primary Site A (and also it's Secondary Site) have vanished from the central
    site. All the clients are still present when we check Collections from the admin console on Primary Site A site server - they have simply disappeared when we check Collections from the Central Site admin console.
    Can anyone provide any info on a good starting point for troubleshooting this issue? As a sidenote, we can still push packages out to the Primary Site A distribution point and both the Primary and Central site can communicate/ping each other.
    Any help/info would be much appreciated!
    Thanks

    Check the
    site replication on central site, is that SQL is working fine, and also see the
    inbox folder in central site, might be there is backlog and those DDR files are
    not processing, and after maintenance they got deleted.<o:p></o:p>
    please run
    the heartbeat discovery by hour or day, and once the clients will sent all the
    DDR files then they will appears again.<o:p></o:p>
    Sharad Singh | My blogs: SharadTech | Twitter:
    @SinghSharaad | | Please remember to click “Mark as Answer” on the post that helps you.This can be beneficial to other community members reading the thread.

  • UCM - How to setup synchronize between DR and Primary site

    Hi all.
    As mentioned on title, we have a primary UCM site and a clean DR site. I want to ensure that end-users have ability to work with DR site for a short time when the Primary site is unavailable. To make DR site available to serves when the primary is down, we can do:
    - setup auto-export archive on primary site
    - target to destination archive on DR site
    - auto-transfer from primary to DR site
    - with data in Database, we can use Golden Gate to sync Primary and DR site
    So, with these settings, I can ensure that the DR is ready to run when the Primary is down. But, if the primary takes a long time to recovered, the DR site has many new contents. How to transfer it back to primary site when the primary is came back ? In other words, how to synchronize contents (vault and native files) between new Primary (old DR) and new DR (old Primary) site ?
    Thank for your attention.
    Sorry for my bad English.
    Cuong Pham

    Hi Cuong (and guys),
    I'm afraid the issue is not that simple. In fact, I think that the Archiver could be used for DR only by customers who have little data and few changes. Why do I think so?
    a) (Understanding System Migration and Archiving - 11g Release 1 (11.1.1)) "Archiver: A Java applet for transferring and reorganizing Content Server files and information." This means that you will use a Java applet to Export and Import your data. With a lot of items (you will need to transfer all the new and updated items!), or large items it will take time (your DR site will always be "few minutes late"). Besides, the Archiver transfers are based on batches - I don't think you can do continuous archiving - and will have impacts on the performance.
    b) Furthermore, (Exporting Data in Archives - 11g Release 1 (11.1.1)) "You can export revisions that are in the following status: RELEASED, DONE, EXPIRED, and GENWWW. You cannot export revisions that are in an active workflow (REVIEW, EDIT, or PENDING status) or that are DELETED." This means that the Archiver cannot be used for all your items.
    Therefore, together with FMW DR Guide (Recommendations for Fusion Middleware Components) I think other techniques should be considered:
    - Real Application Clusters (RAC), Weblogic Clustering, cluster-ware file system: the first, almost error-free, and relatively cheap option is having your DR site as other nodes in DB and MW clusters. If any of your node goes down, the other(s) will still serve your customers (no extra work needed), plus, you can benefit from "united power" of multiple nodes. RAC is available also in Oracle DB Standard Edition (for max. 2-nodes db cluster). The only disadvantage of this configuration is that it is not available for geo-clustering (distance between RAC nodes must be max. some hundreds meters), so it does not cover DR scenarios like "location goes down" (e.g. due to networking issues)
    - Data Guard and distributed file system: the option mentioned in the guide is actually this one. It is based on Data Guard, a free option of the Oracle Database Enterprise Edition, which can run in both asynchronous (a committed transaction on the primary site is immediately transferred to the DR site) and synchronous (a transaction is not committed on the primary until processed by the DR site - if sites are far, or a lot of data is being sent, this can take quite long) modes. So, if you store your content in the database the Data Guard can resolve a lot. Unfortunately, not everything - the guide also mentions that some artifacts (that change!) are also stored on the file system (again, workflow updates, etc), so you have to use file system sync techniques to send those updates. In theory, you could use file system to send also updates in the database, which is nothing but a file(s) (in this case you will need the Partitioning option to split your database into smaller files), but db guys hate this way since it transfers also inconsistencies, so you could end up with an inconsistent database in the DR site, too.
    This option will require some administrative tasks - you will have to resolve inconsistencies resulting from DG/file system sync, you will need to redirect your users to the DR site, and re-configure the DG to make primary site from your DR one. Note that once your original primary site is up again, you can use DG to transfer (again, immediately) changes done in the meantime.
    As you can see, there is no absolute solution, so you need to evaluate your options, esp. with regards to your needs.
    Jiri

  • SCCM 2012 Primary Site Recovery - Packages not working

    I recently had to recover my Primary Site due to system crashes with blue screens on a daily basis. I was running ConfigMgr 2012 SP CU 3 and as part of the process I migrated from WS2008 R2 to WS2012 R2.
    After many hours of perusing the web, I found the solutions to deal with the common site recovery issues such as SSL certs, and the content validation due to an empty ContentLib folder. I also had the issue with the update source where it listed the old
    WSUS 3.2 server and the new one so the Site GUID was also updated.
    The issue I am currently experiencing is that packages new or old including software update packages are not working. When using the script by Peter VanWoulde it lists the Deployment State as Error. I have tried redistributing them, valdiating the content,
    removing distribution points, adding in new distribution points and even recreating some of the smaller packages to test but nothing is working.
    Application deployments are working without issues.
    This is the tail end of the WindowsUpdate.log file
    2013-11-20 22:03:27:281 1632 a84 COMAPI >>--  RESUMED  -- COMAPI: Search [ClientId = CcmExec]
    2013-11-20 22:03:28:098 1632 a84 COMAPI   - Updates found = 176
    2013-11-20 22:03:28:098 1632 a84 COMAPI ---------
    2013-11-20 22:03:28:098 1632 a84 COMAPI --  END  --  COMAPI: Search [ClientId = CcmExec]
    2013-11-20 22:03:28:098 1632 a84 COMAPI -------------
    2013-11-20 22:03:32:139 1020 980 Report CWERReporter finishing event handling. (00000000)
    This is the UpdatesDeployment.log file
    Assignment {FD1118D2-563C-44D4-99DB-0CBE29C5C01A} has total CI = 432 UpdatesDeploymentAgent 21/11/2013 8:31:14 AM 4572 (0x11DC)
    Deadline received for assignment ({FD1118D2-563C-44D4-99DB-0CBE29C5C01A}) UpdatesDeploymentAgent 21/11/2013 8:31:14 AM 4572 (0x11DC)
    Detection job ({F5229872-7A7E-4692-B709-63989F708AF0}) started for assignment ({FD1118D2-563C-44D4-99DB-0CBE29C5C01A}) UpdatesDeploymentAgent 21/11/2013 8:31:14 AM 4572 (0x11DC)
    Progress received for assignment ({FD1118D2-563C-44D4-99DB-0CBE29C5C01A}) UpdatesDeploymentAgent 21/11/2013 8:31:26 AM 4572 (0x11DC)
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0 UpdatesDeploymentAgent 21/11/2013 8:47:50 AM 3588 (0x0E04)
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0 UpdatesDeploymentAgent 21/11/2013 8:47:51 AM 3588 (0x0E04)
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0 UpdatesDeploymentAgent 21/11/2013 8:47:55 AM 3588 (0x0E04)
    EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0 UpdatesDeploymentAgent 21/11/2013 8:47:55 AM 2908 (0x0B5C)
    At this point I am running out of ideas of where to look.

    Hi Xin,
    Sorry for not responding earlier but I did recover the site using the guidelines in the following article Backup and Recovery in Configuration Manager,
    however there were a few issues. 
    I did not have a ContentLib backup so all the content had to be redistributed and validated before that worked. None of my packages new or old would work. I eventually found an article from a forum member who also initiated a Site Reset as part of their
    recovery process and had no issues.
    So it seems that any packages are still not working and i think I narrowed it down.
    For some reason even though my DP and MP are all set for HTTPS, it is trying to access the HTTP path for SMS_DP_SMSPKG$. I am using PKI certs so this is the correct path but it should be HTTPS.
    Excerpt from log.
    Retrying DoUpdateSourceListAll task SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    Product {16A45552-A143-4EE6-8CA4-8D95FB5EEB7E} is installed for user  SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    Adding 2 local DPs and 0 remote DPs for product {16A45552-A143-4EE6-8CA4-8D95FB5EEB7E} SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    Adding install source C:\Windows\ccmcache\5l\ to source list for product {16A45552-A143-4EE6-8CA4-8D95FB5EEB7E} SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    UpdateURLWithTransportSettings(): OLD URL - http://xxxxx.com/sms_dp_smspkg$/p01000ae SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    UpdateURLWithTransportSettings(): HTTP requested but client settings prohibit it. SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    Failed source list update for product {16A45552-A143-4EE6-8CA4-8D95FB5EEB7E}, error 87d00226 SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    DoUpdateSourceListAll task failed, error code 87d00226 SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    Source list update task failed, will be retried after 3600 seconds SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)
    MSI update source list task finished successfully SrcUpdateMgr 09/12/2013 2:26:51 PM 3140 (0x0C44)

Maybe you are looking for