Administering Microsoft SCCM and Cloud Services (70-703): Introduction and Installation

0:00Welcome, my friends, to 70-703, Administering

0:03SCCM in Cloud Services.

0:06My name's Garth Schulte.

0:07I'll be your host with the most as we take a journey

0:10through the ultimate Microsoft administration

0:13product known as SCCM.

0:15In this Nugget, we're going to take an extremely

0:17high-level overview of what SCCM is

0:19all about by answering those two common questions-- what is it?

0:23And what can it do?

0:24The answer to those questions is really simple.

0:27What is it?

0:28Everything.

0:29What can it do?

0:30Everything.

0:31And that's that.

0:31I hope this Nugget has been inform--

0:33no.

0:33I'm just kidding.

0:34Seriously though, it would be a lot easier

0:36to answer the inverse of these questions.

0:38What isn't it?

0:39And what can't it do?

0:41Which is why I like to call it the ultimate, the grand-daddy,

0:44the grand poobah of Microsoft products

0:46when it comes to administering our infrastructure.

0:49It gives us the power to control, configure, manage,

0:53monitor, automate, and report on everything-- hardware,

0:57software, users and their devices from inside,

1:00and even outside, our environments.

1:02And that's literally just scratching the surface.

1:05Let's take a look at what SCCM can actually

1:07do for us by covering some of its primary features.

1:10One area that has always been a major thorn

1:12in every administrators side is delivering updates

1:16to all the devices in our enterprise.

1:18We're talking desktops, laptops, servers,

1:20and even mobile devices.

1:21SCCM can do this with relative ease.

1:24And it does so by utilizing and even

1:27extending the capabilities of an existing Windows server

1:30technology known as WSUS, Windows Server Update Services.

1:34And by the way, this is a theme that you're

1:36going to see throughout SCCM.

1:38It sits on top of many of the best Microsoft technologies,

1:42which is why it's considered a single, unified tool--

1:45so whether it's WSUS for delivering updates,

1:48WDS, Windows Deployment Services,

1:50for delivering operating systems,

1:52or Internet Information Services in Intune

1:54for extending our administrative reach beyond the local area

1:57network.

1:58And I almost forgot about the biggest product of them

2:00all, of course, SQL Server, which

2:02is required as that's what SCCM uses to store

2:06all of its information.

2:07All right, back to our almost top-10 list here

2:10on what SCCM can do.

2:11Next up here, deliver applications--

2:13imagine having the power to centrally and remotely deploy

2:17applications to all of your users' devices.

2:19Yeah, no problem for SCCM.

2:22Not only that, but it can optimize that delivery

2:24and give us the flexibility in how we want to deliver it.

2:27Do we want to deliver it and have it locally installed?

2:30Do we want to stream it through application virtualization

2:32or present it through something like Remote Desktop Services

2:35or Citrix XenApp?

2:37We can also use it to deploy operating systems

2:39to all the physical devices within reach.

2:41And again, we're talking everything

2:43here-- desktops, laptops, servers,

2:45and even mobile devices.

2:46Pretty much anything that can have an operating system on it,

2:49we can touch.

2:50And it does so, again, utilizing that existing

2:52technology I mentioned, WDS, Windows Deployment Services.

2:56We can also monitor, manage, and enforce policies

2:59for our users and their devices.

3:01When integrated with Microsoft Intune,

3:03we get some nice MDM capabilities

3:05that will allow us to target virtually any platform out

3:08there--

3:08Windows, iOS, and Android.

3:10Another very powerful aspect of SCCM

3:12is having the ability to control and manage

3:15settings for all the devices in our environment

3:17to ensure that they stay in compliance with our policies.

3:21So we can configure a desired state for a device or groups

3:24of devices.

3:25And if they were to ever drift out of that state,

3:28we can either set it up so we are alerted immediately

3:30when that happens or to automatically put it back

3:34into its desired state.

3:35One of the more common features used in SCCM

3:38is inventorying all the hardware and software

3:40in your environment.

3:41Imagine having the ability to quickly look up

3:44what a machine has installed on it,

3:46and the resources available to it,

3:47and having the ability to do that

3:49for any machine in your environment.

3:51Another feature in the same category

3:52that they don't have listed here is known as Asset Intelligence.

3:57This will take all of that inventory data

3:59and turn it into extremely useful information so we

4:03can determine how often software is being used,

4:05which will impact our future decisions for buying

4:08new software, upgrading existing software,

4:11and licensing requirements for that software.

4:14Finally, SCCM has some pretty impressive reporting

4:17capabilities all because it sits on top of SSRS, SQL Server

4:21Reporting Services.

4:23It's loaded with built in reports

4:24that we can use to get real-time information on everything

4:27you see here-- updates, applications, users, devices,

4:30hardware and software inventory.

4:32Plus, we can use it to stay on top

4:34of our SCCM infrastructure, our sites and all the components

4:37within.

4:38And if there isn't a built-in report that suits your needs,

4:41you can always create your own custom report inside,

4:43or even outside, of SCCM.

4:46Because it uses SQL Server to host its database,

4:49we have access to all of that juicy information.

4:52So we're going to look at all of these features and much more

4:55as we begin our journey through 70-703 and SCCM.

4:59And you'll even have the opportunity

5:01to play with all of this stuff in our virtual lab

5:03environment, which we'll talk about along with the 70-703

5:06exam details coming up next.

5:09That concludes our high-level overview of Systems Center

5:12Configuration Manager.

5:13I look forward to taking this journey with you.

5:16And, for real this time, I hope this has been informative

5:19for you.

5:19And I'd like to thank you for viewing.

0:00In this Nugget, we're going to take an overview of the 70-703

0:02exam to get an idea of the content covered as well

0:06as the target audience, and we'll

0:08get familiar with our virtual lab environment and all

0:11the machines within, which is what you'll

0:13be using to follow along and get that crucial hands-on

0:16experience with SCCM.

0:1970-703 is the most recent SCCM exam released

0:23in the first half of 2018.

0:25And very much like SCCM, this exam is a beast.

0:29It covers all of the primary components and features

0:32of the product.

0:33It consists of five objective domains beginning

0:37with configuring and maintaining a configuration management

0:40infrastructure.

0:41This is the biggest section of the exam.

0:44And it's really all about post-installation configuration

0:47and maintenance of your site hierarchy

0:50and all of those top level components.

0:52One thing you'll notice when going through these objectives,

0:55which I'll show you how to do here in a second, is there's

0:57nothing on installation.

0:59In fact, this exam begins right here post-installation.

1:03So we're going to throw a bunch of Nuggets

1:05in before we even get to these objectives.

1:07That will show you how to design an SCCM infrastructure,

1:10how to prepare your site for installation,

1:12and then, of course, walk through the installation

1:14process.

1:15From there, we'll cover these objective domains

1:17from the top down.

1:19So again, we'll look at infrastructure,

1:21how to manage inventory and applications,

1:23how to deploy operating systems, and how

1:25to extend the management scope beyond our network

1:28and beyond our internal devices to those that are

1:31external to our environment.

1:33Now one thing I want to mention is

1:34that, if you are new to SCCM and this exam,

1:37I would highly recommend going through this course in order,

1:41sequentially, from the top down, as these Nuggets and these labs

1:45will build on each other as we go.

1:47Also, if you are here for the exam,

1:49I highly recommend getting familiar with these objectives,

1:53which you can access using the link below that

1:55will take you right to the exam details for 70-703.

1:59Here's where that link will take you to the 70-703 Exam Details

2:02page, which contains all the relevant information you

2:05need about the exam.

2:06You can even schedule it here.

2:07But what I really wanted to show you

2:09is, if you head down here to the Skills Measured section,

2:11you will see those five objective domains.

2:15Here, you can expand them to see the objectives themselves

2:17and the content covered within.

2:19So take a minute to familiarize yourself

2:21with these objective domains and the objectives within.

2:24You may find some terms and technologies

2:26that you're familiar with as SCCM

2:28sits on top of a lot of existing Microsoft

2:31technologies such as SQL Server, Windows Server Update

2:35Services, and Windows Deployment Services, just to name a few.

2:38I should also mention that we have

2:40a Nugget and a lab for almost every single item on here

2:44for all of these objective domains.

2:46One more thing I want to show you here on the Exam Details

2:49page is towards the bottom, underneath,

2:51who should take this exam?

2:53The first section here is your target audience,

2:55which is Enterprise Desktop administrators.

2:58And the second section here contains your prerequisites.

3:01Candidates should have a strong understanding of networking,

3:03Active Directory Domain Services,

3:05Windows operating systems-- both server and desktop side

3:08of things--

3:09and mobile device platforms.

3:10You should also have a basic understanding of PKI, Public

3:13Key Infrastructure, and, of course,

3:15it always helps to have some PowerShell skills

3:17and an understanding of existing Windows Server roles

3:19and services as, again, SCCM sits on top

3:22of quite a few technologies.

3:24Let's also get up to speed on our virtual lab environment.

3:27Almost every Nugget in this course

3:29will have a lab associated with it

3:30that you can use to, again, follow along and get

3:33that hands-on experience.

3:34If the Nugget you're watching has an associated lab,

3:37there will be a link on the course page that you can click.

3:40And just keep in mind, it does take

3:41a minute or two for that environment to fully spin up.

3:45The initial state of our virtual lab

3:46will look like this-- a simple five-machine network with three

3:50servers and two clients.

3:52As we progress through the course,

3:54we'll expand on this network.

3:56On the server side, we're going to have Windows Server 2016

3:59Data Center Edition running on all of these.

4:01And on the client side, we have the latest

4:03build of Windows 10 Enterprise Edition.

4:06Most of our time spent in the beginning of this course

4:08will be on this monster SCCM-NUG server which has

4:1232 gigs or RAM and two CPUs.

4:14Now, I did preinstall some of the core required components

4:18external to SCCM on this machine,

4:20such as SQL Server, Windows Server Update Services, WSUS,

4:25and IIS, Internet Information Services.

4:28Now, I just simply installed these and left them

4:31all in their default state.

4:32There are still some configurations

4:33we're going to need to make as we go through

4:35and many other prerequisites that

4:37will need to fulfill before we get to installing

4:41SCCM on this machine.

4:42Next up, we have FILE-NUG, which, as you may have guessed

4:45will primarily act as our file server.

4:47But this is also going to play the role of "whatever we need

4:50at that moment in time" server.

4:52So while we'll be placing most of SCCM site system roles

4:56on SCCM-NUG, if we ever need more--

4:59another distribution point or another management point--

5:01we'll be using FILE-NUG for that role.

5:03Next up, we have our domain controller DC-NUG,

5:06which will have Active Directory Domain Services on it

5:09as well as DNS.

5:11On the other side, we have CLIENT1- and CLIENT2-NUG,

5:14which will be playing the role of our desktop environment.

5:17So we'll be looking at how to configure, control, and manage

5:20these environments from SCCM.

5:22So this will give us a great starting point

5:24in the virtual lab.

5:25Again, we'll be extending this network

5:27as we progress through the course.

5:29For example, when we get to deploying

5:31operating systems over the network,

5:32we'll add CLIENT3-NUG into the mix.

5:35One thing I do want to mention is

5:37that we did associate a virtual lab with this Nugget

5:40to give you the opportunity to explore the machines that we'll

5:44be initially playing with and to get familiar with the lab UI.

5:48I hope that this has been informative for you.

5:50And I'd like to thank you for viewing.

0:00Designing an SCCM infrastructure involves

0:03planning out your site hierarchy and determining

0:06which site rules you'll need to install in the site

0:08servers in that hierarchy in order

0:11to support your requirements.

0:12In this Nugget, we're going to cover

0:13a good majority of the server and site system roles,

0:17and we'll also take a look at all the players involved

0:19in a site hierarchy, such as primary sites, secondary sites,

0:23and central administration sites.

0:25Let's start at the top here with site systems servers.

0:28These are otherwise known as the required roles for SCCM

0:31to function.

0:32And they're more labels than anything else.

0:34Whenever we install a primary site

0:36or install an optional role on a machine within our site,

0:39they will automatically acquire one of these labels.

0:42For example, whenever you install an optional SCCM role

0:45onto a machine in your hierarchy--

0:47we'll look at those optional roles in a second--

0:49that machine becomes a site system server.

0:52Whenever you run Configuration Manager Setup on a machine

0:56to install a primary site, that machine becomes a site server.

1:00Any machine containing the SMS Executive Service,

1:03which, by the way, is the host process for which

1:05all other SCCM components run under

1:07is known as a component server.

1:09The machine running an instance of SQL Server that

1:12will host our site database is known as the site database

1:15server.

1:16And finally, we have the SMS provider,

1:18which is a machine that hosts this component

1:20to facilitate communication between the Configuration

1:23Manager console and the site database.

1:26Next up, we have sight system roles, otherwise

1:28known as optional roles.

1:29And these are the components that

1:31will provide us with all of the features

1:33and functionality that were looking to support in our SCCM

1:36infrastructure.

1:37The first two here are management points

1:38and distribution points are arguably the most important

1:41as they provide the core functionality that we all

1:44know and love in SCCM.

1:45And they're also installed by default whenever

1:48you install a primary site.

1:50Management points provide clients with policy and service

1:53location information.

1:54And our clients also use management points

1:56to upload their configuration information

1:58to the site database.

2:00Distribution points are used to store and deliver content

2:03to client devices.

2:04And that content can be anything from application packages

2:08to operating system images.

2:09So these are the two site system roles

2:11that you'll want at a bare minimum

2:13to support the core features of SCCM.

2:16And you may want more than one of these in your environment

2:19to spread the load across your hierarchy.

2:21And that's all going to depend on the size of your network

2:23and the shape of your hierarchy.

2:25More on that down the road.

2:26We can further extend the functionality of our SCCM

2:29infrastructure by installing additional system

2:31roles on a machine or machines in our hierarchy.

2:35So for example, if you want to provide updates

2:37to your users and their devices, you'll

2:39need to install a software update point

2:41and also configure it to use Windows Server Update Services.

2:44If you want to create and manage reports,

2:46you'll need to install a reporting services

2:48point somewhere within your hierarchy

2:50and configure it to use an instance of SQL Server

2:52Reporting Services.

2:54And by the way, this is not a complete list

2:56of all the site system roles, although, these are the ones

2:59that are covered in 70-703.

3:00So we're going to look at all these

3:02individually, have a chance to play with them,

3:04and cover a couple of them that aren't on this list as well.

3:07So we'll save the rest of these for when we get there.

3:10Moving on, let's talk about site hierarchies.

3:12There are three kinds of sites that we can

3:14implement within a hierarchy.

3:16First up is the only required one, and that's a primary site.

3:19So you'll need at least one of these within your hierarchy,

3:22and it's used to support clients.

3:25Secondary sites are installed as children of primary sites.

3:31These secondary sites are used to extend

3:33the reach of your primary site to manage devices

3:36in locations that have a slower latent network

3:39connection between the secondary site and your primary site.

3:43And you also need a local instance

3:44of SQL Server installed on the secondary site servers as host

3:49a subset of the primary site's database used

3:52to reduce the amount of replication

3:54across those slow network links.

3:56The last piece of the puzzle here

3:57is a central administration site, which, when installed,

4:00sits at the very top of your hierarchy

4:02and is used to centrally administer, manage, and report

4:06on your primary sites.

4:08So a central administration site has no capability

4:11to manage users or devices.

4:12It's purely there to consolidate everything

4:15that happens at the primary sites, which

4:17become children of that central administration site.

4:20Now, how you design your SCCM infrastructure

4:23will depend on a couple of factors.

4:25The first and biggest one is the geographical makeup

4:27of your network.

4:28If you have a global infrastructure

4:30and IT teams at each location that

4:32want to manage their own slice of the pie.

4:34Then you can install primary sites

4:36at each location with a central administration site at HQ.

4:40This will give IT teams in those locations complete control

4:44over their portion of the infrastructure.

4:46On the flip side, if you didn't want to give them control,

4:48you could just install a primary site at HQ

4:50and get away with secondary sites and all

4:53of those remote locations.

4:54Another factor you'll need to take into consideration

4:57are scalability limits.

4:58Every component in SCCM has a scalability limit-- sites

5:01as well as site system roles.

5:03And they are set pretty high.

5:05But if you're dealing with hundreds of thousands

5:07to millions of devices, you may need more, more sites,

5:11or more site system roles to support that load.

5:13Thankfully, that's not going to be something

5:15we need to worry about here in our lab environment,

5:17as we are going to start here with a very simple hierarchy.

5:21We're going to bring up a single primary site, also known

5:24as a standalone site on a machine, which

5:26is going to contain all of the required server roles,

5:28including the site database server.

5:30And then we're going to install our optional roles

5:32onto this single machine as well-- management

5:34point and a distribution point.

5:36So at least to begin with, we're going to put everything

5:39on one machine, which is totally OK, even for small-

5:43to medium-sized real-world implementations.

5:46And those are the basics of designing an SCCM

5:48infrastructure.

5:49I hope this has been informative for you.

5:51And I'd like to thank you for viewing.

0:00SCCM has quite the laundry list of prerequisites,

0:03and that's mostly because, as we've seen,

0:06it relies on so many other Windows technologies, which

0:09also have their own prerequisites.

0:10So in this hands-on lab Nugget, we're

0:12going to look at the process and a couple of nifty tools

0:15that can help us prepare our site for SCCM installation.

0:18When your lab environment finishes loading up,

0:20you'll be planted right on SCCM-NUG.

0:22This is the machine where we'll be spending

0:24most of our time getting the prerequisites installed

0:27and ready to go.

0:27There is one thing we'll need to do in Active Directory as well,

0:30so we'll head over to our domain controller when the time comes.

0:33So we're going to start here by getting right into setup,

0:36and I actually have the binaries stored over on our file server.

0:39So if we open up File Explorer here and head over

0:41to file-nug and the software share within,

0:44here it is right here.

0:46We're going to be working with current branch 1802, which

0:50is the latest version of SCCM.

0:53So let's head into that directory,

0:55and let's attempt to walk through the installation

0:57wizard.

0:58Now, obviously, this isn't going to end well

1:00for us, because this machine isn't anywhere near prepared.

1:02But if we try to hit the Install button here,

1:05we'll get an error telling us that we need the .NET framework

1:073.5.

1:09So if we go and fix that and then come back and do it again,

1:11we'll get a different error, and then we'll

1:13continue to chase our tail all day long, which

1:15is why we have a great tool here in the installation media known

1:19as the Prereq Checker.

1:20You can find this tool underneath the SMSSETUP

1:23directory, BIN, X64, and within here, you

1:26can just start typing in prereq, and look at that.

1:29There it is.

1:29Now, I'm going to fire up an elevated command prompt

1:33and drag our Prereq Checker right onto it

1:35to get the path in there.

1:36Now, if you run this without any parameters,

1:38then obviously it's going to give us help here,

1:40and you can target remote machines.

1:42You can target specific components.

1:43If you want to just see what the requirements are

1:46for a management point or a distribution point

1:48or a central administration site or a primary site,

1:51you've got some flexibility here, as well as

1:53a secondary site in there.

1:54But what we're going to do is just

1:55run this against the local machine.

1:57So I'm going to recall my last command

1:58and pass in the local switch.

2:01This is going to pop open a GUI and run

2:02through all the prerequisites for a default

2:05installation, which is a primary site, a distribution

2:07point, and a management point.

2:09While we're waiting for the prereq check to finish up,

2:11I want to direct your attention to this incredibly handy

2:14document that outlines the prerequisites for all

2:17of SCCM's roles.

2:18So if we scroll down here, we'll get some general requirements.

2:21Nothing too earth-shattering in there--

2:2364-bit OS only, Server Core is mostly unsupported,

2:28which is why we're running the GUI version of Server

2:30in our lab environment, and some other things in here as well.

2:33What I really wanted to show you,

2:34though, is if you scroll down, it

2:35will list the prerequisites for all of the site and site system

2:40roles in SCCM.

2:41So again, as I mentioned, there, the prereq check

2:43is going to check for a default installation, which

2:45will include your primary site, a distribution

2:48point, and a management point.

2:49So that's all the things it's checking right now.

2:52Let's look at the requirements, here, for our primary site

2:54server.

2:54Notice we're going to need the .NET Framework 3.5.

2:57Hey, that's the error that we saw in the splash screen,

2:59there.

3:00We're going to need the .NET Framework 4.5 or above,

3:02remote differential compression and components,

3:04from the Windows ADK.

3:06So keep this document handy, as it'll

3:09help you identify the prerequisites for whichever

3:11components you plan to install in your SCCM environment.

3:14It looks like our Prereq Checker has completed,

3:17and we've got a nice list of things

3:18that we need to take care of, here.

3:20The red ones are required.

3:21The yellow ones are recommendations.

3:23So we're going to need remote differential compression.

3:25We're going to need to change the service

3:27account that the SQL Server Database

3:29Engine is running under.

3:30It's currently running under the NT SERVICE account.

3:33We're going to change that so it's

3:34running under a domain account with minimal privileges.

3:37We're going to need the .NET Framework 3.5,

3:39as we already know.

3:40We're going to need the Windows Deployment tools, user state

3:43migration tools, and the pre-installation environment.

3:45All of those are contained within the Windows 10 ADK.

3:48And then we have a bunch of warnings here.

3:50We're going to want to extend the Active Directory

3:52schema so we can take advantage of all the features in SCCM.

3:56I'll show you how to do that, here, shortly.

3:58We'll verify site permissions.

4:00This goes along with extending the schema.

4:02We'll take care of that.

4:03We're going to need to configure SQL Server's memory usage.

4:06Currently it's configured for unlimited memory,

4:08so we'll put a maximum on it.

4:10And we're also going to put a minimum on it.

4:11So that's what these two are here--

4:12min and max memory for SQL Server--

4:14and then we'll need to install bits.

4:16So let's start by taking care of all those red ones.

4:18We'll leave the Prereq Checker running.

4:20We can always come back once we're done

4:21and hit Run Check again to make sure they're all gone.

4:24So I'm going to start here in Server Manager.

4:26We'll bring it up, here, to install all of those Windows

4:28roles that we need installed.

4:30We'll dropdown, Manage, choose Add Roles in Features.

4:33We'll hit Next here, Next, Next.

4:35We don't need any roles.

4:36We're good on the roles.

4:37Notice here that I have IIS and WSUS ready to go,

4:40so we'll hit Next here.

4:41We are going to need the .NET Framework 3.5.

4:44We are going to need bits, and we'll hit Add Features here.

4:47And we're also going to need remote differential

4:50compression.

4:50That'll take care of three of them.

4:52We'll hit Next here, and we need to provide a path to the source

4:55files for the .NET Framework 3.5.

4:58So I'm going to specify an alternate source path here,

5:00and I actually have the server 2016 installation media also

5:04here in the software directory, so we can head right

5:06into here, Sources, and sxx--

5:10sxs!

5:11Say that one 10 times fast.

5:13Let's go ahead and copy the location

5:15to this side-by-side directory and paste it here in the path.

5:20That's it.

5:20That's all we need to do here.

5:21So I'm going to go ahead and install this,

5:23and we'll let this install in the background.

5:26There it is.

5:26The Closed button lit up.

5:27So we'll let that go, and now, while that's going on,

5:31we also need to install the Windows 10 ADK.

5:33So I'm going to head back here into File Explorer.

5:35We'll head back to software, and here it is--

5:38the ADK setup.

5:39We can accept the defaults on the first few screens here.

5:42Yes, we want to install onto this computer.

5:44Sure, we'll send Microsoft our usage data.

5:46Sure, we'll accept the license agreement.

5:48Here is the screen that matters.

5:51We want to install the deployment tool,

5:53so we'll go ahead and check that, the Windows

5:54pre-installation environment, and user state migration tools.

5:58Those are the three requirements that kicked back

6:02from the Prereq Checker.

6:03So this looks good.

6:04We'll go ahead and install.

6:05And then just keep in mind that will take a while to install.

6:07It has 6.4 gigs of data to download.

6:10So we'll also let that run in the background

6:12while we configure both SQL Server

6:15and extend the Active Directory schema.

6:17Let's start in SQL Server, here.

6:18I have SQL Server Management tools installed locally,

6:22so we can connect to our local instance

6:24and modify those memory settings.

6:26From here, we want to connect to our default instance

6:28of SQL Server on this machine.

6:30And then in Object Explorer, give that instance

6:32a right-click, head down to Properties, and from here,

6:34we can head down to Memory.

6:36These are the two settings that the Prereq

6:38Checker is referring to.

6:39In fact, I can bring that back up here,

6:41and if we take a look at our first one,

6:43it says SQL Server's configured for unlimited memory usage.

6:46Notice that it is right here.

6:48That's unlimited.

6:49That's a lot of memory.

6:50And we don't want SQL Server to run away

6:52with all the memory on this system,

6:53so we're going to set a maximum there.

6:55And then the second one is ensuring that SQL Server

6:59has enough memory.

7:01So we want to reserve a minimum of 8

7:02gigs for a central administration or primary site

7:05and a minimum of 4 gigs for a secondary site.

7:08We're setting up a primary site here,

7:09so we're going to make sure that we give 8 gigs--

7:12at least 8 gigs-- to SQL Server.

7:14So for our minimum, here, 8192.

7:16And for our maximum, how about 24 gigs?

7:19We've got 32 gigs of memory in the system,

7:21so that should be more than enough.

7:23There we go.

7:24So 8 gigs minimum, 24 gigs maximum.

7:27And now that looks good for SQL Server.

7:29It is all configured.

7:30Well, almost all configured.

7:31There's one more thing we need to do.

7:33We need to modify the SQL Server service account so it

7:35runs under a domain account.

7:38So let's head down here to the Start button.

7:40Give it a right-click.

7:41Head up to Run.

7:41Type in services.msc, and from here

7:44you can just start typing in SQL,

7:46and it'll take us right to that database engine service.

7:49We can open this up.

7:50We'll stop it.

7:51We'll head over to Log On.

7:52And I already created a domain account for us

7:54to work with here, so we can browse Active Directory.

7:57We'll browse in nuggetlab.com domain,

7:59and we can just type in SQL, and then hit Check Names.

8:02This should resolve to SQL-SCCM.

8:06Perfect.

8:06Now we can hit OK. you can enter the password,

8:08which is our standard lab password of "password,"

8:12which you can see in the lab tools on the right.

8:15And then once we get that in, we can hit Apply,

8:18and it'll grant the log on as a service right.

8:20That's great.

8:21And then we can hit Start to bring this service back online,

8:24and that should be it.

8:25We're almost there-- a couple of things we need to do,

8:28both of them in Active Directory.

8:29The first thing we're going to do here

8:31is extend the Active Directory schema,

8:34and we have another tool to help us out there.

8:36So if we head back into the setup

8:38files here for Configuration Manager,

8:40head into SMSSETUP, BIN, X64.

8:43You can start typing in ext--

8:46extend Active Directory schema.

8:48There it is.

8:49So once again, I'm going to open up an elevated command prompt,

8:51and all we need to do is just simply run this as is.

8:55So I'll drag it in here.

8:56We'll hit Enter, and it'll just take a second

8:58to extend that schema in Active Directory.

9:00There it is, successfully extended.

9:02Now, there are just a few more manual steps

9:04that we need to accomplish to complete this extension.

9:07We're going to need to create a container for Configuration

9:10Manager to store all of these objects,

9:12and then set access rights on that container

9:15to this machine that will be hosting our primary site.

9:17And we're going to need to head over to DC-NUG to do this,

9:20as that's where we have all of the Active Directory

9:22tools installed and ready to go.

9:24I've got Server Manager opened up.

9:25From here, we're going to dropdown Tools,

9:27and we're going to need to do this using ADSI Edit.

9:29Now, you want to be very careful in this tool,

9:31because we're essentially modifying Active Directory's

9:34database directly, so you can really mess up an Active

9:37Directory infrastructure if you do something wrong in here.

9:39But what we're going to do is right-click on ADSI Edit,

9:42hit Connect To.

9:43We're going to connect to the default naming context.

9:45We'll expand that naming context, expand nuggetlab,

9:48and from here you want to head down to System,

9:50and we're going to create a brand new container

9:52object in here.

9:53So we'll right-click.

9:54We'll head down to New Object.

9:56From here, we're going to choose Container.

9:58Hit Next.

9:59And the name here must match exactly.

10:01It must say System space Management, all right?

10:05We'll hit Next here.

10:07We'll hit Finish here.

10:08And so our final step, then, is to grant our SCCM-NUG computer

10:13account full control to this container, as that's

10:16what's hosting our primary site, and we'll

10:18be placing all of the objects inside of here.

10:21So we can right-click on this, head into Properties

10:23head over here to Security, hit Add, and our object type here,

10:27we want to include computers.

10:29And the machine account we're looking for here is SCCM-NUG.

10:34We can resolve that.

10:34Hit OK.

10:35And we want to make sure that we give this full control.

10:38And also, we want to give it full control over this object

10:42and all descendant objects.

10:43So we need to hit the Advanced button here, find our account

10:47once again, hit Edit, and make sure this applies

10:50to not just this object only, but this object

10:52and all descendant objects.

10:56And that's about it.

10:57That should complete all of our prerequisites.

10:59Let's head back over to SCCM-NUG and just verify

11:02that the ADK finished installing.

11:04It did, all right.

11:05And everything in Server Manager also finished.

11:07So now we should just be able to rerun this check,

11:10and hopefully everything is gone.

11:12Check it out.

11:12That looks much better.

11:13Although we still get this process memory allocation

11:17warning, we can safely ignore it,

11:18because we did get a SQL Server minimum of 8 gigabytes.

11:22Everything else looks fantastic.

11:24We can close out of the Prereq Checker,

11:26close out of everything else, and now we're

11:29ready to install SCCM, which we'll walk through together

11:34in another hands-on lab Nugget coming up next.

11:37I hope this has been informative for you,

11:39and I'd like to thank you for viewing.

0:00With the prerequisites out of the way,

0:02it is now time to perform an installation of SCCM.

0:06This is a hands-on lab Nuggets, so now is a great time

0:08to launch the lab if you wish to follow along

0:10as we get this beast up and running together.

0:13Once your lab finishes loading, you'll

0:14be planted right on SCCM-NUG, which

0:17is where we'll be performing this installation.

0:20You'll also have File Explorer opened up

0:22into the root of the installation media

0:23here for SCCM current branch version 1802.

0:27So let's begin here by launching the Splash application, which

0:31will get us into the opening screen

0:32here for installing SCCM.

0:34Once that's up here, we've got some tools

0:36and standalone components, additional resources.

0:39What we're interested in here is installation.

0:42So assuming you have the base prerequisites installed, which

0:45we do, we'll be able to hit this link,

0:47and it'll take us right into the wizard.

0:49Before you go any further, you should

0:51verify that you have a supported SQL Server

0:53installation available.

0:54We do on our local machine here.

0:56Identify the fully qualified domain

0:57name of the computer that's running that server.

0:59Again, that's our local machine here.

1:01And then confirm that the computers for Configuration

1:03Manager site systems meet the minimum system requirements.

1:07We have done all of that, so we're good to go.

1:09We can hit Next here on the opening screen.

1:11This screen will determine what the wizard

1:13will do from here on out and gives us a number of actions

1:15that we can perform.

1:17Do you want to install a configuration primary site?

1:19Why, yes.

1:20We do.

1:20That's what we're here for.

1:21And you can also check this box if you

1:24want to dramatically speed up this process,

1:26as it'll use default settings for many of these pages.

1:30We're going to uncheck this because we

1:32want to take the long we're out and see what our options are

1:35for each one of these pages.

1:36We can also choose to install a Configuration Manager CAS

1:39Central Administration Site.

1:40If we already have a site on this machine,

1:42we can upgrade it to a CAS.

1:44We can recover it, we can perform site maintenance

1:46or reset it, or uninstall it completely.

1:49So we'll be back into this wizard later

1:51on when we need to perform some of these tasks.

1:53But for now, we're going to choose the first one.

1:55Keep that second option unchecked, and hit Next.

1:58Here's is where you'll enter in your product key

2:00if you have one, or choose to evaluate the product.

2:03And you could always run this wizard again

2:04to enter in a license key to take the evaluation edition

2:08and upgrade it here to the fully licensed product, which is what

2:11I'm going to do after this lab.

2:13So going forward, we'll be working

2:14with a fully-licensed version of SCCM.

2:16But for now, choose the first option

2:18to Install the Evaluation Edition, and hit Next.

2:21Before we can go any further, we must accept the license terms,

2:24so hit those three checkboxes, and then choose Next.

2:28Next up, we either need to download the required

2:30set of files, or if you've already done so

2:32and stored them somewhere in your environment,

2:34you can reference them using previous downloaded files.

2:37Now, for me here, I'm going to choose the first option,

2:40and I'm going to download them into this directory living

2:43inside of the share over on our file server.

2:45You can choose the second option and place the same value

2:48in here as they're already downloaded for you in your lab

2:51environment.

2:52And that'll save a lot of time waiting for this wizard

2:55to continue.

2:56So I'm going to hit Next here and just give

2:58this about 20 minutes or so to download

3:00these files into that location.

3:02Next up, we have a couple of screens

3:03here for language support.

3:05The first screen is for Configuration Manager--

3:08so the server side here.

3:09And if we choose Next, the second screen

3:11is for client languages that you wish to support.

3:14So I'm going to choose English for both of these and hit Next.

3:17Arguably, the most important screen

3:19here is specifying your site code and site name.

3:22Your site code has a three-digit code

3:24that uniquely identifies the site within your hierarchy.

3:27I'm going to choose NUG here.

3:28And then your site name, I'll call Nuggetlab Site.

3:32And also choose your installation folder here.

3:34And if you want to install the Configuration Manager

3:37Console, which we do, as that's where

3:39we'll be spending a good majority of our time managing

3:41our SCCM infrastructure.

3:43So this looks good.

3:44Let's go ahead and hit Next.

3:45Here's where we can choose to join this primary site

3:48to an existing hierarchy.

3:49We would enter in the fully qualified domain

3:51name of that central administration site

3:52that we're joining to here.

3:53Or we can install this primary site

3:55as a standalone site, which is what we're going to do.

3:58And you're not locked into this, as you'll

4:00see here when you hit Next.

4:01It'll give us a message just letting

4:03us know we can always expand this

4:05into a hierarchy at a later time by installing

4:07a central administration site and then

4:09joining this primary site to it.

4:11So we're good here.

4:12We'll go ahead and hit Yes to continue.

4:14Here is where we configure the site database.

4:16So first, you'll need to specify the fully qualified domain

4:19name of your SQL Server.

4:20Again, that's going to be our local machine here,

4:22so that looks good.

4:23Also, if you installed a named instance of SQL Server,

4:26you'll need to enter in that instance name here.

4:28We did not.

4:29We just have a default instance name,

4:30so we'll leave that blank.

4:31And then you can also specify the name of your database.

4:34The default name here will be CM underscore and your site code.

4:38So this looks good as well.

4:40And we'll leave the Service Broker report

4:42at the default of 4022.

4:44So this all looks good.

4:45Let's hit Next.

4:46Here is where we can specify the data

4:48and log file paths for that Configuration Manager SQL

4:51Server Database.

4:52And it is recommended to place these

4:54on separate physical disks as it will

4:56reduce contention and improve the performance

4:59of our Configuration Manager database.

5:01We shouldn't have to worry about that here in our lab

5:03environment.

5:04So we're good with the defaults, and we'll hit Next.

5:06Here is where you will determine where you want the SMS provider

5:09site server role installed.

5:11Again, this is the piece that facilitates communication

5:14between the Configuration Manager Console and the site

5:17database.

5:17We're going to be placing this, again,

5:19on this SCCM-NUG machine, but it can go almost anywhere.

5:23Notice the note-- almost anywhere.

5:24It cannot be installed in a server that's configured

5:26for SQL Server clustering.

5:28But this looks good.

5:29And let's go ahead and hit Next.

5:31Here is where you'll determine if you want your entire SCCM

5:33infrastructure to communicate using HTTPS or HTTP

5:38and then use HTTPS if both sides support it.

5:42It's almost always best to choose the second option here

5:46when initially configuring your SCCM hierarchy,

5:48as it takes away the complexities of PKI and HTTPS.

5:52Once you get everything up and running,

5:54you can then determine what features you want to utilize

5:56and if they'll require HTTPS and then configure it from there.

6:00And that's exactly what we're going to do.

6:02We're going to start here with HTTP.

6:04And as we go on, anything that requires HTTPS,

6:06we'll configure that specific role to support it.

6:09So this looks good.

6:10Let's go ahead and hit Next.

6:12Here's where we can choose to have

6:13the wizard install a management point and a distribution point.

6:16We're going to do both of these.

6:17And again, they're both going to live on this machine.

6:19The only thing we need to do here

6:21is choose our client communication.

6:23Again, we'll start here with HTTP for both of these

6:26and hit Next.

6:27We can Next here as well to acknowledge

6:29that Microsoft is going to collect diagnostic and usage

6:31data.

6:32And then our final piece here is setting up a service connection

6:36point.

6:36This is used any time we want to reach outside

6:38or Microsoft wants to reach inside,

6:41which is what the previous screen was all about.

6:43This is used to collect usage data from us.

6:46And it's also used by Configuration Manager

6:48to download updates and new features.

6:51And this is also the component that we'll

6:53use when we want to configure Intune for mobile device

6:56management.

6:56So this looks good.

6:57We will configure a service connection point

6:59on this machine for our primary site.

7:01So let's go and hit Next.

7:03And look at that.

7:03We made it through this incredibly long wizard.

7:06The Summary screen here will show you all the decisions

7:08you made throughout the wizard.

7:09We're good.

7:10So we can hit Next.

7:11And here's where it's going to run that prerequisite

7:13check one more time.

7:15If all those checks pass, the Begin Install button

7:18will light up.

7:18And we can safely ignore that warning.

7:20It's bogus.

7:21We did configure SQL Server properly.

7:23So we're good to go.

7:24Let's go and hit Begin Install.

7:26And I should probably warn you this

7:27will take anywhere from 45 minutes to an hour

7:29or so to complete.

7:31So don't feel like you need to see this all the way through.

7:34I'll come back when it's done.

7:36We'll verify that everything installed correctly

7:38and be on our way.

7:41All right.

7:42Woo, that was a long wait.

7:43An hour and 15 minutes later, and we're done.

7:46And this is the task right here that took most of that time

7:49because we stored them over the network.

7:51That about doubled the time it took for this installation

7:54to complete.

7:55But hey, we're done.

7:56And now let's verify installation

7:57by closing out of the Wizard.

7:59We'll close out of the Splash screen here,

8:01we'll hit the Start button, and we'll open up the Configuration

8:04Manager Console.

8:07As I mentioned, we're going to be spending a lot of time

8:09in this tool, configuring and managing your infrastructure,

8:12as well as managing and monitoring

8:15our users, our devices, and everything that SCCM can touch.

8:18But just to give this a quick verification here,

8:20let's head down to Administration

8:22in the left-hand Nav.

8:23We'll expand site configuration.

8:25We can hit sites here to see information

8:27about our Nugget lab site.

8:29And we can head down here to Servers and Site System Roles,

8:31and we can see that our SCCM-NUG is our primary site server,

8:35and we can see all of the roles that this server is currently

8:40hosting.

8:41That concludes this hands-on lab Nugget

8:42for installing System Center Configuration Manager,

8:45current branch, version 1802.

8:48I hope this has been informative for you.

8:49And I'd like to thank you for viewing.