Cliff Hobbs at myITforum.com

MMS Day 4 - Thursday 29th March

Today's keynote was a panel of big companies that use System Center including EDS.

Had a meeting with Neil Sanderson who is the Product Manager for System Center in the UK. Looks like there will be a "Best of MMS" session in the UK on the 1st May - more about this as soon as I know the details.

Attended a meeting with Brad Anderson (who basically "owns" SMS), and the other EDS folks where Brad gave us an insight into the future none of which unfortunately I can blog about as it's NDA.

Attended the closing party with the gang which to be honest was a bit disappointing compared to previous year's parties.

Managed to get to the SY20 Session SMS 2003/ SCCM 2007 911 Case Studies, my notes below:

CCM Change Window – Advanced Client Change Window Controller

• SMS 2003 Change Window Controller – Way of setting a time that Clients WON’T receive Software distributions
• Runs as SMS Change Window Controller service runs under Local System

TRSCLEAN – Clean up duplicate entries in TRS files (transaction file keeps transactions) – KB926617

Problems

Debugdiag.exe – allows to capture memory leaks

TRS files affecting replication performance REPLMGR

• Upgrade to SP2 .TRS files increased 70% in size – can affect site server performance in large environments
• Sms\inboxes\replmgr.box – takes a long time to open
• Hotifx 926617 – known issue – only stops the issue happening in future, doesn’t fix problem – need to use TRSCLEAN.EXE needs to be run against each of the Child Sites TRS files.
• Backup Site
• Apply hotfix
• Run TRSCLEAN e.g.

trsclean –v –t abc (don’t need to specify extension)

 

See KB926617 for full details

HWINV not being updated but SWINV is – all reporting to same MP but some reporting others not – DNS suffix missing on those machines

When files over 100K DNS used to connect to MP

Other highlights from MMS Day Three

Other things of note coming out of yesterday include:

• Having lunch with Microsoft and Rod to discuss ways of improving the Systems Management Community
• Attending a meeting with 1E and some other large companies about setting up a forum to share experiences and create best practise around 1E's products
• My colleague David Pearse and I each winning 500 GB USB hard drives for achieving the fastest time of the day in the Intel vPRO challenge
• Having dinner with my EDS colleagues - always nice to be able to put faces to names
• Attending the 1E party - 1E are 10 years old - Happy Birthday and here's to many more
• Receiving a signed copy of Ron Crumbaker's SMS book - Ron many thanks and your dedication made me shed a tear - thanks man (oh and thanks for mentioning FAQShop in the book - cheque is in the post )

System Center Bloggers

Had an interesting meeting with Microsoft yesterday and a few other bloggers. Basically Microsoft want to work with us to help us spread the love on System Center. We tossed around some ideas and they've gone away to chew things over so watch this space...

MMS Day Three - Wednesday 28th March

Attended the keynote:

SMS 2003 SP3 will be available in April

SCCM

• Live Asset intelligence coming – Your Site Server connects over the Internet to a server in Microsoft to receive updates to the Asset Intelligence catalog
• Automatic OS image management and deployment for servers and workstations
• Intel Active Management Technology integration
• Dell, HP and IBM catalogs
• DCM

Virtual Machine Manager

• System Center Virtual Machine Manager (VMM) looks pretty cool especially as it can do lots of things "on the fly" and convert VMWare images to VMM issues - this might convince me to try Virtual Server/ Virtual PC again as at the moment my preference is VMWare.
• Demo of integration with SCOM – SCOM reported a problem with a server having network problem.  A wizard was run to take the SCOM recommendation of moving the VM to another host to resolve the issue which it did on the fly and seamlessly.

Co-presenting SC34 - Microsoft Management Communities

Well I've just finished helping out Rod co-present the Microsoft Management Communities session by explaining how I got into SMS in the first place, the history of FAQs and FAQShop and what's involved with being an MVP. It was a bit daunting standing up in front of all those people (most of which I know - eek), but once I got going I was fine.

I'd just like to say a BIG thankyou to Rod for allowing me to help out with this session.

I hope you all enjoyed it - any feedback (good, bad or otherwise) is welcome.

MMS - SY03 - SCCM Deployment Part 1

Attended this session and made the following notes:

SCCM Improvements

• Multi-threaded Hardware Inventory
• Object replication to Secondaries eliminated
• Multi-threaded file dispatch manager on Management Point (used to transfer data from the MP to the Site Server)
• Software Update Management reporting now uses State Messages instead of Hardware Inventory

Site Optimisation

• Backup now uses VSS technology so it’s very fast
• Makes a shadow copy of the site DB and then the copy is backed up

Maximum number of Clients for a Central 200,000 compared to 100,000 for SMS 2003

Server Configuration

• OS & SQL – RAID 1 drives
• Inboxes – RAID 1, 5, or 10
• SQL DB – RAID 1 or 10
• SQL Log – RAID 1
• SQL TempDB – RAID 1

SMS 2003 Gotcha’s

• Client deployment not bandwidth aware
• No visible progress of the client installation
• Firewall issues with XP/ Vista
• All client binaries downloaded whether needed or not

SCCM

• Single binary for client deployment, maintenance and removal
• Pre-requisite checker
• BITS aware download of binaries
• Client downloads manifest first of what’s required and only what’s required is downloaded

Improved reporting for Client deployment

• Step-by-step status per client
• Client install success/ fail
• Client assignment success/ fail
• Requires fallback status point

Client Deployment Changes

• True AD integration – Client settings now published in AD – no longer need long command line with switches
• ADM template can be populated with Site Settings which can be used to update AD on a certain Domain, OU, etc.
• CCMSetup.msi new package for installing the Client

Software Update Point – WSUS – Deploy SMS Client from this new Site System

• SMS Client can be published to WSUS as a required update like any other MS update

Client Push – Site Server machine account is allowed

Logon installation – high rights only – No CAPINST for low rights installations

OU based Site assignment – If machine in this OU gets assigned to SMS Site “CPH”

Client Deployment Tips

• Gradual deployment
• Start small and check everything is working e.g. distribute a Package

Site Configuration Settings

• Daily Heartbeat Discovery to initially track client numbers
• Daily software update scans for quicker initial scan results
• Client approval setting = automatic for all domain joined clients
• If upgrading uncheck the box that says only V4 Clients in this Site

BITS 2.5 prerequisite – might require a reboot if installed in pre-Vista box

Recommended Site Roles – Specify the Fallback Status Point (FSP) in the Client installation command line (or Registry)

Windows 2003 SP1 or later required for Site Servers

Upgrades

In Place or Side by Side

In Place

OSD and DM will need to be uninstalled and re-installed – BUT data kept for Packages created in those.  However, these “old” Packages will be classed as legacy and will need to be migrated to the new version of OSD

Side by Side – Existing Clients re-assigned to new SCCM Site

Top down

Consider adding new SCCM Central Site above current SMS 2003 Central to give big picture and to allow the whole environment to be managed using the SCCM console

Run /testdbupgrade on an offline copy of each Sites DB before upgrade it

Run the pre-requisite checker on all Sites

Hierarchy Considerations

• Top down
• AD Schema Modifications
• Backward compatible with SMS 2003 SP1+
• Available as .EXE and a documented .LDF file

Interoperability

• SMS 2003 sites can report to SCCM Sites
• SMS 2003 Clients assigned to SCCM Sites
• SCCM Clients can roam to SMS 2003 Sites

Admin UI

• SMS 2003 Site Settings require SMS 2003 Admin UI
• Secondaries limited so upgrade to V4 ASAP

SMS 2003

• No Legacy Client support/ interoperability
• No Standard Security support/ interoperability
• Provide Patch/ feature level interoperability for Chid Sites and SMS 2003 Clients in the Hierarchy

SMS 2.0

• No SMS 2.0 interoperability support provided at all
• No direct upgrade to SCCM 2007

Security Considerations

• No support for Standard Security Mode
• Per-site System Management accounts
• Admin UI needs remote DCOM permissions added to the “SMS Admins” group
• Secure Key Exchange

Site Modes

Mixed Mod

• Equivalent to SMS 2003 “Advanced Security” plus security enhancements
• Available for new installs and Site upgrades
• Interoperable with SMS 2003 SP2+ Sites

Native Mode

• Full mutual auth using PKI based machine certificates
• Avail for new install and existing SCCM mixed mode Sites
• Required for Internet based Client management
• Only for new installs not upgrades

MMS - SY05 - SCCM What's New in Software Distribution

Attended this session and made the following notes: 

Branch DP

• Can install on XP/ Vista machine
• Need lots of disk space
• No auto deploy of Branch DP – Need to assign to specific machine so no fallover like with SMSNomad
• Up to 2,000 per site
• Doesn’t support Internet clients – these Clients can only use Standard DPs
• Package Maintainence Task – Specific to Branch DPs to ensure Package up to date

• MOM MP supports Topology and Events for Branch DPs

Bandwidth

• BITS enabled – can schedule/ throttle
• Distribute on demand – Computer in boundary requests Package.  SCCM targets the Package to the DP where the Client sits – don’t need to manually add the DP to the Package (whahoo..!!)
• Manual content provision – Can preload software on machine, ship to Site and when it comes online will sync in without resending the content
• Also supports DVD, CD, Robocopy, etc.
• Clients don’t use BITS to transfer from the Branch DP as assumption is clients are “local” to the Branch DP + removes the need to install IIS on the Branch DP

Can specify specific drive to use for Branch DP – can’t specify for regular DPs through the MMC though :-(

SMS 2003 Clients CAN use Branch DPs in mixed version hierarchies

Copy Package Wizard

• New “Copy Package Wizard”
• Setup new DP
• Run the Wizard – select DP, select Package(s) (includes support for Folders – like Explorer), browsing supported to select a DP and then all Packages on that DP are copied to the new one

Wake-On-LAN

• When create Collection/ Advert can specify if it needs WOL
• Unicast (default) and subnet directed broadcast
• Magic Packets sent from Site Server – can control when they are sent and how often

Client

• Hardware and Software needs to support WOL
• Timezones supported

Packages

• Binary delta replication
• Large Packages with small changes – only the changes are sent
• Site to Site
• Site to DP
• DP to Branch DP – necessary support for this on XP/ Vista machines acting as Branch DPs supported
  
• Configurable per Package as calculating the differences between changes to small packages is pointless
• Leverages Windows R2-based technology

Packages

• Can persist in Client Cache
• Client side clear cache function

 Advertisements

• Maintenance Windows supported
• Program re-run – never, always, if previous success/ fail
• Protected DP fallback
• Notification settings per Advert over how often users receive notifications

Collections

• Optimised evaluation algorithm
• Maintenance windows supports
• Policy Poling Interval – can specify how often a Collection updates

Client side interaction

• Branding support
• Run Advertised Programs improved
• Consistent experience for new available updates

MMS Day Two - Tuesday 27th March

This is the first "proper" day of MMS. The day started with the keynote in which I found out:

• There's a new version of SQL due next year (wasn't aware of that one).
• SCOM 2007 was officially announced as going RTM with it becoming available the first week of April.
• Microsoft, Cisco and EMC are working together to extend MOM to be able to manage network devices

Next attended the "SCCM State of the Union" presentation where:

• TechSexy was announced - Microsoft are trying to promote that their technology is sexy like Tron was (I don't think it's THAT sexy) - more info is going to be available at http://www.techsexy.net/
• HP now offer a Client Catalogue for SCCM to manage servers, workstations and laptops in terms of patches and drivers BUT it won't do BIOS updates.
• The number of customers using SMS 2003 has almost doubled
• The Release Candidate of SMS 2003 SP3 came out last Friday (23rd March). They were hoping to announce it at MMS but hit some problems so it's due sometime in April. It will include 13 hotfixes. NOTE: Microsoft recommends applying Hotfix KB 934206 If you're using the DMFP otherwise applying SP3 will break it - I couldn't find the KB on the Public Microsoft site so maybe it's in progress - checking with Microsoft as you read this.
• SMS 2003 SP2 will be the minimum supported config for SCCM so get upgrading to this as a minimum
• There are 1700 (yes 1700) pieces of Admin UI in SCCM
• SCCM SP1 is due in the first half of 2008 which will include support for Vista SP1 and Longhorn roles
• SCCM R2 is also in progress expected second half of 2008 which will include OS Deployment updates such as support for multicasting and "unknown" machines; It will also start the move from Web Reports to SQL Reporting Services which is the way Microsoft want Reporting to go
• The Admin Feature Pack is now integrated into SCCM
• An overview of the new SCCM roles such as State Migration Point, Branch DP, Software Update Point, Fallback Status Point, System Health Validator, and PXE Service Point was given
• The Rapid Deployment Program for SCCM is now open - contact sccmrdp@microsoft.com

Next attended the "What's new in Software distribution" and "SCCM Deployment" sessions which I'll do separate blog posts on.

In the evening attended the myITforum party which was great and the Microsoft SCCM party at the "W" hotel. Man was it windy and cold - worse than being back at home but we all had a good time, especially in the photo booth.

MMS Day One - Monday 26th March

And they say Monday is the quiet day of MMS 

It's been a VERY hectic day for me personally. Lots of meetings with different folks on working together to better serve you guys in the community, meeting old friends like Garth, Dave Jaffe, Rod and Megan, Ed, the guys from 1E, Mott, the list goes on. Had lunch with some old friends which was amazing.

Then attended the 1E Tech Briefing this afternoon which had some pretty cool stuff in it both new and old - unfortunately I had to leave early to get over to help Warren out with the MMS Freshman session which was excellent and seemed to go down really well. Met some newbies from my neck of the woods which was great.

Then came zero hour - 17:30 time for the Expo to open and for the stampede for the myITforum booth to get the party "buttons" to commence. Luckily I managed to get one but I do feel sorry (as do Rod, Megan and the other myIT folks), that not everyone that wanted one managed to get one.

It was good to wander round the expo but I have to be honest and say quality SWAG was lacking this year or maybe I didn't look hard enough - If I'm missing something cool drop me a line or post a comment here.

I also managed to meet a few of the other EDS folks that are here which was cool.

I'll try to do a write-up on some of cool products here this year but for now with the jetlag and the numerous miles I must have walked today taking their toll it's time for a bath and bed as we have an early start tomorrow (7:30 - 8:30 breakfast, then the Keynote at 08:30 and MMS kicks off proper).

Stay tuned for more from MMS...

Where I'll be at MMS...

I want to meet as many of you as possible at MMS - you know what I look like from my picture on here so come on up and say "hi".

Of course I'll be at Registration this morning, hanging round the Alumni lounge at various times but most of the time I'll be in the thick of the action at sessions, wandering round the labs etc.

Monday - I'll be at the 1E tech briefing this afternoon, followed by Warren's session (see my previous post) and of course I'll be at the Welcome Expo this evening

Tuesday - Hoping I'll be at the myITforum party (provided I manage to survive the bun fight and get my hands on one of the coverted "buttons" at the Expo tonight which is your entry ticket)

Wednesday - Catch me at "SC34 - Microsoft Management Communities, Room 20D, 10:45 - 12:00

During this session, find out what Microsoft is doing to improve the IT experience by promoting and participating in online and offline communities. Learn about the Microsoft MVP program, meet your MVPs attending this year's MMS event, and find the best ways to leverage the Microsoft communities to enhance your job and your career. Rod Trent, owner of myITforum.com, the largest systems management community on the web, will host this event."

In the evening I'll be at the 1E forum meeting and their party

Thursday - Closing party but let's not dwell on that one - there's a lot to happen between now and then

Of course I'm open to offers if anyone else knows of anything going on that I should know about.

Whatever you are doing - have fun, stay safe, and enjoy yourself.

For all you MMS Newbies - don't be afraid...

... we're here to help.

MMS can be a bit daunting for anyone that's never been before (I know I found it a bit daunting being in an area with thousands people none of which I knew and trying to work out what I should do).

But things have DRASTICALLY improved since then and we're here to help.

If you're a newbie to MMS and want some great hints and tips on how to survive (which equally apply to those that have been to MMS before), then pop along to 20-D this afternoon (Monday) at 16:30 where Warren Byle will give you his Top 10 hints on making the most from MMS.

The session is called "SC31 - Conquering the Summit An Insider's Guide (A freshman orientation)". 20-D is part of the Ballroom. Head for the first floor and it's down the right-hand side towards the back of the Conference Centre.

I'll be there along with other MMS veterans to answer any questions you have. Once Warren has finished his presentation we'll split the room off into the various geographic regions so that folks from the same region can get to meet and greet each other - nothing formal or fancy.

Please don't feel intimidated whilst at MMS - enjoy. Don't think you're alone and don't have any friends - you know what I look like so come on up and introduce yourself - I don't bite - promise

What a day - Top Gun style...

So I was at a bit of a loose end today before the SMS Expert get together tonight at the Omni (thanks to Dave and the other guys at SMS Expert - it was great to see old friends and make a few new ones).

What to do today? I did think about going over the border into Mexico but I'd had enough of travelling. I also thought about the Zoo, but to me they're all the same. No, my mind was made up when on the way to the hotel last night we drove past the USS Midway aircraft carrier. I remarked to the taxi driver that I'd never seen a carrier that close up and when he told me it was a museum open to the public that was it.

So I went there today and had a thoroughly enjoyable day (the only downer being having to wait in a queue for 45 minutes to order my lunch and then having to wait another 20 minutes before I actually got my BLT sandwich).

The Midway was built in 1945 and was retired in 1993. She is a working museum which means you can press the buttons, sit in the seats, get up REAL close and touch the aircraft (of which there are numerous), fly in simulators, etc. They also have retired Navy guys giving talks on various things like how they launch and land on the carriers which are amazing.

For more information goto http://www.midway.org/site/pp.asp?c=coIMKTMCF&b=81432

Oh and yes they do have an F14 Tomcat and yes it's like being in Top Gun - I feel the need, the need for speed...

In Sunny San Diego...

SMS 2003 SP3 FAQs...

Microsoft's Survey on Community

I caught this on Rod's blog and wanted to share it with you as this is YOUR chance to shape the future of the Microsoft Systems Management community so please take a couple of minutes to complete it:

"Microsoft has just launched an online survey targeted at getting a baseline on satisfaction with current Windows Enterprise Management community resources, sites, etc. In addition, they want to capture feedback on future needs, i.e. what Microsoft can do to improve the overall experience, i.e. creating a more “connected” experience across resources, etc.

FAQShop Newsletter coming soon...

I just wanted let everyone know that I plan to release the Newsletter in April.

If you:

• Are interested in receiving it all you need to do is click here and press the 'Send' button to send a subscription email.
  
  
• Have any colleagues or know of anyone that might be interested in receiving the Newsletter please feel let them know about this.
  
  
• Or your company are interested  in sponsoring the Newsletter please contact me
  
  

If you have any questions, things you'd like to see included in the Newsletter, comments on the Site, things you'd like to see improved or anything else please let me know.

Thankyou for your time and continued support of FAQShop - I really appreciate it and look forward to hearing from you.

SMS 2003 Webcasts...

I know it's been over a year now since Microsoft last did any SMS-related Webcasts but they are still an AWESOME source of information and worth investing the time in to watch.

I've just finished updating a complete list of all the Microsoft SMS 2003 Support Webcasts which I hope proves useful to you and allows you to find the content you need as the main SMS Webcasts page hasn't been updated for sometime and I personally found it confusing as to where everything was (the prime reason for me updating my page and splitting it off into years so hopefully you can easily find what you're looking for).

New FAQShop Articles 15/03/07

SMS 2003
Why do I get the "Automatic Client Discovery Was Unsuccessful" message when I click the "Discover" button?
Contributed By: Cliff Hobbs [MVP SMS]
If your users are seeing this error when they click the "Discover" button in the "Systems Management" Control Panel applet this could be why...

MOM 2005
Where do I enable Heartbeat monitoring for Agentless computers?
Contributed By: Anders Bengtsson
From doing some research I've found that MOM can Agentlessly monitor server heartbeats, but I can't figure out where to add the heartbeat rule. Can somebody tell me where it's located?..

Come and see the 1E folks at MMS...

One of the highlights of MMS has to be a visit to the 1E folks who make some AWESOME products which are well worth checking out.

If you decide to pay them a visit tell them Cliff sent you

To find out more click here...

Microsoft and F5 Ink SCOM 2007 Deal

"Microsoft and F5 Networks announced Tuesday they have signed an OEM deal that will put Redmond’s System Center Operations Manager 2007 on F5’s management appliances.

The announcement comes just two weeks before the annual Microsoft Management Summit (MMS).

Under the terms of the agreement, F5 will incorporate System Center Operations Manager 2007 management software into its own F5 management appliance for application visibility. Seattle-based F5’s new product, dubbed ControlPoint, will collect, analyze and report data from F5’s non-Windows application optimization, availability and security devices, the companies said in a joint statement."

more details here...

Revamped FAQShop Bookstore Now Open...

We've teamed up with Amazon to offer you the best choice when it comes to buying IT-related books.

Simply visit the Bookstore, select the relevant Amazon site of your choice and Shop - it's that simple..!! And remember a percentage of every book sold goes to helping us to cover the costs of keep FAQShop free for your use.

It's official no Patches this Patch Tuesday...

"Microsoft has not released any security bulletins on March 13, 2007."

http://www.microsoft.com/technet/security/bulletin/ms07-mar.mspx

New FAQShop Articles 13/03/07

SMS 2003
How do I install the SMS 2003 SP2 version of ITMU?
Contributed By: Cliff Hobbs [MVP SMS]
ITMU has been updated in SMS 2003 SP2. But if you're wondering how to install it here's your options...

ITMU updated for SMS 2003 SP2
Contributed By: Cliff Hobbs [MVP SMS]
The Inventory Tool for Microsoft Updates has been updated in SMS 2003 SP2...

Where can I download SQL 2005 SP2?
Contributed By: Cliff Hobbs [MVP SMS]
SQL 2005 SP2 is now available. However, if you downloaded it before 5th March 2007 you're going to want to check this out...

Darn security questions...

So I need to login to a certain website in order to change my password. But part of the new protocol is I need to choose 3 security questions from a list of several and supply my answers to help with future password changes.

Now I don't know about you but I'm wary about selecting security questions used by me for my "real life" stuff like my bank so I thought I'd play safe and choose "What is your favourite color?". So I select the question and type the answer and hit the "Submit" button only to be told:

"Your answer needs to be a minimum of 4 characters"

But hang on my favourite color is red so what do I do? I can't help it.

Darn security questions...

New FAQShop Articles 11/03/07

SMS 2003
SMS 2003 SQL Hardening
Contributed By: Cliff Hobbs [MVP SMS]
If you're concerned about SQL Security then the "SMS 2003 SQL Server Hardening" list could be what you're looking for...

SMS 2.0
"Preferred sender for package xxx has a unknown type, cannot convert it to an address type."
Contributed By: Carl Sullivan [MSFT]
If you’re seeing this error in Distmgr.log it’s not a major problem...

Patch Free Tuesday this Month