Deploy DPM Remote Administration console via SCCM

In this post I am going to explain the process of deploying the DPM Remote Administration Console to IT admin computers via System Center Configuration Manager 2012. Following are the steps you will need to take to make this happen.

You will need somewhere to group your IT admin computers so that you can target the DPM Remote Administration console to them. Create an IT Admin Computers device collection in SCCM 12. This is what we will use to group the IT admin computers.

clip_image001

Now we need to copy the contents from the DPM media onto your distribution point share. This will be the CCX86 and SCDPM folders.

NOTE: In my lab for this post I copied these to C:\App Deployments.

clip_image002

OTHER INFO: As of right now you need to copy all the contents. I don’t know of the specific files that make up the remote administration console. If I track this down later I will update this blog post. If you need to save space you can copy one or the other folder and use it. CCX86 is for 32Bit computers and SCDPM is for 64Bit computers. If you know you will only deploy to 64Bit computers then get the SCDPM folder only.

The next step is to go and create a package for the DPM Remote Administration console.

In the Config Man console go to \Software Library\Overview\Application Management\Packages and create the new package.

clip_image003

The create package wizard will come up. Go ahead and complete the highlighted fields in the following screenshot and click next.

NOTE: Remember for this post in my lab I copied the DPM software from the media to C:\App Deployments. This is the directory I am setting as my Source folder for this package. Your source folder path will be different.

clip_image004

Chose standard program and click next.

clip_image005

Here is where you need to put in the correct command line syntax to make sure it installs the DPM Remote Administration console vs. trying to install the full DPM product. Here is the syntax you will need to put in the Command line: field. See the following screenshot.

Read More

Microsoft System Center 2012 Configuration Manager: Administration Cookbook

There is a new book on Microsoft System Center 2012 Configuration Manager coming soon.

image

This book will cover the following:

    • Install SQL before considering System Center 2012 Configuration Manager
    • Set up security so administrators can’t see or touch each other’s machines
    • Use the new System Center 2012 Configuration Manager features to set up monthly patching
    • Create applications, deploy them, enforce them, and monitor them
    • Cre...
Read More

Set SCEP Client to Update from Microsoft

There may be a need for System Center Endpoint Protection clients to update definitions directly from Microsoft Update vs. updating from your SCCM server. An example would be when you have remote users that are constantly moving around in the field.  Here are the settings to configure this:

  • You would go into client settings and set this to False.

clip_image002

  • Then you can go into the actual  Antimalware Policies and adjust the policy.

clip_image003

  • Her...
Read More

Configure and Use Remote Control in SCCM 2012

As with SCCM 2007 SCCM 2012 offers a Remote Control feature to connect to client computers. This is helpful for administrators or a help desk team so they can use the SCCM 2012 console to remote control client computers and troubleshoot problems. I wanted to put together this step by step post on getting this setup. To configure the Remote Control feature in System Center Configuration Manager 2012 you need to.

  1. Enable the Remote Control Settings in your client policy

To do this follow these steps:

    • In SCCM 2012, click Administration.
    • In the Administration workspace, click Client Settings.
    • Right click on Default Client Settings and chose properties.
    • In the Default dialog box, click Remote Tools.
    • Configure the required remote control client settings.

clip_image001[4]

    • Click OK to close the Default Settings dialog box.

2. Sync the SCCM policy on your clients

The next time your client computers sync up to SCCM 2012 automatically they will have Remote Control enabled. You can force this now on a client to test. Do this by going through the following steps:

    • On the client go into Control Panel.
    • Click on System and Security.
    • Click on Configuration Manager.

clip_image002[4]

    • Click on the Actions tab.
    • Select Machine Policy Retrieval & Evaluation Cycle and click the Run Now button.

clip_image003[4]

That will sync the policy with SCCM 2012 right away.

3. Ensure traffic can flow through

Now in order for Remote Control to work the following ports need to be allowed through the firewall if one is running on the client.

    • TCP port 2701
    • TCP port 2702 (This is listed as required but I have been able to get this to work without this port.)
    • TCP port 135

It is also good to check that your client is actually listening for the ports. To check this run this in a command prompt:

netstat -a

Again this will list the ports the computer is listening on.

Read More

Configuration Manager did not find a site to manage this client

Recently I resolved an issue where someone was encountering an error when they clicked the “Find Site” button in Configuration Manager 2012 on the client machine. All client communication was working fine except for finding a site to manage the client.  Here are details on the issue and how to resolve it.

Problem:

On the client under Control Panel>>System and Security when you click on

clip_image001

Then the “Site” tab and click “Find Site”

clip_image002

You get this error:

clip_image003

Read More

System Center Configuration Manager 2012 Uninstall Cleanup

When you uninstall System Center Configuration Manager 2012 it could potentially leave behind some components on your SQL server.  You will need to ensure these are removed before you can start the install of a fresh System Center Configuration Manager 2012 or you can run into issues.

Here is the list of what to check:

SCCM 2012 Database:

  • Delete your old SCCM 2012 DB from the SQL server.

SCCM 2012 Local User and Groups on SQL Serv...

Read More

Microsoft System Center 2012 Endpoint Protection Book

With endpoint protection moving from Forefront to System Center 2012 there will be some changes.  There is a book on Microsoft System Center 2012 Endpoint Protection coming soon to get us all up to speed.

This book will cover the following:

  • Master the most crucial tasks you’ll need to implement System Center 2012 Endpoint Protection
  • Provision SCEP administrators with just the right level of privileges, build the best possible SC...
Read More