SCCM 2012 now available as RC download

System Center 2012 Configuration Manager and System Center 2012 Endpoint Protection Release Candidates

 

download link http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=27841

Please note: System Center 2012 Configuration Manager and System Center 2012 Endpoint Protection are now provided as a single installation package.
System Center 2012 Configuration Manager helps you to empower people to use the devices and applications they need to be productive, while maintaining corporate compliance and control. As more and more consumer devices enter the workplace, IT faces the challenge of delivering a rich experience to users across multiple devices – both personal and corporate-owned – without giving up the control needed to protect company assets. Configuration Manager provides a unified infrastructure for mobile, physical and virtual environments. Configuration Manager also helps you to be more efficient with simplified administrative tools and improved compliance enforcement.
New features in the release candidate include:

• Improved endpoint protection functionality, with integrated setup, management and reporting of System Center 2012 Endpoint Protection. (see below)
• Improved application catalog design that provides a better, more responsive experience when requesting and downloading applications.
• New support for Windows Embedded devices, including Windows Embedded 7 SP1, POS-Ready 7, Windows 7 Think PC, and Windows Embedded Compact 7.
• Improved compliance enforcement and tracking, with the ability to create dynamic collections of baseline compliance and generate hourly compliance summaries.
• Platform support for deep mobile device management of Nokia Symbian Belle devices. Pending a platform update by Nokia later this calendar year for these devices, customers will be able to try out the management of Nokia devices with Configuration Manager.

System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against the latest threats using industry-leading malware detection technologies. It is built on System Center 2012 Configuration Manager, giving customers a unified infrastructure for client security and compliance management. This shared infrastructure lowers ownership costs while providing improved visibility through user-centric malware reporting and control over endpoint management and security.
New features in the release candidate include:

• Support for System Center 2012 Configuration Manager, including integrated setup, management, and reporting.
• Role-based management across security and operations.
• Improved alerting and reporting, with near real-time and user-centric data views.
• More efficient delivery of signature updates using new automatic software deployment model.

Need more information? See the System Center 2012 Configuration Manager and System Center 2012 Endpoint Protection product details pages.

Top of page

System requirements

Supported Operating Systems: Windows Server 2003 R2 x64 editions, Windows Server 2008, Windows Server 2008 R2

Site System Requirements

• Site servers and site roles require 64-bit OS (distribution points are an exception)

Branch Distribution Points

• Branch distribution points have been deprecated and replaced with standard distribution points that can be hosted on Configuration Manager 2012 client operating system platforms, with the exception of Windows XP Professional Service Pack 3 and Windows XP Tablet PC SP3
• Standard DPs can run on Windows Server 32-bit but will not support advanced functionality

Server Operating System Requirements

• Windows Server 2008 (64-bit) and Windows Server 2008 R2
• Distribution points can run on Windows Server 2003

Client Operating System Requirements

• Windows XP professional SP3 – x86 and Windows XP SP2 pro for 64 bit systems
• Windows Vista SP2 (x86,x64)
• Windows Server 2003 R2 SP2 (x86,x64)
• Windows Server 2008 (x86,x64)
• Windows Server 2008 R2 (x86,x64)
• Windows 7 (x86,x64)

Database Requirements

• SQL Server 2008 SP2 with CU 6
• SQL Server Express 2008 r2 WITH SP1 and CU 3 is supported only on secondary sites
• QL Reporting Services is ONLY reporting solution

For Supported Configurations information, visit http://technet.microsoft.com/en-us/library/gg682077.aspx.

Top of page

Instructions

Click the Download button next to the file most appropriate for your needs.
For System Center 2012 Configuration Manager Release Candidate use the file - ConfigMgr_2012_RC1_ENU_7678.exe

1. Do one of the following:
   • To download the media image, click Run
   • To save the download to your computer to install at a later time, click Save.
   • To cancel the installation, click Cancel.
2. The media will be downloaded into a folder and then you can run splash.hta in the root of the folder to begin Setup.

Some useful SCCM Patch Management - Custom Reports

http://pleasepressanykey.blogspot.com/2010/08/sccm-patchmgmt-custom-reports.html

DP Package Utility – For Remove all packages from a Specific DP

With the help of this utility we can add & remove Packages from a Specific DP

http://www.myitforum.com/inc/arts/12171Setup.zip

For this Utility required .NET Framework 2.0

"+" In AutoCAD files not able to Download at client side

This can be fixed with……….

 

investigated this and turns out this is an IIS request filtering issue with urls containing "+" character. Basically you get a 404.11 error since the url is double encoded. The following KB article presents a workaround to set "allowDoubleEscaping" to true. Note that by default this is disabled and you need to set this explicitly.

http://support.microsoft.com/default.aspx/kb/942076

After I enabled this I was able to download files from directories containing "+" character. Can you try this out and let me know if it resolves you issue.

 

To resolve this problem, follow these steps.
Note After you follow these steps, the security level of the server that is running IIS may be reduced. Therefore, before you set the allowDoubleEscaping property to True, consider the risk that is involved.

1. Click Start, type Notepad in the Start Search box, right-click Notepad in the Programs list, and then clickRun as administrator. If you are prompted for an administrator password or for a confirmation, type your password, or click Continue.
2. On the File menu, click Open, type %windir%\System32\inetsrv\config\applicationHost.config in the File name box, and then click Open.
3. In the ApplicationHost.config file, locate the requestFiltering XML element.
4. Change the value of the allowDoubleEscaping property to True. To do this, use code that resembles the following example code.

   <requestFiltering allowDoubleEscaping="true">
   

   
   
5. On the File menu, click Save.
   
6. Exit Notepad.

Important When you enable double escaped sequences, the security level of the server that is running IIS may be decreased.
The previous steps will directly edit the applicationHost.config file and configure this setting at the server level. You can also use the Appcmd command to configure this setting. To do this, follow these steps:

1. Click Start, click Run, and then type cmd in the Open box.
   
2. Type the following command, and then press ENTER:
   

   C: CD %windir%\system32\inetsrv

   
   
3. Run one of the following commands:
   
   
   
   • 
     

     Appcmd set config "Default Web Site" /section:system.webServer/Security/requestFiltering -allowDoubleEscaping:True

     
     

     Note This will configure this setting only for the "Default Web Site" by creating or editing the Web.config file in the root folder of the "Default Web Site."

     
     
   • 
     

     appcmd set config "Default Web Site" /section:system.webServer/Security/requestFiltering -allowDoubleEscaping:True /commit:appHost

     
     

     Note This will configure this setting only for the "Default Web Site" in the applicationHost.config file by using a location tag.

Wake On LAN Vs OBT (Out of band management)

 

 

http://technet.microsoft.com/en-us/library/cc161828.aspx

 

Feature	Advantage	Disadvantage
Wake On LAN	Does not require that the site is running Configuration Manager 2007 SP1. Supported by many network adapters. UDP wake-up packets are quick to send and process. Does not require a PKI infrastructure. Does not require any changes to Active Directory Domain Services. Supported on workgroup computers, computers from another Active Directory forest, and computers in the same Active Directory forest but using a noncontiguous namespace.	Less secure solution than out of band management because it does not use authentication or encryption. If subnet-directed broadcast transmissions are used for the wake-up packets, this has the security risk of smurf attacks. For more information about securing subnet-directed broadcast transmissions with Wake On LAN, see Secure Routers for Subnet-Directed Broadcasts for Wake On LAN. Might require manual configuration on each computer for BIOS settings and adapter configuration. No confirmation that computers are woken up. Wake-up transmissions as multiple UDP packets can unnecessarily saturate available network bandwidth. Cannot wake up computers interactively. Cannot return computers to sleep state. Management features are restricted to waking up computers only.
Out of band management	More secure solution than Wake On LAN because it provides authentication and encryption using standard industry security protocols. It can also integrate with an existing PKI deployment, and the security controls can be managed independently from the product. Supports automatic centralized setup and configuration (provisioning). Established transport session for a more reliable connection and auditable connection. Computers can be woken up interactively (and restarted). Computers can be powered down interactively. Additional management capabilities, which include the following: Restarting a non-functioning computer and booting from a locally connected device or known good boot image file. Re-imaging a computer by booting from a boot image file that is located on the network or by using a PXE server. Reconfiguring the BIOS settings on a selected computer (and bypassing the BIOS password if this is supported by the BIOS manufacturer). Booting to a command-based operating system to run commands, repair utilities, or diagnostic applications (for example, upgrading the firmware or running a disk repair utility).	Requires that the site is running Configuration Manager 2007 SP1 or later. Supported only on desktop computers that have the Intel vPro chip set and a supported version of Intel Active Management Technology (Intel AMT) firmware. For more information about which AMT versions are supported, see Overview of Out of Band Management. The transport session requires more time to establish, higher processing on the server, and an increase in data transferred. Requires a PKI deployment and specific certificates. Requires an Active Directory container that is created and configured for publishing AMT-based computers. Cannot support workgroup computers, computers from another Active Directory forest, or computers from the same Active Directory forest but using a noncontiguous namespace. Might require infrastructure changes to DNS and DHCP if provisioning out of band (the client for Configuration Manager 2007 SP1 or later is not installed).

Both features support waking up computers for the following scheduled activities:

• Software update deployments that are configured with a deadline. 
  
  
• Mandatory advertisements for software distribution or a task sequence.
  
  

If you are using Wake On LAN and out of band management in the same site, you must choose how the site will wake up computers for scheduled activities that are configured for Wake On LAN. The following options are located on the Site Properties: Wake On LAN Tab:

• Use power on commands if the computer supports this technology, otherwise use wake-up packets 
  
  
• Use power on commands only 
  
  
• Use wake-up packets only 
  
  

Make your choice based on which feature you are using and whether the computers assigned to the site support the feature. Also take into consideration the advantages and disadvantages of both features as listed above. For example, wake-up packets are less reliable and are not secured, but power on commands take longer to establish and require more processing on the site system server that is configured with the out of band service point.

Pop-up to Postpone the advertisement or allow user to interact with advertisement

there was good Script from Jörgen Nilsson for Pop-up to Postpone the advertisement or allow user to interact with advertisement

http://ccmexec.com/2011/09/allow-the-user-to-postpone-installation-in-sccm/

Screenshots of how it will look at the client:

If the user press Cancel:

If the Process specified is running:

Usage:

• Download the script: http://ccmexec.com/wp-content/uploads/2011/09/Prerun1.txt
• Create a Package in SCCM containing the prerun1.vbs file
• Create a Program with a command line for executing the script, for example:
  “wscript.exe prerun1.vbs Excel Excel.exe”

APP-V Full Set of training videos from MS

 

App-V Configuration Options

App-V with AppLocker Executable Rules

App-V with AppLocker Windows Installer Rules

Creating an App-V Virtual Application – Using the Sequencer

Deprovision a Virtual Application Using App-V

Launching an App-V Virtual Application and Reviewing Client Configuration

Using App-V Metering to Manage Application Licenses

Publishing an App-V Virtual Application Using Full Infrastructure Mode

Running Microsoft Office 2003 and 2007 Virtualised

Update a Virtual Application Using App-V

Using Dynamic Suiting to Create a Plug-in Dependency in Word

Error information 0xC1030104

When the error i encounter i executed below and resolved this error.

This error was appeared after i configured my SCCM PXE server not to USE DHCP ports

wdsutil /initialize-server /REMINST:"D:\remoteinstall"

ConfigMgr / SCCM automated basic Documentation

 

Enhansoft Free Tools

ConfigMgr / SCCM automated basic Documentation can be done with vbScript v1.32: [DOWNLOAD]
This vbs script will create a detailed documentation for your ConfigMgr / SCCM server.

SMS Documentation Script v1.22: [DOWNLOAD]
This vbs script will create detailed documentation for your SMS server. 

MOM / OpsMgr Documentation Script: [DOWNLOAD]
This beta script will document your MOM server.

Virtual Server Documentation Script: [DOWNLOAD]
This beta script will document only very basic information for your Virtual Server.

ConfigMgr / SCCM automated basic Documentation

 

Enhansoft Free Tools

ConfigMgr / SCCM automated basic Documentation can be done with vbScript v1.32: [DOWNLOAD]
This vbs script will create a detailed documentation for your ConfigMgr / SCCM server.

SMS Documentation Script v1.22: [DOWNLOAD]
This vbs script will create detailed documentation for your SMS server. 

MOM / OpsMgr Documentation Script: [DOWNLOAD]
This beta script will document your MOM server.

Virtual Server Documentation Script: [DOWNLOAD]
This beta script will document only very basic information for your Virtual Server.

How to delete an ISV Proxy Certificate

 

You cannot delete an ISV Proxy certificate once it is registered with the site. All you will need to "Block" the old certificate, and then "Renew" the new certificate.

 

However if you want to do out of the box then this would be for you

-----SQl query----

SELECT     ex.SMSID, ck.KeyData AS PublicKey, ck.KeyType, ck.Certificate, ck.ValidFrom, ck.ValidUntil, ck.Thumbprint, ex.Type, ck.ApprovalStatus AS IsApproved,
                      ck.IsRevoked AS IsBlocked, CONVERT(NVARCHAR(2048), ck.ClientIdentity) AS IssuedTo
FROM         dbo.ClientKeyDataCertExtend AS ex INNER JOIN
                      dbo.ClientKeyData AS ck ON ex.SMSID = ck.SMSID
WHERE     (ex.Type = 3)

delete from ClientKeyData where SMSID = 'GUID:xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'

----select * from ClientKeyDataCertExtend
delete from clientkeydatacertextend where smsid = 'GUID:xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx'

-----select * from vSMS_ISVProxyCertificateInfo

How to Setup complete Asset Intelligent :SAM

Your first step would be Enable AI Role

Make sure you have enabled H/W & S/w Agent & Software metering Agent. http://technet.microsoft.com/en-us/library/cc161880.aspx

For CAL Tracking Make Sure you Enable Audit logon Success. http://technet.microsoft.com/en-us/library/cc431373.aspx

   And

Client Access License (CAL) data collection must be enabled in the Configuration.mof the file can be found in SCCM installed directory\Inboxes\clifiles.src\hinv
Enable AI Classes http://technet.microsoft.com/en-us/library/bb694072.aspx
CALCollectionType : To be set to 3 (if you want to collect the User/Device based CAL)

CALCollectionFrequencyDays: The default value is 7 days, but a value between 0 and 90 days can be specified.

CALSupportedWindowsVersions: you will have as default “5.0,5.2,6.0." add “5.0,5.2,6.0,6.1." for Windwos 2008r2.

1) You need to contact your TAM to get the MVLS License File (as per Ms Documentation you can download from Ms Licensing site and can import the file, in my experience this was never worked for me at least). Once you get the Excel file, you need to save as XML Spreadsheet and then import in to SCCM Console.
http://technet.microsoft.com/en-us/library/cc431362.aspx

And you can see the reports for MVLS based inventory License report “License 14A – Microsoft Volume Licensing Reconciliation Report”

2) For Third Party Licenses you need to create a sample File in the below format and save as .csv file, make sure that you need to have single worksheet/book.
http://technet.microsoft.com/en-us/library/cc872793.aspx

For reporting you need to look for License 15A – Third Party Software Reconciliation Report .

3) CAL Tracking Limitations a: At this time, Configuration Manager 2007 tracks CALs only for Windows Server and Exchange Server

If you are more interested in Software Asset/ License tracking then you must visit the Microsoft.com/SAM

For more Products CAL Supporting you can use a free tool from MS http://www.microsoft.com/sam/en/us/map.aspx

Net statistics workstation

H:\>net statistics workstation
Workstation Statistics for \\SystemName

Statistics since 10/17/2011 11:51 AM

  Bytes received                               1886516
  Server Message Blocks (SMBs) received        11097
  Bytes transmitted                            19042298
  Server Message Blocks (SMBs) transmitted     11071
  Read operations                              1224
  Write operations                             88
  Raw reads denied                             0
  Raw writes denied                            0

  Network errors                               0
  Connections made                             40
  Reconnections made                           2
  Server disconnects                           5

  Sessions started                             0
  Hung sessions                                0
  Failed sessions                              0
  Failed operations                            0
  Use count                                    45
  Failed use count                             1

The command completed successfully.

H:\>net statistics
Statistics are available for the following running services:

   Server
   Workstation

The command completed successfully.

H:\>net statistics server
Server Statistics for \\SystemName

Statistics since 10/17/2011 11:52 AM

Sessions accepted                  1
Sessions timed-out                 0
Sessions errored-out               1

Kilobytes sent                     41
Kilobytes received                 68

Mean response time (msec)          0

System errors                      0
Permission violations              0
Password violations                0

Files accessed                     25
Communication devices accessed     0
Print jobs spooled                 0

Times buffers exhausted

  Big buffers                      0
  Request buffers                  0

The command completed successfully.

H:\>

Microsoft Product Lifecycle Search - System Center Configuration Manager 2007

http://support.microsoft.com/lifecycle/search/default.aspx?sort=PN&qid=null&alpha=System+Center+Configuration+Manager+2007&Filter=FilterNO

 

Products Released General Availability Date Mainstream Support End Date Extended Support End Date Service Pack Support End Date Notes System Center Configuration Manager 2007 11/29/2007 1/8/2013 1/9/2018 7/14/2009   System Center Configuration Manager 2007 R2 11/29/2008 1/8/2013 1/9/2018     System Center Configuration Manager 2007 R3 12/19/2010 1/8/2013 1/9/2018     System Center Configuration Manager 2007 Service Pack 1 5/21/2008 Not Applicable Not Applicable 1/11/2011   System Center Configuration Manager 2007 Service Pack 2 10/22/2009 Not Applicable Not Applicable

SCCM Report: Server or Workstation Uptime Report

 

----This report will give you server uptime information:

SELECT os.Caption0 AS 'Operating System', cs.Name0 AS Name, DATEDIFF(hour, os.LastBootUpTime0, ws.LastHWScan) AS 'Uptime (in Hours)', CONVERT(varchar(20),

os.LastBootUpTime0, 100) AS 'Last Reboot Date/Time', CONVERT(varchar(20), ws.LastHWScan, 100) AS 'Last Hardware Inventory'

FROM v_GS_WORKSTATION_STATUS AS ws LEFT OUTER JOIN

v_GS_OPERATING_SYSTEM AS os ON ws.ResourceID = os.ResourceID INNER JOIN

v_GS_COMPUTER_SYSTEM AS cs ON cs.ResourceID = os.ResourceID

WHERE (os.Caption0 LIKE '%server%') AND (ws.LastHWScan <> 0) AND (cs.Name0 IS NOT NULL)

ORDER BY Name

 

----This report will give you Workstations uptime information:

SELECT     TOP (100) PERCENT os.Caption0 AS 'Operating System', cs.Name0 AS Name, DATEDIFF(hour, os.LastBootUpTime0, ws.LastHWScan) AS 'Uptime (in Hours)',
                      CONVERT(varchar(20), os.LastBootUpTime0, 100) AS 'Last Reboot Date/Time', CONVERT(varchar(20), ws.LastHWScan, 100) AS 'Last Hardware Inventory'
FROM         dbo.v_GS_WORKSTATION_STATUS AS ws LEFT OUTER JOIN
                      dbo.v_GS_OPERATING_SYSTEM AS os ON ws.ResourceID = os.ResourceID INNER JOIN
                      dbo.v_GS_COMPUTER_SYSTEM AS cs ON cs.ResourceID = os.ResourceID
WHERE     (ws.LastHWScan <> 0) AND (cs.Name0 IS NOT NULL) AND (os.Caption0 LIKE '%xp%') OR
                      (os.Caption0 LIKE '%7%') OR
                      (os.Caption0 LIKE '%vista%')
ORDER BY Name

SCCM Terms

Below are the terms  used in SCCM

http://technet.microsoft.com/en-us/library/ff977081.aspx

 

Term	Definition
Active Directory Security Group Discovery method	A Configuration Manager discovery method that searches for security group resources by polling the closest Active Directory domain controller.
Active Directory System Discovery method	A Configuration Manager discovery method that searches for system resources by polling the closest Active Directory domain controller.
Active Directory System Group Discovery method	A Configuration Manager discovery method that searches for system group resources by polling the closest Active Directory domain controller.
Active Directory User Discovery method	A Configuration Manager discovery method that searches for computer user resources by polling the closest Active Directory domain controller.
Active Management Technololgy (AMT)	An Intel networking management technology that is supported by Configuration Manager out of band management, which enables a Configuration Manager administrator to manage desktop computers independently from the Configuration Manager client or the computer operating system.
active software update point	The software update point for a site that interacts with Windows Server Update Services (WSUS) to configure software updates settings and manage software updates synchronization. The active software update point can accept connections from the intranet and the Internet.
Advanced Client	An SMS 2003 client type, supported on Windows 2000 or later operating systems, that can be assigned to a Configuration Manager mixed mode site.
advertise	To make a program, software update deployment, or task sequence available to clients via a collection.
advertisement	A Configuration Manager object that the site server sends as a notification to the management points, specifying that a program, software update deployment, or task sequence is available for clients.
Asset Intelligence	A Configuration Manager feature that allows administrators to inventory and manage software license usage throughout their enterprise.
Asset Intelligence Knowledge Base	A part of the Asset Intelligence feature that is used to produce new reports that identify and categorize deployed hardware and software assets.
assigned management point	The default management point at the assigned primary site for the Configuration Manager client.
assigned program	A program that has been advertised to a Configuration Manager collection and that clients are required to run.
assigned site	A site to which a Configuration Manager client is currently assigned.
backup snapshot	A snapshot of a site’s data, created by the Backup Configuration Manager Site Server task or by another backup utility, used during a site recovery process to restore the site’s data.
binary delta replication	The copying of only the changed portions of a Configuration Manager package or program file rather than the entire file when an update has been made.
boundary	An IP subnet, IP address range, IPv6 prefix or Active Directory site that is used to define the scope of administrative control for a Configuration Manager site. Boundaries are used by the site to determine which distribution points are closest for retrieving content and used by the client to determine which site it should be assigned to.
branch distribution point	A Configuration Manager site system that has the role of storing package source files and is designed to be located in a distributed location with limited network bandwidth or a limited number of clients.
central site	The primary site at the top of the Configuration Manager hierarchy, to which all other sites in the system report their inventory, site configurations, software metering data, and status.
collection-limited query	A query scoped to include only resources that are in a specified collection.
component server	A Configuration Manager site system role that is filled by any site system running a component installed by Configuration Manager Site Component Manager. The only site system that is not a component server is the distribution point.
Configuration Manager health state reference	A reference that is published to Active Directory to refer to Configuration Manager NAP policy and stored for the System Health Validator (SHV) to use in determining policy compliance.
Configuration Manager hierarchy	A collection of one or, typically, more Configuration Manager sites bound together via child-parent relationships. The site at the top of the hierarchy is known as the central site.
Configuration Manager site	A collection of clients and Configuration Manager site systems that are bounded by a group of subnets, such as IP subnets or an Active Directory site, and which are specified by a Configuration Manager administrator as a site.
Configuration Manager site database	A Microsoft SQL Server database that stores Configuration Manager site data, such as discovery data, configuration data, status messages, and inventory data. Every primary site has a Configuration Manager site database. The server supporting the Configuration Manager site database is automatically assigned the site database server role.
Configuration Manager software distribution	A Configuration Manager feature that automatically distributes software programs to Configuration Manager client computers.
Configuration Manager software inventory	A Configuration Manager feature that automatically gathers information about software on clients in a Configuration Manager site.
Configuration Manager software metering	The Configuration Manager feature that monitors software usage on client computers.
Courier Sender	A Configuration Manager communication mechanism that enables you to create and send package information to another Configuration Manager site through non-network channels.
DCM digest	A predefined XML schema used by Configuration Manager 2007 that is used with the desired configuration management feature to create and validate configuration baselines and configuration items.
DDR	See Other Term: discovery data record (DDR)
default management point	The active management point for a site, which could also be an IP address of a Network Load Balancing (NLB) cluster that combines several management points.
delta inventory file	A file generated after Configuration Manager performs a complete inventory, containing only hardware or software properties that were added, removed, or changed since the previous inventory cycle.
delta replication	The copying of only the changed Configuration Manager package or program file rather than the entire package or program when an update has been made.
desired configuration management	A Configuration Manager feature that provides a set of tools and resources for assessing and tracking configuration compliance of client computers in the enterprise.
device management point	A Configuration Manager site system that communicates with mobile device clients and that must be hosted on a Configuration Manager management point.
direct membership rule	A collection membership rule that targets an individual resource, such as a user, user group, or a Configuration Manager client.
discovery data	A set of properties collected by a discovery method that reflects the attributes of a Configuration Manager resource.
discovery data record (DDR)	The file format (.ddr) and the actual file that is used by Configuration Manager to report discovery data to a Configuration Manager site database.
distribution point	A site system that has the role of storing package source files. Clients contact distribution points to obtain source files when they run advertised programs, advertised task sequences, or deployed software updates.
distribution point group	A set of distribution points that you can manage as a single entity.
fallback status point	A Configuration Manager site system role that helps you to monitor client installation and to identify the clients that are unmanaged because they cannot communicate with their management point.
global roaming	The capability of roaming to lower level sites, higher level sites, and sibling sites. This roaming method requires Active Directory Domain Services and the Configuration Manager Active Directory schema extensions.
Heartbeat Discovery method	A Configuration Manager discovery method that is used to update data discovery records (DDRs) for each Configuration Manager client on a set schedule to ensure that they remain current in the site database.
hierarchy branch	A group of Configuration Manager sites, interconnected via child/parent site connections, that report up to the same primary site.
IDMIF file	A type of Management Information Format (MIF) file that can be used to add new architectures or updates to existing architectures in the Configuration Manager site database to accommodate custom hardware inventory properties.
Internet-based client management	A feature in Configuration Manager that allows you to manage computers that have the Configuration Manager client agent but do not connect into the network through a VPN or dial-up connection.
Internet-based site system	A site system role that allows connections from clients when they are managed over the Internet.
Internet-based software update point	The Internet-based software update point for a site that interacts with Windows Server Update Services (WSUS) to configure software updates settings and manage software updates synchronization and that accepts communication only from client computers on the Internet.
maintenance window	A period of time, defined by administrators, when changes can be made on the systems that are members of a Configuration Manager collection.
Managed Object Format (MOF)	The file type, based on the Interface Definition Language (IDL), that describes management information. The MOF syntax is a way to describe object definitions in textual form.
management controller	The hardware and firmware component on desktop motherboards that supports out of band management in Configuration Manager 2007 SP1 and later.
Management Information Format (MIF) file	The file type (.mif) that can be used to modify the Configuration Manager database by creating architectures, object classes, and attributes.
management point	The Configuration Manager site system role that serves as the primary point of contact between Configuration Manager clients and the Configuration Manager site server.
membership rule	The criteria by which Configuration Manager evaluates whether a resource belongs to a particular collection. A membership rule can be a query, or it can explicitly specify a resource.
MIF file	See Other Term: Management Information Format (MIF) file
mixed mode	An operational mode of Configuration Manager 2007 that provides backward compatibility with SMS 2003 sites and provides a basic level of security for organizations that cannot meet the PKI requirements for native mode.
MOF	See Other Term: Managed Object Format (MOF)
NAP-capable client	A Windows-based client that supports Network Access Protection.
native mode	A security-based operational mode setting in Configuration Manager, where the site server signs all policies and where site systems require mutually authenticated SSL connections to client computers.
Network Discovery method	The Configuration Manager discovery method that enables the Configuration Manager administrator to discover any network resources that are IP addressable.
NOIDMIF file	A custom Management Information Format (MIF) file that Configuration Manager administrators can use to modify or append object classes and properties to existing client inventory data.
operating system deployment	A Configuration Manager feature that allows you to create operating system images and deploy those images to target computers.
out of band management	A feature in Configuration Manager 2007 SP1 and later that allows computers to be managed outside standard management channels by connecting to a supported management controller. This management channel is independent from the Configuration Manager client and the operating system.
out of band service point	A site system for Configuration Manager 2007 SP1 and later that has the role of provisioning computers for out of band Management.
package	A Configuration Manager object that contains the files and instructions for distributing software, software updates, boot images, operating system images, and drivers to Configuration Manager client computers.
package definition file	An ASCII text file that contains predefined software distribution objects, such as programs and packages to be used for software deployment.
package refresh	A Configuration Manager software distribution operation in which the compressed package source files are redistributed to distribution points to repair a package.
package source directory	A directory containing Configuration Manager package source files that are used for package distribution.
package source file	In a Configuration Manager package, the software file or files that are being deployed to clients.
package update	A Configuration Manager software distribution operation in which updated package source files are recompressed, the package version is incremented, and then the package is redistributed to distribution points.
preferred sender	The sender specified in the package properties to use when sending the package to a child site.
primary site	A Configuration Manager site that is configured to store its information in a SQL Server database.
protected distribution point	A Configuration Manager distribution point that has boundaries configured to prevent clients outside the boundaries from retrieving packages.
proxy management point	A secondary Configuration Manager site management point that services the Configuration Manager clients that are within its boundaries.
PXE service point	A Configuration Manager site system that initiates a PXE operating system deployment process. The PXE service point responds to network PXE boot requests and determines the appropriate actions to take.
remediation server	A server that is used to update the computer state by providing software updates, new antivirus signatures, additional intrusion detection signatures, and so on.
Report Viewer	A reporting tool, accessible through the Configuration Manager console, that uses your Web browser as a report viewer.
reporting point	A Configuration Manager site system that hosts the Report Viewer component for Web-based reporting functionality.
reporting services point	In Configuration Manager 2007 R2 and later, a site system role that enables administrators to use Microsoft SQL Server Reporting Services reports from the Configuration Manager console.
resident management point	The default Configuration Manager management point of the site in which a globally roaming client is currently located.
Resource Explorer	A Configuration Manager console feature that displays the hardware and software inventory that has been collected from clients.
secondary site	A Configuration Manager site that does not require a dedicated SQL Server database, is always a child of a primary site, and is administered solely through its parent or through another primary site above it in the Configuration Manager site hierarchy.
security context	The Configuration Manager security attributes or rules that are currently in effect.
send request file	A Configuration Manager file with instructions that a sender uses to connect to and transfer data to a destination.
server locator point	A Configuration Manager site system that completes site assignment and can locate management points for Configuration Manager clients when clients cannot retrieve that information from Active Directory Domain Services or other mechanisms.
service component	A Configuration Manager program that runs as a service that can be started and stopped through the Services icon in Control Panel or the Computer Management administrative tool.
site assignment	The process of including selected resources in a Configuration Manager site.
site assignment rules	A group of site boundaries that a Configuration Manager administrator defines for a Configuration Manager site.
site code	A three-character code that Configuration Manager uses to uniquely identify a Configuration Manager site. The site code is specified during the site installation and cannot be changed after installation.
site control file	An ASCII text file that contains the settings of a Configuration Manager site.
site database server	A Configuration Manager site system role assigned to the computer that hosts the Configuration Manager site database (a SQL Server database). The computer might or might not be the site server.
site server	The Configuration Manager site system role assigned to the server on which Configuration Manager Setup has been run successfully. When Configuration Manager is installed on a computer, that computer is automatically assigned the site server role. Every Configuration Manager site has one site server.
site system	A server that provides Configuration Manager functionality to a Configuration Manager site.
SMS Executive	The primary Configuration Manager service, which accesses and updates the database and manages many different process threads.
SMS Installer	An SMS tool that enables you to create customized, self-extracting, software installation files.
SMS Provider	A WMI provider that allows both read and write access to the Configuration Manager 2007 site database.
software metering	A Configuration Manager feature that monitors program usage on client computers.
software update point	A Configuration Manager site role that is configured on a computer running WSUS.
stand-alone site	A Configuration Manager site with no parent sites and no child sites and which is always displayed as a central site on the site properties.
standard distribution point	A Configuration Manager distribution point that has the role of storing package source files and has not been specifically designated as a branch distribution point.
Standard Sender	A Configuration Manager communication mechanism that enables you to create and send package information to another Configuration Manager site over standard network channels.
state message	A message type used to identify at what stage a Configuration Manager client process succeeded, failed, or stopped.
state migration point	A Configuration Manager site system role that stores user state data while a computer is being migrated to a new operating system.
status filter rule	A filtering rule that controls how status messages are reported and viewed.
status message	A message generated by a Configuration Manager component and viewed in the Status Message Viewer. Status messages differ from operating system events in that they represent the flow of activity within a Configuration Manager site.
status message threshold	The limit that defines when the summary status for a component or site system should indicate OK, Warning, or Critical status.
Status Message Viewer	A tool in the Configuration Manager console that is used to browse the status messages in the Configuration Manager site database.
status summarizer	Consolidates the data generated by Configuration Manager status messages into a succinct view of the status of a component, a server, a package, or an advertisement.
status summary	A data set that is generated by the Configuration Manager status summarizer.
System Health Validator point	The site system role assigned to the Network Policy Servers for a Configuration Manager 2007 site.
task sequence	The mechanism in Configuration Manager for performing multiple steps or tasks on a client computer at the command-line level without requiring user intervention.
thread component	A Configuration Manager program that runs as a thread of the SMS Executive service component. A thread component can be started and stopped through the SMS Service Manager.
trusted root key	An encryption key used in Configuration Manager to help clients identify valid management points.
unmanaged client	A client that is not communicating with its assigned site in the Configuration Manager hierarchy and therefore cannot receive policy or upload inventory data.
wake-up packet	A packet sent by Configuration Manager's primary site server when using Wake On LAN to bring targeted computers out of a sleep state so that they can perform a management function, such as installing a mandatory software update.

Native Mode Client installation command line - example

Here is a sample command line for my lab site MED

 

Ccmsetup.exe /mp:medv-cm.medlab.com /native:FALLBACK CCMHOSTNAME=medv-cm.medlab.com SMSSITECODE=MED FSP=medv-cm.medlab.com

 

issue found after following the document http://technet.microsoft.com/en-us/library/cc872789.aspx on 2008 Servers only but worked fine for 2003.

SMS_POLICY_PROVIDER saying “SMS Policy Provider has failed to sign one or more policy assignments. It will retry this operation automatically.”

 

 

[NewRequest]

FriendlyName = "ConfigMgr Site Signing ABC"

Subject = "CN=The site code of this site server is ABC"

MachineKeySet = True

KeyLength = 2048

[RequestAttributes]

CertificateTemplate = ConfigMgrSiteServerSigningCertificate