Free WOL Tool

Fusion WOL is the one have seen best utility for WOL :)

http://www.fusion-online.com.ar/es/products/wol/

Wake On LAN Vs OBT (Out of band management)

 

 

http://technet.microsoft.com/en-us/library/cc161828.aspx

 

Feature	Advantage	Disadvantage
Wake On LAN	Does not require that the site is running Configuration Manager 2007 SP1. Supported by many network adapters. UDP wake-up packets are quick to send and process. Does not require a PKI infrastructure. Does not require any changes to Active Directory Domain Services. Supported on workgroup computers, computers from another Active Directory forest, and computers in the same Active Directory forest but using a noncontiguous namespace.	Less secure solution than out of band management because it does not use authentication or encryption. If subnet-directed broadcast transmissions are used for the wake-up packets, this has the security risk of smurf attacks. For more information about securing subnet-directed broadcast transmissions with Wake On LAN, see Secure Routers for Subnet-Directed Broadcasts for Wake On LAN. Might require manual configuration on each computer for BIOS settings and adapter configuration. No confirmation that computers are woken up. Wake-up transmissions as multiple UDP packets can unnecessarily saturate available network bandwidth. Cannot wake up computers interactively. Cannot return computers to sleep state. Management features are restricted to waking up computers only.
Out of band management	More secure solution than Wake On LAN because it provides authentication and encryption using standard industry security protocols. It can also integrate with an existing PKI deployment, and the security controls can be managed independently from the product. Supports automatic centralized setup and configuration (provisioning). Established transport session for a more reliable connection and auditable connection. Computers can be woken up interactively (and restarted). Computers can be powered down interactively. Additional management capabilities, which include the following: Restarting a non-functioning computer and booting from a locally connected device or known good boot image file. Re-imaging a computer by booting from a boot image file that is located on the network or by using a PXE server. Reconfiguring the BIOS settings on a selected computer (and bypassing the BIOS password if this is supported by the BIOS manufacturer). Booting to a command-based operating system to run commands, repair utilities, or diagnostic applications (for example, upgrading the firmware or running a disk repair utility).	Requires that the site is running Configuration Manager 2007 SP1 or later. Supported only on desktop computers that have the Intel vPro chip set and a supported version of Intel Active Management Technology (Intel AMT) firmware. For more information about which AMT versions are supported, see Overview of Out of Band Management. The transport session requires more time to establish, higher processing on the server, and an increase in data transferred. Requires a PKI deployment and specific certificates. Requires an Active Directory container that is created and configured for publishing AMT-based computers. Cannot support workgroup computers, computers from another Active Directory forest, or computers from the same Active Directory forest but using a noncontiguous namespace. Might require infrastructure changes to DNS and DHCP if provisioning out of band (the client for Configuration Manager 2007 SP1 or later is not installed).

Both features support waking up computers for the following scheduled activities:

• Software update deployments that are configured with a deadline. 
  
  
• Mandatory advertisements for software distribution or a task sequence.
  
  

If you are using Wake On LAN and out of band management in the same site, you must choose how the site will wake up computers for scheduled activities that are configured for Wake On LAN. The following options are located on the Site Properties: Wake On LAN Tab:

• Use power on commands if the computer supports this technology, otherwise use wake-up packets 
  
  
• Use power on commands only 
  
  
• Use wake-up packets only 
  
  

Make your choice based on which feature you are using and whether the computers assigned to the site support the feature. Also take into consideration the advantages and disadvantages of both features as listed above. For example, wake-up packets are less reliable and are not secured, but power on commands take longer to establish and require more processing on the site system server that is configured with the out of band service point.

Wake ON LAN – End to End Configuration at Client Site

Dependencies External to Configuration Manager 2007

Dependency	More Information
Network cards must support the standard Magic Packet format.	All network cards that have the Windows Logo certificate support this Magic Packet format.
Computers must be configured for wake-up packets on the network card and in the computer BIOS.	Refer to your hardware vendor's documentation for information about how to configure this and the wake-up capabilities of the computer.
If you are using Wake On LAN with subnet-directed broadcast, all routers between the site server and target computers must allow IP directed broadcasts, and support IPv4.	Typically, routers are configured to not allow subnet-directed broadcast. Subnet-directed broadcasts are not supported with IPv6.

Configuration Manager 2007 Dependencies

Dependency	More Information
Hardware inventory must be enabled, and completed an inventory schedule.	About Collecting Hardware Inventory How to Configure Hardware Inventory for a Site
The Configuration Manager site must be a primary site.	You can configure child primary sites for Wake On LAN, but not secondary sites. Clients in secondary sites will be sent wake-up packets from their assigned primary site.
Client computers must be running the Configuration Manager 2007 client.	Clients running Systems Management Server (SMS) 2003 do not support Wake On LAN.

It’s biggest challenge that to configure the BIOS settings for all the Desktops when you have different models. I have put my finding here for TOP three Manufactures such as DELL , HP and IBM/Lenovo.

 

The Pre-Requirement at client end includes below two key configurations to be done at each client end.

1) enable Wake-On-Lan in BIOS

2) Configure Power capabilities on Network card Properties from device Manager

 

Okey coming to the first challenge enable Wake-On-Lan in BIOS on three manufactures

1) Dell – dell has DCCM (Dell Client Configuration Utility - Powered by Symantec) and other Management Software it has

2) Lenovo:- I have created a WMI based VBSCRIPT that will Enable WOL BIOS Settings.

' Use at your own risk

'Start Vbscript

'On Error Resume Next

strComputer = "HSCINHYDLT00012"

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\WMI")
   Set colItems = objWMIService.ExecQuery("SELECT * FROM Lenovo_SetBiosSetting")

For Each objItem in colItems
'ObjItem.SetBiosSetting "WakeOnLAN,Disabled"
'ObjItem.SetBiosSetting "WakeOnLAN,Disable"
ObjItem.SetBiosSetting "WakeOnLAN,Enable"
ObjItem.SetBiosSetting "WakeOnLAN,Enabled"
Next

‘end vbscript

3) HP : BiosConfigUtility.EXE a tool from HP

need to show the configuration file to enable the settings

English
S5 Wake on LAN
    *Enable
    Disable

 

Save above fourlines in a text file as CONFIG.TXT.

execute the below COMMAND LINE.

BiosConfigUtility.exe /SetConfig:CONFIG.TXT

and above all can be advertise as software distribution package by creating manufacture based collections.

 

Now the Next key gole is to Configure Power capabilities on Network card Properties from device Manager.

to do this below script can be usefull** test and use with your own risk

‘vbscript start

 

Option Explicit

Dim colNetworkAdapters
Dim objNetworkAdapter

Dim strDevInstanceName
Dim strNetworkAdapterID

'Query for all of the Win32_NetworkAdapters that are wired Ethernet (AdapterTypeId=0 corresponds to Ethernet 802.3)
Set colNetworkAdapters = GetObject("WinMgmts:{impersonationLevel=impersonate}//./root/Cimv2")_
.ExecQuery("SELECT * FROM Win32_NetworkAdapter WHERE AdapterTypeId=0")

WScript.Echo "Enabling WoL for the following adapters:"

For Each objNetworkAdapter In colNetworkAdapters
            WScript.Echo "  " & objNetworkAdapter.Name & " [" & objNetworkAdapter.MACAddress & "]"

            strNetworkAdapterID = UCase(objNetworkAdapter.PNPDeviceID)

            'Query for all of the MSPower_DeviceWakeEnable classes
            Dim colPowerWakeEnables
            Dim objPowerWakeEnable

            Set colPowerWakeEnables = GetObject("WinMgmts:{impersonationLevel=impersonate}//./root/wmi")_
            .ExecQuery("SELECT * FROM MSPower_DeviceWakeEnable")
            'Compare the PNP Device ID from the network adapter against the MSPower_DeviceEnabled instances
            For Each objPowerWakeEnable In colPowerWakeEnables
                        'We have to compare the leftmost part as MSPower_DeviceEnabled.InstanceName contains an instance suffix
                        strDevInstanceName = UCase(Left(objPowerWakeEnable.InstanceName, Len(strNetworkAdapterID)))
                        'Match found, enable WOL
                        If StrComp(strDevInstanceName, strNetworkAdapterID)=0 Then
                                    objPowerWakeEnable.Enable = True
                                    objPowerWakeEnable.Put_           'Required to write the value back to the object
                        End     If
            Next
            'Query for all of the MSNdis_DeviceWakeOnMagicPacketOnly classes
            Dim colMagicPacketOnlys
            Dim objMagicPacketOnly
            Set colMagicPacketOnlys = GetObject("WinMgmts:{impersonationLevel=impersonate}//./root/wmi")_
            .ExecQuery("SELECT * FROM MSNdis_DeviceWakeOnMagicPacketOnly")
            'Compare the PNP Device ID from the network adapter against the MSNdis_DeviceWakeOnMagicPacketOnly instances
            For Each objMagicPacketOnly In colMagicPacketOnlys
                        'We have to compare the leftmost part as MSNdis_DeviceWakeOnMagicPacketOnly.InstanceName contains an instance suffix
                        strDevInstanceName = UCase(Left(objMagicPacketOnly.InstanceName, Len(strNetworkAdapterID)))
                        'Match found, enable WOL for Magic Packets only
                        If StrComp(strDevInstanceName, strNetworkAdapterID)=0 Then
                                    objMagicPacketOnly.EnableWakeOnMagicPacketOnly = True  'Set to false if you wish to wake on magic packets AND wake patterns
                                    objMagicPacketOnly.Put_             'Required to write the value back to the object
                        End     If
            Next
Next

 

‘vbscript end

High level of Tech Talk :- Take this Print

Communication errors between Site’s
SQL Server Errors

For Every Term you need to get a log file Name, Glossary should learn it

Site Server issues :-

1. Not able to connect to the Console
2. Site is not sending status messages, the procedure to confirm and the default report
3. Site Server Slow or CPU High Utilization
4. backlogs finding
5. Backlogs Story…
6. MY Script to check the Backlogs
7. Database errors related to Site Server and SQL
8. Importance of SMS Provider
9. Collections are not appearing in the hierarchy log file
10. Some of IMP Log Files
11. Status messages not for set to clear you must understand what happens when we set to clear and act to the situation
12. SMS 2003 Troubleshooting Workflow
13. News / MYITForum Group Importance
14. Backup of Sites
15. Uninstallation of Sites
16. Planning of Sites “”Configuration Manager Preplanning Worksheets””
17. Primary Site
18. Secondary Site
19. Just the DP
20. Boundaries
21. Boundary Overlapping
22. FSP and it’s history why we need FSP?
23. Site to Site key exchange
24. Possibility of NLBs and for MP and WSUS
    
25. OSD Coverage and steps
26. lets try MDT also
27. If possible Lets try Native Mode also

Client Issues:-

1. Client Installation Methods
2. Software Update point Based Client installation
3. Disadvantages of Client Push
4. Client installation Log files

Client Installation Troubleshooting:-

1. WMI Connectivity check
2. WMI Rebuild
3. WMI Log Files
4. MOF FILES RELATED TO WMI
5. Drive Space issues, FS.exe
6. Permissions, admin$, 64 bit ccm folder location & 32 bit control panel
7. Not found MP
8. not detecting the site code
9. client not assigning to site code and trying to install\
10. possible of command line option of ccmsetup.exe
11. ccmclean.exe
12. IMP log Files related to Client
13. patching related log file and issue
14. patching is failing to install
15. is sms/sccm client is manacle of things to automate?
16. Trace32.exe
17. Client Status Reports
18. SMS Client Health Monitor
19. Some of the “”State Messages in Configuration Manager 2007”

 

• MP Troubleshooting
• Reporting Point Troubleshooting
• Secondary Site Installation
• Ports Document
• patching the Systems
• Workstation Patching style and server patching status
• maintenance window
• SCCM R2 Advantages
• SCCM Features comparison with SMS

 

Inventory:-

Software inventory
Hardware inventory
SMS_def.mof File and tool from MYITFORM for registry key
mof compile
no idmif
idmif

 

 

Log files for Communication

1. Component Configuration Manager Troubleshooting
2. ADMINUI.log file
3. Delegation of Configuration / SMS Console
4. Status messages

Package Distribution Issues

1. Procedure to Confirm the Package  is reached to the DP And  Log File
2. Procedure to Package Source Version and Current Version finding
3. What is refresh and Update package and resend to DP?
4. How to Distribute the Packages to Multiple DPs? DP Groups?
5. IMP Log Files related to Distribution:- Sender and Scheduler and Distmgr.log
6. Compressed files like .Pck story
7. What is the Compressed Package?
8. What is Binary replication in Distribution?
9. What is the Package Creation Flow, I mean what kind of files gets changed in the work flow, like Dispooler and etc…
10. Importance of BITS on DP
11. Distribution points Related reports to the DP and Database Tables
12. Troublshooting steps for a Package is not reaching DP
13. Download package and run from DP
14. Virtual Applications and relationship with DP
15. In the Event of Distribution Point OS Failed how to proceed further to get it corrected?
16. Document from my blog DP in and Outs

Distribution Point Family and its Terms:-

 

1. Understanding of Advertisement?
2. Standard DP
3. Protected DP
4. Branch Distribution Point
5. peer DP
6. Nomad DP
7. Check in IE
8. More than 700 do we need another DP?
9. DFS and DP ?
10. File Server and DP ?
11. For each above Log files

Advertisement:-

1. Working style of Advertisement..
2. When we advertise the Command line Options that we can see…. for executing style
3. Default report that we can check for advertisement
4. Log files for advertisement
5. From console view of Advertisement status
6. If Advertisement failed how to make sure it to run again
7. Suppressing the Advertisement
8. how to use toolkit to see advertisement history
9. related information in control panel for advertisement
10. maintenance of Cache folder
11. If report is not showing more than 10000 rows for any advertisement
12. Advertisement to advertise Users and User groups
13. Advertisement interaction with user
14. Advertisement running with the administrator privileges and Logged in user account rights
15. Administrator Flow for Advertisement
16. advertisement to be appear in the add and remove programs

 

Other Topics

WOL in and Outs from my blog document

MP Issues

DP Issues

Preinst.exe

How to find the What deployment that are using… currentsly for this month

notification for Technet patching

PXE Issues and ports and fast port and iphelper

Wake on LAN ports and difference and unicast and subnet broad cast

Schema Extention two methods

Software Updates desgin and flow for how to create and deploy with the reports and log files

Small talk on OBT

SCCM Client Installation Batch Script

Psexec tool

psexplorer

Collections Database Table

Right Click Tools

System Center Clint Center

SCCM R3

Configuration Manager Preplanning Worksheets

Finally Glossary

IP Sec

Isolation of Domains

VLans

wdsutil

Multicasting

WOL:: Wake ON LAN :: Ins and Outs

With Wake On LAN feature, Configuration Manager 2007 activities can be scheduled to take place outside business hours.

1.                 Wake On LAN (WOL) benefits:

·         Achieve a higher success rate for Configuration Manager Activities.

·         Reduces the associated network traffic during business hours.

·         Conserve power by not requiring computers to be left on outside business hours.

 

2.                 Wake On LAN can be used on the following scenarios:

·         Software updates deployment with deadline:

Configuration manager 2007 Send a wake-up transmission prior to the configured deadline for a software update deployment

Wake-up packets are sent only to computers that require the software updates and have not already installed them.

·         Mandatory advertisement for software distribution or task sequence:

Configuration manager 2007 Send a wake-up transmission prior to the configured schedule of a mandatory advertisement, which can be for software distribution or a task sequence.

 

3.                 Walk On LAN overview:

·         Wake-up packet transmissions are sent only from primary site servers only.

·         The default port used by Configuration Manager 2007 to send wake-up packets to target computers is UDP port 9 and can be changed form site settings

·         Secondary site servers or other computers cannot be configured as proxies to send wake-up packets.

·         Wake-up transmissions are not sent to clients when they are on the Internet. Wake On LAN transmissions are always sent at the scheduled time.

·         Wake On LAN independently enabled or disabled for any site in the Configuration Manager 2007 hierarchy

·         Due to advertisements and software update deployments are inherited to child sites, the site server in the child site is responsible for sending the wake-up transmissions to its assigned clients if the site is enabled for Wake On LAN.

·         If Wake On LAN is disabled on a child site, child site will not send the wake-up transmissions to its assigned clients, and client computers in that site will not be sent wake-up packets.

·         ConfigMgr 2007 Client registers the system as busy for the specific wake-up task it receives, this prevents the computer from going back into a sleep state based on its power management settings before the task can complete.

·         Wake On LAN does not return computers to a sleep state and you need to configure power management schemes to shut down or hibernate after a period of inactivity.

·         Computers are woken up before the scheduled activity by 3 minutes before the scheduled activity to ensure that they have completed startup, this setting can be configured with the transmission offset option in a Wake On LAN advanced setting.

·         Mobile devices do not support Wake On LAN capability.

·         Clients running Systems Management Server (SMS) 2003 do not support Wake On LAN.

·         Wake On LAN in ConfigMgr 2007 supports waking up computers in sleep states S1 through S5

4.                 WOL transmission methods

 

·         Unicast transmission

o    Unicast transmission wake-up packet uses the IP address of the target computer from hardware inventory to route to the target computer's subnet, and it uses the Media Access Control (MAC) address of the target computer from hardware inventory to construct the wake-up packet. When the wake-up transmission reaches the target computer's subnet, the wake-up packet is sent directly to the target computer, and If the target computer has changed its IP address since it last sent its inventory information, the wake-up packet will reach the wrong computer but it will not wake it up because the MAC address in the wake-up packet transmission will not match.

o    Switches must forward UDP packets

o    Unicast transmission is secure solution than subnet-directed broadcasts because the packet is sent directly to a computer rather than to all computers on a subnet.

o    Consumes less network bandwidth than subnet-directed broadcast transmissions.

o    Unicast transmission is supported with IPv6.

 

·         Subnet-directed broadcasts

o    Subnet-directed broadcasts transmission wake-up packet uses the Media Access Control (MAC) address and IP subnet address of the target computer from hardware inventory,  The wake-up transmission is sent to the computer's last known subnet, and it is then broadcast to all computers on that subnet, and the computer that has the MAC address specified in the wake-up transmission will respond.

o    Routers must be configured to forward subnet-directed broadcasts.

o    Subnet-directed broadcasts are not supported with IPv6

5.                 Wake On LAN Prerequisites

·         Network cards must support the standard magic packet format.

·         Computers must be configured for wake-up packets on the network card and in the computer BIOS.

·         If subnet-directed broadcast configured, all routers between the site server and target computers must allow IP directed broadcasts, and support IPv4.

·         Hardware inventory must be enabled, and completed an inventory schedule.

·         Client computers must be running the Configuration Manager 2007 client. 

6.                 Sleep States for Wake On LAN

 

·         S0: The computer is on and fully functional.

·         S1: The computer appears to be off with the CPU stopped. RAM is refreshed, and the computer is running in a low power mode.

·         S2: The computer appears to be off with the CPU stopped. RAM is refreshed, and the computer is running in a lower power mode than S1.

·         S3 (Standby): The computer appears to be off with no power to the CPU. RAM is in slow refresh.

·         S4 (Hibernate):  The computer appears to be off with no power to the hardware. System memory has been saved as a temporary file on the hard disk.

·         S5 (Off):  The computer is off with no power to the hardware, and the operating system has been shut down without saving system memory to disk.

-------------------
Thanks,

Stephen Leacock  - "I detest life-insurance agents: they always argue that I shall some day die, which is not so."

All the Third-Party Solutions for SCCM & SMS

Web Sites:

MyITForum is the premier online destination for IT professionals responsible for managing their corporations' Microsoft Windows systems; it is especially useful for IT professionals working with Microsoft Systems Management Server. (http://www.myitforum.com)

FAQshop endeavors to provide a "one-stop-shop" for systems management questions, answers, and utilities. (http://www.faqshop.com)

SMS Alliance is a consortium of companies that leverage joint resources to strengthen the capabilities and benefits of SMS. Their mission is to provide organizations with the best-of-breed solutions and services to enhance and extend SMS 2003. (http://www.sms-alliance.com)

1E is one of the founding members of the SMS Alliance, 1E is a company on the cutting edge of systems management. It enhances and extends Microsoft management and deployment technologies, delivering advanced automation and reporting across the enterprise. (www.1e.com)

Macrovision Corporation, another founding member of the SMS Alliance, Macrovision Corporation is a recognized leader in software deployment packaging, software installation, and software updating solutions. They offer one of the best software packaging tools with AdminStudio.
(http://www.macrovision.com/)

PS'SOFT, as a founding member of the SMS Alliance, offers extenders for SMS 2003 that focus on IT asset management. They offer a web-based software cataloging system called SMS Software Requests. (www.pssoft.com)

Vintela, another founding member of the SMS Alliance, Vintela offers a seamless solution to extend security and compliance of Microsoft Active Directory to Unix, Linux, and other platforms and applications. They offer solutions that help IT administrators manage Unix, Linux, and MAC systems using SMS 2003. Vintela is now part of Quest Software. (www.vintela.com)

iAnywhere, the last founding member of the SMS Alliance, iAnywhere offers frontline security and management to SMS and provides extensions to manage your enterprise's mobile and wireless devices through SMS. (www.iAnywhere.com)

AppDeploy is the Internet resource to go to when you need to script or repackage an application for distribution. Among other points of interest at the site is a massive library of applications, sorted by application name and vendor name. For each application listed, you'll find a community-based thread discussing the best practices, links, scripts, and challenges met/overcome with working with the application in regard to installation scripting/repackaging.(http://www.appdeploy.com/)

DesktopEngineer is perhaps one of the best resources in the Windows Installer arena. This site offers a wealth of information on Windows Installer technology, techniques, and troubleshooting tips. I have noticed that he is starting to increase the content related to Microsoft's upcoming PowerShell scripting language. (http://www.desktopengineer.com/)

Tools

SMSView is a utility that is used to extend the functionality of the Microsoft Systems Management Server 2003 advanced client. SMSView allows you to perform the following actions on an SMS advanced client: All nonadmin users to view current mandatory assignments and advertisement status, View advertisement history (past 60 days), View current mandatory assignments, Rerun advertisements, Remote operations (remotely view and manage the SMS client), Display hardware/software inventory status, Display management point/proxy management point, Repair the SMS advanced client. (http://www.smsview.com/)

SMS 2003 Monster MOF is a MOF file that contains several new classes of MOF that will improve SMShardware inventory capabilities. The Monster MOF will enhance inventory data without requiring intimate knowledge of the SMS_DEF.MOF file. (www.smsexpert.com)

SMS 2003 Web Remote Tools assist SMS administrators and allow client administration from a web page. (http://www.myitforum.com/articles/19/view.asp?id=8662)

Corey Becht's Right-Click Tools is one of the best set of tools for all SMS administrators. This tool allows you to right click on any collection or individual PC within the SMS Administrator console and initiate hardware inventory, reassign the site code, restart the SMS Agent Host service, rerun advertisements without modifying the advertisement, perform discovery, initiate software inventory, create file collections, monitor software metering usage, refresh machine policies, evaluate policies, update Windows installer sources,change port number, and change cache size.These tools can run per computer resource or for all the members of a collection.(www.myitforum.com/articles/8/view.asp?id=7099)

Microsoft SMS Toolkit 2: Microsoft released a very nice set of tools for SMS called the SMS Toolkit version 2 . It contains the following tools: IIS Lockdown 2.1 Template, URLScan 2.5 Template, Policy Spy, SMS Trace, Advanced Client and Management Point Cleaner, Advanced Client Spy, Policy Verifier, Send Schedule, Management Point Spy, Set Preferred Distribution Point and CAP, Delete Certificate, Patch Management Evaluation, Delete Group Class, Transfer SMS ID, Package Loader, Management Point Troubleshooter, Client Site Assignment Verifier, Site Boundary Tool, Create Secondary Site Tool, Create SMS Address Tool.(www.microsoft.com/smserver/downloads/2003/tools/toolkit.mspx)

Security Logon Audit Tool (SLAT) extends SMS hardware inventory to include user logon information.This data can be used in web reports and queries. The tool includes the following samplereports: Top users for all systems, User logon information for a specific computer, Systems where the last logged-on user is not the top user, Systems where a specific user has logged on SLAT searches the security event log for the 528 event, which is created when user logon events occur and is enabled via Group Policy. (http://www.systemcentertools)

Enhanced System and User Discovery Tools, out of the box, SMS 2003 does a pretty good job of discovering systems from Active Directory. It's not perfect, though—there are a few gaps in its methods. The Enhanced System Discovery tool, assists in filling these gaps. Out of the box, SMS 2003 does not perform Windows NT 4 domain discovery. This tool solves that by enumerating all machines from a list of NT 4 domains, resolving their IP addresses from DNS or WINS, and creating data discovery records for each system. (http://www.systemcentertools/)

BITS Bandwidth Manager is an SMS Installer script that lets you throttle BITS bandwidthon Windows XP SP2 systems. You do not need to manually adjust any settings. The script takes care of the Registry key manipulation for you.(http://www.myitforum.com/inc/upload/11332BITSManager.zip)

1E SMSWakeUp: this WOL product is able to turn on computers after they have been shut down by users. The wake cycle can be triggered on a regular schedule to power up systems in preparation for the workday, or to perform software deployment activities. (http://www.1e.com/)

1E NightWatchman: Since we are talking about waking systems that have been shut down, it maybe a good practice to examine how best to shut down those systems in the first place. Why dowe want to shut down systems? We do this to enforce reboot cycles and to save energy costs. (http://www.1e.com/)

1E SMSNomad Branch: Some offices may not have the server hardware to allow for a Distribution Point (DP). But those offices may have a substantial number of users and/or be separated from the rest of the network by a low-speed or saturated WAN link, which you would rather not send multiple copies of a package across. SMSNomad Branch acts similar to a peer-to-peer network, allowing other computers to become DPs. If one machine is shutdown, another is selected as the DP. Included in this technology is multicast, increasing its efficiency to reduce network traffic on the local network segment. (http://www.1e.com/)

1E OSD Plus Pack: This is an enhancement to the SMS OSD Feature Pack. It allows you to leverage the SMS OSD Feature Pack in offices that do not have DPs. OSD Plus Pack offers similar functionality to SMSNomad Branch, but also has a few other applications bundledwith it: State Migration Editor, which is an interface for the User State Migration Tool, AppMigrator, which allows the automatic reinstallation of applications after OS imaging, PXE Lite, which is a local PXE server to allow deployment of OS images to bare-metalmachines booted from the network PXE server. (http://www.1e.com/)

SMS Companion 2006: This product provides WOL capabilities, similar to 1E's SMSWakeUp, but leverages slightly different technologies behind the scenes. A key difference is that SMS Companion puts systems in hibernation, rather than powering them off. The following are some of the key applications included with this product:Wake-on-Schedule: Allows clients to come out of a hibernation state. Service Windows: Allows you to restrict the SMS inventory and software distributions from happening during specific time periods, to reduce or eliminate user interruptions. Load Balancing: Allows you to reduce peak network and SMS server loading by making sure that the clients use these resources in a controlled manner. (http://www.smsexpert.com/)

Quest Management Xtensions for SMS: Since Windows platforms are not the only systems in an enterprise, you may need a way tomanage other platforms, such as Unix, Linux, and Mac OS X. These management extensions offer that capability for SMS 2003. One of the unique aspects of this product is its support route: first-level support is handled by Microsoft Product Support Services. (http://www.quest.com/quest-management-xtensions-for-sms)

-------------------
Thanks,
http://sccm07.blogspot.com/

Microsoft System Center Configuration Manager 2007 Exam Code 70-401

 

Skills measured

This exam measures your ability to accomplish the technical tasks listed in the following table. The percentages indicate the relative weight of each major topic area on the exam.

 

 

Skills measured by Exam 70-401
Deploying a System Center Configuration Manager 2007 (SCCM) Server (9 percent)
Set up and configure an Active Directory schema.
Migrate from an SMS 2003 hierarchy to SCCM 2007.
Configure an SCCM hierarchy.
Set up and configure security accounts.
Configuring an SCCM Infrastructure (19 percent)
Configure client agents.
Configure site boundaries.
Configure core site system roles.
Configure discovery methods.
Configure client installation.
Configure SCCM infrastructure for Internet-based client management.
Managing Resources (14 percent)
Build an SCCM collection by using queries.
Meter software usage.
Manage assets.
Manage inventory flow.
Manage client agents.
Distributing Applications (17 percent)
Manage packages.
Manage programs.
Manage advertisements.
Schedule distribution.
Track success and failure rates for distribution.
Manage distribution points.
Deploying Operating Systems (13 percent)
Capture a reference computer image.
Manage task sequences.
Configure site system roles related to deploying operating systems.
Deploy operating system packages.
Customize user state migration.
Deliver applications.
Securing a Network Infrastructure (13 percent)
Configure Network Access Protection (NAP).
Maintain NAP.
Migrate from Inventory Tool for Microsoft Update (ITMU) to Windows Software Update Services (WSUS).
Deploy software updates.
Manage vulnerability compliance.
Managing and Maintaining an SCCM Infrastructure (15 percent)
Manage system health.
Configure automatic maintenance tasks.
Create custom reports.
Maintain clients.
Manage systems by using configuration management.
Manage Wake on LAN.

 

 

-------------------
Thanks,
http://paddymaddy.blogspot.com/

SCCM It's Ports ; SCCM using Ports

 

Configurable Ports

Configuration Manager 2007 allows you to configure the ports for the following types of communication:

• Client to site system
  
• Client to Internet (as proxy server settings)
  
• Software update point to Internet (as proxy server settings)
  
• Software update point to WSUS server
  
• Client to reporting point
  

By default, the HTTP port used for client to site system communication is port 80 and the default HTTPS port is 443. Ports for client-to-site system communication over HTTP or HTTPS can be changed during Setup or in the Site Properties for your Configuration Manager site.

Reporting point site system roles have configurable port settings for HTTP and HTTPS communication defined on the reporting point site system role property page. By default, users connect to the reporting point using the HTTP port 80 and HTTPS port 443. These ports are defined during installation only. To redefine the reporting point communication port, the reporting point site system must be deleted and reinstalled.

Non-Configurable Ports

Configuration Manager does not allow you to configure ports for the following types of communication:

• Site to site (primary-to-primary or primary-to-secondary)
  
• Site server to site system
  
• Site server to site database server
  
• Site system to site database server
  
• Configuration Manager 2007 console to SMS Provider
  
• Configuration Manager 2007 console to the Internet
  

Port Details

The port listings that follow are used by Configuration Manager 2007 and do not include information for standard Windows services, such as Active Directory group policy and Kerberos authentication. For information about Windows Server services and ports, see http://go.microsoft.com/fwlink/?LinkID=123652.

The following diagram indicates connections between Configuration Manager 2007 computers. The number for the link corresponds to the table that lists the ports for that link. The arrows between the computers represent the direction of the communication.

• -- > indicates one computer initiates and the other computer always responds
  
• < -- > indicates that either computer can initiate
  

1. Site Server < -- > Site Server

Description	UDP	TCP
Server Message Block (SMB)	--	445
Point to Point Tunneling Protocol (PPTP)	--	1723 (See note 3, RAS Sender)

2. Primary Site Server -- > Domain Controller

Description	UDP	TCP
Lightweight Directory Access Protocol (LDAP)	--	389
LDAP (Secure Sockets Layer [SSL] connection)	636	636
Global Catalog LDAP	--	3268
Global Catalog LDAP SSL	--	3269
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

3. Site Server < -- > Software Update Point

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
Hypertext Transfer Protocol (HTTP)	--	80 or 8530 (See note 4, Windows Server Update Services)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 or 8531 (See note 4, Windows Server Update Services)

4. Software Update Point -- > Internet

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 1, Proxy Server port)

5. Site Server < -- > State Migration Point

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135

6. Client -- > Software Update Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 or 8530 (See note 4, Windows Server Update Services)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 or 8531 (See note 4, Windows Server Update Services)

7. Client -- > State Migration Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)
Server Message Block (SMB)	--	445

8. Client -- > PXE Service Point

Description	UDP	TCP
Dynamic Host Configuration Protocol (DHCP)	67 and 68	--
Trivial File Transfer Protocol (TFTP)	69 (See note 5, Trivial FTP (TFTP) Daemon)	--
Boot Information Negotiation Layer (BINL)	4011	--

9. Site Server < -- > PXE Service Point

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

10. Site Server < -- > System Health Validator

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

11. Client -- > System Health Validator

The client requires the ports established by the Windows Network Access Protection client, which is dependent upon the enforcement client being used. For example, DHCP enforcement will use ports UDP 67 and 68. IPSec enforcement will use ports TCP 80 or 443 to the Health Registration Authority, port UDP 500 for IPsec negotiation and the additional ports needed for the IPsec filters. For more information, see the Windows Network Access Protection documentation. For help with configuring firewalls for IPsec, see http://go.microsoft.com/fwlink/?LinkId=109499.

12. Site Server < -- > Fallback Status Point

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

13. Client -- > Fallback Status Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)

14. Site Server -- > Distribution Point

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

15. Client -- > Distribution Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)
Server Message Block (SMB)	--	445
Multicast Protocol	63000-64000	--

16. Client -- > Branch Distribution Point

Description	UDP	TCP
Server Message Block (SMB)	--	445

17. Client -- > Management Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)

18. Client -- > Server Locator Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)

19. Branch Distribution Point -- > Distribution Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)

20. Site Server -- > Provider

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

21. Server Locator Point -- > Microsoft SQL Server

Description	UDP	TCP
SQL over TCP	--	1433

22. Management Point -- > Microsoft SQL Server

Description	UDP	TCP
SQL over TCP	--	1433

23. Provider -- > SQL Server

Description	UDP	TCP
SQL over TCP	--	1433

24. Reporting Point -- > SQL Server / Reporting Services Point -- > SQL Server

The reporting point and the Reporting Services point use the same ports. The Reporting Services point is applicable to Configuration Manager 2007 R2 only.

Description	UDP	TCP
SQL over TCP	--	1433

25. Configuration Manager Console -- > Reporting Point

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)

26. Configuration Manager Console -- > Provider

Description	UDP	TCP
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

27. Configuration Manager Console -- > Internet

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80

28. Primary Site Server -- > Microsoft SQL Server

Description	UDP	TCP
SQL over TCP	--	1433

29. Management Point -- > Domain Controller

Description	UDP	TCP
Lightweight Directory Access Protocol (LDAP)	--	389
LDAP (Secure Sockets Layer [SSL] connection)	636	636
Global Catalog LDAP	--	3268
Global Catalog LDAP SSL	--	3269
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

30. Site Server -- > Reporting Point / Site Server -- > Reporting Services Point

The reporting point and the Reporting Services point use the same ports. The Reporting Services point is in Configuration Manager 2007 R2 only.

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

31. Site Server -- > Server Locator Point

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

32. Configuration Manager Console -- > Site Server

Description	UDP	TCP
RPC (initial connection to WMI to locate provider system)	--	135

33. Software Update Point -- > WSUS Synchronization Server

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 or 8530 (See note 4, Windows Server Update Services)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 or 8531 (See note 4, Windows Server Update Services)

34. Configuration Manager Console -- > Client

Description	UDP	TCP
Remote Control (control)	2701	2701
Remote Control (data)	2702	2702
Remote Control (RPC Endpoint Mapper)	--	135
Remote Assistance (RDP and RTC)	--	3389

35. Management Point < -- > Site Server

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
RPC Endpoint mapper	--	135
RPC	--	DYNAMIC
Server Message Block (SMB)	--	445

36. Site Server -- > Client

Description	UDP	TCP
Wake on LAN	9 (See note 2, Alternate Port Available)	--

37. Configuration Manager client -- > Global Catalog Domain Controller

A Configuration Manager client does not contact a global catalog server when it is a workgroup computer or when it is configured for Internet-only communication.

Description	UDP	TCP
Global Catalog LDAP	--	3268
Global Catalog LDAP SSL	--	3269

38. PXE Service Point -- > Microsoft SQL Server

Description	UDP	TCP
SQL over TCP	--	1433

39. Site Server < -- > Asset Intelligence Synchronization Point (Configuration Manager 2007 SP1)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

40. Asset Intelligence Synchronization Point < -- > System Center Online (Configuration Manager 2007 SP1)

Description	UDP	TCP
Secure Hypertext Transfer Protocol (HTTPS)	--	443

41. Multicast Distribution Point -- > Microsoft SQL Server(Configuration Manager 2007 R2)

Description	UDP	TCP
SQL over TCP	--	1433

42. Client status reporting host --> Client (Configuration Manager 2007 R2)

Description	UDP	TCP
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC
ICMPv4 Type 8 (Echo) or ICMPv6 Type 128 (Echo Request)	n/a	n/a

43. Client status reporting host --> Management Point (Configuration Manager 2007 R2)

Description	UDP	TCP
Server Message Block (SMB)	--	445
NetBIOS Session Service	--	139

44. Client status reporting host --> Microsoft SQL Server (Configuration Manager 2007 R2)

Description	UDP	TCP
SQL over TCP	--	1433

45. Site Server < -- > Reporting Services Point (Configuration Manager 2007 R2)

(See note 6, Communication between the site server and site systems)

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

46. Configuration Manager Console -- > Reporting Services Point (Configuration Manager 2007 R2)

Description	UDP	TCP
Hypertext Transfer Protocol (HTTP)	--	80 (See note 2, Alternate Port Available)
Secure Hypertext Transfer Protocol (HTTPS)	--	443 (See note 2, Alternate Port Available)

47. Reporting Services Point -- > Microsoft SQL Server (Configuration Manager 2007 R2)

Description	UDP	TCP
SQL over TCP	--	1433

Notes

1 Proxy Server port    This port cannot be configured but can be routed through a configured proxy server.

2 Alternate Port Available    An alternate port can be defined within Configuration Manager for this value. If a custom port has been defined, substitute that custom port when defining the IP filter information for the IPsec policies.

3 RAS Sender    Configuration Manager 2007 can also use the RAS Sender with Point to Point Tunneling Protocol (PPTP) to send and receive Configuration Manager 2007 site, client, and administrative information through a firewall. Under these circumstances, the PPTP TCP 1723 port is used.

4 Windows Server Update Services    WSUS can be installed either on the default Web site (port 80) or a custom Web site (port 8530).

After installation, the port can be changed.

If the HTTP port is 80, the HTTPS port must be 443.

If the HTTP port is anything else, the HTTPS port must be 1 higher—for example 8530 and 8531.

5 Trivial FTP (TFTP) Daemon    The Trivial FTP (TFTP) Daemon system service does not require a user name or password and is an integral part of the Windows Deployment Services (WDS). The Trivial FTP Daemon service implements support for the TFTP protocol defined by the following RFCs:

• • RFC 350—TFTP
  
• • RFC 2347—Option extension
  
• • RFC 2348—Block size option
  
• • RFC 2349—Time-out interval, and transfer size options
  

Trivial File Transfer Protocol is designed to support diskless boot environments. TFTP Daemons listen on UDP port 69 but respond from a dynamically allocated high port. Therefore, enabling this port will allow the TFTP service to receive incoming TFTP requests but will not allow the selected server to respond to those requests. Allowing the selected server to respond to inbound TFTP requests cannot be accomplished unless the TFTP server is configured to respond from port 69.

6 Communication between the site server and site systems    By default, communication between the site server and site systems is bi-directional. The site server initiates communication to configure the site system, and then most site systems connect back to the site server to send back status information. Reporting points and distribution points do not send back status information. If you select Allow only site server initiated data transfers from this site system on the site system properties, the site system will never initiate communication back to the site server.

7 Ports used by distribution points for application virtualization streaming    A distribution point enabled to support application virtualization can be configured to use either HTTP or HTTPS. This feature is available in Configuration Manager 2007 R2 only.

Configuration Manager Remote Control Ports

When you use NetBIOS over TCP/IP for Configuration Manager 2007 Remote Control, the ports described in the following table are used.

Description	UDP	TCP
RPC Endpoint Mapping	--	135
Name resolution	137	--
Messaging	138	--
Client Sessions	--	139

AMT Out of Band Management Ports (Configuration Manager 2007 SP1)

When you use the out of band management feature in Configuration Manager 2007 SP1, the following ports are used.

A. Site Server <--> Out of Band Service Point

Description	UDP	TCP
Server Message Block (SMB)	--	445
RPC Endpoint Mapper	135	135
RPC	--	DYNAMIC

B. AMT Management Controller --> Out of Band Service Point

Description	UDP	TCP
Provisioning	--	9971 (configurable)

C. Out of Band Service Point --> AMT Management Controller

Description	UDP	TCP
Discovery	--	16992
Power control, provisioning, and discovery	--	16993

D. Out of Band Management Console --> AMT Management Controller

Description	UDP	TCP
General management tasks	--	16993
Serial over LAN and IDE redirection	--	16995

Ports Used by Windows Servers 

The following table lists some of the key ports that Windows Server uses and their respective functions. For a more complete list of Windows Server services and network ports requirements, see http://go.microsoft.com/fwlink/?LinkID=123652.

Description	UDP	TCP
Domain Name System (DNS)	53	--
Dynamic Host Configuration Protocol (DHCP)	67 and 68	--
Windows Internet Name Service (WINS)	138	--
NetBIOS datagrams	138	--
NetBIOS datagrams	--	139

Connecting with Microsoft SQL Server

If you use the TCP/IP Net-Library, enable port 1433 on the firewall. Use the Hosts file or an advanced connection string for host name resolution.

If you use named pipes over TCP/IP, enable port 139 for NetBIOS functions. NetBIOS should be used only for troubleshooting Kerberos issues.

Note
TCP/IP is required for network communications to allow Kerberos authentication. Named pipes communication is not required for Configuration Manager 2007 site database operations and should be used only to troubleshoot Kerberos authentication issues.

By default, SQL Server uses TCP (not UDP) port 1433 to listen on TCP/IP. To change the port, run SQL Server Setup on the server, and then click Change Network Support. If SQL Server uses port 1433, the client Net-Library works. If SQL Server uses a custom port number, the client must specify that port in the Data Source Name (DSN).

Microsoft does not recommend that you enable UDP ports 137 and 138 for NetBIOS name resolution by using B-node broadcasts. Instead, you can use a WINS server or an LMHOSTS file for name resolution.

Installation Requirements for Internet-Based Site Systems

The Internet-based management point, software update point, and fallback status point use the following ports for installation and repair:

• Site server --> site system: RPC endpoint mapper using UDP and TCP port 135.
  
• Site server --> site system: RPC dynamic TCP ports.
  
• Site server < --> site system: Server message blocks (SMB) using TCP port 445.
  

Distribution points do not install until the first package is targeted to them. Package installations on distribution points require the following RPC ports:

• Site server --> distribution point: RPC endpoint mapper using UDP and TCP port 135.
  
• Site server --> distribution point: RPC dynamic TCP ports.

 

-------------------
Thanks,
http://paddymaddy.blogspot.com/