Microsoft System Center Configuration Management l ti liu do ICT24h Team bin son, vi mc ch l chia s n cng ng am mm cng ngh thng tin vi mc ch phi li nhun. Ti liu c vit dnh cho i tng l sinh vin, cc nh qun tr, cc nh qun l{ mun s dng h thng System Center ca Microsoft trong cng vic qun l{ v qun tr ca mnh. iu u tin trc khi c tip v ti liu Microsoft System Center l cn phi c kinh nghim lm qua h thng mng hoc kin thc tng ng vi MCSA tr ln tip cn cc vn . D nhin, trong qu trnh tm hiu chng ti cng c tham kho ti liu t nhiu ngun khc nhau cng nh cc ti liu trn mng khc. Chng ti rt hy vng, vi ti liu ny cc anh ch em c thm c nhiu iu l{ th cn khm ph trong cng ngh.
Gim st h thng vi SCOM (System Center Operations Management) : cung cp cc tnh nng gim st hot ng ca h thng my tnh trong mng. Khng ch vi kh nng qun l{ cc thit b, SCOM cn cung cp kh n ng ICT24H TEAM Page 1
gim st cc ng dng trn h thng mng nh SQL Server, Exchange Server, Active DirectoryBn cnh , vi kh nng cung cp cc biu , cc bo co (Report) ngi qun tr c th xc nh cc nguyn nhn gy li trc khi xy ra v xy dng cc c ch t phc hi phc v cho cng vic ny. Cu hnh tp trung vi SCCM (System Center Configuration Management): cung cp cc tnh nng qun l{ chung ca h thng bao gm cc cng vic nh trin khai cc phn mm a dng, cc bn cp nht t Microsoft cho cc my con, trin khai ci t h iu hnh t xa (Deployment OS) v tch hp chnh sch an ton mng vi Network Access Protection (NAP) c trn Windows 2008. Ngoi ra, cn c cc tnh nng m rng km theo l qun l{ ti sn thng minh, kh nng tit kim nng lng v cui cng l nhng cu hnh hot ng theo mt chun quy c da trn Baseline nh ISO 27001 v an ton thng tin. Bo v d liu SCDPM (System Center Data Protection Manager): cung cp tnh nng sao lu v phc hi cho h thng vi cc kiu sao lu khc nhau nh trn Disk, Tape, SAN; im c bit l h tr thm tnh nng m ha trn cc bn sao lu m bo s an ton cn thit. SCDPM h tr cc kiu sao lu on -site v c off-site; v c th nhanh chng phc hi li thng tin trong mt khong thi gian ngn. o ha SCVMM (System Center Virtual Machine Manager): y l thnh phn khng th thiu trong thi gian gn y, o ha khng ch gip tit kim nng lng, chi ph m cn c c s n nh ca h thng. o ha gip mi vic tr nn n gin hn. Vic o ha khng ch l s dng cc phn mm nh VMWare, Virtual Machine, m cn c cc ng dng c o ha nh Soft-grid, App-Vem n cho ngi dung nhiu s la chn hn v an ton hn. Ngoi nhng sn phn trn, Microsoft cn cung cp cc nhm khc ca System Center nh Microsoft System Center Essential, System Center Service Manager, System Center Capacity Planner phc v cho cc cng vic khc nhau trong doanh nghip. Trong khun kh ca ti liu ny, nhm chng ti ICT24H Team s cung cp ti liu v cc sn phm nghin cu v s c chia thnh tng phn ring bit. Cho ti thi im ny cc ti liu bao gm: SCCM, SCOM, v SCDPM, tuy nhin do hn ch v thit b v thi gian nn c nhng tnh nng hoc c nhng im cha chnh xc rt mong nhn c s gp { ca cc anh ch em c th hon thin hn.
ICT24H TEAM
Page 2
ICT24H TEAM
Page 3
Chun b ci t SCCM
SCCM 2007 c pht trin t phin bn SMS2003 v c s dng trn nn tng Windows 2003 SP1 tr ln, tuy nhin tin trong vic s dng v tm hiu nn s dng phin bn Windows 2003 SP2 nh my v c th m rng cc dch v khc ca SCCM nh NAP (Network Access Protection) tr n Windows 2008. Trc khi ci t SCCM mt s cc yu cu sau y cn phi c m bo: Cp nht cc bn updates ca Windows. Ci t IIS, kch hot ASP v WebDav. Ci t b DotNet Framework Ci t SQL Server 2005 SP1 tr ln vi phin bn SCCM ch cn SQL Server Express l . Ci t WSUS (Windows Server Update Services) Chun b Domain v m rng Scheme cho Domain. ng truyn Internet v trong qu trnh ci t s download cc bn cp nht cho SCCM. Cho ti thi im vit bi ny, th phin bn mi nht l SCCM 2007 R3 phi ci t phin bn SCCM 2007 SP2 ri mi c th upgrade ln R3. Nu mun s dng phin bn SCCM 2007 R3, th nn ci SQL Server 2008 hoc SQL Server Express 2008. Trong khun kh bi ny, chng ti cha cp n cc vn thit k hot ng ca SCCM. Do , chng ta bt u bng vic ci t v s dng SCCM 2007 ngay trn mi trng mng. M hnh gm c 1 Domain Controller, 1 SCCM Server v cc my Clients. Cng vic ci t SCCM Server. Gi s SCCM Server c Join vo Domain v cp nht cc bn updates ca Windows bao gm c phin bn DotNet Framework.
Ci t IIS
ci t IIS, vo trong Control Panel | Add or Remove Program | Add or Remove Windows Components | Applications.
ICT24H TEAM
Page 4
Kch hot WebDav Sau khi ci t IIS xong, ta cn phi kch hot tnh nng WebDav ca IIS bng cch vo phn Extenssion v chn WebDav, chn Allow.
ICT24H TEAM
Page 5
ICT24H TEAM
Page 6
ICT24H TEAM
Page 7
ICT24H TEAM
Page 8
ICT24H TEAM
Page 9
V tr ci t SQL Server
ICT24H TEAM
Page 10
Xc nh instance SQL
ICT24H TEAM
Page 11
ICT24H TEAM
Page 12
Chn phng thc chng thc SQL Tip tc Click Next hon tt qu trnh ci t. Trong trng hp SQL Server ci t trn mt my khc SCCM Server th phi bt tnh nng Remote ca SQL Server th SCCM mi c th kt ni ti c s d liu SQL. i vi SQL Server 2005 th lm nh sau: Vo Start | Program | Microsoft SQL Server 2005 | Configuration Tool | SQL Server Surface Area Configurations
ICT24H TEAM
Page 13
ICT24H TEAM
Page 14
ICT24H TEAM
Page 15
Chn Remote Connections trong nhnh Database Engine, Click chn Local and Remote connections, tip theo chn cc ty chn pha di cho ph hp. Trong trng hp s dng SQL Server 2008, ta tin hnh nh sau: Vo Start | Program | Microsoft SQL Server 2008 | Configuration Tools | SQL Server Configuration Manager
ICT24H TEAM
Page 16
Chn nhnh SQL Server Netwwork Configuration | Protocols for SQLEXPRESS, click phi vo TCP/IP v chn Enable. Trong trng hp mun kt ni vi SQL bng tn, kch hot thm Named Pipes. Sau khi kch hot xong nn Restart li SQL Server.
Ci t WSUS
Bc tip theo l ci t WSUS
ICT24H TEAM
Page 17
ICT24H TEAM
Page 18
ICT24H TEAM
Page 19
ICT24H TEAM
Page 20
ICT24H TEAM
Page 21
Bc ci t Support Tools v cng c ADSIEDIT cc bn c th tin hnh mt cch d dng. Tip theo, ta vo Start | Run | g ADSIEDIT.MSC Tip theo m nhnh Domain (tn domain ca cc bn), chn nhnh System, click phi chn New v chn Container
ICT24H TEAM
Page 22
Trong trng Value: nhp System Management Tip theo l click phi trn System Management tin hnh phn quyn tc ng ln i tng System Management va to. Chn i tg cn thit v ch Full Control cho tt c cc i tng. Click vo Advance v Edit cc Permission.
ICT24H TEAM
Page 23
Sau khi hon thnh cng vic chun b, bt u m rng Domain bng cch truy cp vo vo th mc cha file m rng domain hoc s dng a CD/DVD ci t SCCM. File m rng Schema cho domain c tn l: EXTADSCH.EXE Chn phin bn cho ph hp vi h iu hnh ang hot ng, I386 cho 32bit, x64 cho 64bit. Double Click trn Extadsch.exe chy file, v ch qu trnh tin hnh m rng Domain. Qu trnh m rng Domain ny din ra m thm v kt qu c lu tr trn thnh mt tp tin trn a C. Nu nh file ny th ng bo l Successful th qu trnh m rng hon tt. Trc khi tin hnh m rng Schema cho Domain nn sao lu trc khi tin hnh.
ICT24H TEAM
Page 24
ICT24H TEAM
Page 25
ICT24H TEAM
Page 26
Tip theo l chn la ci t Configuration Manager trn site Server nh ty chn trn hnh. Trong trng hp ci nng cp c th chn la Install or upgrade an administrator console.
ICT24H TEAM
Page 27
ICT24H TEAM
Page 28
Tip theo l ty chn cho php ty bin cc ci t ca SCCM hoc s dng cc thit lp n gin. Tuy nhin, nhm chng ti khuyn co nn s dng ty chn ty bin trong qu trnh ci t v c th xem ht ton cnh cc thit lp cho SCCM.
ICT24H TEAM
Page 29
Tip theo l phn ci t dnh cho Primary Site hoc Secondary Site. Chn la Primary Site nu nh y l SCCM Server u tin ca h thng mng. Ty hn Secondary Site c s dng khi h thng mun c thm mt Server SCCM khc thng thng Secondary Site c s dng cho cc chi nhnh v Primary Site c thit lp trung tm. Phn thit lp ci t Secondary nhm chng ti s trnh by vo phn sau.
ICT24H TEAM
Page 30
Tip theo l chn ng dn lu tr cho chng trnh SCCM. y, ti s dng a D cho vic lu tr ny.
ICT24H TEAM
Page 31
Tip theo l chn Ste Code i din cho SCCM, Site code ch c 3 k{ t v phn Site name c s dng m t cho Site Code. Trong trng hp mun ci t Secondary Site th phi in ng tn Site Code ca Primary Site.
ICT24H TEAM
Page 32
Phn tip theo l ty chn cho vic s dng Native Mode v Mixed Mode. Ch Native Mode cung cp nhiu tnh nng bo mt hn so vi Mixed Mode v yu cu phi c Certificate Authority Server qun l{ cc chng th in t trong h thng. y, phc v cho vn nghin cu v tm hiu, nhm chng ti s dng ch Mixed Mode.
ICT24H TEAM
Page 33
Sau khi chn ch hot ng ca SCCM, phn tip theo l chn la cc chc nng ca SCCM c ci t v qun l{.
ICT24H TEAM
Page 34
Sau khi chn la cc thnh phn hot ng ca SCCM th tip theo l phn yu cu thit lp v c s d liu SQL. in tn my tnh ci t SQL Server theo dng tn hoc theo dng Instance ci t, pha di thit lp tn Database lu tr d liu cho SCCM trong Instance SQL Server c thit lp trn. Trong trng hp s dng mt my tnh khc ci t SQL Server th cn phi m tnh nng truy cp t xa ti SQL Server nh hng dn phn trn
ICT24H TEAM
Page 35
Phn tip theo l ci t chc nng SMSProvider (xem trn m hnh hot ng tng qut ca SCCM) ph trch vic thng tin vi C s d liu. y ta in tn Computer v ch { rng my tnh ny khng c ci t trn mt cluster SQL Server. Nhm chng ti s dng SCCM Server m nhim SMSProvider.
ICT24H TEAM
Page 36
Tip theo l ci t chc nng qun l{ SCCM Server, in tn my tnh mun ci t chc nng qun l{ cho SCCM.
ICT24H TEAM
Page 37
Tip theo, SCCM s yu cu kt ni Internet download cc bn cp nht tip tc qu trnh ci t. Chn ng dn trn a lu tr cc file cp nht ny .
ICT24H TEAM
Page 38
Qu trnh cp nht s download cc file v v lu tr vo th mc c xc nh trc . Ch { l cn c kt ni Internet cp nht. S lng file cp nht vo khong 80 90 file, cc file ny cp nht cc bn updates cho Windows XP, Windows 2003 c th ci t SCCM Clients/Agents sau ny.
ICT24H TEAM
Page 39
Sau khi Update xong, th qu trn s bt u vi vic tm tt cc thng s c thit l trc . Ch {: khi ci t SCCM lun c key Trial cho php s dng 120 ngy. Tip theo l qu trnh kim tra li cc yu cu ci t cn thit cho SCCM. Nu nh hon thnh cc bc giai on chun b th qu trnh s hon tt v khng bo li. Tuy nhin, nu nh c bc no cha hon tt s c mt thng bo li tng t nh hnh pha di.
ICT24H TEAM
Page 40
Trong trng hp c cnh bo th click vo cnh bo bit chi tit cch thc chnh sa. y, c mt s thng bo c th b qua m khng cn quan tm nhiu l cnh bo v dung lng RAM hoc CPU; cn li chng ti khuyn co nn fix cc cnh bo ny.
ICT24H TEAM
Page 41
Qu trnh ci t cc thnh phn ca SCCM s c din ra v mt mt thi gian hon tt qu trnh ny.
ICT24H TEAM
Page 42
Sau khi qu trnh ci t kt thc v giao din khi kch hot Management trong Start | Program | Microsoft System Center Confiugration Manager | ConfigMgr Management Console.
ICT24H TEAM
Page 43
ICT24H TEAM
Page 44
Phin bn SCCM 2007 R3 c b sung thm Virtual Application Package trong Packages ca nhnh Software Distribution, cho php trin khai cc phn mm o ha ca Microsoft.
ICT24H TEAM
Page 45
Mt cch khc c th xc nh cc phin bn ca SCCM l da vo Version cc file Boot Images khi ci t Role PXE Service Point. i vi phin bn SCCM 2007 R3 l 6.1.7600.16385, SCCM 2007 SP2 l 6.1.7600.200
Trong phn ny, nhm chng ti tp trung vo cc yu t chnh ca SCCM; cc vai tr, chc nng khc nhau ca SCCM 2007 s c trnh by trong cc mc ring.
ICT24H TEAM
Page 46
Trong mc Site Mode nn thit lp ch Automatically approve computers in trusted domains m bo tnh an ton v tin li khi ci t cc SCCM Agents trn cc Clients.
Thit lp Boundary
Boundary (vng ranh gii) l yu t quan trng trong hu ht cc sn phm System Center, vng ranh gii ny nh hng rt ln n s hot ng, tc v s n nh ca chng trnh. Trong SCCM, c th xc nh vng ranh gii mt cch linh ng da trn cc yu t nh Subnet, khong IP (IP Range), IPv4, IPv6, hoc trn Domain. Thit lp mt ranh gii bng cch m nhnh Site Setting | chn Boundary v chn New Boundary Taskpane bn tay phi.
ICT24H TEAM
Page 47
Ty theo mc ch xc nh Boundary ph hp vi mc ch s dng. Trong mi trng LAB ny, do s my tnh t nn chng ti chn theo IP Address range. Sau khi in cc thng s v n OK th s c kt qu tng t nh hnh bn di:
i vi cc trng hp thit lp Multi-site c th khai bo thm mt Boundary khc cho ph hp vi Secondary Site. trng hp ny, nhm chng ti khuynco nn chn Active Directory Site.
ICT24H TEAM
Page 48
Active Directory System Group Discovery Active Directory Security Group Discovery Active Directory System Discovery Active Directory User Discovery Heartbeat Discovery Network Discovery
Cc nhm thit lp cho Active Directory c s dng cho php SCCM tin hnh Query ln Active Directory v nhn cc cc kt qu c gi tr tng ng v b sung vo cc Collection. Thit lp cho nhm Discovery da trn AD nh sau: Double Click ln i tng Click chn Enable cho tnh nng Discovery.
ICT24H TEAM
Page 49
Click chn Local domain v chn trn cc ty chn Search l Recursive ( quy/lp li) v Include groups (bao gm c i tng nhm)
ICT24H TEAM
Page 50
Click chn i tng (Container) mun tm kim, y nhm chng ti khuyn co nn chn ton domain m bo c y cc thuc tnh, tuy nhin vic ny cng c th gy nh hng n tc hot ng ca SCCM trong giai on Query ny.
Sau khi thit lp xong s c hnh nh tng t nh hnh trn. Tuy nhin, c th b sung thm yu t phng thc ny c thc hin nhanh chng, bng cch click chn Polling Schedule.
ICT24H TEAM
Page 51
Click chn Run as soon as possible c th thc hin nhanh phng thc ny. gim thiu kch thc cho c s d liu v thi gian tm kim trong Active Directory, bng cch click chn Schedule v chn thi gian Start v chu kz lp li hnh ng Query.
Thit lp Network Discovery: cung cp cc phng thc xc nh m hnh mng, cc my trm, v cc h iu hnh. Ngoi ra cn c cc yu t khc nh Subnets, Domains, SNMP, DHCPTrong mc ny, phn quan trng nht chnh l vic Enable network discovery, ngoi ra cc yu t nh Subnets, Domains, DHCP ch l cc yu t ph v c th thit lp tng t nh phn Boundary.
ICT24H TEAM
Page 52
Double click trn Software Update Point Client Installtion, chn Enable v chn Yes trn Dialog xut hin sau . Click OK hon tt. Double Click trn Client Push Installtion.
ICT24H TEAM
Page 53
Chn cc i tng nh trn hnh. Trong trng hp khong mun ci t Agent ca SCCM trn Domain Controller th b du check trc Domain controllers. Trn mc Accounts, click vo v in ti khon c th ci t phn mm trn cc my Clients, c th s dng ti khon Administrator hoc ti khon Power -Users hoc ti khon c quyn tng t.
ICT24H TEAM
Page 54
ICT24H TEAM
Page 55
Trong trng hp mun b sung thm tnh nng cho mt Server th click chn trn Server trong nhnh Site Systems v chn New Roles Lc ny giao din Wizard s xut hin v ch cn lm theo hng dn hon tt vic ci t Role(s) cho Server.
ICT24H TEAM
Page 56
ICT24H TEAM
Page 57
ICT24H TEAM
Page 58
ICT24H TEAM
Page 59
ICT24H TEAM
Page 60
Mi Membership Rule c xc nh bi cu truy vn trong c s d liu lu tr ca SCCM, y phin bn h iu hnh c xc nh l phin bn 5.2 chnh l Windows 2003. Trong trng hp mun s dng cho Windows 7, c th sa li cu truy vn ny ch cn thay th phin bn 5.2 thnh phin bn 6.1. Cc thng s ny c xc nh trong Command-line:
ICT24H TEAM
Page 61
Cc cu truy vn nn c thc thi kim tra trc khi s dng cho Membership Rule.
Software Distribution
Software Distribution l mt thnh phn khng th thiu trong SCCM, c bit l thnh phn Advertisements. l l{ do nhm chng ti a Software Distribution tr thnh mc chnh trong phn trnh by ny. Software Distribution gm c 2 thnh phn chnh l Packages v Advertisements v c s dng ph bin trong hot ng ca SCCM. Packages: c s dng trin khai cc phn mm cho h thng. Packages s tin hnh ng gi cc phn mm trin khai cho cc Clients. Advertisements: c s dng qung b cc thng tin v cc gi phn mm cng nh nhng hot ng khc ca SCCM n cc i tng c th chng hn nh my tnh hoc cc Collection.
Advertisements c th c s dng trong mt thi gian c th hoc khng xc nh thi gian cng nh mc quan trng cn thc hin. Phn trin khai phn mm s c chng ti gii thiu phn sau. y chng ti ch dng li mc gii thiu tm quan trng v hot ng ca cc thnh phn trong Software Distributions.
Phn gii thiu s lc v SCCM c kt thc ti y, cn c mt s cc chc nng m nhm chng ti cha cp n s c cp trong cc phn sau.
ICT24H TEAM
Page 62
Mc d trong SMSSetup\Client c tp tin client.msi nhng khng th trin khai (deploy) file ny xung cho Client c v thiu cc bn cp nht ca SCCM. Ch c file ccmsetup.exe mi c th download v cu hnh cc file cn thit trc khi chy client.msi. y nhm chng ti tp trung trnh by phn ci t cho Client bng cch s dng Client Install ca SCCM. Trc khi bt u qu trnh Client Install c mt s lu { nh sau: Cp nht cc thnh vin ca Collection mun trin khai Client Install. Thng thng ch cn cp nht Collection All Desktops and Servers l . Cu hnh Client Install Method Cu hnh Computer Agent
ICT24H TEAM
Page 63
Nu nh vic Update Collection Membership vn cha hin th cc thnh vin mi ca Collection, click vo nt Refresh cp nht li cc thng tin trong Collection.
ICT24H TEAM
Page 64
ICT24H TEAM
Page 65
ICT24H TEAM
Page 66
ICT24H TEAM
Page 67
ICT24H TEAM
Page 68
ICT24H TEAM
Page 69
ICT24H TEAM
Page 70
Sau khi kch hot tnh nng Software Update Point Client Installtion, chn vo Client Push Installation thit lp vic ci t Client Install cho cc my trm. Click chn cc thnh phn, cc nhm cn thit cho vic ci t Client Install.
ICT24H TEAM
Page 71
Chn Tab Accounts v thit lp ti khon c quyn ci t cc phn mm v lin quan ti h thng.
ICT24H TEAM
Page 72
ICT24H TEAM
Page 73
ICT24H TEAM
Page 74
ICT24H TEAM
Page 75
ICT24H TEAM
Page 76
Lc ny trn cc my l Member trong Collection c chn la trin khai, qu trnh ci t s bt u, c th kim tra tin trnh ny bng cch m Task Manager v tm xem c file ccmsetup.exe ang hot ng hay khng.
ICT24H TEAM
Page 77
Sau khi ci t xong Client Install ca SCCM, lc ny trong Control Pannel s c cc biu tng ca SCCM
ICT24H TEAM
Page 78
Qu trnh ci t Client Install din ra trng thi nn (Background) nn s khng nhn thy cc hot ng ny. Mt khc, qu trnh Client Install din ra khng ng thi trn cc my trm nn c my s c kch hot trc, my kch hot sau. Tin trnh ci t Client Install i theo cc trnh t nh sau: Cc my Client chy file ccmsetup.exe v file ny s yu cu download cc bn cp nht, cc phin bn ny nm trong th mc cc file cp nht trong lc ci t SCCM ln u. Download phin Client.msi v tin hnh ci t vi cc thng s cn thit SCCM Server c th qun l{. Thc thi cc qu trnh Approve trn SCCM i vi cc Clients. Xa b cc th mc tm trong System32\cccmsetup
Vic trin khai Computer Client Agent trong giai on ny m bo cho vic cp nht thng qua tnh nng BITS c m bo. Qu trnh ci t Client Install n y l hon tt v cng l bc chun b cho cc hot ng ca SCCM sau ny bao gm cc cng vic nh trin khai phn mm, cc bn cp nht.
ICT24H TEAM
Page 79
dng cui (End-user) khng bit hoc cho php ngi dng tng tc vi chng trnh ci t v iu cui cng l qu trnh c th din ra m khng cn ngi dng phi log -off kch hot. SCCM 2007 v Group Policy c nhng im tng ng v vic trin khai phn mm, tuy nhin gia SCCM 2007 v Group Policy vn c nhng im khc bit ng k. C th tm tt cc im khc bit ny nh sau:
SCCM 2007
Trin khai cc nh dng file chun l MSI, EXE Client download cc file trin khai v v chy trn local Trin khai ngay trong lc lm vic p dng trn cc i tng l Computer Khng lm tr tr hoc qu ti Server vi nhng gi phn mm ln Loading.
Group Policy
Ch trin khai vi nh dng chun l MSI Client chy file trc tip trn Server qua cc th mc Share Ch kch hot trin khai khi log-off v log-in Cho php linh ng vi i tng l User/Computer. D b tnh trng qu ti nu s lng my cn cp nht nhiu v vi dung lng ln.
Cm n mi ngi quan tm thm di. y l phin bn beta 1.0 do c iu g sai st mong c gp { ti liu c hon thin v gi n c gi. Xin chn thnh cm n s quan tm ca mi ngi. Author: doraemon doraemon@ict24h.net Download : http://ict24h.net/
ICT24H TEAM
Page 80