Archive

Archive for October, 2012

How to Install Configuration Manager 2012 Clients Manually

October 25, 2012 1 comment

How to Install Configuration Manager 2012 Clients Manually

SCCM client software can be found in the Client folder in the  SCCM site server . This folder is shared to the network as \\<SCCM Site Server Name>\SMS_<Site Code>\Client. In Our example is \\SCCM1\SMS_ABC\Client

 Command line Syntax : CCMSetup.exe /mp:SCCM1.seneej.com SMSSITECODE=ABC FSP=sccm1.seneej.com

/mp:SCCM1.seneej.com  :  Its specify management server is SCCM1.seneej.com

/SMSSITECODE=ABC : Its specify  config manaager site code is ABC

FSP=SCCM1.seneej.com : Its specify fallback status point server name is SCCM1.seneej.com

Copy the client folder to client worksations and then run the setup command as mentioned below:

In the following examples for Active Directory clients on the intranet, a management point is installed on a computer named SCCM1, a fallback status point is installed on SCCM1, the site is named ABC, and the domain is seneej.com.

SCCM1

Note

fallback status point should be installed on SCCM server.

Must have Administrator permissions to the folder to access the client installation files

Categories: SCCM 2012

How to find out inactive computers from Active Directory OU and clean them

October 25, 2012 5 comments

How to find out inactive computers from Active Directory OU and clean them

Dsquery is a command-line tool that is built into Windows Server 2008 to find out the inactive computers or search criteria that you specify. Also we can use the dsmod and dsrm tool to disable or delete these objects at the same time.

There are two steps in this process and its explained below

Steps 1 –Find out inactive Computers from OU

Open elevated command prompt on DC and then type in

dsquery computer <distinguish name of the OU> –inactive <weeks> -limit <number> > c:computer.txt

Example

If you want to find out the 90 days inactive computers from specific OU

dsquery computer OU=TEST,DC=Ibsarabia,DC=com –inactive 12-limit500> c:computer.txt

–inactive 12: inactive in past 12 weeks (90 days)

-limit 500: limit the max entry to 500 in case there are too many objects

Steps 2 – Delete/Disable inactive computers

Pleases see below steps disable or delete these inactive objects after analyzing the computer.txt file.

To disable these objects:

type c:computer.txt | dsmod computer –disabled yes

To delete these objects:

type c:computer.txt | dsrm –noprompt -c

If you have any questions, please drop me an email

Categories: Active Directory

Grant a Helpdesk/Support user rights to join computers to domain

October 25, 2012 8 comments

By default domain users can only add 10 machines to the domain. It’s necessary to grant permissions to join/remove computers to domain for IT Support/Helpdesk users . This can be accomplished through the Delegation Control wizard
Steps to delegate control on the Computers Container:
1. Open the Active Directory Users and Computers snap-in.
2. Right-click the container under which you want the computers added, and press Delegate Control.
3. Press Next.
4. Press Add.
5. After adding all the users and/or groups, press Next.
6. Select Create custom task to delegate and press Next.

7. Select Only the following objects in the folder, check Computer objects, check the Create selected objects in this folder box, and press Next.

8. Check Reset Password, Read and write account restrictions, Validated write to DNS host name, Validated write to service principal name. Click Next and Finish.

9. Press Finish.
For more information about the minimum rights to join PC to the domain, please refer to:

Error message when non-administrator users who have been delegated control try to join computers to a Windows Server 2003-based or a Windows Server 2008-based domain controller: “Access is denied”
http://support.microsoft.com/kb/932455

Categories: Active Directory
%d bloggers like this: