2. Wally Mead Senior Program Manager Microsoft Corporation Session Code: MGT303

3. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

4. Supported Configuration Manager Clients Windows 2000 Professional and Server SP4 Windows XP Professional SP2 and SP3 Windows Server 2003 SP1 and SP2 Windows Server 2003 R2 Windows Vista Business, Enterprise, and Ultimate Including Vista RTM and SP1

5. Supported Configuration Manager Clients (2) Windows Server 2008 No Server Core client support with Configuration Manager RTM Supported with Configuration Manager SP1 Windows XP Tablet SP2 Windows XP Embedded SP2 Windows Embedded Point of Sale (WEPOS) Windows Foundation for Legacy Platforms (WinFLP)

6. Client Deployment Methods Those that are the same as Systems Management Server (SMS) 2003: Client push installation Automated client push or admin controlled Can now use the site server computer account as the Client Push Installation account Logon installation for high-rights users No support for low rights installation Software distribution Upgrades from SMS 2003 Upgrades to Configuration Manager SP1 Manual installation

7. Client Deployment Methods (2) Those that are new deployment methods in Configuration Manager 2007 Software update point (SUP) client deployment Client is installed through Windows Server Update Services (WSUS) Group policy installation Use software installation feature to deploy Ccmsetup.msi You can use whatever methods that meet your requirements

8. Site RoleMaximum # of Client Systems Hierarchy (Central site)200,000 Primary site100,000 System Health Validator200,000 Management point25,000 Distribution point (non-OSD)4,000 Distribution point (OSD)Limited by Network & Disk I/O State migration pointLimited by Network & Disk I/O Software update point (WSUS)25,000 Fallback status point100,000 Branch distribution pointLimited by OS License, Network & Disk I/O Supported Client Numbers

9. Components Used in Client Deployment Ccmsetup.exe Background Intelligent Transfer Service (BITS) Windows Installer 3.1 v2 Windows Update Agent Core XML Services (MS XML 6 SP1) MSRDC (Remote Differential Compression) Wimgapi.msi Client.msi

10. Client Assignment Configuration Manager clients can only be assigned to Configuration Manager sites They cannot be assigned to SMS 2003 sites In order to validate site assignment, they must verify the intended site’s version Required for automatic or manual assignment This occurs from one of two methods Active Directory if the schema is extended for Configuration Manager Configuration Manager server locator point

11. Client Registration Configuration Manager clients must be registered as a client to be able to send data to it, or retrieve data from it Automatic process after assignment Client finds the default management and issues a registration request to the site This provides the client identity (self-signed certificate) to the site for validation

12. Client Approval Method Configuration Manager clients must be approved to use the Network Access account Can’t download the policy that contains the account until the client is approved Approval has three options in mixed mode No automatic approval (manual) Automatic approval for domain joined clients Automatic approval for all clients

13. Configuring the client approval method

14. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

15. Site System Roles Used in Client Deployment Site server When deploying via client push Management point Used to download client files for deployment Retrieve policies after deployment Server locator point Used to validate assignment to the site in a non- extended Active Directory environment

16. Site System Roles Used in Client Deployment (2) Distribution point (including branch DP) Used for a software distribution client upgrade Can be used for operating system deployment Software update point Used when deploying the client through Windows Server Update Services Fallback status point (FSP) Client sends state messages for the deployment to the FSP if configured to do so

17. Site System Roles Used in Client Deployment (3) PXE service point Can be used in operating system deployment in bare metal system scenarios State migration point Can be used in operating system deployment in machine replacement scenarios

18. Configuring a fallback status point

19. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

20. Client Push Installation Essentially the same as in SMS 2003 Automated push or Client Push Installation Wizard The default is now SMSSITECODE=local site code The SMS 2003 default was AUTO The site server computer account can be used as the Client Push Installation account Is tried automatically if all other accounts fail

21. Client Push Installation (2) No longer uses Remote Registry to the target system Now use Remote WMI If Active Directory is extended for Configuration Manager, the Client Push Installation parameters are published Then used often when Ccmsetup.exe is run with no command line parameters Not used for push installs as they use the Client Push Installation method parameters

22. Installing a client using the Client Push Installation Wizard

23. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

24. Software Update Point Client Installation Client installed as a WSUS mandatory update to non-client systems No firewall issues if Windows Update Agent works No issues with low rights users Client must point to the SUP via Group Policy Client will then install automatically getting parameters from Active Directory

25. Software Update Point Client Installation Configuration Site admin enables the Software Update Point Client Installation method Requires a software update point site system Publishes the current Configuration Manager client to WSUS as a mandatory application update Only required to publish at the central site All child sites sync content from the parent site

26. Installing a client using a software update point

27. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

28. Group Policy Client Deployment True Active Directory client deployment integration Use software installation to deploy the Configuration Manager client CCMSetup.MSI for software installation package Auto publish client deployment settings to AD ADM templates for settings No more “auto removal” of clients

29. Installing a client through Group Policy

30. Group Policy Client Assignment Allows assignment of resources based on business model instead of network Not constrained to Boundaries ADM template for OU assignment configuration

31. Assigning a client to a site using Group Policy client assignment

32. Session Agenda Overview of Configuration Manager client deployment Site system roles used in client deployment Client push deployment Software update client deployment Group Policy client deployment Client upgrades

33. Client Upgrades The most common client upgrade methods are: Software distribution Can control targets and timing with advertisements Client push installation Use the Client Push Installation Wizard Can also use: Manual installation Automated push (must clear the Install flag)

34. Service Pack 1 Client Upgrades There is a new client for Configuration Manager 2007 SP1 Configuration Manager RTM clients can exist in a SP1 site Configuration Manager SP1 clients not supported in an RTM site There is no new client with Configuration Manager R2 The client remains at Configuration Manager SP1 code base

35. Upgrading clients using software distribution

36. Client Deployment Tips Consider pre-deploying required client files For example, BITS may require a reboot Ensure that the Active Directory schema has been extended If not, you need a server locator point for client assignment Recommended to have a fallback status point available Provides access to great client deployment status reports

37. Client Deployment Tips (2) Deploy clients in a phased manner Validate success throughout deployment No more than a few thousand a day After initial deployment, deploy a test application to upgraded clients Validates client can access the management point and distribution point For brand new installs, may want to consider configuring Heartbeat Discovery and inventory cycles for daily Validates client functionality and performance

38. Session Summary There are many unique methods to deploy clients in Configuration Manager 2007 For the most part, the same methods as SMS 2003 supported are available to Configuration Manager 2007 No longer manual Client.msi deployment New methods for Configuration Manager Software update point client installation Group Policy client deployment

40. www.microsoft.com/teched Sessions On-Demand & Community http://microsoft.com/technet Resources for IT Professionals http://microsoft.com/msdn Resources for Developers www.microsoft.com/learning Microsoft Certification & Training Resources Resources Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online. Required Slide Speakers, TechEd 2009 is not producing a DVD. Please announce that attendees can access session recordings at TechEd Online.

41. Related Content Breakout Sessions (session codes and titles) Whiteboard Sessions (session codes and titles) Hands-on Labs (session codes and titles) Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Any queries, please check with your Track Owner. Required Slide Speakers, please list the Breakout Sessions, TLC Interactive Theaters and Labs that are related to your session. Any queries, please check with your Track Owner.

42. Track Resources Resource 1 Resource 2 Resource 3 Resource 4 Required Slide Track Owners to provide guidance. Please address any queries to your track owners. Required Slide Track Owners to provide guidance. Please address any queries to your track owners.

43. Required Slide A slide outlining the 2009 evaluation process and prizes will be provided closer to the event.

44. © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. Required Slide