Monday 27 April 2015

Hardware Models and hardware integration for SCCM 2012

Below are few Models that I have worked last week for hardware integration for SCCM 2012

Model Name    MTM number
Lenovo T440p - 20AN    
Lenovo T440p - 20Aw
Lenovo X240 - 20AM   
Lenovo L440 - 20AS
Lenovo M83 - 10AH   
HP DC7900 SFF   
Lenovo M58 - 6234AL4   
Lenovo M58 - 6234F48   
Lenovo X230 - 2324   
Lenovo T430 - 2347   
Lenovo T430 - 2344   
Lenovo M82-2742   
Lenovo M82 2929   
Lenovo x230 - 2325   
Lenovo T430 - 2349   
Lenovo W520 (4284-4LG)   
Lenovo X220 4291-4CG   
Lenovo L440 - 20B7, 20AN, 20AM
Lenovo T440 - 20B7
Lenovo T430 - 2349
Lenovo X230 - 2324 and 2325

Tuesday 21 April 2015

How can I Install PnP drivers without Actually installing SCCM Tasksequence

How can I Install PnP drivers without Actually installing

How can I setup SCCM to install Drivers automatically / PnP

This is completely out of box from SCCM, as this is nowhere talked about in the documents for SCCM, We actually follow windows default method of *.inf files to install Drivers by using PnpUtil.exe file.

 

For example if we have Lenovo T440p Model and we wanted to integrate it as a first step we need to copy the Driver to some folder in target system and then while rebooting we can use Pnputil.exe command to install best matching PnP Device Drive drivers from source.

Create T440P model Drivers Source PnP source

And as a next step I have created a basic task sequence and added a step called Copy Drivers to Locally to C:\Drivers Folders

 Copy all the drivers to a local driver

clip_image002

xcopy.exe ".\*.*" "c:\Drivers\" /D /E /C /I /Q /H /R /Y /S

Final step would be call a batch file with help of for command, after SCCM client installing step. See below

clip_image004

 

Below is the impdrv.cmd file

forfiles /p %1 /s /m *.inf /c "cmd /c pnputil -a @Path"

clip_image006

 

Ofcourse there are multiple ways, and this is one of the option.

Key benefits of using Nomad

Key benefits

Nomad solves problems in key areas of distributing large amounts of data across a distributed network. In particular Nomad provides the following benefits:

·         Significantly reduces the bandwidth required for delivering software.

·         Small offices or sites connected via poor network links can receive software updates more reliably.

·         Reduces the need for large numbers of ConfigMgr servers.

·         Faster ConfigMgr implementations because fewer servers are required.

·         Distribute software to home, mobile and remote office users

·         Low cost – easy to deploy

·         No new infrastructure or skills required

·         Reduces software distribution costs

What is new in Nomad 2012 v5.0.100

Welcome to the Nomad 2012 Version 5.0.100 on-line documentation. Here you can learn about how Nomad 2012 works, the new features it supports and how the Nomad 2012 components fit together to provide enterprise-wide, efficient and secure content download.

Installation Engineers can find out about the prerequisites for installing Nomad 2012 and check the installation steps.

Systems administrators can find out how to: configure Nomad 2012 for use with Configuration Manager 2012, configure Nomad 2012 for OS deployments, monitor Nomad 2012 downloads, manage the Nomad 2012 cache and find information on the Nomad 2012 command-line switches, return codes, status message events and registry entries .

Enterprises interested in providing bare metal OS deployment in branch scenarios can find out how to install and configure PXE Everywhere v2.1.

What is new in Nomad 2012 v5.0.100

This maintenance release includes the following new capabilities:

·         Peer Backup Assistant configuration during Nomad installation - The Peer Backup Assistant can now be configured using dedicated Nomad installer properties.

·         ConfigMgr 2012 SP1 support

·         Windows 8 and Windows Server 2012 support

New in Nomad 5.0

This new release of Nomad contains two new features related to maximizing the efficiency of distribution of downloads to machines on a branch subnet and enabling single site downloads for multiple subnets over a WAN.

·         Nomad FanOut - this feature enables more Nomad Peers to be updated with the download from the Nomad Master by allowing the machines directly connected to the Nomad Master to themselves share out the download.

·         Single Site Download - this feature ensures that downloads are performed only once per branch site, not per branch subnet - thereby maximizing the efficient distribution of downloads without using the WAN more than once.

 

Welcome to Nomad the key software from 1E that increases the efficiency of software and patch distribution and saves you money in the process. It maximizes WAN availability during download by providing features such as: Central Multicast, download once to branch, and download resumption with built-in consistency checking.

Click here to find out what is new in Nomad .

Now in its fifth generation Nomad integrates with Microsoft System Center Configuration Manager (ConfigMgr), to provide increased resilience and bandwidth throttling and maximize use of advanced features like Remote Differential Compression to make optimal use of any type of network connection with minimal impact on network users. Using Nomad with ConfigMgr you can enable software update capabilities for machines which would have previously been unmanaged.

Nomad reduces the load on the central Distribution Points and eliminates the necessity for local Distribution Points. This allows the ConfigMgr infrastructure to be simplified while still retaining coverage of the entire network and reducing maintenance costs.

Nomad consists of two main components:

·         Nomad, the content transfer utility that helps deliver large content efficiently, safely and securely.

·         PXE Everywhere v2.1, a tool that helps deliver OS updates to bare metal computers

Step by step Installation of 1E Active Efficiency

Installation of 1E Active Efficiency 1.3

 

Summary:

This document was intended to outline the installation procedure for VF Corporation for the above named 1E Product.

The assumption is that the installation will occur on the SCCM 2012 CAS server.

The MSI can be found in: D:\Installers\1E\1. Active_Efficiency_v1.3.0.118

The PowerShell script to load AD Site and Subnets into AE is run as a scheduled Task from the CAS: D:\1E_AE_1.3\Active_Efficiency_v1.3.0.118\PostADSitesandSubnets

 

Locate the Installation

Locate the ActiveEfficiency.msi in the above folder and double-click on the ActiveEfficiency.MSI file to begin the installation.


image

Welcome Screen

 

On the Welcome Screen click the next button:

image

License Agreement

Place a click on the radio button next to “I accept the terms in the license agreement” On the License Agreement Screen.

Click on the “Next” button

image

 

PreRequisite Checks

Ensure all checks passed and Click the “Next” button on the Prerequitsite Checks screen

 

image

Register with 1E Active Efficiency

Uncheck the radio button next to “Yes I want to register with 1E Active Efficiency and select the “Next” button to continue.

image

Change the Installation Folder

Change the “folder name” to “D:\Program Files (x86)\1E\ActiveEfficiency” and click on the “ok” button.


image

Click on the “Next” button to continue installation.

Database Server

Optionally click the “Drop any existing database” if you intend to start from scratch and reload any sites/subnets into the ActiveEfficiency database using the PostsitesandSubnets.ps1 PowerShell script.

During a new installation. The above option would not be needed and just click the “Next” button.

 

 

image


 

ActiveEfficiency Website Settings

Click the “Next” button on the Custom IIS Settings screen

image

Click on the “Install” button to complete the installation

image

 

Click the “Finish” button to exit the installation

Optionally: tick the box on the “Show the Windows Installer log” to review the installation log file.

image

Active Efficiency Scripts for SSD

In order to utilize the Single Site Download feature of NomadBranch 2012, the modified example script to post AD Sites and Subnets will be used to post AD Sites and subnets to the Active Efficiency web service. Located at: http://localhost/ActiveEfficiency on the CAS server.

The active script is stored in: D:\1E_AE_1.3\Active_Efficiency_v1.3.0.118\PostADSitesandSubnets

 The PowerShell script to load AD Site and Subnets into AE is run as a scheduled Task from the CAS the details are as follows:

Scheduled time: 9:00 PM

Frequency: every Friday

 

 

 

Prerequisites – for Nomad Components

ActiveEfficiency 1.3  - Prerequisites

The following prerequisites must be met prior to installing ActiveEfficiency.

DNS Alias for AB.test.local.com which points to the CAS server (note: this is only the recommendation and not a requirement)

Installation account

The ActiveEfficiency installation account must have the following permissions:

·         db_creator in the SQL Server instance where the ActiveEfficiency database will be created

·         Local administrator on the IIS Web Server where ActiveEfficiency will be installed

Installer prerequisites

The ActiveEfficiency installer will automatically check for the presence of the following on the IIS Web Server before installation can proceed:

·         .NET Framework 4.5 Full Profile

·         IIS 7 and above

·         ASP .NET 4.0 or above

·         MSMQ

The following checks are made by the installer on Windows Server 2008 R2 and above:

·         The WebDAV publishing feature must not be installed - installing WebDAV will prevent ActiveEfficiency from working correctly so the installer checks that it is not present

·         Static content Compression must be enabled

A registered 1E ActiveEfficiency Cloud account is a prerequisite for enabling a 1E ActiveEfficiency Cloud Connection .  You can register before or during installation of ActiveEfficiency, see Create a 1E ActiveEfficiency Cloud Account for more details.

An SQL Server is required for the ActiveEfficiency database.  The prerequisites for the database and SQL Server are explained below.

Operating system support

ActiveEfficiency will install on the following operating systems:

·         Windows Server 2012 RTM

·         Windows Server 2008 R2

·         Windows Server 2008

Database prerequisites

The following prerequisites apply to the ActiveEfficiency database:

·         Windows SQL 2005 or above

·         SQL collation should be: latin, case-insensitive, accent-sensitive

MSMQ 

ActiveEfficiency uses MSMQ to enable communications between itself and the 1E Products. The following ports are required for MSMQ Server communications on Windows Server 2008 and above:

Connection Type

Port

Purpose

TCP

1801

Message Queuing (including HTTP messaging) message traffic and internal session management traffic between Queue Managers.

RPC_TCP

135

Dynamic RPC port typically assigned by RPC for handshaking with an independent client or with an RPC server for the Message Queuing server to determine the fixed ports.

 

 

Nomad 5.0  - Prerequisites

This section describes prerequisites needed to ensure a successful deployment of Nomad.

Requirements

Notes

General

The following requirements should be met before installing Nomad on your network.

·          

·         When upgrading we recommend that you update all versions of Nomad running on a single subnet at the same time. It is also highly recommended that all the Site Servers and Distribution Points are updated first with Nomad 5.0 before updating versions of Nomad running on the clients to avoid known compatibility issues between Nomad 5.0 clients and Distribution Points running earlier versions of Nomad.

·         Ensure DNS is working properly

·         Ensure client side firewalls allow exceptions to be made for NomadBranch.exe, NomadPackageLocator.exe andPackageStatusRequest.exe. See Windows Security Settings for more details.

·         Ensure the ConfigMgr Client is healthy and functioning properly

OS

Nomad and Nomad Multicast should install and be configurable on any workstation running the following Microsoft operating systems:

·          

·         Windows 8 Enterprise (32-bit and 64-bit)

·         Windows 7 (Embedded, Professional, Enterprise, Enterprise x64 and Ultimate)

·         Windows Vista (Business, Enterprise, Enterprise x64 and Ultimate)

·         Windows XP 32-bit with SP3 applied

Nomad and Nomad Multicast should install and be configurable on any server running the following Microsoft operating systems:

·          

·         Windows Server 2012

·         Windows Server 2008 R2 RTM, SP1

·         Windows Server 2008 x64 SP1, SP2

·         Windows Server 2008 SP1, SP2

·         Windows Server 2003 SP2

Systems Management

The following versions of ConfigMgr are supported:

·          

·         Configuration Manager 2012 RTM, SP1

·         Configuration Manager 2007 SP2, R2, R3

Nomad installers

Nomad has two sets of installers one for 32-bit systems and the other for 64-bit systems. The set that should be used depends on the ConfigMgr client installed on the local machine.

·          

·         ConfigMgr 2007 clients are always 32-bit so only the 32-bit Nomad installers should be regardless of whether the target computer is 32-bit or 64-bit.

·         ConfigMgr 2012 clients may be either 32-bit or 64-bit client so the Nomad installers used must match the local client.

The Nomad 32-bit installers are in the NomadBranch.v5.0.x.x.zip file:

·          

·         NomadBranch.msi (in both the ConfigMgr2007 and ConfigMgr2012 directories)

·         NomadBranchAdminUIExt.msi (in ConfigMgr2007)

·         NomadBranchGui.msi (in DownloadMonitor)

The Nomad installers for 64-bit systems are in the ConfigMgr2012 directory in the NomadBranch.v5.0.x.x.zip file:

·          

·         NomadBranchAdminUIExt2012.msi (32-bit installer for ConfigMgr 2012 console)

·         NomadBranchTools.msi

·         NomadBranch-x64.msi

Distribution Point

To support enhanced Package consistency checking, Nomad requires that the Nomad agent is installed on each ConfigMgr Distribution Point (DP). This agent enables file-level consistency checking by creating a manifest file on the DP for every version of each Package created.

This allows Nomad to check that each file it downloads is consistent with the version available on the DP.

Note
On ConfigMgr 2012 systems LSZ generation using HTTP/HTTPS is not enabled by default on standalone Distribution Points. You will need to manually enable it on the Nomad agent running on the standalone DP by configuring the SpecialNetShare registry entry to include the 0x4000 value.

If the DP is not installed on a site server you must ensure that the Nomad registry setting PermittedLsZShares on the DP is updated to contain the local share name(s) used on the server (e.g. SMSPKGF$; SMSPKGG$; etc) to host ConfigMgr packages

To support RDC you will also need to set the SigsFolder registry entry to point to the ConfigMgr RDC signatures folder. If the DP is installed on a site server this step is not required as Nomad retrieves the DP share name information directly from WMI

For more details please refer to the description of the PERMITTEDLSZSHARES and SIGSFOLDER installer command-line properties.

System Center Configuration Manager

For each ConfigMgr Site Server where you intend to administer Task Sequence Packages to use Nomad as the alternate download Provider, you need to ensure the following conditions hold:

·          

·         The Configuration Manager Admin Console must be installed – as is the case in a default Configuration Manager installation. This is a prerequisite for the following:

·         The Nomad Admin Console GUI extensions must be installed

·         When using ConfigMgr 2012 the Nomad Branch Tools must also be installed.

If these conditions do not hold the Nomad settings for Task Sequences will not be created correctly.

Note
This is the case even if you install a remote Configuration Manager Admin Console with the

Nomad Admin Console GUI extension, except for Nomad Branch Tools which are required to be installed

on ConfigMgr Site Server only.

Nomad Download Monitor

The following components must be present prior to installing the Nomad Download Monitor:

·          

·         .NET Framework 2 or above

·         To use the Nomad Download Monitor to monitor remote machines the user account will require DCOM permissions.

Nomad NomadBranchTools

To install the NomadBranchTools for ConfigMgr 2012 the following needs to be present:

·          

·         A local installation of the System Center Configuration Manager 2012 Site Server.

Nomad Admin Console GUI extensions

To install the Admin Console GUI extensions the following needs to be present:

·          

·         A local installation of the System Center Configuration Manager Admin Console.

·         .NET Framework 2.0 or .NET Framework 3.5

If you want to install the Admin Console GUI Extensions on a remote ConfigMgr console then you will need to ensure that the Admin Console GUI Extensions have been installed on the site server first.

Nomad Multicast

To use the Multicast functionality for Nomad you will need a specific multicast license key available from 1E.

For more information on purchasing license keys contact Sales, details on contacting 1E are provided in Technical Support for Nomad.

Windows security settings

File and Print Sharing

The recommended way to facilitate Nomad peer-to-peer communications is to enable Windows File and Print Sharing. If this is not feasible on your network environment you can configure Nomad to use different means to access network shares, see Peer-to-peer enhancements for more details on configuring this option.

Nomad port access

Nomad uses UDP port 1779, by default, to communicate during the election process for determining the master on a subnet. The Nomad installer will automatically add NomadBranch.exe, NomadPackageLocator.exe and PackageStatusRequest.exe to the list of excepted programs.

Manually configuring Nomad port access

If you do need to open the Nomad port by hand, the following command-lines will open the firewall for NomadBranch.exe UDP and TCP requests on Windows 7, provided you run the command with sufficient privileges (you will need to run the equivalent for the NomadPackageLocator.exe andPackageStatusRequest.exe executables too):

> netsh advfirewall firewall add rule

  name="NomadBranch.exe"

  dir=in action=allow

  program="NomadBranch.exe"

  enable=yes profile=domain

  protocol=udp

 

> netsh advfirewall firewall add rule

  name="NomadBranch.exe"

  dir=in

  action=allow

  program="NomadBranch.exe"

  enable=yes

  profile=domain protocol=tcp

The equivalent on Windows XP is:

> netsh firewall set portopening udp 1779 NomadBranch

Attention
If you change the default port, please ensure all Nomad clients are communicating using the same port.

This command-line should be run on every machine where Nomad is installed, a convenient way to do this would be to create a ConfigMgr Package and Program with the above command line and advertise to all your Nomad machines.

Using other firewalls

If you are using other types of firewall on your systems you will need to open the Nomad port in these. You should refer to the specific firewall documentation for details on how to do this.

 

PXE Everywhere 2.1 - Prerequisites

The following operating system and software environment prerequisites should be met in order for PXE Everywhere to be successfully installed and run.

Attention
You cannot mix the components from different versions of PXE Everywhere in a single installation.

In the requirements that follow, where an image is used as the alternative to a CD, it will be necessary to mount the image.

Requirements

Notes

OS

PXE Everywhere local host is supported on the following Microsoft operating systems:

·          

·         Windows 8 Enterprise (32-bit and 64-bit)

·         Windows 7 (Professional, Enterprise, Enterprise x64 and Ultimate)

·         Windows Vista (Business, Enterprise, Enterprise x64 and Ultimate)

·         Windows XP 32-bit with SP3 applied

·         Windows Server 2012

·         Windows Server 2008 R2 RTM, SP1

·         Windows Server 2008 x64 SP1, SP2

·         Windows Server 2008 SP1, SP2

·         Windows Server 2003 SP2

PXE Everywhere central server is supported on the following Microsoft operating systems:

·          

·         Windows Server 2012

·         Windows Server 2008 R2 RTM, SP1

·         Windows Server 2008 x64 SP1, SP2

·         Windows Server 2008 SP1, SP2

·         Windows Server 2003 SP2

General requirements

·          

·         A working DHCP implementation to enable TFTP boot image retrieval

Systems Management

·          

·         Configuration Manager 2012 RTM, SP1

·         Configuration Manager 2007 SP2, R2, R3

PXE Everywhere central server

To install PXE Everywhere central server the following needs to be present:

·          

·         IIS 6.0 or above with ASP.NET enabled

·         .NET Framework 2.0

PXE Everywhere central server requires .NET Framework 2.0. On Windows Server 2012 this must be explicitly added:

1.       In the Server Manager Dashboard choose Add roles and features. To enable ASP.NET integration in IIS scroll down in the Role services list until the Application Development node is showing and selected the ASP.NET 3.5 and ASP.NET 4.5

2.       In the Select features list expand the .NET Framework 3.5 Features and enable .NET Framework 3.5 (includes .NET 2.0 and 3.0)

PXE Everywhere local host

·          

·         Requires at least 2MB free disk space for the application, plus whatever size your boot images require (typically 130MB each).

Target machine

·          

·         Minimum specification as required by the target operating system

·         Connection to a LAN 100mbps or greater

PXE Everywhere Port Requirements

The following ports must be opened to enable PXE Everywhere to communicate when firewalls are in place:

·          

·         TCP/IP default port 2012 (configurable)

The following port must be opened on the PXE Everywhere central server:

·          

·         HTTP over port 80

The following ports will need to be open for HTTP and DHCP communications to work (as would generally be the case):

·          

·         DHCP / BOOTP listens on ports 67 and 4011

·         DHCP / BOOTP Client port 68

·         TFTP incoming over port 69