1 / 30

Configuration Manager v.Next Site Hierarchy Technical Overview

Configuration Manager v.Next Site Hierarchy Technical Overview. Infrastructure Promises. Modernizing Architecture Minimizing infrastructure for remote offices Consolidating infrastructure for primary sites Scalability and Data Latency Improvements

xaviere
Download Presentation

Configuration Manager v.Next Site Hierarchy Technical Overview

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Configuration Manager v.NextSite Hierarchy Technical Overview

  2. Infrastructure Promises • Modernizing Architecture • Minimizing infrastructure for remote offices • Consolidating infrastructure for primary sites • Scalability and Data Latency Improvements • Central Administration Site is just for administration and reporting – Other work distributed to the primaries as much as possible • System-generated data (HW Inventory and Status) can be configured to flow to CAS directly • File processing occurs once at the Primary Site and uses replication to reach other sites (no more reprocessing at each site in the hierarchy) • Be Trustworthy • Replace cumbersome object replication and cost associated to troubleshooting • Industry standard SQL replication sub-system simplifies troubleshooting and reduces operational costs

  3. Site Server Characteristics

  4. When do I need a Central Administration Site? • If you have more than one Primary Site and want them linked together in a single hierarchy • If you want to off-load reporting and administration from your Primary Site Migration Consideration: The Central Admin Site must always be installed on new hardware

  5. When do I need a Primary Site? • To manage any clients • Add more primary sites for: • Scale (more than 100,000 clients) • Reduce impact of primary site failure • Local point of connectivity for administration • Political reasons • Content regulation

  6. When do I not need a Primary Site? • Decentralized administration • Logical data segmentation • Client agent settings • Language • Content routing for deep hierarchies

  7. When do I need a Secondary Site? • No local administrator • If you need to manage upward-flowing WAN traffic • Consider supporting roles like SUP, PXE Service Point, and State Migration Point, also • If you need tiered content routing for deep network topologies

  8. When do I need a Distribution Point? • If you’re not concerned about clients pulling policy or reporting status, inventory, or discovery to their primary site location • If BITS doesn’t provide enough bandwidth control for your WAN • If you want to leverage BITS access for clients (including the use of BranchCache™), multicast for OSD, or streaming for App-V Note: These advanced features are not available on file-share-only DPs

  9. What other options are available for content distribution? • Utilize Distribution Points with throttling and scheduling capabilities when: • The DP will be remotely located from a primary site • When you want to throttle or schedule downward flowing traffic to that location • Utilize Branch DPs when: • Have location with 100 or fewer clients to manage and don’t expect more than 10 concurrent connections • Are able to identify at least one workstation as a Branch DP – can run on Win 2008 or client OSes • BITS gives you enough network traffic control for content distribution • You want the download on demand capabilities • Utilize BranchCache™ when: • You have a distribution point running on Windows Server 2008 R2 • Your clients are running a compatible OS

  10. Customer Profile #1 – 5000 clients“Remote office optimization” Infrastructure Goal: Minimize ConfigMgr infrastructure to support the remote office locations.

  11. Customer Profile #1 – 5000 clients“Remote office optimization” • Corporate Campus • Primary site (3,000 clients) • Local SQL Server • MP, DP (x2), FSP*, SLP*, SUP, SMP, RP/RSP • Sales Office • Only 15 clients • Good connectivity • Branch DP or • BranchCache™ • Warehouse • Secondary site (485 clients) • Manage WAN • DP • District Office • Secondary site (1,500 clients) • Manage WAN • MP, DP, SUP, PMP Configuration Manager 2007

  12. Customer Profile #1 – 5000 clients“Remote office optimization” • Corporate Campus • Primary site (3,000 clients) • Local SQL Server • MP, DP (x2), FSP*, SLP*, SUP, RP/RSP • Sales Office • Only 15 clients • Good connectivity • Branch DP or • BranchCache™ • Warehouse • DP with throttling and scheduling • (485 clients) • Manage downward flow of Content over WAN • District Office • Secondary site (1,500 clients) • Manage upward/downward WAN traffic • SQL Express • MP, DP, SUP, PMP v.Next

  13. Replication *Subset of global data only

  14. Conceptual Replication Model • Global Data • Available at: CAS & all Primary Sites • Examples • Collection rules • Package metadata • Deployments • Security Scopes • Site Data • Available at: CAS, Replicating Primary • Examples: • HINV • Status • Collection Membership Results Content Available where content has been distributed to a DP Central Site (Germany) Germany (Berlin) Spain(Madrid) Sevilla Cordoba • Global Data subset • Examples • Packages metadata and status • Program metadata Content routing between Secondaries

  15. SQL Replicated Data Types Site Data Examples Global Data Examples • Collection Rules • Package Metadata • Program Metadata • Deployments • Configuration Item Metadata • Software Update Metadata • Task Sequence Metadata • Site Control File • System Resource List (site servers) • Site Security Objects (Roles, Scopes, etc.) • Alert Rules • Collection Membership Results • Alert Messages • Hardware Inventory • Software Inventory & Metering • Asset Intelligence CAL Track Data • Status Messages • Software Distribution Status Details • Status Summary Data • Component and Site Status Summarizers • Client Health Data • Client Health History • Wake On LAN • Quarantine Client Restriction History

  16. Client Agent Settings • Default client agent settings • Defined for the entire hierarchy • Identifier to not allow customizations • Custom client agent settings • Collection-based Targeting • Multiple custom setting objects  Multiple collections • Model behaviors consistent with targeting today • Can override “optional” client agent settings applied to the hierarchy • Conflict Resolution that is priority-based • Resultant settings can be an aggregation of both default & custom setting

  17. Client Agent Settings

  18. Display What’s Relevant to Me • Role-Based Administration enables mapping the organizational roles of administrators directly to built-in security roles • Security role = Contains Permissions (e.g. Read Package) • Security scope = Contains securable objects • Administrator has one or more security roles and security scopes associated • Admins only see what they have access to • Management of security is further simplified by enabling administrative security for the entire hierarchy (Security is global data)

  19. Site Data Segmentation today… France Primary Site Meg wishes to distribute a package to all of her EMEA users in the West region Louis “French Admin” • French collection(s) • Create advertisement for French collection(s) Meg Collins “Central Admin” England Primary Site • Create and distribute • package Vintzel “English Admin” • English collection(s) • Create advertisement for English collection(s)

  20. Data Segmentation via RBAC France Primary Site Meg wishes to distribute a package to all of her EMEA users in the West region Vintzel “English Admin” Louis “French Admin” Central Admin Site Meg Collins “Central Admin” • French collection(s) • Create advertisement for French collection(s) • English collection(s) • Create advertisement for English collection(s) • Create and distribute • package England Primary Site

  21. Customer Profile #2 Infrastructure Goal: Minimize ConfigMgr infrastructure to support unique remote control settings for the HR department and hardware inventory policies for servers.

  22. HR Primary Site • Primary site (300 clients) • Remote Control Disabled • Admin Segmentation • Chicago Central Site • Primary site (~14,700 clients) • Remote Control Enabled Chicago Campus 15,000 clients • London Primary Site • Primary site (5,000 clients) • Standard Inventory Policies for desktop • London Servers Site • Primary site (500 clients) • Hardware Inventory Policies unique to Servers • Admin Segmentation London Offices 5,000 desktops 500 Servers Configuration Manager 2007

  23. Chicago Primary Site • Primary site (15,000 clients) • Local SQL Server • HR Collection-based settings for Remote Control • Central Admin Site • No Clients • Administration & Reporting for Hierarchy • Admin segment for HR clients Chicago Campus 15,000 clients • London Primary • Primary site (5,500 clients) • Inventory Class reporting at Collection level • Admin Segment for Servers v.Next London Offices 5,000 desktops 500 Servers

  24. Customer Profile #3“200k Clients”

  25. 200k clients Primary 5 Primary 3 Primary 2 Primary 4 Primary 1 SQL Server Central Admin Site • Local point of connectivity for administration • Fault Tolerance • Scale/Perf • Content Regulation Secondary Site Secondary Site DP DP DP DP • Concerned with downward flow of content only • Concerned with upward and downward flow of traffic (Client/Content) Secondary Sites (3) Secondary Site Secondary Sites (3) Secondary Sites (3) Content Branch DP or BranchCache™ Branch DP or BranchCache™ Branch DP or BranchCache™

  26. ConfigMgr 2007 vsConfigMgr.next

  27. Minimum System Requirements • 64-bit hardware for all site servers and site system roles • SQL Server 2008 SP1 with CU6 (64-bit) • Windows Server 2008* (64-bit) • Exceptions as follows: • Standard Distribution Points will support Windows Server 2003 (including 32-bit).  Some feature limitations may apply (e.g. BranchCache™). • Branch Distribution Points will run on ConfigMgr v.Next supported client operating systems (including 32-bit). * Latest Service Pack

  28. What can I do now to prepare? • Flatten hierarchy where possible • Plan for Windows Server 2008, SQL 2008, and 64-bit • Start implementing BranchCache™ with ConfigMgr 2007 SP2 • Move from web reporting to SQL Reporting Services

  29. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

More Related