Marc Umeno's Blog : System Center

Service Manager Test Drive Available Now

mumeno — Mon, 04 May 2009 21:06:08 GMT

I have exciting news to share!

We have a Service Manager Test Drive preview of Beta 2 available to try out now. It’s on hosted VMs, so all you need to do is log in with your Windows Live ID and start playing with it.

The VMs have all of the same sample data we used in our demonstrations at the Microsoft Management Summit. You will be able to evaluate the core Incident, Change, and Configuration Management features, as well as integration with Active Directory, System Center Configuration Manager and System Center Operations Manager. There is also some sample data for a few reports available in the Test Drive.

Please check it out and let us know what you think – you can post feedback and questions in the Service Manager TechNet forum.

Desired Configuration Management Integration in Service Manager Beta 1

mumeno — Wed, 21 Jan 2009 10:34:09 GMT

System Center Configuration Manager 2007(SCCM) has introduced a valuable feature, Desired Configuration Management (DCM), that enables assessment of client configuration compliance with specified configuration baselines. With Service Manager Beta 1, we have introduced integration with DCM where incidents are created for out-of-compliance clients.

We do this by collecting DCM non-compliance data using the SCCM connector and then continuously running a Service Manager workflow that creates incidents for non-compliant SCCM clients. You decide which specific DCM Baselines and DCM CIs generate incidents.

To initiate DCM incidents, you must create an connector to an SCCM site that is using the DCM feature. Next, select the Incident Settings view and start configuring the Desired Configuration Management settings using the Configure Workflow task.

This launches a dialog where all DCM workflows are managed:

The Add button launches the Add Desired Configuration Management Workflow wizard.

You can select DCM baselines and DCM CIs to include in the workflow – for each client that has a non-compliant report, an incident will be created. You can apply a pre-configured template and notification rules for the workflow as well. Once you have configured your first DCM workflow, incidents will be created for any current non-compliant clients. After the first DCM workflows are run, incidents will only be created for new non-compliant issues.

Note: You should be careful about which DCM Baselines and CIs you choose to create incidents – for example, if you choose DCM CIs that describe software update non-compliance, you could potentially generate an incident for each unpatched computer in your SCCM site, which could result in thousands of excess incidents.

Newly-created DCM incidents can be viewed in the Work Items –> Incident Management –> All Open DCM Incidents view.

DCM incident forms have a special Compliance Errors tab that adds additional details about the affected SCCM computer, including computer owner, computer name, DCM baseline, DCM scan date, and details from the DCM report about why the computer was non-compliant.

Once DCM incidents are created, they can managed like any other incidents in Service Manager.

Count of Configuration Items in Service Manager Beta 1

mumeno — Thu, 15 Jan 2009 21:47:32 GMT

If you would like to get a count of Configuration Items for Service Manager Beta 1, there is a quick way to do this.

The steps are below in the picture. Go to the Configuration Items workspace, click on a node and open any CI form. Go to the related Items tab and then click on any “Add” button. This will bring the Select Objects Dialog.

Just pick a class you are interested in and then you will get the count of objects in that class.

Users in Service Manager Beta 1

mumeno — Wed, 10 Dec 2008 11:39:38 GMT

Quick points on users for Service Manager Beta 1:

1. You can automatically populate users in Service Manager by creating an Active Directory connector.

2. It may not be obvious, but you can view users in the Administration workspace under the Security node:

3. You can also create a new user by selecting the “create user” task after selecting the Users node in the Administration workspace:

Administering and Tracking Service Manager Beta 1 Connectors

mumeno — Tue, 02 Dec 2008 13:52:14 GMT

Early feedback on Service Manager Beta 1 has highlighted that many folks would like more information around administration of connectors, especially on how to track the progress of a connector.

TASKS

First, I would like to point out some of the tasks available for Service Manager Beta 1 for a connector:

The Sync Now task initiates an on-demand data sync for a connector. However, contrary to what you might think, this sync will not be completed immediately as there are often many underlying processes that are involved with a connector sync. I will touch more on the details around connector syncs later on in this post.

The Delete Connector task will do a couple of things, one of which may be surprising. First the connector is deleted and removed from the Service Manager database. What may be a surprise to you is that deletion of a connector will also delete any Configuration Items (CIs) it created, unless those CIs were also updated by another data source. This capability can be very convenient if you need to remove a lot of data from the Service Manager CMDB.

The Disable task will prevent future connector syncs from happening for a particular connector. In-progress syncs will complete even after this task is used.

The Enable task will re-enable a disabled connector and in Beta 1 at least, this will also initiate an immediate connector sync.

The Edit Connector task will pop-up a property dialog for the connector.

TRACKING SYNCS

As I mentioned above, each data sync for a connector is actually comprised of a number of smaller processes that actually run asynchronously.

Each sync for the AD and SCCM connectors comes in 2 asynchronous steps – the first step extracts data from the source and puts it into a staging data cache; the second step takes data from the staging data cache and writes into the Service Manager CMDB.

You can follow the progress of these data syncs in Service Manager Beta 1 by looking at the Event Viewer under Administrative Tools:

If you click on the “Filter Current Log” action and pick the “Lfx Datacenter” “Lfx Service” and “Lfx Source Config” Event services, you will narrow down the events to those related to connectors.

If you are only interested in tracking the progress of a connector, you can filter to just the “Lfx Service” events.

For an SCCM Connector, you will see a sequence that looks something like this – once all of these events are done, the sync is completed.

Date	Event
12/2/2008 2:18	Done:MomStore.DCMNonCompliantConfigItems.DefaultCache.SCCMConnector.
12/2/2008 2:16	Done:MomStore.DCMConfigItemRelations.DefaultCache.SCCMConnector.
12/2/2008 2:15	Done:MomStore.DCMConfigItems.DefaultCache.SCCMConnector.
12/2/2008 2:14	Done:MomStore.TopConsoleUser.DefaultCache.SCCMConnector.
12/2/2008 2:14	Done:MomStore.DeviceHasSoftwareUpdate.DefaultCache.SCCMConnector.
12/2/2008 2:12	Done:MomStore.DeviceHasSoftwareItemInstalled.DefaultCache.SCCMConnector.
12/2/2008 2:11	Done:MomStore.NetworkAdapter.DefaultCache.SCCMConnector.
12/2/2008 2:10	Done:MomStore.Processor.DefaultCache.SCCMConnector.
12/2/2008 2:09	Done:MomStore.LogicalDisk.DefaultCache.SCCMConnector.
12/2/2008 2:08	Done:MomStore.PhysicalDisk.DefaultCache.SCCMConnector.
12/2/2008 2:07	Done:MomStore.OperatingSystem.DefaultCache.SCCMConnector.
12/2/2008 2:06	Done:MomStore.LogicalComputersOnPhysicalComputers.DefaultCache.SCCMConnector.
12/2/2008 2:05	Done:MomStore.LogicalComputers.DefaultCache.SCCMConnector.
12/2/2008 2:04	Done:MomStore.PhysicalComputers.DefaultCache.SCCMConnector.
12/2/2008 2:03	Done:Importer.DCM.SCCMConnector.
12/2/2008 2:02	Done:Importer.Updates.SCCMConnector.
12/2/2008 2:01	Done:Importer.Inventory.SCCMConnector.
12/2/2008 2:00	Done:Importer.Computers.SCCMConnector.

During the running of a sync, even if the connector has not completed all of the processes, Configuration Items might be created or updated & can be visible in the Service Manager console. For example, you might see a number of computer CIs created during an SCCM sync. However, if you were to look at the Software or Software Updates installed on that computer, you might find they are still missing if the sync has not completed.

Creating an SCCM Connector for Service Manager Beta 1

mumeno — Tue, 02 Dec 2008 12:44:53 GMT

In Service Manager Beta 1, you can create a Connector to a System Center Configuration Manager 2007 SP1 database.

The SCCM Connector brings Configuration Item data about computers managed by SCCM, including Hardware & Software Inventory, Software Updates, and Desired Configuration Management (DCM) data.

To create an SCCM Connector, you need to be a Service Manager administrator. Connectors are found in the Administration workspace.

Start by clicking on the “Create Connector” task and choose the Configuration Manager Connector option.

That launches the SCCM Connector wizard:

After supplying a Name and Description, you are given an option to provide an SCCM database server and database instance as well an account to access the database.

(Note: You cannot edit the database server name or database name for an existing SCCM connector – you have to create a new SCCM connector in this case)

TIP: The account must have rights for smsroledb_extract and databasereaders in SQL.

TIP: You should always check the validity of the credentials by pressing the “Test Connection” button.

Next you have provide the schedule for running the SCCM connector, which can run once a day or once a week.

You are then shown a summary screen and a completion screen when the connector is created.

Service Manager Beta 1 Basic Setup Walkthrough

mumeno — Tue, 02 Dec 2008 12:10:40 GMT

I am going to write a series of posts about using Service Manager Beta 1, adding some tips that we have learned during our time leading up to the release.

For this post, I will start with a walkthrough of the Setup for the basic Service Manager server, without going through the optional Data Warehouse (DW) installation.

To run setup, the logged-in account must be an admin on the local machine running the install.

You start at the Service Manager Setup splash screen:

If you are going to do the DW install, you need to start with that first. You are also able to install only the SM console on a client machine. In this case, I will skip the options and go straight into the basic SM management server installation.

After a couple of screens of EULA and install directory, you get to the prerequisites screen:

You can look at the prereq check log for details by clicking on the “View log for more details” link:

(BTW, If your machine has 4 GB or less of RAM, you will get a warning).

On the next screen you specify the SM database details:

You then get an optional DW screen (which I am skipping), and then you can specify the Management Group name and Service Manager Administrators Management group/account.

TIP: You must be sure to have the Service Manager Service account be a member of the Service Manager Administrators Management group (or the same account if using an individual account).

The next screen asks for the Service Manager Service account.

TIP: The SM Service account must be an administrator on the Service Manager Management server machine and must be a sysadmin on the SQL database.

Pressing the “Next” button takes you to a summary screen:

After hitting Install, you will get to a installation progress screen, which should run for only a few minutes:

And finally, success!

If some reason, there is a problem with the installation, you can find the setup logs here:

%homedrive%%homepath%\appdata\local\scsm\setup\*.log

(there should be 2 files there SCSMInstall.log and SCSMSetupwizard.log)

System Center Service Manager Beta 1 is Released!

mumeno — Sun, 23 Nov 2008 09:29:22 GMT

System Center Service Manager Beta 1 has shipped!

You can download the Beta from Connect:

https://connect.microsoft.com/SelfNomination.aspx?ProgramID=2733&pageType=1&SiteID=446

System Center Service Manager Beta 1

mumeno — Thu, 06 Nov 2008 08:15:46 GMT

It’s been a while since I posted as we have been feverishly working on the Beta 1 for System Center Service Manager. Now that we are getting close to shipping Beta 1, I will start blogging again.

Beta 1 has a number of great features, including Incident Management (including automatic creation of incidents from SCCM Desired Configuration Management compliance errors), Change Management, Configuration Management/CMDB, and Connectors to Active Directory & System Center Configuration Manager.

We are very excited about sharing what we have been putting together – it’s coming soon!

Servicing Offline VMs with SCVMM and SCCM

mumeno — Tue, 25 Mar 2008 11:51:25 GMT

We just released a whitepaper around servicing offline VMs using SCVMM and SCCM.

Download details are here:

https://www.microsoft.com/downloads/details.aspx?FamilyID=c5abb19e-15b1-4692-b465-393584c592a0&displaylang=en

Direct Download file from here:

http://download.microsoft.com/download/d/1/0/d10ecad6-3de9-4bb2-bbc4-4f8d5c487b66/VMMLibraryPatching.zip

There will be more to come on this subject from us in the future, but this is a great start for realizing the combined value of System Center products.

Software Updates Management Whitepaper Published for Transition from SMS 2003 to System Center Configuration Manager 2007

mumeno — Wed, 31 Oct 2007 21:12:56 GMT

I am pleased to announce that we have just published a whitepaper that provides guidance for customers transitioning from SMS 2003 Patch Management to System Center Configuration Manager 2007 Software Updates Management.

You can download the paper from here:

http://download.microsoft.com/download/d/8/6/d861e149-76f7-4348-89aa-7f3d9777f5ae/Configuration Manager Software Updates Management Guidance - Migration from ITMU.doc

Here is a description:

While the release of System Center Configuration Manager 2007 has been accompanied by robust functional and procedural product documentation, the integration of WSUS introduced two additional challenges:

¾ Successful migration of SMS 2003 environments to Configuration Manager while maintaining the existing software update levels of service.

¾ Clarifying a dramatic shift in a fundamental process in the minds of experienced SMS 2003 administrators.

This whitepaper provides guidance on how to migrate software update management from SMS 2003 to Configuration Manager, how to operate in the transition period while maintaining ongoing software update deployments for both SMS 2003 and Configuration Manager clients, and best practices for managing software updates using Configuration Manager.

This document assumes that the reader has experience with both SMS 2003 and the Inventory Tool for Microsoft Updates (ITMU). Additionally, it is beneficial for the reader to be familiar with the operational processes associated with enterprise software update management.

Install Updates Prior to Deadline

mumeno — Thu, 11 Oct 2007 05:57:17 GMT

In SCCM 2007, we added a neat feature similar to one provided by Automatic Updates that gives managed clients the ability to install updates prior to deadline. End users can configure this by clicking the "Schedule Installation" as shown below or by going to directly to the Configuration Manager control panel applet under the "Updates" tab.

What are the Top Reasons for Non-compliance?

mumeno — Thu, 11 Oct 2007 05:40:48 GMT

This is a very fundamental question for Admins trying to raise the level of software update compliance at their company.

Traditionally using SMS 2003, the normal practice was to look at a sample of client logs and use that as a basis for guessing what the top problems were for non-compliance.

In SCCM 2007, we have added a couple of new reports that can help solve this problem for Scan and Deployment, "Troubleshooting 1 - Scan Errors" & "Troubleshooting 2 - Deployment Errors" which displays groupings of the last error received from clients. You can sort by the "count" column to get a stack-ranked list of these errors, which can greatly increase the accuracy in determining the exact top non-compliance issues and dramatically reduce the time & effort required to make the assessment.

No more scrubbing through client logs!

In real-life deployments within MSIT and TAP customers, we used these reports constantly to quickly identify problem areas such as Group Policy conflicts, low WUA version, networking issues, and SUP configuration issues. By addressing the top problems, customers were able to eliminate major sources of failures and achieve much greater compliance numbers.

When Do Downloads Happen on Clients?

mumeno — Thu, 11 Oct 2007 05:23:36 GMT

It's been a while since I added a post. Let's start up again with a quick one.

I was recently asked when do SCCM clients download updates and when would they show the notification balloon in the system tray - here is the answer:

1. SCCM clients download updates according to a deployment-specific setting in the Deploy Software Updates Wizard (DSUW). They begin downloading at the time specified in the "Make Software Updates Available" setting on the Deployment Schedule page. If you select "As soon as possible" then the updates will start being downloaded as soon as the deployment policy hits the client.

2. The notification balloon is displayed immediately for deployments without a deadline and only after updates have completed download for deployments with a deadline.

SCCM 2007 RC1 is Released!

mumeno — Mon, 16 Jul 2007 10:28:45 GMT

Late on Friday, we declared SCCM 2007 RC1 ready for release to the web! It is now available on connect.

For the Software Updates Management feature, RC1 brings a number of improvements, including new reports for overall per-machine compliance, scan errors, deployment errors; reorganized categorization of reports; ability for end users to schedule installations prior to deadline ("install updates every day at 3am"); capability to hide icons and balloon notifications from end users (silent mode); many many performance and scalability improvements; and a lot more. I'll follow-up in future posts to talk more about all of this.