Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

SCCM 2007 Install in OU / Extend Schema

Posted on 2011-03-04
7
Medium Priority
?
1,006 Views
Last Modified: 2012-08-13
We are an OU within and AD site; we have full control within the OU. I’m looking to install SCCM 2007, can I extend the schema (run extadsch.exe) in the OU rather than for the entire domain. Also does anyone know of any articles that discuss limiting SCCM 2007 to an OU.
0
Comment
Question by:TimSharpe02118
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
7 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 35038479
No you can only install SCCM into the domain not into a single OU.
0
 
LVL 3

Expert Comment

by:jedial19
ID: 35041412
I can't speak adequately to the extending the AD schema (although my thought is that you will have to apply it to the entire domain) however I can suggest a simple method for limiting SCCM to just one OU.  This assumes you do not have SCCM installed elsewhere in your domain.  If you do I suggest installing a separate MP for your OU as multiple SCCM systems in a single domain can cause huge problems.

The short version is:  Only install the client on computers in that OU.
The easiest way I can think of to do this is to turn off automated client installation in SCCM and use Group Policy to deploy the client.  The GPO would only target that particular OU.  Below are a couple of links that should help you with setting up a GPO.  One thing I learned when we did this is that most of these articles assume you have Automatic Updates active on your target computers.  Our base image has it turned completely off (because we have SCCM updating everything).  You need to have AU set to at least the lowest active level of 'Notify Me...'  This can also be added to your GPO.

So you need 3 parts in your GPO:
1) Redirect the automatic update point to your local wsus server
2) Configure the installation of the SCCM client (and publish it in your wsus server)
3) Make sure Automatic updates is set to any of the 3 active states.

http://dynamicit.wordpress.com/tag/sccm/

http://blogcastrepository.com/blogs/kim_oppalfenss_systems_management_ideas/archive/2007/05/19/sccm-2007-client-agent-deployment-using-software-updates.aspx

http://bassplayerdoc.spaces.live.com/blog/cns!CED2A18FB2A30E11!410.entry
0
 
LVL 1

Accepted Solution

by:
brittman earned 2000 total points
ID: 35041545
well, as far as extending the schema that is going to be for the entire domain.  If you don't want to extend the schema though, you will just have to make sure you install the SLP role (server locator point) so that you're clients can find the Management point rather than use the information published to AD which if you extend the schema you would use that.

as for limiting to an OU, simply.  When you configure you're discovery, only configure that OU during your SYSTEM DISCOVERY, under site settings, discovery options, it'll be in the format:  

LDAP://OU=your ou, OU=next up level OU, DC=comp,DC=corp, DC=com or net... you get the idea.

By limiting your discovery to only that OU provided you define you're boundary correctly then those clients will be discovered and assigned to your SCCM site.  At that point you could use client push provided you define an account which has admin rights to your clients to install the clients, hassle free.
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 35042139
My reading of the question is that youe NOT domain administrators but rather you administrer objects inside your OU. IF You go ahead and try installing and running SCCM in this manner I would expect you to run into all kind of problems.

You cant extend the schema without some very explicit rights at the domain level.
Your Domain admins may take a dim view to you doing so.
IF you get the discovery and limits wrong then you could end up with a lot of undesired effects.
You will restrict your domain admins in what they can do with SCCM in the domain in the future.

My answer above to your orriginal question is still the correct one. No you can NOT extend the schema within an OU, it is a domain wide change that gets implemented and as such has an impact on the whole domain.
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 35075147
The question asked was "We are an OU within and AD site; we have full control within the OU. I’m looking to install SCCM 2007, can I extend the schema (run extadsch.exe) in the OU rather than for the entire domain"

The answer to that is a simple NO. I answered that in the very first posting.  Whilst the other posts have added value to the "Also could you...." Follow on to the question that is not the prime question, more of an "Oh and by the way....."
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft Office 365 is a subscriptions based service which includes services like Exchange Online and Skype for business Online. These services integrate with Microsoft's online version of Active Directory called Azure Active Directory.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

604 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question