Solved

SCCM 2007 Best Practices On Removing Resources from Collections

Posted on 2013-11-20
16
908 Views
Last Modified: 2013-12-03
Hello Everyone:

Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.

My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections.  We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.

1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?

2. Or should they be manually deleted from the SCCM collection and also deleted from AD?

3. If a SCCM resource is not  on the network for a week, why would it still be reporting in AD?  Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?


Our Discovery process is setup with the following:

Active Directory System Group Discovery - Enable Directory System Group Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery

Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded


Active Directory System Discovery - Enable Active Directory System Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory User Discovery - NOT Enabled

Heartbeat Discovery - Enable Heartbeat Dicovery  (Send every 1 Weeks)

Network Discovery - NOT Enabled
0
Comment
Question by:rmessing171
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 8
16 Comments
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664056
0
 

Author Comment

by:rmessing171
ID: 39664110
Thank you for this info,  If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections?  Is there a way to force a discovery to update the collections and Discovery Data?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664142
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664158
I hope that you have R3.
0
 

Author Comment

by:rmessing171
ID: 39664169
OK.  I checked the All Systems properties and the Dynamically add new resources check box was not checked.  If I check this, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39664180
I have SCCM 2007 R2.  What will R3 provide me?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664190
0
 

Author Comment

by:rmessing171
ID: 39664215
OK.  Thank you for this info. If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39666060
If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666134
database cleanup for older entries is available even in the older version.

So I think it will work. I don't have a R2 environment here to test else would confirm.
0
 

Author Comment

by:rmessing171
ID: 39666160
Thank you for all of you assistance and info!  From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666173
If you reimage then AD deletion is for sure.

And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
0
 

Author Comment

by:rmessing171
ID: 39666206
Thank you for the quick reply and info!  What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666224
This should help


http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/

I have seen better documents on web but cannot recall where. They even had screenshots.
0
 

Author Comment

by:rmessing171
ID: 39666278
This is great info!  I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?  When you get a moment, please let me know.
0
 
LVL 24

Accepted Solution

by:
Nagendra Pratap Singh earned 500 total points
ID: 39667025
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question