rmessing171
asked on
SCCM 2007 Best Practices On Removing Resources from Collections
Hello Everyone:
Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.
My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections. We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.
1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?
2. Or should they be manually deleted from the SCCM collection and also deleted from AD?
3. If a SCCM resource is not on the network for a week, why would it still be reporting in AD? Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?
Our Discovery process is setup with the following:
Active Directory System Group Discovery - Enable Directory System Group Discovery
Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded
Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery
Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded
Active Directory System Discovery - Enable Active Directory System Discovery
Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded
Active Directory User Discovery - NOT Enabled
Heartbeat Discovery - Enable Heartbeat Dicovery (Send every 1 Weeks)
Network Discovery - NOT Enabled
Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.
My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections. We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.
1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?
2. Or should they be manually deleted from the SCCM collection and also deleted from AD?
3. If a SCCM resource is not on the network for a week, why would it still be reporting in AD? Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?
Our Discovery process is setup with the following:
Active Directory System Group Discovery - Enable Directory System Group Discovery
Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded
Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery
Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded
Active Directory System Discovery - Enable Active Directory System Discovery
Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded
Active Directory User Discovery - NOT Enabled
Heartbeat Discovery - Enable Heartbeat Dicovery (Send every 1 Weeks)
Network Discovery - NOT Enabled
ASKER
Thank you for this info, If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections? Is there a way to force a discovery to update the collections and Discovery Data?
Check this in collections.
http://blogs.technet.com/b/meamcs/archive/2011/01/23/system-center-configuration-manager-2007-r3-dynamic-collection.aspx
This is essentially forcing it.
http://blogs.technet.com/b/meamcs/archive/2011/01/23/system-center-configuration-manager-2007-r3-dynamic-collection.aspx
This is essentially forcing it.
I hope that you have R3.
ASKER
OK. I checked the All Systems properties and the Dynamically add new resources check box was not checked. If I check this, will this remove resources from the collections that are not currently on the network?
ASKER
I have SCCM 2007 R2. What will R3 provide me?
Delta updates (5 min updates) and some more
http://blogs.msdn.com/b/steverac/archive/2010/10/15/introducing-sccm-2007-r3.aspx
http://blogs.msdn.com/b/steverac/archive/2010/10/15/introducing-sccm-2007-r3.aspx
ASKER
OK. Thank you for this info. If I stick with R2 for now and enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
ASKER
If I stick with R2 for now and enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
database cleanup for older entries is available even in the older version.
So I think it will work. I don't have a R2 environment here to test else would confirm.
So I think it will work. I don't have a R2 environment here to test else would confirm.
ASKER
Thank you for all of you assistance and info! From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
If you reimage then AD deletion is for sure.
And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
ASKER
Thank you for the quick reply and info! What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
This should help
http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/
I have seen better documents on web but cannot recall where. They even had screenshots.
http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/
I have seen better documents on web but cannot recall where. They even had screenshots.
ASKER
This is great info! I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days? When you get a moment, please let me know.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
90 days history is good for most of us.
http://my.safaribooksonline.com/book/operating-systems-and-server-administration/microsoft-system-center-configuration-manager-2007/9781435456501/planning-site-maintenance-and-management/ch03lev1sec3