Solved

SCCM 2007 Best Practices On Removing Resources from Collections

Posted on 2013-11-20
16
893 Views
Last Modified: 2013-12-03
Hello Everyone:

Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.

My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections.  We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.

1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?

2. Or should they be manually deleted from the SCCM collection and also deleted from AD?

3. If a SCCM resource is not  on the network for a week, why would it still be reporting in AD?  Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?


Our Discovery process is setup with the following:

Active Directory System Group Discovery - Enable Directory System Group Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery

Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded


Active Directory System Discovery - Enable Active Directory System Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory User Discovery - NOT Enabled

Heartbeat Discovery - Enable Heartbeat Dicovery  (Send every 1 Weeks)

Network Discovery - NOT Enabled
0
Comment
Question by:rmessing171
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 8
16 Comments
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664056
0
 

Author Comment

by:rmessing171
ID: 39664110
Thank you for this info,  If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections?  Is there a way to force a discovery to update the collections and Discovery Data?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664142
0
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664158
I hope that you have R3.
0
 

Author Comment

by:rmessing171
ID: 39664169
OK.  I checked the All Systems properties and the Dynamically add new resources check box was not checked.  If I check this, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39664180
I have SCCM 2007 R2.  What will R3 provide me?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39664190
0
 

Author Comment

by:rmessing171
ID: 39664215
OK.  Thank you for this info. If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39666060
If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666134
database cleanup for older entries is available even in the older version.

So I think it will work. I don't have a R2 environment here to test else would confirm.
0
 

Author Comment

by:rmessing171
ID: 39666160
Thank you for all of you assistance and info!  From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666173
If you reimage then AD deletion is for sure.

And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
0
 

Author Comment

by:rmessing171
ID: 39666206
Thank you for the quick reply and info!  What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
0
 
LVL 24

Expert Comment

by:Nagendra Pratap Singh
ID: 39666224
This should help


http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/

I have seen better documents on web but cannot recall where. They even had screenshots.
0
 

Author Comment

by:rmessing171
ID: 39666278
This is great info!  I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?  When you get a moment, please let me know.
0
 
LVL 24

Accepted Solution

by:
Nagendra Pratap Singh earned 500 total points
ID: 39667025
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A safe way to clean winsxs folder from your windows server 2008 R2 editions
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question