Solved

SCCM 2007 Best Practices On Removing Resources from Collections

Posted on 2013-11-20
16
881 Views
Last Modified: 2013-12-03
Hello Everyone:

Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.

My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections.  We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.

1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?

2. Or should they be manually deleted from the SCCM collection and also deleted from AD?

3. If a SCCM resource is not  on the network for a week, why would it still be reporting in AD?  Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?


Our Discovery process is setup with the following:

Active Directory System Group Discovery - Enable Directory System Group Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery

Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded


Active Directory System Discovery - Enable Active Directory System Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory User Discovery - NOT Enabled

Heartbeat Discovery - Enable Heartbeat Dicovery  (Send every 1 Weeks)

Network Discovery - NOT Enabled
0
Comment
Question by:rmessing171
  • 8
  • 8
16 Comments
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664056
0
 

Author Comment

by:rmessing171
ID: 39664110
Thank you for this info,  If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections?  Is there a way to force a discovery to update the collections and Discovery Data?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664142
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664158
I hope that you have R3.
0
 

Author Comment

by:rmessing171
ID: 39664169
OK.  I checked the All Systems properties and the Dynamically add new resources check box was not checked.  If I check this, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39664180
I have SCCM 2007 R2.  What will R3 provide me?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664190
0
 

Author Comment

by:rmessing171
ID: 39664215
OK.  Thank you for this info. If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39666060
If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666134
database cleanup for older entries is available even in the older version.

So I think it will work. I don't have a R2 environment here to test else would confirm.
0
 

Author Comment

by:rmessing171
ID: 39666160
Thank you for all of you assistance and info!  From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666173
If you reimage then AD deletion is for sure.

And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
0
 

Author Comment

by:rmessing171
ID: 39666206
Thank you for the quick reply and info!  What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666224
This should help


http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/

I have seen better documents on web but cannot recall where. They even had screenshots.
0
 

Author Comment

by:rmessing171
ID: 39666278
This is great info!  I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?  When you get a moment, please let me know.
0
 
LVL 23

Accepted Solution

by:
Nagendra Pratap Singh earned 500 total points
ID: 39667025
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
FTP server windows 2008 5 40
PC trouble to connect to file server 6 38
PowerShell: How to output error msg into file but with date? 5 24
SpaceMonger Issue 4 12
We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question