Solved

SCCM 2007 Best Practices On Removing Resources from Collections

Posted on 2013-11-20
16
876 Views
Last Modified: 2013-12-03
Hello Everyone:

Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.

My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections.  We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.

1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?

2. Or should they be manually deleted from the SCCM collection and also deleted from AD?

3. If a SCCM resource is not  on the network for a week, why would it still be reporting in AD?  Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?


Our Discovery process is setup with the following:

Active Directory System Group Discovery - Enable Directory System Group Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery

Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded


Active Directory System Discovery - Enable Active Directory System Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory User Discovery - NOT Enabled

Heartbeat Discovery - Enable Heartbeat Dicovery  (Send every 1 Weeks)

Network Discovery - NOT Enabled
0
Comment
Question by:rmessing171
  • 8
  • 8
16 Comments
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664056
0
 

Author Comment

by:rmessing171
ID: 39664110
Thank you for this info,  If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections?  Is there a way to force a discovery to update the collections and Discovery Data?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664142
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664158
I hope that you have R3.
0
 

Author Comment

by:rmessing171
ID: 39664169
OK.  I checked the All Systems properties and the Dynamically add new resources check box was not checked.  If I check this, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39664180
I have SCCM 2007 R2.  What will R3 provide me?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664190
0
 

Author Comment

by:rmessing171
ID: 39664215
OK.  Thank you for this info. If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39666060
If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666134
database cleanup for older entries is available even in the older version.

So I think it will work. I don't have a R2 environment here to test else would confirm.
0
 

Author Comment

by:rmessing171
ID: 39666160
Thank you for all of you assistance and info!  From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666173
If you reimage then AD deletion is for sure.

And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
0
 

Author Comment

by:rmessing171
ID: 39666206
Thank you for the quick reply and info!  What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666224
This should help


http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/

I have seen better documents on web but cannot recall where. They even had screenshots.
0
 

Author Comment

by:rmessing171
ID: 39666278
This is great info!  I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?  When you get a moment, please let me know.
0
 
LVL 23

Accepted Solution

by:
Nagendra Pratap Singh earned 500 total points
ID: 39667025
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have been working as System Administrators since 2003. I recently started working as a FreeLancer and was amazed to find out that very few people are taking full advantage of their Windows Server Machines. Microsoft Windows Server comes with so…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question