Solved

SCCM 2007 Best Practices On Removing Resources from Collections

Posted on 2013-11-20
16
865 Views
Last Modified: 2013-12-03
Hello Everyone:

Any assistance from the knowledgable SCCM gurus would be most helpful and appreciated.

My company is new to removing resources from SCCM and we were looking to see what the Best Practice is on removing resources from Collections.  We have several desktops and laptops that are no longer on the network, but they are still showing up in the SCCM Collections.

1. Should the un-networked resources get removed from AD and then SCCM collection will list the resources correctly?

2. Or should they be manually deleted from the SCCM collection and also deleted from AD?

3. If a SCCM resource is not  on the network for a week, why would it still be reporting in AD?  Shouldn't the "Active" status of the resouce show up in SCCM as "NO"?


Our Discovery process is setup with the following:

Active Directory System Group Discovery - Enable Directory System Group Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory Security Group Discovery - Enable Active Directory Security Group Discovery

Distinguished Name: CN=SCCM SERVER CLIENT, Recursive=Yes, Group=Excluded


Active Directory System Discovery - Enable Active Directory System Discovery

Distinguished Name: OU=Windows7 DESKTOPS, Recursive=Yes, Group=Excluded


Active Directory User Discovery - NOT Enabled

Heartbeat Discovery - Enable Heartbeat Dicovery  (Send every 1 Weeks)

Network Discovery - NOT Enabled
0
Comment
Question by:rmessing171
  • 8
  • 8
16 Comments
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664056
0
 

Author Comment

by:rmessing171
ID: 39664110
Thank you for this info,  If I implement the Task to Delete Aged Discovery Data and the resources are still present in AD, will they still appear in the collections?  Is there a way to force a discovery to update the collections and Discovery Data?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664142
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664158
I hope that you have R3.
0
 

Author Comment

by:rmessing171
ID: 39664169
OK.  I checked the All Systems properties and the Dynamically add new resources check box was not checked.  If I check this, will this remove resources from the collections that are not currently on the network?
0
 

Author Comment

by:rmessing171
ID: 39664180
I have SCCM 2007 R2.  What will R3 provide me?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39664190
0
 

Author Comment

by:rmessing171
ID: 39664215
OK.  Thank you for this info. If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 

Author Comment

by:rmessing171
ID: 39666060
If I stick with R2 for now and  enable Dynamically add new resources in the All Systems properties, will this remove resources from the collections that are not currently on the network?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666134
database cleanup for older entries is available even in the older version.

So I think it will work. I don't have a R2 environment here to test else would confirm.
0
 

Author Comment

by:rmessing171
ID: 39666160
Thank you for all of you assistance and info!  From a Best Practices and off boarding perspective, when an employee leaves the company should we delete their desktop/laptop computer name from SCCM - All Systems or should we delete their computername from AD?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666173
If you reimage then AD deletion is for sure.

And if it is not in AD then no need for this to sit in SCCM. SCCM can trim out accounts if they don't talk to MP in few days.
0
 

Author Comment

by:rmessing171
ID: 39666206
Thank you for the quick reply and info!  What settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?
0
 
LVL 23

Expert Comment

by:Nagendra Pratap Singh
ID: 39666224
This should help


http://prakaash2109.wordpress.com/2012/08/17/dailyweekly-montly-maintenence-tasks-in-sccm-server/

I have seen better documents on web but cannot recall where. They even had screenshots.
0
 

Author Comment

by:rmessing171
ID: 39666278
This is great info!  I am new to SCCM 2007 and it would help me greatly if you could provide Where and what settings in SCCM 2007 should I tweak so I can trim out accounts if they don't talk to MP in few days?  When you get a moment, please let me know.
0
 
LVL 23

Accepted Solution

by:
Nagendra Pratap Singh earned 500 total points
ID: 39667025
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

We recently had an issue where out of nowhere, end users started indicating that their logins to our terminal server were just showing a "blank screen." After checking the usual suspects -- profiles, shell=explorer.exe in the registry, userinit.exe,…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now