Microsoft SCCM Post Installation and Configuration (Boundaries, Client Settings, and more)

In this step-by-step guide, we will walk through the basic configuration of Microsoft System Center Configuration Manager Current Branch (SCCM). Justin Chalfant, a software engineer at Patch My PC and former SCCM Premier Field Engineer at Microsoft, will be performing the video guide.

This guide will show how to configure SQL Server Reporting Services using the Reporting Services Configuration Manager tool, Install the Reporting Services Site Role, Install the Software Update Point Role, Install the Endpoint Protection Point Role, Install the Fallback Status Point Role, Configure the client push account, Configure the Network Access Account, Configure group policy firewall exceptions for WMI and File Sharing Configure a GPO to add the Client Push account to the local Administrators group, Configure Bounaries and Boundary Groups, Enable System Discovery, Configure a Client Settings, and Deploy the SCCM client using client push.

Specific Topic's in this Video:

Introduction - (0:00)
Configuring SQL Reporting Services - (1:04)
Installing Site System Roles (Endpoint Protection Point, Fallback Status Point, Reporting Services Point. Software Update Point) - (4:08)
Configuring the Client Push and Network Access Account - (13:27)
Creating GPO to add Client Push to local administrators on clients and enabling the Firewall exception for WMI and File and Print Sharing - (15:40)
Configuring Boundaries and Boundary Groups - (18:52)
Configure Client Discovery (AD System Discovery) - (24:13)
Create and deploy a custom Client Settings - (28:24)
Performing a Client Push from the SCCM Console - (31:07)
Verify Software Update Point Synced Products and Enable Windows 10 in the Products - (33:52)
Verify Reports are working and run a report on Client Push (36:54)
Wrap-up - (37:50)

Microsoft Doc's Resources for Topics in this Guide:






About discovery methods for System Center Configuration Manager -





#SCCM #ConfigMgr #Guides

[markherrera]

Just installed it in August 2020. Slight differences. I want to thank you so much for this step by step guide. One tip for anyone doing it "pay attention to the inbound windows firewall GPO rules, the schema admin rights for the push account, and the SQL admin account needs to be a service account" I had a setback with these for not paying attention.

[ThePandaFather]

Justin, these videos are of excellent quality and I appreciate you explaining what some items do rather than just the cursory glance over.

[robinsondurai]

Dear Justin, Thanks for the best tutorial on the SCCM installation & prerequisites, I just simply followed your videos in new deployment. its working with no issues. Great thanks for your knowledge sharing . God bless your work

[mradojevic]

As someone from *nix part of the system, just finished full sccm install and conf. based just on these two first videos(not the exact layout, since sql is on separate server)... Really great stuff. Tnx

[dosto-evsky]

Thanks Justin, simple presentation, high level quality. Much appreciated you sharing this content.

[kristian]

Thank you very much, I was ready to give up on finding a good guide for all of this, and here it is!. Love the pace, and how much is actually explained.

[stephenweeks]

I really appreciate the time you took to make this video. It's very informative

[kearneyIT]

I love your content. helps me much in work

[eng.mohmmedmerajuddin]

Excellent video with good pace and lot of features coverage

[stokni]

Really Really awesome videos, saved me hours and hours of googling!

[Hollywood-xbxm]

Really great videos, thank you. You have thought me a ton.

[klausvaldek]

Thanks !
Great Job.

Helped me a lot.

[Jump_Ace]

Great stuff guys! Please keep up the good work!

[WillianBuddySantos]

Look me again doing another SCCM lab using video from Justin for the [a lot of times] hahaha...

[tendyfish]

great informative video, thank you very much

[Cookiedata]

Hey Justin, after i ran Active Directory System Discovery, i still cant see my windows 10 on devices. What am i doing wrong here?

[Theguficek]

If I may ask... WSUS server role can be unconfigured? its enough to configure a SUP role in SCCM and Win Updates are downloaded through WSUS?
Second question, why do you set up in 'Report Server Configuration Manager' database 'ReportServer' and in 'SCCM Report Services role' you let the default SCCM database... If you could explain, I would be grateful.
Nice video btw, keep going ^^

[jerrinkarippai]

Great Video, clearly and specifically explained everything. Thank you very much.

I have one issue, may by you can help a bit

I would like to Install SCCM just to manage Windows Defender. My idea was to keep the existing WSUS servers separate to provide updates also Defender updates to the clients.
1. Is it possible ?
2. In this case will SCCM Client Installation in Client machines work?
3. I did everything except WSUS installation in SCCM Server (WSUS Administration Console I have installed though). Now I am getting mainly two errors while installing SCCM Client (in ccmsetup Log file in Client machine). and SCCM Client is not getting installed. I am wondering it has to do with not installing WSUS.
1. Failed to get DP locations as the expected version from MP 'SMDSCCM.xxx.yy.zzz'. Error 0x87d00215
2. Failed to connect to machine policy namespace. 14:37:30 3808 (0x0EE0)
At moment I have not added extra DP, I am using Site server as DP.
Thanks & Regards
Jerrin

[AdiMahluf]

That's a bunch of great videos, thank you Justin!
just one question, which software you are using to open the log files? its looks much better and dynamic then just a notepad or notepad++ one.
thank you!

[koolcat]

Hi Sir.
We have one primary site and one remote location DP. Both have VLan wise boundaries.
On the primary site having 25 VLan boundaries and remote DP having 20 VLan wise boundaries.
I have made 3 boundaries groups.
1. One for site assignment and added all the boundaries, like primary and remote DP, total: 20+25= 45 boundaries and on the reference tab I checked the box site assignment.
2. Created 2nd boundary group for primary server and added only 25 boundaries and on reference tab, just added primary server.
3. Created 3rd boundary group for remote DP and added 20 boundaries and on the reference tab just added remote DP server.
Is it ok or need some changes?
Please suggest.
Thanks!