Archive for November, 2010|Monthly archive page

About User Device Affinity

I’ve been playing around with UDA with ConfigMgr 2012 Beta 1. Here are some random and scattered thoughts and details on this feature as it currently stands:

UDA is a critical feature of CM2012. Traditionally we have shied away from app deployment to users. In 2012 this all changes. At the moment the licensing models for the applications are too complex to embrace per-user deployment, the deployment process is too complex, and too latent, and the troubleshooting of user-based deployment is also too complex. In CM 2012, this is no longer the case.

UDA defines a relationship between a user and a device. Microsoft say that we (the admins) can now think “user” rather than “machine”. We have the concept of a Primary User for a device (can be ennumerated from Top Console User, admin set in the console or user set in the agent or the software catalog(ue). I can also import a list of users+devices and set the primary user during OSD…).

A device can have one or more primary users and a user can have one or more primary devices.

UDA allows us to make intelligent decisions about software provision. For example:

Install the MSI or App-V version of Microsoft Office when the device is a primary device of the user targeted; install the Terminal Server version if the device is not a primary device

Only install the App-V version of Microsoft Visio if the device is a primary device of the targeted user, otherwise don’t install

This eliminates the current problem of users leaving software everywhere they log in. Quite how we license Visio for this scenario, I’m less sure???

This solution also eliminates the need for the logon event, a current per-user deployment bottleneck as the machine can be pre-determined and does not require the user to be logged on.

UDA is a paradigm-shift for us SMS & SCCM admins, and about time too! Machine Groups are no more!

Configuration Manager 2012 Detection Methods

Another day, another new ConfigMgr feature. Today I’ve been playing around with Detection Methods. This is a great new feature which gets us out of a variety of app deployment problem scenarios we have currently. In brief, consider the following scenario:

I wish to deploy a new application “Tobermory” to my clients. Tobermory depends on dotnet 3.5 and another application “Bulgaria”. These apps may already be installed on my machines, the installation may have been carried out manually or via Configuration Manager. Under the current Configuration Manager release we can set a program to depend on the installation of another program thus:

image
A totally flawed flowchart.

The problem with this stems from ConfigMgr’s ability to determine if the required application is already installed. Essentially it has no skills unless the app was installed by ConfigMgr in the first instance.

So, how does ConfigMgr 2012 improve this? With Detection Methods of course! Detection Methods enable a system to determine whether or not an application is already present on the system (think WSUS IsInstalled type functionality). The method for identifying if an app is installed (in Beta 1) covers MSI interrogation and script based detection. I’m hoping that Beta 2 will allow for basic registry and file scanning.

So, as you can doubtless see, this is a major improvement over the current detection mentod outlined above.

As a brief aside, once we have a detection method defined we can “upgrade” these to “Global Conditions” which we can then re-use for any deployments. Out of the box we get a few (if you’re familiar with Group Policy Preferences you may recognise some of this):

•Machine AD Site

•CPU speed

•Mobile device type

•Free disk space

•Total Physical Memory

•Mobile input type

•Machine AD Organizational Unit

•Number of processors

•Machine Operating System and Architecture

•Machine Operating System Language

•Screen resolution

•ConfigMgr Assigned Site

These conditions can be leveraged for all deployment jobs allowing us as administrators to exploit these out of the box properties and define our own as we see fit.

Working with DP Groups in ConfigMgr 2012

DP Grouping in Configuration Manager 2012 greatly assists in the currently fairly labour-intensive task of DP management. Basically a DP Group will always contain the same packages. Adding a new DP to the group will result in all the packages being automatically made available via that DP. Similarly removing an app from the DP group will effect all members. It’s simple, but elegant stuff:

Creating Deployment Types in Configuration Manager 2012

This video post runs through the creation of deployment types in ConfigMgr 2012 Beta 1. New to this release is Configuration Manager’s ability to control how the application is consumed, at runtime. This video blog runs through creation of deployment types, dependencies and the scenario-based selection of the deployment type at runtime.

Creating App-V Deployments in ConfigMgr 2012

Configuration Manager 2012 provides new functionality for handling multiple package types. The Config Manager Deployment Types replace advertisements and are sensitive to the context at runtime on the user device. If the user is logged on to a machine which is not their primary device, the agent can choose how to provision the application, App-V OR MSI, etc…

This video runs through the process of creating an App-V deployment type and shows the options for auto-installation of dependent apps and deployment type selection based on user-type.

Client Health Thresholds in ConfigMgr 2012 Beta 1

A colleague of mine, Andy Sallabank has been participating in the ConfigMgr 2012 CEP and has been getting the inside track on some good stuff. This irked me somewhat, so to redress the balance I have registered myself. Andy has posted some good stuff on his blog around the new features to participate in the CEP, so not to be outdone, I am doing the same; so as part of a series looking at features in ConfigMgr 2012 Beta 1, I thought I would start by looking at client health thresholds. (Why not!?!?!?)

In the monitoring section of the console we can now pull up statistics on client health. Below you can see a report showing my SLA threshold, and the percentage of clients which met the threshold. This stuff is all integrated into the console, which meets with my approval.

1

I can go in and tweak SLA settings….

2

As well as do some pretty cool AD integration that allows us to determine when inactive clients last logged into their domain…

3

Anyone who is currently a ConfigMgr admin will rejoice! Or something, We all have our vbscripts, dudeworks tools and bits of for /f scripts we use for these tasks outside of the console. Maintaining a healthy client base is a full time job. With these things built in, and with auto-remediation to come, we finally have something on the horizon to eliminate some of the frustration of working with SMS!

All this stuff appears to be in its infancy, but from what I have heard and saw briefly at Tech Ed, I am expecting some really great things!

TechSmith SnagIt

It’s not often that I’m moved to eulogise a piece of software, especially something that sounds so innocuous, but the latest release of Snag-It (version 10) is an awesome piece of software, particularly for us tecchies writing technical documentation.

I’ve been a Snag-It user since version 8, paying a small fee for the major upgrades along the way. Snag-It is a screen-grabbing piece of software and has several major features which, if you’ve not seen the product are worth mentioning quickly:

· Multiple Capture Modes – Full Screen, Free Hand, Fixed Region, Time Delayed, include cursor, etc., etc., it also provides for capture of webpages with links, text capture, scrolling page capture. It goes on and on.

· Multiple Output Modes – Clipboard, File (every format you can imagine), output direct to a running application (direct into Word for example)

· Snag-It Editor – Crop, trim, annotate, blur, Spotlight and Magnify. It does that border stuff to make your page look torn and can add watermarks. The editor will by default automatically keep a copy of each captured image, this means you can be lazy, capture every shot you need in quick succession and stick them into your doc later.

New in version 10 is support for transparency, some new Editor features (page curl, cut-out effects) but in particular the screen magnifier and smart capture options are superb. clip_image002

Pressing the Capture button (or Print Screen key) places a new screen magnifier (so you can see precisely where you capture region starts and ends) on the screen.

clip_image003

Magically the cursor auto selects the capture target, hover over a menu icon and the object itself will be the capture target, move outside of this and the whole menu bar becomes the target, then the child screen, finally the whole application window. Click and drag and this targeting is overridden by the regional sect option. It works seamlessly resulting in a much reduced amount of cropping required and a much slicker capture experience.

There’s a free 30 day trial available from www.TechSmith.com well, well worth a look.

WMUG UK Cardinal Place Meeting

User Group meeting yesterday at Cardinal Place, Microsoft’s London Office.

Wally Mead gives us the skinny on R3 for Configuration Manager 2007, now released. Not much has changed here from the presentations we saw this time last year, but good to see this product finally out the door. Also, this is the final release for the 2007 version, no SP3 is planned.

Silect are here to demo their CP Studio product. Orinoko-er Andy Sallabank dramatically wins a copy of the product after consuming his own body weight in beans in under 12 minutes, destroying Cliff Hobbs’ attempts to take the prize with his rendition of “Mammy” on the nose flute.

CP Studio looks pretty neat, but I’m not sure any of the projects we’ve delivered recently that used DCM would warrant it. DCM is a growing field, but I reckon it’ll be vNext before we start to do anything very large-scale. So for now (freebie copy aside) we’re probably stuck with Visual Studio!

Wally gives us the ConfigMgr VNext overview. The top-line features are pretty well known in the community now, but the new stuff is still pretty exciting:

· Hierarchy reduction…

· Role Based Security

· SQL Replication for metadata

· Deployment Types

· Gold Key remote control

· DP Groups – state based distribution (essentially this balances packages across all DPs in a group)

· Client Health auto remediation (hurray) auto-fix of WMI, auto reinstallation of the ConfigMgr agent, etc. etc. Looks cool. XML based checking engine, can be modified to include custom tasks…

· Mobile Device Manager integration

· OSD gets offline image servicing and boot media is now site-wide (this is very handy as your clients can join the wrong site at the moment if you don’t control the media distribution)…

clip_image002

Wally embraces his imaginary friend, Binker. Tragically Binker was later crushed during the User Device Affinity demo.

Inventory Classes editor replaces notepad for editing SMS_DEF.MOF. Import of MOF file supported, and browsing of WMI classes from the editor to enable custom inventory.

Custom client settings being set on a per-collection level is shaping up. The ability to set separate remote control config per-collection, and to modify inventory schedules for workstations vs servers, etc.

Client remediation no longer pings machines to see if they are alive. Now integrated with AD, checks the last time the machine logged into AD.

All-in, a good day, thanks to Cliff et al for organising it once more.

Follow

Get every new post delivered to your Inbox.