Now that we have everything in place, it’s time to start with the installation of our so beloved Configuration Manager. Let’s do a small recap of the previous posts.
- Active Directory
- Extend Active Directory Schema
- Create Security Groups
- Create Service Accounts for SQL
- Create System Management Container
- Installing Windows Server Roles & Features
- Using PowerShell command lets.
- Using the ConfigMgr Prerequisites Tool 1.4.2
- Configure Windows Firewall Rules
- Installing Microsoft Deployment Toolkit 2013 Update 2
- Installing Windows 10 Assessment and Deployment Toolkit
- Installing System Center 2012 R2 Configuration Manager Toolkit
- Installing and Configuring SQL Server 2014 SP1
- Requesting and Configuring Certificates
First step at this point, add the group that we created in the first post GL-ConfigMgr1511-Servers to the administrators group on your ConfigMgr Server. This should be done on all the servers that you add in your hierarchy.
Click Apply and Close Computer Management.
Now that this is done, mount the ConfigMgr 1511 Sources and start the installation.
Click Install to start the installation.
Click Next to continue.
We are not using a Central Administration Server, so leave the default setting and click Next to continue.
Enter the product key and click Next to continue.
Accept the license terms and click Next to continue.
Select all the prerequisites and click Next to continue.
If you have not yet downloaded the prerequisites for the setup, you need to select the first option Download required files. In this case, I have already downloaded the prerequisites files, because it’s faster. So Select the second option Use previously downloaded files, Browse to the location of the files and click Next to continue. You will notice that the Setup is checking the prerequisites.
Server language selection, I keep the default on English. If you need some other languages later, you can run this setup again and you need to select the Site Maintenance option. Click Next to continue.
Client Language Selection, I keep the default on English. If you need some other languages later, you can run this setup again and you need to select the Site Maintenance option. Click Next to continue.
Enter the SiteCode, Site Name and the location where you want to have ConfigMgr Installed. Click Next to continue.
This will be a stand-alone site, so Select the Install the primary site as a stand-alone site and click Next.
A message will pop to inform you that you still can expand the site with a CAS if needed later. click Yes to continue.
Since we have used the SQL Default instance, we keep the instance name blank. Click Next to continue.
Click Browse to create 2 folders UserDB & UserDBLogs
Click OK to go back to the wizard.
Browse to the newly created folders and select UserDB for the Path to the SQL Server data file and UserDBLogs for the Path to the SQL Server log file.
Leave the SMS Provider as default, so that it will be installed on our Primary Site Server. Click Next to continue.
We are installing our ConfigMgr Hierarchy in https. Select All site system roles accept only https communication from clients and click Next.
A message pops up to inform you that all the certificates need to be configured.
By default we will install our Management Point and a Distribution Point. Make sure that files like NO_SMS_ON_DRIVE.SMS and NOSMSDB.BAT are in place. This is because the setup will choose the drive with most free disk space to install your Distribution Point. If you want to avoid that a drive is used for ConfigMgr. Create both files on the drive. Click Next to continue.
Read the Usage Data and click Next.
Service Connection Point, is something new in ConfigMgr 1511. This will allow u to use features like Conditional Access, Windows Sytore for Business or on-premises MDM. Click Next to continue.
Review the Summary and click Next to continue.
Now the prerequisites checker will run. As you can see we have 2 warnings.
- Verify site server permissions to publish to AD.
- The reason why we have this, is because we are using a security group instead of the Site Server Computer Account that is having full control of the System Management container in AD ( created in the first part of this series)
- We see this because it’s recommended to use 8GB or more for SQL Server. (This is not a problem to continue with our lab setup)
Click Begin Install to start the installation of ConfigMgr.
Once the core setup is completed, click Close.
Configure Distribution Point Certificate
Open the Configuration Manager Console and got to Administration – Overview – Site Configuration – Servers and Site System Roles
Right click Distribution Point and click on Properties
Select Import Certificate, Browse to the location where we stored the DP Certificate in Part 4. Select the Certificate and enter the password.
Click Apply and close the Distribution Point Properties.
We have now succesfully installed and configured Configuration Manager in HTTPS.
Stay Tuned for More!!