Assistance with building Collections in Config Mgr Console.
- I just started on the SCCM team for our company and need some assistance with building collections. I don't know the best practice, but I figured I'd build it close to our AD structure so we can divide things up by division and department.
When I go under Computer Management > Collections, I see some pre-built collections and one that the consultant built that has our whole domain in it. I want to go under that and add all computers in the next group. I don't know how to word all this, but I'll give an example.
In AD, the structure would break down like this: INT > HS > Town > Hospital > Department
I want to be able to go to each folder/OU (HS, Town, Hos) and see all of the computers that are in it's sub folders. The problem is that there are no computers in the "Hospital" area, only sub-folders for the departments, but I'd like to see all of those computers for the whole Hospital and then when I look in the department collection, I want to only see what is in the department and not above it.
I apologize if this is horribly worded.
解答
Hi,
When you create the collections you can base them on queries. In your case I think they query could be based on the OU structure or perhaps IP subnet. First you need to make sure you have discovered the ressources in Active Directory by running the Active Directory System Discovery and Active Directory System group discovery. Next create the collection structure.
Collection based on OU Example:
select * from SMS_R_System where SMS_R_System.SystemOUName = "domain/hospital"
Collection based on IP subnet example:
select * from SMS_R_System where SMS_R_System.IPSubnets = "172.20.0.0"
For more information about discovery - http://technet.microsoft.com/en-us/library/bb632733.aspx
For more information about Collections - http://technet.microsoft.com/en-us/library/bb632958.aspx
Kent Agerlund | http://agerlund.spaces.live.com/blog/- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- There's a script out on myitforum.com that will create collections that exactly mimic your OU structure. It's been a long time since I used it so I don't recall if it builds the queries for you as well or not. I can help you find it if you need it.
However, generally we use sites for delegating administrative duties not collections.
John Marcum, Systems Management Consultant - www.TrueSec.com- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- In addition to Kent's links, maybe this might help? http://myitforum.com/cs2/blogs/bleary/archive/tags/SQL+Basics+for+SMS+Admins/default.aspx
For some other good blogs about reporting or collections: #2 is often too geeky, but John (he's #1 to me!) is really good http://www.number2blog.com and Garth's blog has lots of examples: http://smsug.ca/blogs/garth_jones/default.aspx (click on WQL on left to get tagged posts just about WQL -- which is the Collection query language)
Also, for the one by systemouname, you might want to use where max(sms_r_system.systemouname) = "domain/hospital" (I think that's the right syntax? or does MAX only work in reports?)
Standardize. Simplify. Automate.- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- Found the script.
http://myitforum.com/cs2/files/folders/vbscripts/entry120436.aspx
John Marcum, Systems Management Consultant - www.TrueSec.com- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
所有回覆
Hi,
When you create the collections you can base them on queries. In your case I think they query could be based on the OU structure or perhaps IP subnet. First you need to make sure you have discovered the ressources in Active Directory by running the Active Directory System Discovery and Active Directory System group discovery. Next create the collection structure.
Collection based on OU Example:
select * from SMS_R_System where SMS_R_System.SystemOUName = "domain/hospital"
Collection based on IP subnet example:
select * from SMS_R_System where SMS_R_System.IPSubnets = "172.20.0.0"
For more information about discovery - http://technet.microsoft.com/en-us/library/bb632733.aspx
For more information about Collections - http://technet.microsoft.com/en-us/library/bb632958.aspx
Kent Agerlund | http://agerlund.spaces.live.com/blog/- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- Thank you Kent! I will be trying this. I'm a noob at this stuff. Doing it by IP may be a little scary here, but I can try.
Now, in the collection statements, do I do that in the SCCM window when I'm creating them? - There's a script out on myitforum.com that will create collections that exactly mimic your OU structure. It's been a long time since I used it so I don't recall if it builds the queries for you as well or not. I can help you find it if you need it.
However, generally we use sites for delegating administrative duties not collections.
John Marcum, Systems Management Consultant - www.TrueSec.com- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- In addition to Kent's links, maybe this might help? http://myitforum.com/cs2/blogs/bleary/archive/tags/SQL+Basics+for+SMS+Admins/default.aspx
For some other good blogs about reporting or collections: #2 is often too geeky, but John (he's #1 to me!) is really good http://www.number2blog.com and Garth's blog has lots of examples: http://smsug.ca/blogs/garth_jones/default.aspx (click on WQL on left to get tagged posts just about WQL -- which is the Collection query language)
Also, for the one by systemouname, you might want to use where max(sms_r_system.systemouname) = "domain/hospital" (I think that's the right syntax? or does MAX only work in reports?)
Standardize. Simplify. Automate.- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- How does that work though? I mean, the group is actually deeper than just "Domain\Hospital". It's actually (according to AD):
INT
CNHS
Town
Hospital
I guess I just don't get how "Domain\Hosptial" gets sorted out because we have some where our "CNHQ" division has the same towns listed and I figure it will conflict. - Hi,
It's not going to be a problem, You can create child collections that can reflect your OU design.
Kent Agerlund | http://agerlund.spaces.live.com/blog/ - Found the script.
http://myitforum.com/cs2/files/folders/vbscripts/entry120436.aspx
John Marcum, Systems Management Consultant - www.TrueSec.com- 已標示為解答Yvette OMeallyMSFT, 擁有者2009年7月6日 下午 08:24
- I found part of my problem...I was making it difficult. I can do all the script (which was using SQL), but it has a tool that I can use that looks in certain OU from AD.
