locked
General Question about SCCM multi site deplyment RRS feed

  • Question

  • HI,

    I would like to ask a question about SCCM 2012 config manager multi site deployment.

    Here is the scenario:

    Currently we have 3 main sites and 3 minor sites(physical\geographical).

    Main site 1 (head office) is in Buffalo - USA, main site 2 is Orlando - USA and main site 3 is in Frankfurt - Germany.

    All sites is in one AD Forrest domain.

    We have less than 500 client (Win 7 & 10) and server (Win 2008 R2, 2012, 2012 R2 and 2016) commuting devices globally - all MS Windows.

    Currently we have one main Primary site server in our head office Buffalo USA and 2 Distribution points:  in Orlando and the other in Frankfurt.

    The problem is we are experiencing delay issues with the Primary site deploying updates and patches from the Buffalo Primary site to the Frankfurt Distro point.

    So I have decided to install another primary site server here in Frankfurt with WSUS, and would like (nice to have if possible) to have management capabilities of both primary site servers under one umbrella.

    So my main question is... in the scenario above...

    1. Is it needed to build a Central Admin site server and have both primary site servers join it?

    2. If so can I add a already in production Primary site server to a CAS?

    3. Is this recommended, or can I get away with just 2 stand alone primary site servers.

    4. What would be the normal recommended implementation or MS best practice

    Thanks for your feedback and appreciate your help.

     

    Thursday, July 19, 2018 9:14 AM

All replies

  • you do not want a CAS.  It will not solve your problems. the slowness will continue.

    you can have two stand alone primaries but that will increase your cost in both hardware and man power. i would avoid this too.

    i would address the slowness issues with your existing setup. what exactly is causing the slowness?


    Garth Jones

    Blog: https://www.enhansoft.com/blog Old Blog: https://sccmug.ca/

    Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleashed

    Thursday, July 19, 2018 10:51 AM
  • Thanks Garth,

    Secondary primary site is no problem as I have the hardware available and have volume license in place so cost is done.

    Not sure what is casing the delay, All I know is my colleagues in Buffalo push the updates a day or two before our planned maintenance window and sometimes I see them on my servers and sometimes not. sometimes they come in late ie day or two later.

    The worst is my clients, after we do maintenance some of the client computers mostly desktops would only say that it is installing the updates about a week later and then desturb the users because of reboots... so all in all there is no consistency.

    Same goes for the virus updates\Win defender updates. they also gets downloaded pushed as soon as they are available but there is a major delay from the distro point side.... and I am not sure if it is from Primary site server to Distro point or Distro point to end server\client... also not sure if it is recommended to have Ditro points so far geographically.

    Thursday, July 19, 2018 12:53 PM
  • > "So I have decided to install another primary site server here in Frankfurt with WSUS"

    Just to reinforce and as Garth notes, adding another primary site (and/or a CAS) will not address your issue and make your life and the management of your environment more complex and difficult.

    Normal practice (best practices are fictitious concepts made up to appease non-technical people) is to determine what the source of the slowness is and also define exactly what that means in technical terms -- simply saying "it's slow" is more or less meaningless. 

    Depending on many variables, factors, and facts, a secondary site is most likely more appropriate here for your Frankfurt location. Whether that will address whatever issue you are experiencing cannot be said though because we don't really know what the issue is or what the true cause is -- specifically adding anything to ConfigMgr won't and can't address network related issues like dropped packets or data corruption.


    Jason | https://home.configmgrftw.com | @jasonsandys

    Thursday, July 19, 2018 12:54 PM
  • Honestly, I would work with you Buffalo team member and review the logs and find out what is taking so long to push the content to your site. You will also need to answer questions, such as, is it time to upgrade the WAN connection? What settings do you have for SU scanning? 

    In the longer term, you might need to bring in a consultant and have them review things with you. 


    Garth Jones

    Blog: https://www.enhansoft.com/blog Old Blog: https://sccmug.ca/

    Twitter: @GarthMJ Book: System Center Configuration Manager Reporting Unleashed

    Thursday, July 19, 2018 1:05 PM