locked
Collapse CAS RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi 

    I'm in the unfortunate position that the ConfigMgr site I'm currently managing has a CAS that was never required. The site is v2002 and I'm hoping to collapse the CAS now this is supported.

    I've recently had to install a CMG in the environment for our response to the Coronavirus pandemic, CMG was in our plans but we'd hoped to deploy this after the CAS was removed. Recent events forced our hand as there was an urgent requirement for us to manage internet devices.

    I know that the CMG has to be removed to collapse the CAS, what I'm trying to understand is if there's any strategy I can employ to ensure that our internet devices don't end up having another requirement to be connected to the intranet in order to discover a new CMG deployed from the Primary site. I think I'm right in saying I can't create a CMG from the existing Primary site with the CAS in place so I'm struggling to see a way to achieve this.

    Thanks

    Thursday, July 2, 2020 10:26 AM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    > internet devices don't end up having another requirement to be connected to the intranet in order to discover a new CMG

    This is not a requirement: https://docs.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/setup-cloud-management-gateway#configure-off-premises-clients-for-cmg (note that this is relatively new information that was recently published). I can't say I've tested this when switching from one CMG to another, but I don't see why it wouldn't work.

    Additionally, as long as you don't change the name of the CMG (the CName and certificate), the clients on the Internet won't actually know anything has changed and will just reconnect once the CMG is available again.

    Jason | https://home.configmgrftw.com | @jasonsandys


    Wow that is excellent news, Jason! I hadn't seen this new info so thank you for sharing.
    • Marked as answer by Stewmang Friday, July 3, 2020 7:50 AM
    Friday, July 3, 2020 7:50 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    > internet devices don't end up having another requirement to be connected to the intranet in order to discover a new CMG

    This is not a requirement: https://docs.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/setup-cloud-management-gateway#configure-off-premises-clients-for-cmg (note that this is relatively new information that was recently published). I can't say I've tested this when switching from one CMG to another, but I don't see why it wouldn't work.

    Additionally, as long as you don't change the name of the CMG (the CName and certificate), the clients on the Internet won't actually know anything has changed and will just reconnect once the CMG is available again.

    Jason | https://home.configmgrftw.com | @jasonsandys


    Thursday, July 2, 2020 3:49 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi,

    Thanks for posting in TechNet.

    Yes, starting in version 2002, if the hierarchy consists of the central administration site (CAS) and a single child primary site, we can remove the CAS. This action simplifies your Configuration Manager infrastructure to a single, standalone primary site.

    About CMG, we need to retire or move to the primary site. For more information, please refer to:
    Remove the central administration site

    Thanks for your time.

    Best regards,
    Simon

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, July 3, 2020 5:53 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    > internet devices don't end up having another requirement to be connected to the intranet in order to discover a new CMG

    This is not a requirement: https://docs.microsoft.com/en-us/mem/configmgr/core/clients/manage/cmg/setup-cloud-management-gateway#configure-off-premises-clients-for-cmg (note that this is relatively new information that was recently published). I can't say I've tested this when switching from one CMG to another, but I don't see why it wouldn't work.

    Additionally, as long as you don't change the name of the CMG (the CName and certificate), the clients on the Internet won't actually know anything has changed and will just reconnect once the CMG is available again.

    Jason | https://home.configmgrftw.com | @jasonsandys


    Wow that is excellent news, Jason! I hadn't seen this new info so thank you for sharing.
    • Marked as answer by Stewmang Friday, July 3, 2020 7:50 AM
    Friday, July 3, 2020 7:50 AM