ConfigMgr 2002 Setup

In this post, we will look at what is Fallback Status Point, where it can used and how we can configure it in our environment.

Update to this blog post is coming soon

Here is the video related to this post

Update to this blog post is coming soon…

Check out related video to this post

This blog post is in development

Check-out related video to this blog

1. IIS,BITS,RDC and other features

1. Attach Windows Server ISO file to your VM or mount it in the File Explorer and note the drive letter
   Check here How to attach ISO to your VM
2. Create a new .ps1 file (mecm_prereq_installation.ps1) and paste the below. Make sure you update the drive letter if needed in the first line NetFrameworkSource variable.
   
   

   $NetFrameworkSource = "L:\sources\sxs"
   Import-Module ServerManager
   Install-WindowsFeature Web-Windows-Auth
   Install-WindowsFeature Web-ISAPI-Ext
   Install-WindowsFeature Web-Metabase
   Install-WindowsFeature Web-WMI
   Install-WindowsFeature BITS
   Install-WindowsFeature RDC
   Install-WindowsFeature NET-Framework-Features -source $NetFrameworkSource
   Install-WindowsFeature Web-Asp-Net
   Install-WindowsFeature Web-Asp-Net45
   Install-WindowsFeature NET-HTTP-Activation
   Install-WindowsFeature NET-Non-HTTP-Activ

3. I recommend you run the newly created PowerShell script in PowerShell by browsing to the path of mecm_prereq_installation.ps1 file so that you can see the progress.
   
   

2. SQL Server Installation and Configuration

3. WSUS Installation and Configuration

4. Windows ADK and WinPE Add-on

5. Extend AD Schema

6. Add Configuration Manager Server Account to Local Admins

7. Create and Place no_sms_on_drive.sms

8. Configure Database for Configuration Manager

9. Add .MSI file to the allow list

10. Prereq Check

In this post, we will configure DC for our lab and then domain join TEKNEX-CM01 and PC-01 to our Domain.

Last updated on 24th Oct 2020

Check-out related video to this blog post

1. Add roles for AD DS

In order to configure and promote Domain Controller, we need to install the prerequisite roles. So, log in to TEKNEX-DC01 to install these roles.

1. Open Server Manager and select Add Roles

   

2. Select Next on before you begin page and Role-based and feature-based installation pages

   

3. Select your intended server where you would like to install these roles and proceed further by clicking on Next

   

4. On Server Roles pages select the following and select Next when done:
   – Active Directory Domain Services (Add all Management tools as well)
   – DHCP Server (Add GUI RSAT tools as well)
   – DNS (Add GUI RSAT tools as well)

   

5. Select Next on Features, we are not adding any features

   

6. Select Next on DHCP Server, DNS Server, and AD DS pages

   
   
   

7. On the Confirmation page, go through the box and it will show you what you have selected so far. You can check the box “Restart the destination server automatically if required”. (System won’t restart in this case). When you are happy with the selections you have made and select Install to install those roles and features.

   

8. Once done, you will see installation succeeded on TEKNEX-DC01

   

2. Promote DC

In the Server Manager, you will see a yellow triangle and it will display the roles and features which need configuration.

1. Click on the yellow triangle in Server Manager and select Promote this server to a domain controller and this will open AD DS Configuration Wizard

   

2. Deployment Configuration: This will be our very first DC, so select Add a new forest. Enter name of your new domain in the Root domain name box, I have chosen TEKNEX.LOCAL as a new domain name. The user you are using to perform this operation must be a member of Local Administrators group.

   

3. Domain Controller Options: Leave everything default and enter DSRM password twice.

   

4. DNS Options: We can’t change any option here, so select Next

   

5. Additional Options: System will populate NetBios domain name on the basis of Domain Name, recommended going with the default populated NetBios name.

   

6. Paths: Keep everything default and select Next.

   

7. Review Options: Review your selection and select Next

   

8. Prerequisites Check: System will perform a prerequisites check operation and can give you some warnings. Some warnings are just informational and will not impact the installation. Select Install to proceed further.

   

9. Installation: Progress will be displayed on the Installation screen.
10. Results: Once DC is successfully configured, the system will sign you out automatically, and a restart will take place.

    

11. Log back in with the Administrator account. Remember this account has become a domain account.

    

3. Authorize DHCP Server

In production, you will have a dedicated IPAM (IP Address Management) server. In lab, we can utilize TEKNEX-DC01 to act as DHCP server.

1. Click on the yellow triangle in Server Manager and select Complete DHCP configuration and this will open DHCP Post-Install configuration wizard

   

2. Description: This page shows you information about what will happen after you Authorize the DHCP server. Select Next

   

3. Authorization: By default, Use the following user’s credentials will be selected and just select Commit to authorize.

   

4. Configure DHCP Server scope

Clients will get IP addresses once the DHCP scope is configured on the DHCP server.

1. Open Server Manager > Tools > DHCP.

   

2. Extend your server name > right-click on IPv4 to create New Scope.

   

3. Select Next on Welcome to the New Scope Wizard.
4. Give a Name to scope and description if needed, select Next.

   

5. Enter Start IP address, End IP address, and Subnet mask. Select Next.

   

6. Add Exclusions and Delay: Here you can enter the IP address which you would like to exclude from the IP address range. I am not changing this, select Next.

   

7. Lease Duration: Keep the default, unless there is a reason to update this and select Next.
8. Configure DHCP Options: Yes, we would like to configure these options now. Select Yes, I want to configure these options now and Next.

   

9. Router (Default Gateway): Enter the IP address of your router and select Add. In this lab, I do not have a router and I will just add the IP address of my DC. Select Next.

   

10. Domain Name and DNS Servers: Keep Parent Domain default. You can enter the Server Name and check Resolve to get the IP address, we do not have any DNS except TEKNEX-DC01. If you have any other DNS in action, then you can enter the IP and select Add. Use the Up and Down option to select the priority. Whatever will be first, the client will try to resolve the IPs against that DNS. Select Next.

    

11. WINS Servers: Enter any WINS servers Server name or IP Address and select Add. We do not have any WINS in action and just select Next.
12. Activate Scope: Select Yes, I want to activate this scope now and select Next, and click on Finish.

    

We have configured our scope and in the next step we will test our DHCP server.

5. Test DHCP and DNS

It is time to test the DHCP and DNS configurations.

1. Login to a client which is connected to the same network, in my case it is PC-01.
2. Change the network adapter settings to receive IP address from DHCP server.

   

3. Confirm PC-01 received IP address from DHCP through CMD, PowerShell or GUI

   

4. Open PowerShell or CMD, ping TEKNEX-DC01 and TEKNEX.LOCAL. It should resolve to 10.0.0.2

   

5. Log back in to TEKNEX-DC01 > Open Server Manager > Tools > DHCP 
6. Extend TEKNEX-DC01.TEKNEX.LOCAL > IPv4 > Scope > Address Leases and you should see PC-01 in the list.

   

Once you have performed the above and the results are positive, let’s prepare Active Directory for our environment.

6. Prepare AD for our environment

It is a good idea to follow best practices where possible even in the lab environment. Let’s prepare AD professionally for our environment by creating proper Organizational Units (OUs), users, computers, and groups where applicable.

Create OUs for computer objects

1. Login to TEKNEX-DC01 > Open Server Manager > Tools > Active Directory Users and Computers
2. Extend your domain, in my case this is TEKNEX.LOCAL
3. Right-click on the top of domain (TEKNEX.LOCAL) > Select New > Organisational Unit > Enter name Teknex Computers > Select OK to finish

   This OU we will use just for computer objects. We will create further OUs within Teknex Computers OU to store different computer objects. For example, you would not like to store servers in the same OU as finance computers.

4. Right-click on Teknex Computers OU > Select New > Select Organizational Unit > Enter name Finance Computers > Select OK to finish
5. Right-click on Teknex Computers OU > Select New > Select Organizational Unit > Enter name Member Serves > Select OK to finish
6. Right-click on Teknex Computers OU > Select New > Select Organizational Unit > Enter name Management Computers > Select OK to finish

Create OUs for user objects

1. Open Active Directory Users and Computers
2. Extend your domain, in my case this is TEKNEX.LOCAL
3. Right-click on the top of domain (TEKNEX.LOCAL) > Select New > Organizational Unit > Enter name Teknex Users > Select OK to finish

   This OU we will use just for user objects. We will create further OUs within Teknex Users OU to store different user objects. 

4. Right-click on Teknex Users OU > Select New > Select Organizational Unit > Enter name Finance Users> Select OK to finish
5. Right-click on Teknex Users OU > Select New > Select Organizational Unit > Enter name Administrative Users > Select OK to finish

Create OU for group objects

1. Open Active Directory Users and Computers
2. Extend your domain, in my case this is TEKNEX.LOCAL
3. Right-click on the top of domain (TEKNEX.LOCAL) > Select New > Organizational Unit > Enter name Teknex Groups > Select OK to finish

Create new user objects

1. Open Active Directory Users and Computers
2. Extend your domain(in my case this is TEKNEX.LOCAL) > Extend Teknex Users OU > Select Finance Users OU > Right Click > Select New > User > Provide all the required information and select Next
   – Name: Test
   – Last Name: User
   – User logon name: Test
3. Enter the user password twice (ensure it meets the default server password complexity standard). To keep things simple, do the following before selecting Next and Finish.
   – Uncheck “User must change the password at next logon”
   – Check “User cannot change password”
   – Check “Password never expires”

   

   This is just a standard user who is part of the Users group only. 

   We need an administrator user which will eventually become a ConfigMgr Admin. I am going to do a little cheat here by copying the Administrator user and renaming it to CM Admin. Let’s do that.

4. Select Users OU > Select Administrator user > Right-click and select copy > Enter the following details and select Next
   – Name: CM
   – Last Name: Admin
   – User logon name: CMAdmin
5. Enter the user password twice (ensure it meets the default server password complexity standard). To keep things simple, do the following before selecting Next and Finish.
   – Uncheck “User must change the password at next logon”
   – Check “User cannot change password”
   – Check “Password never expires”

6. At the moment, this user is residing in the Users OU. Let’s move it to Teknex Administrative users OU. You can click and drag this user object to the target OU or you would be able to right-click and select the move feature to achieve this.

   
   Ensure CMADMIN user is member of the following groups as shown in the photo:

   

Create computer objects

1. Open Active Directory Users and Computers
   

   Let’s create a computer object for PC-01 first.

2. Extend your domain(in my case this is TEKNEX.LOCAL) > Extend Teknex Computers OU > Select Finance Computers OU > Right Click > Select New > Computer > Enter Computer Name (PC-01) > Select OK
   

   

   Let’s create a computer object for the ConfigMgr primary site server.

3. Extend your domain(in my case this is TEKNEX.LOCAL) > Extend Teknex Computers OU > Select Member Servers OU > Right Click > Select New > Computer > Enter Computer Name (TEKNEX-CM01) > Select OK
   

   
   

 

7. Domain join PC-01

Domain join PC-01 and then login to PC-01 with the standard user (TEST user) we created in the previous steps. There are various way to domain join a machine. You can simply use PowerShell to achieve this

1. Login to PC-01
2. Open PowerShell as administrator > run the following command to domain join > enter the password for the user account when it prompts (ensure the user is Domain Admin)

   Add-Computer -ComputerName PC-01 -DomainName TEKNEX.LOCAL -Credential ADMINISTRATOR@TEKNEX.LOCAL

3. The machine will restart and will allow you to login with a domain account > Use TEST user account to login to PC-01

8. Domain join ConfigMgr primary site server

Ensure the IP address is manually given to this server and test the DNS connectivity as well by pinging to your domain (TEKNEX.LOCAL).

1. Login to TEKNEX-CM01
2. Open Server Manager > Select Local Server > Click on Computer Name and this will open the Computer Properties window

   

3. Select Change > Enter Computer name (TEKNEX-CM01) > Select Domain and enter your domain name (TEKNEX.LOCAL) > Click OK > Enter credentials of a Domain Admin and select OK > Follow the prompts and restart the server

   

   

   

4. Log in to TEKNEX-CM01 with the CMADMIN account which we created in the previous steps as our ConfigMgr Admin account.

That is all in this post, in the next post we will install Software Prerequisites on TEKNEX-CM01.

This blog post is part of ConfigMgr Current Branch 2002 lab blog post series. In this post, we will configure three virtual machines for our ConfigMgr 2002 lab.

We will be using Hyper-V as our Hypervisor. You can use any other Hypervisor. I would recommend keep Virtual Box as your last resort.

Checkout video related to this this blog

1. Virtual Networking

Before we move forward and configure our VMs, it is very important that we have our virtual networking configured properly so that our VMs can be networked virtually. We will be using the Internal Virtual Switch.

1.1 Create a new Internal Virtual Switch

In order to network our VMs virtual, we will make use of Hyper-V’s Internal Virtual switch. This will enable networking between VMs and our host machine as well.

Follow the steps below to configure Hyper-V Internal Virtual Switch (INT-01)
1. Open Hyper-V Manager and click on the Virtual Switch Manager in the Actions pane

2. This will open a new wizard. In this wizard under Create virtual switch > Internal > Create Virtual Switch

3. In the Virtual Switch Properties, give it a name “INT-01” and click on Apply

Our new Internal Virtual Switch is now ready to be used.

1.2 Configure Virtual Switch

We have specific needs and let’s configure this Internal Virtual Switch according to our needs. We would like to update the IP Address of this switch so that it will be within our decided subnet which is 10.0.0.0/24.
1. Open Network Connections: Use Win + R on your keyboard and type ncpa.cpl

2. Double click on INT-01 VS > Properties > Double click on Internet Protocol Version 4 (TCP/IPV4)
3. Update the IP Addressing

Test the connectivity
Open CMD or PowerShell on your host and ping 10.0.0.1. You should get a reply back. We are ping from host to its connected Virtual Switch.

2. Configure Virtual Machines

Alright! In this step, we are configuring our VMs mentioned in the Lab Overview. You need to have two ISO files handy for this if you have not downloaded these files yet then go ahead download these files. You will find the required links in the ConfigMgr Software Requirements blog:
1. Windows Server ISO
2. Windows 10 ISO

2.1 TEKNEX-DC01

1. Open Hyper-V Manager > Click New in Actions Pane > Select Virtual Machine > This will open a new wizard

2. Select Next on Before You Begin wizard
3. Specify Name and Location

4. Specify Generation

5. Memory

6. Configure Networking > Select the Virtual Switch we created earlier INT-01

7. Connect Virtual Hard Disk

8. Install Options > Select Install an operating system from a bootable image file > Browse to your Windows Server ISO file

9. Confirm everything you have selected in the summary screen and click on Finish

10. You will see you newly created Virtual Machine in Hyper-V manager > Double Click on it > Click Start > Press any key on the keyboard and follow the prompts to install Windows Server

Post Installation Tasks
1. Server Manager > Local Server > Update Computer Name
2. Server Manager > Ethernet > Update the I.T Address as follows
3. Test connectivity by pinging to INT-01 VS on 10.0.1.1

2.2 Configure Firewall Rule

Important: Windows Firewall blocks incoming ICMPv4 protocol by default. To overcome this, you need to add allow ICMPv4.

This can be achieved as follows:
1. Open Windows Defender Firewall with Advanced Security

2. Right-click Inbound Rule > New Rule

3. Rule Type Custom

4. All programs

5. Protocol and Ports > Protocol type > ICMPv4

6. Scope > Any IP Address

7. Action > Allow the connection

8. Allow on all profiles

9. Give it a name “Allow ICMPv4” and finish

10. Confirm newly added rule

2.3 TEKNEX-CM01

1. Open Hyper-V Manager > Click New in Actions Pane > Select Virtual Machine > This will open a new wizard

2. Select Next on Before You Begin wizard
3. Specify Name and Location

4. Specify Generation

5. Memory

6. Configure Networking > Select the Virtual Switch we created earlier INT-01

7. Connect Virtual Hard Disk

8. Install Options > Select Install an operating system from a bootable image file > Browse to your Windows Server ISO file

9. Confirm everything you have selected in the summary screen and click on Finish

10. You will see you newly created Virtual Machine in Hyper-V manager > Double Click on it > Click Start > Press any key on the keyboard and follow the prompts to install Windows Server

Post Installation Tasks
1. Server Manager > Local Server > Update Computer Name
2. Server Manager > Ethernet > Update the I.T Address as follows
3. Test connectivity by pinging to INT-01 VS on 10.0.1.1 and TEKNEX-DC01 on 10.0.1.2

2.4 TEKNEX-PC01

1. Open Hyper-V Manager > Click New in Actions Pane > Select Virtual Machine > This will open a new wizard

2. Select Next on Before You Begin wizard
3. Specify Name and Location

4. Specify Generation

5. Memory

6. Configure Networking > Select the Virtual Switch we created earlier INT-01

7. Connect Virtual Hard Disk

8. Install Options > Select Install an operating system from a bootable image file > Browse to your Windows Server ISO file

9. Confirm everything you have selected in the summary screen and click on Finish

10. You will see you newly created Virtual Machine in Hyper-V manager > Double Click on it > Click Start > Press any key on the keyboard and follow the prompts to install Windows 10 > Make sure you select Windows 10 Pro/Ent/Edu if the system prompts you to select the Windows Edition

Post Installation Tasks
1. Settings > System > About > Rename this PC
2. Win + R > ncpa.cpl > Update IP address for the listed network adapter
3. Test connectivity by pinging to INT-01 VS on 10.0.1.1, TEKNEX-DC01 on 10.0.1.2 and TEKNEX-CM01 on 10.0.1.3

Any questions and feedback, leave it in the comments below 🙂.