Before you install a System Center 2012 Configuration Manager hierarchy of sites, or a single site, you must understand your network structure, organizational requirements, and the resources that are available to use with Configuration Manager. You can then combine this information with the requirements for Configuration Manager to make decisions about your hierarchy and site designs, and site system server placement.

Use the information in the following sections when you plan your Configuration Manager hierarchy:

Collect Data about Available Resources

Before you design your System Center 2012 Configuration Manager deployment, you must understand the available network infrastructure and your company’s IT organization and requirements.

Understand Your Organization

It is important that you know the structure of your organization because this information can influence how you deploy, use, and support Configuration Manager. It is also useful to know your organization’s long-term plans. Changes such as mergers and acquisitions can have a significant effect on IT infrastructure. External factors that require changes and internal projects (either planned or in progress) can affect how you design and deploy Configuration Manager.

Use the following guidelines to help you collect data about your organization.

Considerations Details

Departmental organization

Include the following information:

  • High-level organization charts to help determine the divisional structure of your organization, the design of your Configuration Manager hierarchy, and your method of communicating Configuration Manager implementation updates to different departments

  • Reporting hierarchy

  • Communications methods

  • Service level agreements (SLAs)

IT organization and administrative policies

Consider the following factors:

  • The structure and technical level of local and remote IT divisions, their reporting hierarchies, and local and global IT administrative policies

  • Organizational structure

  • Reporting hierarchy

  • Local administrative policies and SLAs

  • Global IT administrative policies and SLAs

Long-term business direction

Any major business changes planned for the future, such as mergers, acquisitions, major physical moves, or network migrations

Geographic Profile

Active Directory Structure

Information Technology Organization

Security Environment

Operating System Languages

Understand Your Physical Networks

It is important that you know the structure of your available networks, the network topology, available bandwidth, the location of servers, and the location of computers that might be installed as Configuration Manager clients. This information can influence your decisions about where and what type of sites your Configuration Manager design requires.

Use the following sections to assist you when you collect data about your organization.

Network Topology

Server Environment

Device Environment

Use the Data That You Collected to Plan Configuration Manager Sites

After you collect relevant information about your networks and organization, you can combine this information with Configuration Manager options and requirements to plan a site or hierarchy that makes efficient use of your available resources and also meets your organizational goals.

Use the following sections to help you use this data when you plan a site or hierarchy.

Use Your Active Directory Information

Combine the information about your Active Directory environment with the information in the following table to identify how you can use your existing Active Directory investment with Configuration Manager.

Active Directory planning Details

Add your Active Directory sites to Configuration Manager as boundaries

Consider using Active Directory Forest Discovery to first identify Active Directory sites and subnets, and then add them as Configuration Manager boundaries.

For more information, see About Active Directory Forest Discovery.

Extend the Active Directory schema to simplify the management of client communication to sites in Configuration Manager sites

The preferred, but optional, method for clients to find information about Configuration Manager sites and the Configuration Manager services that are available is from Active Directory Domain Services. When you extend the Active Directory schema and enable sites to publish data to Active Directory, clients can automatically discover resources from this trusted source, and make efficient use of the network, based on their current location.

For more information, see Determine Whether to Extend the Active Directory Schema for Configuration Manager.

Use Configuration Manager to manage sites that span multiple Active Directory forests

Configurations across forests within a site or between two sites require a full two-way forest trust so that Kerberos can be used for authentication.

You can manage computers that are not members of a trusted Active Directory domain; however, you must implement additional configurations to support these computers.

For more information, see Planning for Communications in Configuration Manager.

Use Collected Information to Plan for Discovery

Combine the information about your Active Directory structure, your network, and device resources, with the information in the following table to help you plan for discovery, which finds resources for Configuration Manager to manage.

Discovery planning Details

Use the Active Directory discovery methods to find computers, users, and groups that you can manage with Configuration Manager

To query Active Directory Domain Services for resources, you must understand your Active Directory container and location structure (local domain, local forest). Also understand how to construct custom lightweight Directory Access Protocol (LDAP) or Global Catalog queries so that you can search specific areas of Active Directory Domain Services to conserve network bandwidth for when you run the Active Directory Discovery method.

For more information about which discovery method to use to discover different resources, see the Decide Which Discovery Methods to Use section in the Planning for Discovery in Configuration Manager topic.

Use Network Discovery to discover details of your network topology and computer resources that you can manage with Configuration Manager

To query your network with Network Discovery, understand your DHCP server infrastructure, available SNMP-enabled devices, or Active Directory domains. This information can help you configure a Network Discovery search to conserve network bandwidth for when you run Network Discovery.

For more information about Network Discovery, see the About Network Discovery section in the Planning for Discovery in Configuration Manager topic.

Use Active Directory Forest Discovery to search your local forest, and any additional forests that you configure for Active Directory sites and subnets

Consider using Active Directory Forest Discovery to first identify Active Directory sites and subnets, and then add them as Configuration Manager boundaries.

For more information, see the About Active Directory Forest Discovery section in the Planning for Discovery in Configuration Manager topic.

Use Collected Information to Plan for Boundaries and Boundary Groups

System Center 2012 Configuration Manager clients use boundary groups during client installation for site assignment, and after installation to locate resources for content deployment. You assign boundaries to boundary groups, and can also assign content servers to boundary groups. Each boundary group can support two distinct configurations; site assignment, and content location.

When you configure two or more boundary groups to include the same boundary, directly or indirectly, they are considered to be overlapping. For example, you might add an IP subnet boundary of 5.5.5.5 directly to a boundary group. Next, you add an Active Directory site that includes that same IP Subnet to a second boundary group. These two boundary groups now overlap because each includes the 5.5.5.5 subnet.

Configuration Manager supports overlapping boundaries for content location. This type of configuration can help to provide additional options for clients when they search for available content. However, Configuration Manager does not support overlapping boundaries for site assignments as the client cannot identify which site to join. For more information, see Planning for Boundaries and Boundary Groups in Configuration Manager.

Combine the information about your network topology, available bandwidth, computer resources, and organization requirements, with the information in the following table to help you plan for boundaries and boundary groups.

Options to consider Details

Create separate boundary for site assignment and for content location

Although boundary groups support configurations for site assignment and content location, consider creating a distinct set of boundary groups for each purpose.

  • Configure boundary groups for client site assignment without overlapping boundaries. If you assign a boundary to a boundary group, do not assign it to another boundary group that specifies a different site.

  • You can configure boundary groups for content location with overlapping boundaries. Each boundary that you assign to a boundary group will be associated with each content location server that you associate to the same boundary group. Overlapping boundary configurations for content locations can provide flexibility for clients that request content.

For more information see, Planning for Boundaries and Boundary Groups in Configuration Manager.

Content location

Add specific network locations as boundaries to the boundary group, and then add distribution points that are on fast network connections to those network locations. Clients that are on the specified boundaries receive those servers as content locations during content requests.

Note
State migration points are also considered content location servers when you configure boundary groups.

For more information about content location, see Planning for Content Management in Configuration Manager.

Site assignment

Add specific network locations as boundaries to the boundary group and then specify a site to the boundary group. Avoid assigning the same boundary, directly or indirectly, to more than one boundary group that you use for site assignment.

For more information about client site assignment, see How to Assign Clients to a Site in Configuration Manager.

Fallback site assignment

Consider configuring the hierarchy with a fallback site assignment. The fallback site is assigned to a new client computer that automatically discovers its site when that client is on a network boundary that is not associated with any boundary group that is configured for site assignment.

For more information, see the Configure a Fallback Site for Automatic Site Assignment section in the Configuring Settings for Client Management in Configuration Manager topic.

Use Collected Information to Plan for Site and Hierarchy Design

Combine the information about your network topology, available bandwidth, server and computer resources, and organization requirements, with the information in the following table to help you plan where to locate sites and site system roles in your hierarchy and how to manage communications between sites, site systems, and clients.

Considerations Details

Consider installing a Configuration Manager site only in a well connected network. Usually well connected networks correspond to geographic locations. For planning purposes, start with the assumption that each well connected network is one Configuration Manager site. Modify this number as you collect more information about your organization.

Identify the number and location of well connected networks that you have in your network.

Within a site, clients expect communication with site system servers to be on a well connected network. When you use a boundary group that is configured for content location, you can manage which distribution points and state migration points a client can access.

For more information, see Planning for Communications in Configuration Manager.

Remote subnets might be too small to justify their own Configuration Manager site.

If you have remote subnets that are too small to justify their own Configuration Manager site, list those IP subnets and their closest well connected network.

From the nearest site, consider placing a distribution point that is enabled for bandwidth control on these subnets to help manage content deployment to clients at those locations.

For more information, see Planning a Content Deployment Migration Strategy in System Center 2012 Configuration Manager.

In a hierarchy that has multiple primary sites, the central administration site replicates data with each primary site.

Balance the location of the central administration site between a location that benefits the most administrative users, and a location that has a well connected network to your largest primary sites.

Configuration Manager consoles that connect to a primary site cannot see or manage some data from other primary sites.

Database replication occurs regularly between primary sites and the central administration site, and a well connected network can help prevent replication delays of the Configuration Manager database.

For more information about intersite replication, see the Planning for Inter-Site Communications in Configuration Manager section in the Planning for Communications in Configuration Manager topic.

Each Configuration Manager primary site can manage up to 100,000 clients, with up to 400,000 clients in a single hierarchy. However, the practical number of clients that a primary site can manage also depends on the hardware configuration and performance constraints of the site server and site system servers.

Although each primary site supports up to 100,000 clients, site system roles have lower limits. If you configure too few site system servers for critical roles at a site, you can create a performance and communication bottleneck that adversely affects the management of your environment.

For example, management points support up to 25,000 clients. Therefore, in a site with 100,000 clients, you can expect to install at least four management points to provide adequate service to your clients. However, the addition of more management points can provide redundancy and can improve overall client-to-site communications, and compensate for any unexpected performance issues on those management point servers.

For more information about site system server requirements and capacity, see the Site System Requirements section in the Supported Configurations for Configuration Manager topic.

Plan your hierarchy infrastructure by using the fewest number of sites necessary to reduced administrative overhead.

Tip
In a System Center 2012 Configuration Manager hierarchy, you can reduce the number of sites required to manage the same infrastructure than was required in Configuration Manager 2007.

Configuration Manager can manage multiple instances of the following options at the same site:

Note
In previous product versions, the comparable configurations each required a separate site to manage different instances of the option.

Additionally, when you distribute content to network locations that are not well connected and content distribution is your primary network bandwidth concern, you can use the site system role of a distribution point that is enabled for bandwidth control to replace a secondary site.

For more information about how to use distribution points instead of secondary sites, see Planning a Content Deployment Migration Strategy in System Center 2012 Configuration Manager.

Choose the type of site to use for a given network or geographic location.

Consider the following when you decide the type of site to deploy at a network or geographical location:

  • Primary and central administration sites require an instance of SQL Server, and that instance must be installed on a well connected network.

  • You deploy primary sites to manage clients. Although you can deploy a secondary site to manage the client information from clients at remote locations, the clients must still assign to a primary site. It is from the primary site that clients obtain their policy.

  • Secondary sites extend a primary site to a remote network location. You can deploy a distribution point that is enabled for bandwidth control from the primary site when content deployment to the network location is your primary concern and you are not concerned about the network bandwidth that is used when computers send their client information to the site.

  • Configuration Manager consoles can only connect to a primary site or the central administration site.

For more information about site type options, see the About Site Types in Configuration Manager section in the Planning for Sites and Hierarchies in Configuration Manager topic.

As a security best practice, use a public key infrastructure (PKI) to deploy and manage the certificates that are required for communication in Configuration Manager.

If you use a PKI, document how the certificates will be configured, deployed, and managed for site systems that require them, client computers, and mobile devices.

For more information about the certificate requirements in Configuration Manager, see the Planning for Certificates (Self-Signed and PKI) section in the Planning for Security in Configuration Manager topic.

Prepare Active Directory Domain Services to support client communications, or configure alternatives, which includes DNS or WINS.

For information to help you decide whether to extend the Active Directory schema to support Configuration Manager, see Determine Whether to Extend the Active Directory Schema for Configuration Manager.

For information about client communication, see the Planning for Client Communication in Configuration Manager section in the Planning for Communications in Configuration Manager topic.

Use Collected Information to Plan for Site Systems

Depending on the hardware configuration of your site system servers, the numbers of clients that will use each site system server and the security requirements for your organization, you might decide that one server can perform one or more site system roles. It is also possible that you will have to separate specific site system roles, such as those that use Internet Information Services (IIS) to communicate with Configuration Manager clients, from other site system roles such as the site database server.

The following sections contain lists of typical planning considerations and questions for you to review when you plan for site systems that are typically used in Configuration Manager. Your organization might require additional considerations.

Database Servers

Distribution Points

Management Points

Reporting Services Points

Software Update Points

See Also