Join David M. Franklyn for an in-depth discussion in this video Installing the Singapore secondary site, part of Microsoft System Center Configuration Manager Essential Training.
- [Instructor] So, now that we created our East primary site we just simply need to go to the Configuration Manager, the new Configuration Manager console, on East-CFG3. We can go to the Administration workspace, and then under Site Configuration expand through the sites. And we see our East, or ES1, primary site. And we can see its parent is CAS, and what we want to do now is create a secondary site.
So as we mentioned before, this is totally different than what we've done so far. We're not actually going to install using the Configuration Manager setup wizard for secondary site. Instead, we go to this location in the Administration workspace, Site Configuration, Sites, select our site we want to have as the parent of our secondary site, and then up at the ribbon, click Create Secondary Site. So we have established a computer can be the secondary site server, and that is Singapore One .East.DaveMCT.com.
Before we could do this, though, we have to make sure it meets all prerequisites, the same prerequisites that were assigned to the East-CFG3 or the North America CFG1, or any of the other systems that became site servers. And to that end, we need to go now to the Singapore One computer and ensure its configuration is set up. So here we are on Singapore One.
And the first thing we're going to do is go to Computer Management, so Tools in Server Manager, to Computer Management. And then we're going to our Local Users and Groups, and then Groups. And in the Groups, we need to go check the Administrator's group, and now we can see that none of the computer accounts are administrator members, so we can add them. And we're going to change the object types for Set the Computer Object Type, and then we're going to set up the name.
So in the first case we'll start off at the top of the domain, very important, we have the top level domain, and add the Central account. You just type in Central and Check Names, and there it is, put in a semicolon, we now need to add the North American computer, the NorthAm, and check names, and that's good. And semicolon, and now we're going to add the East domain computers, so we're going to change the location from the entire directory DaveMCT to East.DaveMCT.com, and type in EastCFG, and there it is, East-CFG3, semicolon and this computer itself, which of course is Singapore.
So semicolon, and then you'll have to type in Singapore, to get Singapore1, and there it is and say okay. So now all the computer accounts are properly in the administrators group on this computer. We also want to Association the SQL Server admin account, so let's go ahead and add them. So we click Add, and now this is just a computer account. So we start at the top, top level domain, DaveMCT, and type in SQL and Check Names, and there it is.
And semicolon, we need to change our location now down to this domain, the child domain, East, and also type in SQL, because we have one for each of these. And that looks good, and now we should have all the proper accounts in the administrators group as prescribed, as needed, and we'll say okay to that. And then we'll close Computer Management. Two other things we have to ensure on Singapore is one that the Microsoft Core XML Services 6.0 is installed and running.
And we don't have that right now, so we can download it by going to Internet Explorer to the location Download, and you can just search the Download Center for this. But there is Microsoft Core XML Services 6.0, so we're going to go ahead and download that. And we want the 64-bit versions. We do not need the Software Development Kit, we do not need the ia64, which is a totally different chip set. So this should be sufficient.
Let's go ahead then and click Next, and we'll allow the pop-ups from Microsoft. And now we'll save it to our Downloads folder on this computer, and we'll go ahead and run it. And now it's installed, it's that easy. So let's go ahead now and close Internet Explorer, and the one final thing we need to do on the Singapore computer is to ensure that we have the remote registry service running, so we can check that out in PowerShell.
And what we're going to do now is check the status of the service by typing in Get-Service, and then the name, RemoteRegistry. And we can see it's stopped, so we need to start it. So we can type Start-Service command, and of course the name of the service we want to start, which is the RemoteRegistry. And it doesn't come back and tell us if it's started or not, it has, but we can check by doing the Get-Service again for that by using the up arrow on the keyboard.
And now we can see it is running. So that completes what we need to set up for on Singapore. Now, one final step. We need to go back to the EastCFG computer, and ensure that SQL Server now has the computer account Singapore as a sysadmin in its database. So here we are back on East-CFG3, and what we need to do here is go to the SQL Server, and that's the Start Menu, Microsoft SQL Server 2014, and now we want to open up the Management Studio, the SQL Server 2014 Management Studio.
And we will connect as the administrator of the domain. And we need to expand Security and go to Logins. And you can see we have all of our different computer accounts here for our hierarchy, but what we don't have is a computer account for Singapore. So let's go ahead and add that. So, right-click Logins, and then select New Login. So for the login name, we're going to put in the name of the computer. We first put the domain east\ and singapore1, and then the dollar sign.
The dollar sign tells SQL Server that it's a computer account. But before we go further, we need to select the page Server Roles, and then add all the Server Roles here. Now, it needs to be at the highest level sysadmin. I'd go for all of them just to make sure that nothing will not be installed when we go ahead and create the secondary site, just to be sure. So click Okay here, and now we see we have EAST\singapore, it is now available as a sysadmin within the database, so let's close the SQL Server Management Studio.
And we want to do this on one other computer, we need to do this on the Central-CFG3's SQL 2014 Management Studio. So now let's go to that computer, and do that. So here we are on the Central-CFG1, and what we need to do is go ahead into SQL Server 2014, scroll down and find the Management Studio, click on it.
And then we'll connect as the top level domain administrator. And once again in the tree, expand Security, and expand Logins, and we see we have the East computer here. We should have also the Central, there it is, and also the North America computer. Sometimes it's hard to read unless we expand it on this side. But now we're going to add, by right-clicking and saying New Login, we're going to add the Singapore account as well.
So this is the Singapore computer account, Singapore1, and then a dollar sign at the end to make sure it's selected as a computer account, and the server roles we'll just turn them all on. And now we have it, so we can close the Central-CFG Microsoft SQL Server Management Studio console, and now to back to our East-CFG computer and start the install. So here we are back on East-CFG3, and we're ready to start and create our secondary site server.
We are in Administration Workspace, in Site Configuration, Sites, and in the ribbon we can click Create Secondary Site. And notice it's the Create Secondary Site Wizard. In the Before You Begin Page, click Next, and the name of the site, or the site code, is going to be ES2. And the site server name, we browse to this. And within the East domain, from this location, it is a computer account so we're just going to type sing, and Check Names, and it finds Singapore1, which is good.
We say okay to that. And for the site name, we're going to call this the SingEast.DaveMCT.com Secondary Site. And then we're going to click Next. We're going to copy the installation source files over the network from the parent site, click Next. We want to make sure the ports 1433 and 4022 are available to us. Before we go any further, since we have to do this on both this computer the East-CFG, and also Singapore, we need to check that.
But I'm not going to do so, because I already have and I know that they're turned on, both the inbound and outbound ports are loud and enabled at this point. So, make sure you do that before you actually start the install, and click Next. In this case, we could install and configure the web server IIS, Internet Information Services on this computer if required, otherwise it will do it, and enable and configure BranchCache for this distribution point. And BranchCache just simply means that for this distribution point, if a client local to Singapore tries to get some file that's, perhaps it's some software, for example, that's being pushed, advertised to the client so they can install it, that it will get it there and the next client will get it from the same place.
We won't turn this on 'cause we're just doing a very simple secondary site configuration here. We also want to make sure it just uses HTTP. If we do need to login into certain devices, such as mobile devices and Mac computers using the mobile device management, then we need to have Public Key infrastructure set up with a certificate for those clients. That's a very elaborate process to do that, and it can be done, it has to be done from mobile device management.
In any case, we're going to create just a self-signed certificate here, as it is just a default secondary site. So click Next. The drive space is really what the distribution point's going to have to store different things being installed to the local clients there. Modern software very often is going to be much larger than 50 megabytes, even installers, so let's give this about a gigabyte. We'll say 1,000. It is in megabytes, so 1,000 will be correct.
And then say next, and then to specify the content validation settings, and this is stuff that's put in the distribution point in order to be sent out to clients locally, it's going to get this, it's going to be pushed down from the primary site, or connected to the primary site directly. And do we want to validate that, sure. We can set validate content on a schedule checkbox, the default is going to be every week. It should not take very long. As it says, if we change the priority value in the initial deployment to a higher value, then it might increase the performance hit on this particular computer, but again, the validation only happens once a week, so we should be good there.
Click next. We have not yet set up any boundary groups, so we'll just click Next on this. And then we have the summary. Click Next. The progress, it's done, the wizard has run completely. And now we can close. But what you'll see now, and again this is on the East-CFG3's Configuration Manager console, what you'll see is the secondary site, the status is pending. So if we select it, we can go to the Show Install status, and this will populate as new values get in here.
We can watch the different things being added until it's done and it will no longer be in the pending state, it will be in the active state. This takes some time. It can take anywhere from 15 to 30 minutes. So we'll just leave this up, and once it's completed, we'll have completed the demonstration. And here we can see, now when we've refreshed, most of the prerequisites passed. So this is continuing on. If we look underneath we can see it's still pending, so we'll let this go for a little bit longer until we see that it actually has installed.
Okay, so now we see the secondary site server installation has completed. The secondary site server bootstrap installation service succeeded, and we have now success. So, with no other further comments, we can go ahead and say okay to this. And notice it still shows pending here in the Sites Details pane, so what we're going to do is refresh. And now it shows as active. Now let's go ahead and take a look at the Central Administration Site, and see what it says.
So, in the Central Administration Site, we're going to go to the Administration Workspace, and then to Site Configuration and Sites. And we do see it. We see the ES2 SingEast DaveMCT.com secondary site. Now, just a couple of things. If you're having problems creating your secondary site. So let's go back now to the ES1 Primary Site server. And just a couple of things to consider when we made this secondary site.
Because we start off by pressing the Create Secondary Site button. There's a lot that can go wrong here. So read the prerequisites very carefully. The secondary site has to meet all the prerequisites, of course as we said before, of a install of a primary site. Except for SQL Server. It's not going to have SQL Server open on it. It's going to install instead the SQL Server Express. You can use a SQL Server instance, but it has to be a clean instance, not one that already has Configuration Manager running on it with a Configuration Manager database.
So in this case, we did use the SQL Server Express, which is the common way to do it, that is the default. However, you need to make sure that all the prerequisites to open ports to get ready for the database to be placed on the secondary site server, and this also means going into the database managers themselves, so the SQL Server 2014 Management Studio on the other Configuration Manager servers, the primary site servers, and also the central administration server, and make sure that the Singapore computer account has sysadmin access to them.
And the other thing we need to consider is that the remote registry service is running. And for some instances, when you haven't yet set up a system to be part of a overall infrastructure in Configuration Manager, that service may be stopped. Because it's just not being used. So you want to go in and change the settings so that it is turned on, or as we did earlier, go into PowerShell and just start that service.
And finally, sometimes things just don't go right, because there's cached information on different servers, and I've had instances where I've had to actually restart all my servers, including the domain controller, that hosts the system management container. And in this case, you want to do it at a convenient time for the operations of your entire infrastructure. Obviously, you're not just going to restart all your servers in the middle of the day, so you might need to plan it out carefully. So when your secondary site, when you're installing it, and you're viewing the install status, as we did before, and you get some errors here, in the end, if you've checked all the prerequisites, and confirmed you've made all the prerequisite criteria, then you will probably need to restart some of your systems.
So, consider that as a last resort, but that could get you by those final red Xs that you might get in this particular secondary site installation status. So, that is as much as we needed to do here. We now have our secondary site underneath the East primary site, and that completes the demonstration.
- Planning and deploying a standalone primary site
- Ensuring domain and site server prerequisites
- Planning and expanding a standalone primary site
- Planning and deploying a multiple-site hierarchy
- Planning resource discovery and client deployment
- Managing content and replicating data in Configuration Manager
- Configuring Internet and cloud-based client management
- Advanced monitoring
- Upgrading to Configuration Manager current branch