Kingen

You should maybee consider a better solution, maybee clients that use built in sandboxing with verified boot, then you wouldent need to deploy all those anti virus stuffs And also do you really need to deploy Adobe Reader? There is alot of plugins and web applications that can read and edit PDF's, all you need is a webbrowser

Found it : http://blogs.technet.com/b/configurationmgr/archive/2011/05/05/how-to-create-offline-or-standalone-usb-media-for-os-deployment-in-configmgr-2007.aspx

Is it possible to put a Task Sequence on to a USB stick, and be able to boot a computer with it and it runs the TS?

In your case if you have 1 Primarysite and 4 DP for packages, i would run the Forest Discovery, it will create a boundary, enable it for site assigment. Then i whould create 4 different boundaries yes based on IP ranges, it will actually overlap the first one that Forest discovery creates, and assign them to my DP's only for content location described in the article you mentioned.

Like this:

PS + Secondary site: Link dies, nothing really happens directrly, the clients in the remoteoffice can talk to the MP on the Secondareysite. It can acces sourcefiles from the DP on the Secsite. PS + branch Link dies, client's cant talk to the MP on HQ, they can access already existing sourcefiles that whould be avaible on any branchclient. But won't get any new deployments. They wont get updates no nothing. But with ADSL i would go with PS and DistrubutionPoints, especially when you say that you are going to do OSD. Just install DP and enable PXE on it, distrubute sourcfiles to DP's and create a TaskSequence.

But is it necessarily 4 different AD? Maybe site A,B,C,D are in the same AD/Forest.

1. You have one Managepoint with your PrimarySite (the built-in). It is possible to expose this Managepoint to Internet, but it's not recommended. The most common solution is to set up a Managepoint in a DMZ. 2. Yes 3. Yes 4. http://technet.micro...y/gg712701.aspx I know CBT Nuggets and Greg Shields have a really good chapter when he explains how you can set up IBCM in SCCM and also the PKI part step-by-step. http://www.cbtnuggets.com/it-training-videos/series/mcrsft_config_mngr/9223

Thank you Jessica, i will watch it.

Thanks to both of you Peter's

Sad to hear that it have caused problems for you and your users , i missed that you had tried the MSI, it have always worked fine for me. "Over half of my computers are now broken thanks to those @%#%tards at adobe. Now I get calls every few minutes to fix flash." Have you noticed Adobe in this? Maybe it's some bug? What OS doe's your computers run?

AWESOME Ni hao!

Thanks Peter for your answer. Do you know if the System Management Container needs to exist in more than the domain were the Site is istalled? I mean for example i have two more domains that's covered by my Boundaries. Do i need to setup a System Management in those AD's aswell?

If you have a CM07 site, then you probably already have the "System Management" Container within your AD: My question is, when migrating to a 2012 site, should i just re-use that container and set so my new 2012site also have permission to the container. Or do i have to delete the data that the 07 site have written in it?

Just re-create the exe/packages to MSI with some tool like WinInstall LE

The builtin SCCM backup, does only backup the database and some registry keys, but usually that's no problem since best practice is to have source files on a separate disk?

I don't like SCUP either, but there is a MSI install for flash player that you could use: http://www.adobe.com/products/flashplayer/distribution3.html

"Microsoft has officially notified me it is a bug and they duplicated it. their recommend fix are: option 1: Services Pack 1 or option 2: disable SCCM 2012 Client Health Check from rebuilding WMI. i told them to come up with option 3. waiting to hear back" LOL

14 gig .wim kinda large? i mean windows + office is usally 6gb? Do you have applications in the Task Sequence?

I whould have just installed a StandAlone site in New Forest C i think

I would go with rocket man's sugesstion, but it depends, is the VPN links fast or slow? Beacuse if you will use the MP at the primary site over the VPN's it might slow down a bit, then a local MP at each site would be to prefer?

*bump*

Should i maybe follow the steps in that article and reinstall WDS and the PXE Service Point? This feels kind of radical since it have worked nicely till now.

I do have DHCP and WDS on that secondary site. I must also say that this secondary site is over 3 years old and have been running smoothly over the years, but over a night i have gotten these problems. Here are my DHCP settings:

So got a secondary site for PXE deployments at remote office. The WDS have hung up, and when i try to start it i get this: I have tried to set it do delayed start and restarted the server, didn't work. I have tried to set it to manual start and restarted the server, didn't work either. Any one knows what i should do?