Guidelines for sccm setup

[msandbu]

Hi,

 

(Im new to this forum, so if you feel that this post should be placed somewhere else feel free to move it

 

I have some questions about scalability for sccm 2007.

 

if we were to have about 10.000 clients in our domain (only have 1 forest & 1 domain) ( regular computers ) and about 2.500 laptops romaing in our domain, how many DPs and MPs should we have to ensure it works properly

 

And if we want to implement direct access in our domain, could we manage those computers from the sccm console ?

 

Regards,

Martin

[jamitupya]

Welcome, difficult question.....

the laptops are a concern but not a huge concern to be honest.

 

also, the number of clients and DP, are relative to the size of the sites involved.

 

we work with every site with 50 devices or more has a DP, and every country has a MP (basic setup, things get complicated real quick)

 

DirectAccess is a series of configurations hooked into group policy.... yes those pc's will be manageable however this is really dependant on your configuration and its firewall settings (if using UAG its possible)

 

 

 

i need t dig out sizing guides, will try and grab them tomorrow for you

[msandbu]

Welcome, difficult question.....

the laptops are a concern but not a huge concern to be honest.

 

also, the number of clients and DP, are relative to the size of the sites involved.

 

we work with every site with 50 devices or more has a DP, and every country has a MP (basic setup, things get complicated real quick)

 

DirectAccess is a series of configurations hooked into group policy.... yes those pc's will be manageable however this is really dependant on your configuration and its firewall settings (if using UAG its possible)

 

 

 

i need t dig out sizing guides, will try and grab them tomorrow for you

 

Thanks for the reply!

 

In our domain, we have all our clients (desktop computers) located in basiclly the same location, so should we in that case just stick with 1 primary site flat structure? And I see that according to microsoft that says that 1 MP can manage up to 25.000 clients

 

But something we are thinking about is how to manage it properly, in our domain we have about 40 - 50 sub OUs (probably have more, but just thinking out loud here)

 

root

--> ou 1

--> ou 2

--> ou ..

--> ou 40

 

And each OU has its own IT-staff, is it possible to give the IT-staff access to only its own OU in the SCCM console?

 

Thanks again for any replies!

 

--

Regards,

Martin

[jamitupya]

Hi Martin,

yes it's possible to delegate a semblance of access, but you would need to do a detailed design prior. if this is th way, I have deployed a similar setup to an organization with much the same reasoning.

 

They required centralized reporting however the costs for toolsets and licensing were borne by the BU's.

 

We created a primary site for each BU hosted on a VM in the datacenter and then only gave the enterprise admins rights to all primary sites.

 

reporting setups and cofigs become a nightmare though so keep that in mind for any custom reports you may build.

 

 

other than that it's achievable.

 

remember to install a SLP and Failback service point in your central site and it should be ok.

 

 

FYI, this worked for our client because patching was handled by an enterprise security team, and the SOE was managed by the central site.

 

 

 

one downside of doing it like thi is your datacenter storage costs go through the roof :-(