官方网址：http://www.microsoft.com/learning/exams/70-401.mspx

Microsoft online resources

各知识点比重：

Note This preparation guide is subject to change at any time without
prior notice and at the sole discretion of Microsoft. Microsoft exams might include adaptive testing technology and simulation items. Microsoft does not identify the format in which exams are presented. Please use this preparation guide to prepare for the exam, regardless of its format.

原文：http://www.microsoft.com/learning/syllabi/en-us/6451afinal.mspx

Prerequisites
Before attending this course, students must have:
• A base-level understanding of Systems Management Server 2003.
• System Administrator–level working knowledge of:
• Deployment, configuration, and troubleshooting for Windows-based personal computers
• TCP/IP networking
• SQL Server
• Active Directory
• Basic Public Key Infrastructure concepts

Five days 课程大纲

Module 1: Overview of Configuration Manager 2007

This module provides an overview of Configuration Manager 2007 features. It also provides an overview of the Configuration Manager site architecture and clients.

Lessons

After completing this module, students will be able to:

Module 2: Planning and Deploying a Single-Site Architecture

This module explains how to prepare for and deploy a Configuration Manager site. It also describes how to discover resources and how to upgrade an SMS 2003 site to Configuration Manager 2007.

Lessons

Lab A: Deploying a Configuration Manager Site Server

Lab B: Managing Users and Configuring Boundaries and Discovery Methods

After completing this module, students will be able to:

Module 3: Planning and Deploying Configuration Manager 2007 Clients

This module explains how to prepare for and deploy Configuration Manager clients. It also describes how to manage client installations and how to troubleshoot client deployment issues.

Lessons

Lab A: Deploying Configuration Manager Clients

Lab B: Reviewing Client Deployment

After completing this module, students will be able to:

Module 4: Collecting Inventory and Metering Software Usage

This module explains how to collect and manage hardware and software inventory. It also describes how to configure software metering.

Lessons

Lab A: Collecting Inventory

y>

Lab B: Configuring Software Metering

After completing this module, students will be able to:

Module 5: Querying and Reporting Data

This module explains how to create and run queries and reports. It also describes how to create and run dashboards.

Lessons

Lab A: Creating Queries

Lab B: Creating a Reporting Point

Lab C: Creating Reports

Lab D: Creating a Dashboard

After completing this module, students will be able to:

Module 6: Preparing for and Managing Software Distribution

This module explains how to configure and manage software distribution. It also describes how to monitor and troubleshoot software distribution.

Lessons

Lab A: Preparing a Site for Software Distribution

Lab B: Deploying an Application Using Software Distribution

After completing this module, students will be able to:

Module 7: Deploying Operating Systems Using Configuration Manager 2007

This module explains how to deploy operating systems using Configuration Manager. It also describes how to configure operating system deployments using PXE.

Lessons

Lab A: Capturing a Reference Computer Using Configuration Manager 2007

Lab B: Deploying Operating Systems Using PXE

After completing this module, students will be able to:

Module 8: Deploying and Managing Software Updates

This module explains how to prepare for and manage software updates in Configuration Manager. It also describes how to monitor and troubleshoot software updates.

Lessons

Lab: Deploying and Managing Software Updates

After completing this module, students will be able to:

Module 9: Working with Desired Configuration Management in Configuration Manager 2007

This module explains how to configure desired configuration management in Configuration Manager. It also describes how to view compliance results.

Lessons

Lab: Configuring Desired Configuration Management

After completing this module, students will be able to:

Module 10: Using Remote Tools and Wake On LAN Features

This module explains how to work with Configuration Manager remote tools. It also describes how to configure and monitor Wake On LAN.

Lessons

Lab A: Configuring and Using Remote Tools

Lab B: Configuring and Using Wake On LAN

After completing this module, students will be able to:

Module 11: Managing Mobile Devices Using Configuration Manager 2007

This module provides an overview of mobile device management. It also describes how to configure server and client settings and how to manage mobile devices.

Lessons

Lab A: Configuring the Site Server to Support Mobile Device Management

Lab: Managing Mobile Devices Using Configuration Manager 2007

After completing this module, students will be able to:

Module 12: Maintaining and Troubleshooting Configuration Manager 2007

This module explains how to maintain Configuration Manager 2007 and how to troubleshoot Configuration Manager issues. It also describes how to backup and recover data and how to work with troubleshooting tools.

Lessons

Lab: Maintaining and Troubleshooting a Configuration Manager Site System

After completing this module, students will be able to:

Module 13: Planning and Configuring a Multiple Site Hierarchy

This module explains how to plan and configure a multiple-site hierarchy including installing a secondary site and installing a proxy management point. It also describes how to decommission sites and hierarchies and how to roam in multiple-site hierarchies.

Lessons

Lab A: Planning a Configuration Manager 2007 Hierarchy

Lab B: Installing Secondary Sites and Proxy Management Points

Lab C: Roaming Between Configuration Manager 2007 Sites

After completing this module, students will be able to:

ConfigMgr 2007 是不支持在 workgroup 环境下的 Client push 方式安装的。

其他在工作组环境的限制有：

1. Workgoup clients 不能使用 AD domain services 服务，所以即使 site 已经进行了 AD domain services 的发布，workgroup client 也不能从中受益。如 workgroup clients 只能通过 WINS 或 DNS 来定位 default MP，而不能通过 AD domain services；
2. AD system, AD user, AD user group 等 discovery 方式对 workgoup 无效；
3. 针对 user 的 advertiesments 对 workgroup 无效；
4. BDP 不能建立在 workgroup 机器上，必须是域中的机器。

Sometimes the easiest way to install the client may be running it with psexec. That’s especially true if the machine hasn’t been discovered by some mechanism. The options for doing this often cause confusion, because there are two files involved – ccmsetup.exe and client.msi. CCMSETUP looks for client.msi in whatever folder ccmsetup is run from. If you use the -c switch that’s normal with psexec, to copy the file being executed, it only copies the exe. That then hangs when it can’t locate the msi, and the ccmsetup.log file is filled with messages reporting that it can’t find client.msi in C:\Windows\System32 and will retry in 20 minutes.

The solution is to run ccmsetup from a location containing both files. The easiest is usually on an SMS site server. The proper command line is:

psexec -s \\computer \\SMSserver\client\i386\ccmsetup.exe [ccmsetup switches]

The -s command says to run using the system account. Do not use -c, as that will cause the errors described above. Using -d is optional; ccmsetup terminates pretty quickly. I generally leave it off so I can see the zero return code.

【个人引申】个人觉得 psexec 的最大一个用处是，可以写一个在远程机器上执行的批处理或者其他脚本，然后用 psexec –c 参数将这个脚本拷贝到远程机器上执行。例如本文中的例子可以这样写：

需要拷贝到远程机器的批处理文件，假设名称为 ClientInstall.bat，内容为：

\\SMSserver\client\i386\ccmsetup.exe [ccmsetup switches]

然后可以在机器上执行：

Psexec \\computer –c ClientInstall.bat

这样就达到了相同的目的。之后如需修改参数，只需要修改 ClientInstall.bat 中的参数即可。

Client Spy – A tool to help troubleshoot issues related to software distribution, inventory, and software metering on Configuration Manager 2007 clients.
Policy Spy – A policy viewer to help review and troubleshoot the policy system on Configuration Manager 2007 clients.
Trace32 – A log viewer that provides a way to easily view and monitor log files created and updated by Configuration Manager 2007 clients and servers.
Security Configuration Wizard Template for Configuration Manager 2007 – An attack-surface reduction tool for the Microsoft Windows Server 2003 operating system with Service Pack 1 and Service Pack 2 (SP1 and SP2) that determines the minimum functionality required for a server’s role or roles, and disables functionality that is not required.
DCM Model Verification - A tool used by desired configuration management content administrators for the validation and testing of configuration items and baselines authored externally from the Configuration Manager console.
DCM Digest Conversion – A tool used by desired configuration management content administrators to convert existing SMS 2003 Desired Configuration Management Solution templates to Desired Configuration Management 2007 configuration items.
DCM Substitution Variables - A tool used by desired configuration management content administrators for authoring desired configuration management configuration items that use chained setting and object discovery.

下载地址：http://www.microsoft.com/downloads/details.aspx?FamilyID=948e477e-fd3b-4a09-9015-141683c7ad5f&DisplayLang=en

当一个 Client 需要进行 content location 的时候，会发送 content location 的请求到 MP：

1.

当 Client 位于其 assigned site 的边界内，client 会发送 content location 请求到 default MP；

2.

当 client 位于和其 assigned site 有联系的 secondary site 的边界内的时候，如果 secondary site 有 proxy MP，client 会向 proxy MP 发送 contend location 请求；如果没有 proxy MP，client 会向 default MP 发送请求。

3.

当 client 不在其 assigned site 或和其 assigned site 有联系的 secondary site 的边界内的时候，client 可以通过 AD Domain Services (global roaming capability)获取 site 信息，然后向其目前当前roamed site 中的 resident MP 进行 content location；如果 resident MP 不能进行 content location（当前 site 中没有相应的 content 存在），client 会发送请求到其 default MP。

4.

When a client is located within the boundaries of a primary site lower in the hierarchy than its assigned site or a secondary site attached to its assigned site, a client that cannot access site information from Active Directory Domain Services (regional roaming capability), will continue to request content location from its default management point in its assigned site.

今天在 SCCM 2007 的在线 Library 中发现了微软对这个问题进行了回答，原文如下：

Active Directory System Discovery retrieves details about the computer, such as computer name, Active Directory container name, IP address, and Active Directory site. It generates a data discovery record (DDR) for each computer it discovers in Active Directory Domain Services.

Active Directory System Group Discovery works only for systems that are already discovered and assigned to the local primary site and any direct child secondary sites. Active Directory System Group Discovery is not available for secondary sites. If a resource has been discovered and is assigned to the site, Active Directory System Group Discovery extends other discovery methods by retrieving details such as organizational unit, global groups, universal groups, and nested groups. Active Directory System Group Discovery cannot discover a computer that has not already been discovered by another method.

一台机器上，必须先在 site database server 上先建一个空的库实例（不要做任何设置），然后在安装是连接到

database server 的实例即可。

原文节选：

If ConfigMgr and SQL were on the same server, ConfigMgr would automatically create the database for

you.
Since SQL is running on a remote server, you do indeed have to create the database on the remote

SQL server first.

Just create it with the defaults…don’t make any edits/changes; the install will do the rest for you.

讨论的延伸：

如果 site server 和 site database server 不在一台机器上，SMS Provider 最好和 site database server 在同

一台机器上，这样做的效率更高。除非 site database server 是 SQL Server Virtual Cluster Instance 形式的

时候（ Provider 不能安装在 SQL Server Virtual Cluster 上），才需要安装在非这两者的机器上。

在 Site Maintenance 下存在两个节点，一个是 SQL Commands 【 默认为空，需要自定义 SQL 语句 】，一个是预定义的 Tasks 【不能新增，只能在已经的存在的 Task 上做配置】。

Backup ConfigMgr Site Server (默认关闭)

作用：可以设置对 Site Database 的备份时间和备份路径。

默认每周日零点开始。

Clear Install Flag (默认关闭)

作用：如果在设定的“Client Rediscovery Period”这个时间内，没有收到 Client 发送的 Heartbeat Discovery 信息则将清除掉 Client 客户机已经安装 SCCM Client的标识，这样就可以再次安装 client。

注意：如果开启这个 Task，

1.

要确保开启 Heartbeat Discovery；

2.

要设置“Client Rediscovery Period”的时间比 Heartbeat Discovery 时间要长，根据公司情况设置一个合理的倍数。（起码1.5倍，3倍以上是比较保险的）

默认21天。

Delete Aged Client Access License Data (默认关闭)

Client Access License：Many Microsoft server products utilize the Client Access License (CAL) model, including Exchange Server, SQL Server, and Systems Management Server. For a list of Microsoft products for which CALs are required, see the Microsoft CAL Guide (http://go.microsoft.com/fwlink/?LinkId=91230).

At this time, Configuration Manager 2007 only tracks CALs for Windows Server and Exchange Server.

默认180天。

Delete Aged Collected Files (默认开启)

Collected Files 是指从 site database 和 site server folder structure 中收集的 files data.

The Delete Aged Collected Files task is used to delete aged collected files data from the Configuration Manager 2007 site database and from the site server folder structure at the selected site only. Databases at other sites are not affected.

Once collected, files specified to be collected will only be collected during subsequent inventories if they have changed since the previous inventory. By default, the five most recent copies of collected files are stored on the site server in the inboxes\sinv.box\FileCol directory.

默认90天。

Delete Aged Computer Association Data (默认开启)

Computer Association Data 是指通过 OSD 方式完成系统按照并还原用户状态之后删除的计算机关联记录信息。

默认30天。

Delete Aged Configuration Management Data (默认开启)

Configuration Management Data：在修改 DCM、SUM、OSD 配置后，site database 会相应更新到最新的配置，而原有的配置信息仍然保存在 database 中。当 Client 都接收到新的配置 policy 之后（即不再根据老的 policy 报告其状态），和老的 policy 相关的信息将会根据配置的周期进行清除。

默认90天。

When changes are made to configuration items created when using desired configuration management, software updates management, or operating system deployment, the site database is updated with the new configuration item definition. The original configuration item definition is also stored in the site database. When clients have stopped reporting the original configuration item definition, the definition and any configuration item compliance history associated with that version is removed from the database according to the schedule you have specified.

Delete Aged Discovery Data (默认开启)

Discovery Data：包括通过 heartbeat discovery、network discovery、and Active Directory Domain Services discovery methods (System, User, and System Group) 获得的记录。

默认90天。

Delete Aged Inventory History (默认开启)

【似乎只和 hardware inventory 有关】

If the hardware inventory client agent is enabled at a site, or at any of its child sites, the Delete Aged Inventory History task deletes all client hardware inventory history data older than the number of days specified. The inventory history data is deleted from the Configuration Manager 2007 site database at the selected site only. After this task runs, only the current inventory data is left in the Configuration Manager 2007 site database. Site databases at other sites are not affected.

Defaults： Delete hardware inventory data older than 90 days; runs on Saturday between midnight and 5:00 A.M.

Delete Aged Software Metering Data (默认开启)

The minimum number of days that you can set to delete all software usage data is two. The maximum number is 255.

Defaults： Deletes software usage data older than five days; runs daily.

Delete Aged Software Metering Summary Data (默认开启)

【不清楚这里的 summary 到底是干了什么】

Delete Aged Status Messages (默认开启)

Defaults： Deletes status messages older than seven days; runs daily between midnight and 5:00 A.M.

Delete Inactive Client Discovery Data (默认关闭)

Clients 会被标识为 inactive 的两种情况：

1. When a client is flagged as obsolete it is also marked as inactive.

2. Clients can be marked inactive by the client health tool if the tool is configured to mark clients as inactive.

注意：The client health tool is not included in Configuration Manager Setup and must be downloaded and installed separately.

Delete Inactive Client Discovery Data 和 Delete Aged Discovery Data 比较相似，但是前者只针对 SCCM 2007 Client 操作，后者可以针对所有 discovered 的资源。

如果启用，其时间必须长于 Heartbeat 时间。This allows active clients to send a Heartbeat Discovery record to mark their client record as active so that this task does not delete them.

Defaults： Delete inactive client discovery data older than 90 days; Runs on Saturday between midnight and 5:00 A.M.. Not enabled by default.

Delete Obsolete Client Discovery Data (默认关闭)

一个新的记录会造成这个 Client 原有记录的obsolete。The newer record becomes the client’s current record, and the older record becomes obsolete.

如果开启这个任务，要保证其时间长于 heartbeat 时间。This allows clients to send Discovery Data Records (DDRs) so that the obsolete bit is set correctly.

Defaults：Deletes obsolete client discovery data older than seven days; runs on Saturday. This task is not enabled by default.

Monitor Keys (默认开启)

这个任务的作用是监视 database primary keys 的完整性。A primary key is a column or combination of columns that uniquely identify one row and distinguish it from any other row in a Microsoft SQL Server database table.

Defaults：Runs every Sunday, between midnight and 5:00 A.M.

Rebuild Indexes (默认开启)

作用：重建 SCCM 2007 site database 使用的 indexes。An index is a database structure created on a database table to speed up data retrieval. For example, searching an indexed column is often much faster than searching a column that is not indexed.

To improve performance, the Configuration Manager 2007 site database indexes are frequently updated to remain synchronized with the constantly changing data stored in the database. This task creates indexes on database columns that are at least 50 percent unique, drops indexes on columns that are less than 50 percent unique, and rebuilds all existing indexes that meet the data uniqueness criteria.

Defaults：Runs every Sunday, between midnight and 5:00 A.M.

Summarize Client Access License Weekly Usage Data (默认关闭)

Defaults：Not enabled. Runs on Saturday between midnight and 5:00 A.M.

Summarize Software Metering File Usage Data (默认开启)

作用：summarizes software metering file usage data from multiple records into one general record. This record provides summarized information about the application name, version, language, number of concurrent users, and hourly usage over a specified length of time. Data summarization helps compress the amount of data stored in the Configuration Manager 2007 site database.

This task can be used with the Summarize Software Metering Monthly Usage Data task to summarize software metering data, and to conserve space in the Configuration Manager 2007 site database.

Defaults：Runs daily, between midnight and 5:00 A.M.

Summarize Software Metering Monthly Usage Data (默认开启)

Defaults：Summarizes messages older than one month; runs daily, between midnight and 5:00 A.M.