Posts about Cloud:

The Deployment Sessions-003: How to Connect Configuration Manager 2012 SP1 to Windows Intune to Enable Mobile Device Management Including Windows RT devices

System Center Configuration Manager 2012 SP1 can be connected to Windows Intune to enable mobile device management of Windows RT, Windows Phone, iOS and Android devices. This is a great solution because these types of devices expect an “always on” connection to the Internet and Windows Intune provides that “always on” management layer since it’s a public cloud service. In this video I connect Windows Intune to Configuration Manager and enrol a Windows RT device with our Windows Intune account. Doing so provides a company portal enabling our users to connect their own devices and download software prescribed by the IT department. Skip to 12 minutes if you just want to see the Windows RT experience.

How to Connect Configuration Manager 2012 SP1 to Windows Intune to Enable Mobile Device Management Including Windows RT devices

This is a tricky area, so here’s some instructions to help you along

I can’t stress enough how important it is to do things in this order, if you don’t you’ll end up having to wait up to 72 hours for things to work through the various components to undo changes (which I did although only 25 minutes but it depends on the size of your directory).

 

First thing’s first you will need to download System Center Configuration Manager 2012 SP1 and have Windows Server 2012 to run it on, then setup your lab, once you have you can follow this video and these instructions…

    1. Prepare Your Active Directory
      1. Make sure users have publically accessible UPN in AD DS
      2. Change the UPN for users who will use Windows Intune to match the public DNS

    1. Setup the Windows Intune Subscription in Configuration Manager 2012 SP1
      1. In the Administration work space select Windows Intune Subscriptions and then Create Windows Intune Subscription from the ribbon.
      2. Signup for a new Intune trial account
      3. Wait for the email
      4. Select the types of devices to manage – be sure to include Windows RT
      5. Enter a collection that has the users in that can enrol devices – I use All users and alter this later

  • Provide the certificate used to sign LOB apps
  • Enter Sideload keys – these are required for Windows RT devices

 

  1. Add records to Public DNS
      1. Go to account.manage.microsoft.com
      2. Select Domains from the left hand side
      3. Add a domain that you own the for verification add the TXT record to your public DNS to prove ownership Note this can take a while
      4. Create public DNS Alias to point EnterpriseEnrollment.<company domain name>.<tld>to manage.microsoft.com – this will allow users to enrol devices with their email address
  2. Deploy DirSync
    1. Prepare for DirSync, build a Windows Server 2012 server with the .Net 3.5 feature
    2. Download and run the deployment readiness tool
    3. Prepare Intune for DirSync
      1. Go to account.manage.microsoft.com
      2. Go to Users > Active Directory Synchronization Setup
      3. Download and install DirSync
      4. Setup Synchronization
      5. Check Synchronization by making sure users now appear in the Users view at account.manage.microsoft.com
      6. Enable users for Synchronization
      7. Enable users for Windows Intune
  3. Enable Windows Intune for the User you want to allow to enrol in Windows Intune
    1. Ensure the users password has been changed – users cannot enrol devices using the default password they are issued upon account creation
  4. Add the Windows Intune Connector Site System Role
  5. On the RT device go to Company Apps
    1. Log in with the users email address and password
    2. Install the portal
    3. Start the portal
    4. Sign into the Company Portal App

The Deployment Sessions 003: How to Connect Configuration Manager 2012 SP1 to Windows Intune to Enable Mobile Device Management Including Windows RT devices

Build and Capture Error codes with System Centre 2012 Configuration Manager

I’m currently spending some time build a test lab with System Center 2012 Configuration Manager Service Pack 1 (CM12 or SCCM 2012 if you like to shorten it) and during a build and came across a couple of errors (0×80070002 and  during my first build and capture task sequence.  I thought I’d just quickly document the error codes and fixes.

0×80070002

Build and Capture Error codes with System Centre 2012 Configuration Manager

This one is due to the credentials being used to access the DP being incorrect – I’d got the password wrong!

To resolve this go to Administration, select Site Configuration > Sites and select the site you’re deploying from. Right click the site and select Configure Site Components > Software Distribution. Select the Network Access Account tab and click the Set… button to specify the account used for network access. Select New Account and correct the details for your network access account. Don’t forget to verify the connection.

Build and Capture Error codes with System Centre 2012 Configuration Manager

0×80070002

Build and Capture Error codes with System Centre 2012 Configuration Manager

This error was much harder to find, but I spotted a post that referred to problems capturing a VM, it then occurred to me that you need a minimum of 1024mb of RAM on the machine you’re capturing. For me this was a quick dive into Hyper-V settings and upping the minimum ram to 1024 mb from 512mb. You’ll need a minimum of 1024 even if you have Dynamic Memory enabled for the machine as WinPE doesn’t do Dynamic Memory.

Build and Capture Error codes with System Centre 2012 Configuration Manager

Evaluate This–Windows Server 2012 on Windows Azure IaaS

If you’re looking for an easy way to start evaluating Windows Server 2012 this couldn’t really be any easier, quicker, cheaper or faster (if you have 30 mins you can do this). Windows Azure’s IaaS features make it is as simple as it could possibly be to setup a test lab without the use of any hardware but with the full features of the OS and the platform. It’s also a really good way to start getting a handle on Windows Azure’s IaaS features and to start understanding how they come together.

Over the festive period I had some time to play with some new features of some of our technology and to make some videos, in this first video I’ll take you through the simple signup process for Windows Azure. It’s free for 90 days and has a £0 spending limit set so you won’t get charged (unless you remove that limit). Next we’ll setup a private network on Windows Azure to connect our virtual machines, then we’ll use PowerShell to connect to Azure and provision our first VM.  Finally in my next post I’ll show you how to setup your first Active Directory Domain Controller in your first AD Forest in Windows Server 2012.

You won’t need much in the way of resources for this, you’ll just need:

Evaluate This–Windows Server 2012 on Windows Azure IaaS

Decks to download from UK TechDays Online

Last week Andrew and I presented a number of sessions at TechDays Online in the UK and we received numerous requests during the day to publish the decks so that people can peruse them at their leisure.  Well those decks are now here available for you to click through and download if you so wish.

Windows Server 2012

Windows 8

Private Cloud

Decks to download from UK TechDays Online

TechDays Online

In a couple of weeks time Andrew, Planky and I will be hosting a slew of experts for TechDays Online.  If you’ve been unable to get to our Windows Server 2012 camps you’ll find some really great walkthroughs at TechDays Online.  It’s not only Windows Server 2012 we’ll be covering though, we have Windows 8, Azure and System Center half days sessions that you should sign up for.

It’s free and online and signup is here:

Signup for Day 1

Signup for Day 2

TechDays Online

Is your organisation storing more than ever before? Dedup might be the answer.

We all want to store more information. Be it our ever growing email archive, our collection of family photos, or our customer invoices the information that we and our businesses need to store is an ever increasing volume. The amount of storage available to you or your organisation may of course not quite be able to grow at such a rate because while disk is an every cheaper resource, it’s still not free. There are many options increasing your storage capability, off premises archiving to cloud storage for example but that can mean moving the cost elsewhere (bandwidth for example). A better option could be to decrease what you need to store.

Of course I’m not suggesting that you should go around deleting a whole bunch of user’s files, which would be bad and probably result in a P45 saying hello. You could ask your users to delete their own files which some may do, many however will take the view that their time is more important than the storage costs. Some would also be pig headed and ask why, when a disk costs £70 for 2TB, they should have to delete their stuff. Many will also be completely clueless as to their disk usage.

Windows Server 2012 comes to your rescue with a great feature called Deduplification (dedup) which works some magic and actually cuts down the amount of data you need to store without losing any of the data. Frankly it’s a little bit like magic.

Essentially what Dedup does is looks at what’s stored in a volume and looks for matches between chunks of data. When it spots two chunks that are identically it removes the second copy of that chunk freeing up the disk space that was consumed by that duplicate chunk of data and pointing any disk requests for that data chunk to the other copy of the chunk. A simplified example will help understanding, don’t get too hung up on the detail here – like the fact we’re using words, those are just an abstraction for illustration.

Example:

Your disk stores words, the words HELLO MARY HOW ARE YOU and HELLO DAVID HOW ARE YOU TODAY. All we really need to store is what’s unique, everything else is just duplication, so we store HELLO MARY HOW ARE YOU DAVID TODAY. Doing that saves us the second HELLO, HOW, ARE and YOU, or 11 letters, or about 38% of the storage originally needed for the 37 letters of the original sentences.

Dedup doesn’t however look at your data and workout what words are duplicated over and over, that would be inefficient as you store other data in many formats that might not be actual words. However all data is stored in bits on your disks, so Dedup looks at the bits on a disk but of course looking at bits is too granular (they are all 1 and 0 obviously) so context would be lost. Dedup instead looks at chunks of data that have identical patters. When a chunk is spotted with an identical pattern it is considered a duplicate and deduplicated. What is very clever though is how dedup decides on those chunks by looking how to make the most efficient savings and changing the size of the chunks of deduplication. Another example will help, again with words.

Example 2:

Your disk stores words, the words HELLO MARY HOW ARE YOU TODAY and HELLO MARY HOW ARE YOUR CHILDREN TODAY. This time the deduplicated disk only stores HELLO MARY HOW ARE YOU TODAY R CHILDREN. In this second example we don’t need to store the word YOUR even though it’s a new word because it still matches a smaller chunk for the most part.

One of the coolest things about dedup is that it works at this lower than the file, higher than the bits level so it can dudpe across file types, across file boundaries and any physical disk boundaries such as disk block size. This means that for example should an Excel file contain the word CONTOSO and that exact same word is in a TEXT file the two could theoretically duplicate against each other.

We’ve been introducing this topic at our IT camps and getting the audience to test their own file servers using the DDPEVAL.EXE tool. You can get this tool from any Windows Server 2012 computer with Dedup enabled and run it, non-intrusively, on any volume or share to evaluate how much space dedudp will save you (just follow up to step 2 below and you’ll find the exe in Windowssystem32). Attendees are seeing between 22% and 75% potential savings on profile, development and file server shares.

If you’re sat there reading this thinking about data integrity then you get extra marks. If you’re deduping you do put extra reliance on the one copy of the data that you do have. For that reason dedup will only use one deduplicated chunk 1000 times, then the 1001st occurrence of the same chunk is spotted it leaves it and dedups against that chunk for the subsequent 1000 duplicates found. Furthermore the deduped chunk is maintained by re-writing the chunk when a process writes any data that contains that chunk. This along with other controls maintains consistency.

If you’re using BranchCache you should also be jolly happy because the two technologies work together to reduce duplication in branch environments too.

Enabling Dedup is a case of adding the feature in to Windows Server 2012, which it’s self is easy to do.

1. From Server Manager select Manage > Add Roles and Features then select the server you want to add Dedup to.

2. On the Server Roles wizard page expand File and Storage Services > Files and iSCSI Services and check Data Deduplication then complete the wizard to install the feature.

3. Select the File and Storage Services node in server manager.

4. Select Volumes and locate the server you enabled deduplication on (hint – if you don’t see it you need to add the server into Server Manager). Then select the volume on the server you wish to dedup.

5. Right click the volume and select Configure Data Deduplication.

6. Check Enable data deduplication. From here you need to select a minimum age for files to be duduplicated, this prevents files that are changing too frequently from needless deduplication saving server resources. Enter any particular file types to skip, VHDs are skipped for example because they are open for long periods, you can also specify specifc folders to include or exclude and specify a schedule for running dedup jobs. Click OK to apply the changes.

That’s all there is to it to enable deduplication, the first dedup job will run when the schedule allows. There is much more that can be done with PowerShell, but by way of a teaser the following commands are useful:

Get-dedupjob Shows the current dedup job status if a job is running.

Get-dedupstatus Shows how much deduplication has occurred – this will show the savings.

Start-dedupjob Starts immediate deduplicaiton.

Dedup is a great tool in the arsenal of any IT guy struggling with data storage costs, give it a try using DDPEVAL and see if this one feature alone is going to make Windows Server 2012 right for you, it just might!

If you want more technical information on Data Dedup then checkout Data Deduplication TechNet library and download the Windows Server 2012 Evaluation.

Is your organisation storing more than ever before? Dedup might be the answer.

Data Centre World #dcwexpo

Yesterday Andrew and I had some fun walking around Data Centre World Expo at Olympia in London.  What we were looking at were hundreds of stands of the kit that you use to run a data centre, the plant, the cooling, flooring the wiring all the really tangible stuff.  We had a 35 minute slot in which to talk about the way that Microsoft does data centres and how big we go.  A couple of folks asked us to post the deck we used and the details that we shared along with places to find out more.  Here you go….

 

Linkage

We mentioned MVA which is the place for FREE training for your IT People in our cloud stuff

…and we mentioned our blogs, but you’re there now, so I’d also suggest checking out this post from a short while ago on Microsoft Data Centre security.

Data Centre World #dcwexpo

Cloud Adoption in SMEs

One of our UK TechNet readers, Christopher Latham, wrote to me a couple of weeks ago looking for help with some research he’s undertaking for his MSc Dissertation and the subject “ Cloud Computing adoption in SMEs” is something that I’m really interested…(read more)Cloud Adoption in SMEs