Skip to content

Installing the Console, Setting up NSS/NSC (Collections) and adding Devices to a Collection

We will divide this into 3 sub parts:

  • Raising the Access Request
  • Installing the MCM console
  • Creating a Device Collection (a.k.a NSC)
  • Add devices to the collection

Raising the Access Request

Get in touch with the Windows Client Support to create and configure your Activity in MCM

Installing the MCM console

Run the following command to install the MCM console in an elevated powershell terminal.

Start-Process "\\cern.ch\dfs\Applications\Microsoft\MECM\Installers\ConsoleSetup\ConsoleSetup.exe" -ArgumentList "DefaultSiteServerName=cernmecm01.cern.ch" -Wait

Create a Device Collection (NSS/NSC)

Prerequisite: - A security group in AD containing the list of machines the person will have access to - We already have such groups from CMF which can be used temporarily, but will eventually need to be migrated to be independent - Check instructions on creating such an AD group here (The Last Step)

  1. Open the Console and go to Assets and Compliance, expand Device Collections

  2. Right-click on the Admin folder, and choose Create Device Collection

    dffc1db96d3d4bb27510c29ca9aecb31.png

  3. Provide the name of the collection, conventionally to be named as "Activity (NSS)"

  4. Choose All Systems as the Limiting Collection, then click Next

    edda26dcf9ea651d5dbf973c3b91d7e9.png

  5. In the membership rules, add a new Query rule as follows:

    • Name: "Activity (All)"

    • Edit Query statement, Show Query Language and set query as (replace MYGROUP with the name of the AD group):

      select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client 
from SMS_R_System 
where SMS_R_System.SecurityGroupName like "%MYGROUP"

    TODO: Check incremental / full membership update rules.

    af9c02b40b40d4e6e9d116b27a2d7188.png

  6. Click OK, then Next, then Close.

Alternatively you may watch the video tutorial here: https://cernbox.cern.ch/s/gp55NAKQhFUgtV1

Add Devices to a Collection

  1. Open the Properties of the Collection in question in MECM, then choose the Membership Rules tab, then Edit the Query.
  2. Find the group name shown in the SecurityGroupName like statement
  3. Connect to cerntsadm with your admin account
  4. Open dsa (Active Directory User and Computers)

  5. Browse to the container where all MECM NSS groups are stored: Workgroups > MECM

    • Note: this location may change later on

  6. Find the group from the step above and open it, then select Object Types and tick the checkbox for Computers

  7. Search for and add further computers as desired

Warning

Before this group can be used in MECM for creating an NSS, the discovery for the group needs to be performed. A full resync can be manually performed from Administration > Hierarchy Configuration > Discovery Methods > Active Directory Group Discovery. Please use the manual full sync sparingly.

Alternatively you may watch the video tutorial here: https://cernbox.cern.ch/s/JEX07F11UXUymzV