MDM Deployment Checklists

Make sure that every server that is running MDM has the required hardware. Hardware requirements can vary, depending on how you set up your company MDM infrastructure.

MDM Server Administrator

[ ]

If you install WSUS on an MDM Enrollment Server, make sure that you install it on a separate Web site instead of the default Web site to avoid service conflicts between IIS and MDM Enrollment Web services.

MDM Server Administrator

[ ]

Install the prerequisite software for each server that is running MDM Device Management Server.

MDM Server Administrator

[ ]

Make sure that you can successfully connect through MDM Device Management Server to the server that is running Microsoft SQL Server®.

MDM Server Administrator

[ ]

Allocate required number of IP addresses for MDM Gateway Server to support the maximum number of concurrent managed device connections. Make sure that each server that is running MDM Gateway Server has a discrete, nonoverlapping IP address pool and that the IP address pool subnet does not intersect with the internal subnet on MDM Gateway Server.

Network Administrator

[ ]

Configure the network components that are in charge of network address translation (NAT) or proxy traffic to the Internet, if it is necessary, to perform network address translation or proxy traffic for the IP address pools of Windows Mobile powered devices. Since the address pool is private, you must use NAT for the address pool in order for managed devices to access the Internet.

Network Administrator

[ ]

Make sure that you open the required ports in the external firewall for Windows Mobile devices to reach each server that is running MDM Enrollment Server or MDM Gateway Server.

Network Administrator

[ ]

Define in your internal DNS server the internal FQDNs for each server that is running MDM Gateway Server. These FQDNs are not published externally.

MDM Server Administrator

Network Administrator

[ ]

Define in your internal DNS server the internal FQDN for MDM Enrollment Server or MDM Enrollment Server load balancer.

MDM Server Administrator

Network Administrator

[ ]

Install and configure load balancing for MDM Device Management Server. See MDM System Topologies.

MDM Server Administrator

Network Administrator

[ ]

Make sure that you can obtain certificates and certificate requests on and off MDM Gateway Server.

MDM Server Administrator

Network Administrator

Perimeter Network Administrator

[ ]

Make sure that Active Directory® meets MDM system requirements. See System Requirements for MDM Servers and Managed Devices.

Active Directory Administrator

[ ]

Make sure that a certification authority server is available that meets MDM requirements. See System Requirements for MDM Servers and Managed Devices.

Certificate Administrator

[ ]

Make sure that an SQL database is available that meets MDM requirements. See System Requirements for MDM Servers and Managed Devices.

Database Administrator

MDM Server Administrator

[ ]

Configure the MDM Active Directory domain by running ADConfig /Domain:<domain> for the domain in which you will install MDM. You must first run this configuration in the domain in which you will install MDM. This step requires administrator domain and network credentials.

Domain Administrator

[ ]

Enable the MDM certificate templates by running ADConfig /enabletemplates:<ca server>\<ca name>. This requires elevated domain and network credentials.

Certification Authority Credentials

Enterprise Administrator Credentials

[ ]

Add administrator users to the SCMDM2008ServerAdministrators group. This enables MDM Server Administrators to install MDM components and administer the installation for other users.

Domain Administrator

[ ]

Make sure that you grant permissions on the domain certification authority to revoke a managed device enrollment. If you configured it manually, you must do this by using the server that is running the certification authority.

Certification Authority Administrator

[ ]

Back up the IIS metabase for every server in which you are installing MDM. This includes MDM Device Management Server, MDM Enrollment Server, and MDM Gateway Server. For more information, see "Back Up and Restore the IIS Metabase (IIS 6.0)" at this Microsoft Web page: https://go.microsoft.com/fwlink/?LinkId=103605.

MDM Server Administrator

[ ]

Install MDM Enrollment Server. On the MDM installation CD, on the Setup menu, select Install and then select Enrollment Server. Make sure that you specify the load balancer FQDNs if you are using a load balancer.

Important   You must follow the steps in the MDM Deployment Guide to complete this task. This is required.

MDM Server Administrator. Must be a member of local Administrators group on the server.

[ ]

Install Administrator Tools. On the installation disc for MDM, select Administrator Tools. You can install MDM Administrator Tools on any domain-joined server that meets MDM prerequisites.

Important   You must follow the steps in the MDM Deployment Guide to complete this task. This is required.

Member of local Administrators group on the server. MDM Server Administrator not required

[ ]

The certificate chain and the root certificate for the certification authorities in your MDM system is securely transferred and imported to the appropriate store on the server that is running MDM Gateway Server. See the MDM Deployment Guide.

MDM Server Administrator

[ ]

Back up the IIS metabase for every server in which you want to install MDM. This includes MDM Device Management Server, MDM Enrollment Server, and MDM Gateway Server. For more information, see Back Up and Restore the IIS Metabase (IIS 6.0) at this Microsoft Web page: https://go.microsoft.com/fwlink/?LinkId=103605

MDM Server Administrator

[ ]

Make sure that the certificate for the newly created Enrollment Administration Web site for MDM Enrollment Server is valid. Obtain certificates for the site if it is necessary. See MDM Deployment Guide.

MDM Server Administrator

[ ]

Make sure that the certificate for the newly created Device Management Web site for MDM Device Management Server is valid. Obtain certificates for the site if it is necessary. See MDM Deployment Guide.

MDM Server Administrator

[ ]

Make sure that the certificate for the newly created Gateway Central Management (GCM) Web site for MDM Device Management Server is valid. Obtain certificates for the site if it is necessary. See MDM Deployment Guide.

MDM Server Administrator

[ ]

Make sure that the private key is associated with the certificate on the IIS instance of MDM Gateway Server. See Step 5e: Validating the Gateway Certificate in MDM Deployment Guide.

MDM Server Administrator

[ ]

From MDM Console, run the Add New Gateway Wizard for every server for which you want to install MDM Gateway Server. This creates an address pool to connect managed devices, configures DNS and WINS server settings, and enables remote MDM Gateway Server management.

MDM Server Administrator

[ ]