Plan for the SMS Provider for System Center Configuration Manager

 

Aplica-se A: System Center Configuration Manager (current branch)

To manage O System Center Configuration Manager, you use a Configuration Manager console which connects to an instance of the SMS Provider. By default, an SMS Provider installs on a central administration site or primary site, when the site installs.

This topic is divided into the following subjects:

The SMS Provider is a Windows Management Instrumentation (WMI) provider that assigns read and write access to the Gestor de configuração database at a site:

  • The SMS Admins group provides access to the SMS Provider. Gestor de configuração automatically creates this security group on the site server and on each SMS Provider computer.

  • Each central administration site and primary site require at least one SMS Provider. You can install additional providers as needed.

  • Secondary sites do not support the SMS Provider.

Each Gestor de configuração console, Resource Explorer, tools, and custom scripts use an SMS Provider so that Gestor de configuração administrative users can access information that is stored in the database. The SMS Provider does not interact with Gestor de configuração clients. When a Gestor de configuração console connects to a site, the Gestor de configuração console queries WMI on the site server to locate an instance of the SMS Provider to use.

The SMS Provider helps enforce Gestor de configuração security. It returns only the information that the administrative user who is running the Gestor de configuração console is authorized to view.

System_CAPS_ICON_important.jpg Importante


When each computer that holds an SMS Provider for a site is offline, Gestor de configuração consoles cannot connect to that site’s database.

For information about how to manage the SMS Provider, see Manage the SMS Provider in Modify your System Center Configuration Manager infrastructure.

Prerequisites to install the SMS Provider:

To support the SMS Provider:

  • The computer must be in a domain that has a two-way trust with the site server and the site database site systems.

  • The computer cannot have a site system role from a different site.

  • The computer cannot have an SMS Provider from any site.

  • The computer must run an operating system that is supported for a site server.

  • The computer must have at least 650 MB of free disk space to support the Windows Automated Deployment Kit (Windows ADK) components that are installed with the SMS Provider. For more information about Windows ADK and the SMS Provider, see Operating System Deployment requirements for the SMS Provider in this topic.

When you install a site, the installation automatically installs the first SMS Provider for the site. You can specify any of the following supported locations for the SMS Provider:

  • The site server computer

  • The site database computer

  • A server-class computer that does not hold an SMS Provider, or a site system role from a different site

To view the locations of each SMS Provider that is installed at a site, view the General tab of the site Properties dialog box.

Each SMS Provider supports simultaneous connections from multiple requests. The only limitations on these connections are the number of server connections that are available on the SMS Provider computer, and the available resources on the SMS Provider computer to service the connection requests.

After a site is installed, you can run Setup on the site server again to change the location of an existing SMS Provider, or to install additional SMS Providers at that site. You can install only one SMS Provider on a computer, and a computer cannot install an SMS Provider from more than one site.

Use the following to identify the advantages and disadvantages of installing an SMS Provider on each supported location:

Gestor de configuração site server

  • Advantages:

    • The SMS Provider does not use the system resources of the site database computer.

    • This location can provide better performance than an SMS Provider located on a computer other than the site server or site database computer.

  • Disadvantages:

    • The SMS Provider uses system and network resources that could be dedicated to site server operations.

SQL Server that is hosting the site database

  • Advantages:

    • The SMS Provider does not use site system resources on the site server.

    • This location can provide the best performance of the three locations, if sufficient server resources are available.

  • Disadvantages:

    • The SMS Provider uses system and network resources that could be dedicated to site database operations.

    • This location is not an option when the site database is hosted on a clustered instance of SQL Server.

Computer other than the site server or site database computer

  • Advantages:

    • SMS Provider does not use site server or site database computer resources.

    • This type of location lets you deploy additional SMS Providers to provide high availability for connections.

  • Disadvantages:

    • The SMS Provider performance might be reduced due to the additional network traffic that is required to coordinate with the site server and the site database computer.

    • This server must be always accessible to the site database computer and all computers with the Gestor de configuração console installed.

    • This location can use system resources that would otherwise be dedicated to other services.

The SMS Provider operates independently of the display language of the computer where it is installed.

When an administrative user or Gestor de configuração process requests data by using the SMS Provider, the SMS Provider attempts to return that data in a format that matches the operating system language of the requesting computer. The SMS Provider does not translate information from one language to another. Instead, when data is returned for display in the Gestor de configuração console, the display language of the data depends on the source of the object and type of storage.

When data for an object is stored in the database, the languages that will be available depend on the following:

  • Objects that Gestor de configuração creates are stored in the database by using support for multiple languages. The object is stored by using the languages that are configured at the site where the object is created when you run Setup. These objects are displayed in the Gestor de configuração console in the display language of the requesting computer, when that language is available for the object. If the object cannot be displayed in the display language of the requesting computer, it is displayed in the default language, which is English.

  • Objects that an administrative user creates are stored in the database by using the language that was used to create the object. These objects display in the Gestor de configuração console in this same language. They cannot be translated by the SMS Provider and do not have multiple language options.

After a site completes installation, you can install additional SMS Providers for the site. To install additional SMS Providers, run Gestor de configuração Setup on the site server. Consider installing additional SMS Providers when any of the following is true:

  • You will have a large number of administrative users that run a Gestor de configuração console and connect to a site at the same time.

  • You will use the Gestor de configuração SDK, or other products, that might introduce frequent calls to the SMS Provider.

  • You want to ensure high availability for the SMS Provider.

When multiple SMS Providers are installed at a site and a connection request is made, the site non-deterministically assigns each new connection request to use an installed SMS Provider. You cannot specify the SMS Provider location to use with a specific connection session.

System_CAPS_ICON_note.jpg Nota


Consider the advantages and disadvantages of each SMS Provider location and balance these considerations with the information that you cannot control which SMS Provider will be used for each new connection.

For example, when you first connect a Gestor de configuração console to a site, the connection queries WMI on the site server to non-deterministically identify an instance of the SMS Provider that the console will use. This specific instance of the SMS Provider remains in use by the Gestor de configuração console until the Gestor de configuração console session ends. If the session ends because the SMS Provider computer becomes unavailable on the network, when you reconnect the Gestor de configuração console the site will non-deterministically assign an SMS Provider computer to the new connection session. It is possible to be assigned to the same SMS Provider computer that is not available. If this occurs, you can attempt to reconnect the Gestor de configuração console until an available SMS Provider computer is assigned.

You use the SMS Admins group to provide administrative users access to the SMS Provider. The group is automatically created on the site server when the site installs, and on each computer that installs an SMS Provider. Additional information about the SMS Admins group:

  • When the computer is a member server, the SMS Admins group is created as a local group.

  • When the computer is a domain controller, the SMS Admins group is created as a domain local group.

  • When the SMS Provider is uninstalled from a computer, the SMS Admins group is not removed from the computer.

Before a user can make a successful connection to an SMS Provider, their user account must be a member of the SMS Admins group. Each administrative user that you configure in the Gestor de configuração console is automatically added to the SMS Admins group on each site server and to each SMS Provider computer in the hierarchy. When you delete an administrative user from the Gestor de configuração console, that user is removed from the SMS Admins group on each site server and on each SMS Provider computer in the hierarchy.

After a user makes a successful connection to the SMS Provider, role-based administration determines what Gestor de configuração resources that user can access or manage.

You can view and configure SMS Admins group rights and permissions by using the WMI Control MMC snap-in. By default, Everyone has Execute Methods, Provider Write, and Enable Account permissions. After a user connects to the SMS Provider, that user is granted access to data in the site database based on their role-based administrative security rights as defined in the Gestor de configuração console. The SMS Admins group is explicitly granted Enable Account and Remote Enable on the Root\SMS namespace.

System_CAPS_ICON_note.jpg Nota


Each administrative user who uses a remote Gestor de configuração console requires Remote Activation DCOM permissions on the site server computer and on the SMS Provider computer. Although you can grant these rights to any user or group, as best practice, grant them to the SMS Admins group to simplify administration. For more information, see the Configure DCOM permissions for remote Configuration Manager consoles section in the Modify your System Center Configuration Manager infrastructure topic.

The structure of the SMS Provider is defined by the WMI schema. Schema namespaces describe the location of Gestor de configuração data within the SMS Provider schema. The following table contains some of the common namespaces that are used by the SMS Provider.

NamespaceDescription
Root\SMS\site_<site code>The SMS Provider, which is extensively used by the Gestor de configuração console, Resource Explorer, Gestor de configuração tools, and scripts.
Root\SMS\SMS_ProviderLocationProvides the location of the SMS Provider computers for a site.
Root\CIMv2Location inventoried for WMI namespace information during hardware and software inventory.
Root\CCMGestor de configuração client configuration policies and client data.
root\CIMv2\SMSLocation of inventory reporting classes that are collected by the inventory client agent. These settings are compiled by clients during computer policy evaluation and are based on the client settings configuration for the computer.

The SMS Provider requires the following external dependency be installed on the computer that runs the SMS Provider to enable you to use operating system deployment task functions by using the Gestor de configuração console:

  • Windows Assessment and Deployment Kit 8.1

When you manage operating system deployments, the Windows ADK allows the SMS Provider to complete various tasks, which include the following:

  • View WIM file details

  • Add driver files to existing boot images

  • Create boot .ISO files

The Windows ADK installation can require up to 650 MB of free disk space on each computer that installs the SMS Provider. This high disk space requirement is necessary for Gestor de configuração to install the Windows PE boot images.

Design a hierarchy of sites for System Center Configuration Manager

Mostrar: