Installing and Configuring SCCM 2016 – Stage 1 Prerequisites

For this post we will be installing and configuring SCCM 2016 which sounds straight forward but without a bit of planning and prior knowledge I can guarantee you that it will fail!

We will assume that you have already prepared a Windows 2016 Server and have installed SQL Server 2016. in advance of this work.

I would also highly recommend this book which has been a fantastic resource for me on my SCCM journey from knowing practically nothing about the subject to using SCCM to manage a large organisation.

The first stage is to prepare Active Directory, to do this first login to one of your domain controllers with an account that has domain and schema admin privileges.  You then need to be able to access the SCCM 2016 .iso media.

Navigate to the \SMSSetup\Bin\x64\ folder and execute Extadsch.exe.  You should see the following

You should now access the C:\ExtADSch.log file to verify that the schema extension was successful.

The next step is to create a new container under the Active Directory System Container.  Then for every Site Server computer account we need to assign Full Control permissions over the container.  In this example we are only installing a single Site Server so we only need to assign permissions for SCCM02.

Open the ADSI Edit snap in (by running adsiedit.msc) and open the Default naming context by right clicking at the top and clicking Connect to.  Find the CN=System object and right click on it and click New>Object.

Select ‘Container’ as the class type and click Next.

Type System Management as the value and click Next

Go back to ADSI Edit and right click on the System Management container you created.  Then click properties and go to the Security tab.

Add the Site Server computer account to the ACL and add Full Control permissions for it.  Then click Advanced.

Find the Site Server computer object and click edit.  Change the dropdown under ‘Applies to’ to ‘This object and all its descendent objects’.  Then keep clicking ok until all dialog boxes are closed.

That completes the work that needed doing in Active Directory.  Now we need to carry out the prerequisites on the SCCM 2016 server.

On the Site Server computer run the following PowerShell script

Import-module servermanager

Press Enter

Add-WindowsFeature Web-Common-Http,Web-Static-Content,Web-Default-Doc,Web-Dir-Browsing,Web-Http-Errors,Web-Http-Redirect,Web-Asp-Net,Web-Net-Ext,Web-ASP,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Http-Logging,Web-Log-Libraries,Web-Request-Monitor,Web-Http-Tracing,Web-Basic-Auth,Web-Windows-Auth,Web-Url-Auth,Web-Filtering,Web-IP-Security,Web-Stat-Compression,Web-Mgmt-Tools,Web-WMI,RDC,BITS -Restart

Press Enter

The roles should have installed successfully.

The next stage is to install the WDS role.  Open the Windows 2016 Server manager and Select Tools ‘Add Roles and Features’.  Select the local server and continue to Server Roles.  Select Windows Deployment Services and click Add features when the pop-up appears.  Continue to click Next until you reach the Install button and then press it.  Wait for the feature to be installed.

Once the WDS role has been installed open Windows Deployment Services (wdsmgmt.msc).  Right click on the SCCM 2016 server and click Configure Server, then click Next.

Select ‘Integrated with Active Directory’ as you will want to be able to automatically add machines to the domain after imaging.  Then click Next.

Select a location for the WDS content

The next option is down to your company’s preference.  Personally I leave this set to Respond to all client computers as I have a separate subnet/VLAN setup for machine imaging.  Wait for the wizard to complete, uncheck the ‘Add images to the server now’ check box and click Finish.

Next go back to the server manager and install the WSUS role by selecting it as below.  Then click the ‘Add Features’ button and click Next until you reach the update location configuration.

Enter a path to location in which you will store the WSUS content data and click Next then Install

Go back the server manager and acknowledge the alert to Launch Post-installation tasks.  This will take several minutes.

Then add your Site Server computer account and your SCCM 2016 domain admin account to the local administrators group on the SCCM 2016 server

Next download the Windows 10 Assessment and Deployment Kit from here and run the adksetup.exe file.  Choose where you want to install the files and click Next.  Then select your participation preferences and click Next.  Accept the licence agreement and click Next again

Select all the available features except for Windows Assessment Services, Microsoft SQL Server 2012 Express and Media eXperience Analyzer and click Install

Allow the installer to complete the installation

Once complete click Close

Finally run all available updates and make sure that the SCCM 2016 server is fully patched.  This should then conclude the prerequisites stage.

2 Replies to “Installing and Configuring SCCM 2016 – Stage 1 Prerequisites”

  1. Question: Is it possible to do this not having an account that has domain and schema admin privileges? I’m a SysAdmin that does not have admin to the domain controller. However, I do have admin & schema rights to a sub OU within the domain. Could I build this from that point and if so how would I get around not being a domain admin?

    1. Hi Shawn, unfortunately not – you would need to do this with a domain administrator account that has full access to the DC not just a sub OU. There may be a specific set of permissions you can configure to achieve this outside of a domain admin account but you would have to check with Microsoft as it would be a non-standard setup.

Leave a Reply

Your email address will not be published. Required fields are marked *