Vmware workstation安装部署微软SCCM服务系统的操作指南

# 安装AD域服务
Install-WindowsFeature AD-Domain-Services -IncludeManagementTools
# 创建新林并配置域
Install-ADDSForest -DomainName "contoso.com" -DomainNetbiosName "CONTOSO" -InstallDNS -Force
# 验证AD状态
Get-ADDomain | Select-Object DNSRoot, Forest, DomainMode

# 安装必要组件
Install-WindowsFeature BITS, Web-Default-Doc, Web-Asp-Net, Web-Windows-Auth
# 扩展AD架构（需SCCM安装介质）
.\extadsch.exe /q
# 创建System Management容器并授权
$Container = "CN=System Management,CN=System,DC=contoso,DC=com"
New-ADObject -Type Container -Name "System Management" -Path "CN=System,CN=Services,CN=Configuration,DC=contoso,DC=com"
dsacls $Container /G "CONTOSO\SCCM_Admin:RPWP;computer"

New-CMDistributionPoint -SiteSystemServerName SCCM01.contoso.com -DriveSpace 100 -MinimumFreeSpace 50 -PrimaryContentLibraryLocation "D:\ContentLibrary"

# 生成客户端安装包
New-CMClientDeploymentPackage -Name "Default Client Package" -Path \\SCCM01\Packages
# 手动安装代理（客户端执行）
\\SCCM01\SMS_CCR\ccmsetup.exe /mp:SCCM01.contoso.com SMSSITECODE=PS1

# 创建应用程序包
New-CMApplication -Name "Google Chrome" -SoftwareVersion 110.0 -Publisher Google
Add-CMDeploymentType -ApplicationName "Google Chrome" -ScriptInstaller -InstallCommand "chrome_installer.exe /silent /install"
# 部署到测试集合
New-CMDeviceCollection -Name "Test Clients" -LimitingCollectionName "All Systems"
Start-CMApplicationDeployment -Name "Google Chrome" -CollectionName "Test Clients" -DeployAction Install -UserNotification DisplayAll

# 导入Windows 11镜像
Import-CMOperatingSystemImage -Path "\\NAS\OSImages\Win11_22H2.wim" -Name "Windows 11 22H2"
# 创建任务序列
New-CMTaskSequence -Name "Win11 Bare Metal" -BootImage "WinPE 11" -OperatingSystemImage "Windows 11 22H2"
# 分发到分发点
Start-CMContentDistribution -TaskSequenceName "Win11 Bare Metal" -DistributionPointGroupName "All DPs"

# 同步软件更新
Sync-CMSoftwareUpdate -FullSync
# 创建自动部署规则
New-CMSoftwareUpdateAutoDeploymentRule -Name "Monthly Security Patches" -CollectionName "All Workstations" -DeploymentTemplateName "Required Installation"

# 启用BIOS序列号收集
Set-CMClientSetting -Name "Default Client Settings" -HardwareInventoryClass @("Win32_BIOS")
# 自定义WMI类
New-CMWmiClass -Namespace root\cimv2 -ClassName Custom_HardwareInfo

# 监控分发点状态
Get-CMDistributionStatus -DistributionPointName DP01 | Where-Object { $_.Status -ne "Success" }
# SQL性能计数器
Add-Counter -Counter "\SQLServer:Buffer Manager\Page life expectancy" -SampleInterval 5

# SCCM数据库备份
New-CMSiteBackup -Path \\BackupNAS\SCCM_Backup -BackupOption Full -IncludeSiteDatabase
# 内容库备份（Robocopy）
robocopy D:\ContentLibrary \\BackupNAS\ContentLib /MIR /R:5 /W:15 /NP /LOG:D:\ContentBackup.log
# 客户端策略备份
Export-CMClientPolicy -Path \\BackupNAS\ClientPolicies\CM_Policies_$(Get-Date -Format yyyyMMdd).xml

# 创建应用一致性快照（需VMware Tools）
vmrun -T ws snapshot "[SCCM01.vmx]" "Pre_Monthly_Update" quiesce
# 恢复快照
vmrun -T ws revertToSnapshot "[SCCM01.vmx]" "Baseline_Snapshot"
vmrun -T ws start "[SCCM01.vmx]"

# RBAC角色管理
New-CMSecurityRole -Name "Helpdesk Operator" -Description "Limited Access" -Permission Read,Delegate
# PKI证书集成
Set-CMCertificateRegistrationPoint -SiteCode PS1 -Thumbprint "A1B2C3..." -WebServerName SCCM01.contoso.com

-- 索引维护
ALTER INDEX ALL ON CM_PS1.dbo.vSMS_DistributionDPStatus REBUILD
-- 内存配置
EXEC sys.sp_configure N'max server memory (MB)', 32768
RECONFIGURE

Set-CMCoManagement -Enable AutomaticEnrollment -Workloads CompliancePolicy,DeviceConfiguration

New-CMAzureService -AzureEnvironment Commercial -SubscriptionId "xxxx-xxxx" -TenantId "yyyy-yyyy"