Deploying SCCM 2012r2: configuration discovery

Sccm2012r2 identifies the computers and user resources that can be managed using Configuration Manager. It can also find the network infrastructure in the environment. Discovery creates a discovery data record (DDR) for each detected object and stores this information in the Configuration Manager database.

After a successful resource discovery, the information about the resource will be stored in a file, which is called the discovery data record (DDR ). In turn, DDR will be processed by the Site Server and input to the Configuration Manager database. Then, database replication will replicate the DDR for all sites in this database. Replication makes the discovery data available in each site in the hierarchy, regardless of the location where the discovery or processing data is located.

We can use discovery information to create custom queries and collections to logically group resources for management tasks such as assigning custom client settings and software deployment. You must discover the computer before using the client to request installation of the Configuration Manager client on the device.

Sccm2012r2 introduced the following changes for discovery:
1. The master site or the management center site processes each detected data record only once and enters it into the database. Then, the discovery data record is deleted without any other processing.
2. The system uses cm database replication to share the discovery information that is input to the database of a site with each site in the hierarchy.
3. Active Directory forest shows a new discovery method. This method can discover subnets and ad sites and add them to hierarchical boundaries.
4. the Active Directory System group has been deleted.
5. Active Directory Security Group discovery has been renamed to Active Directory group discovery. Weapons will find the group members of the resource.
6. Active Directory System discovery and Active Directory group discovery support filtering out expired computer records from discovery options.
7. Active Directory systems, users, and groups support incremental discovery of Active Directory. Incremental discovery is improved from cm2007sp3. It can detect the time when computers or users are added or deleted in the group.

Method of discovery in Configuration Manager:
Before enabling the Discovery Method for cm, make sure that you understand the objects that can be found for each issue. It is found that a large amount of network traffic may be generated, and the resulting DDR may cause a large amount of CPU resources to be used during processing, therefore, plan to use only the discovery solutions that meet the target.

Discovery Method	Enabled by default	Account found during running	More information
Active Directory forest discovery	No	Active Directory Forest Found account or site server computer account	1. The ad site and subnet can be discovered, and then the CM boundary can be created for each site and subnet from the forest configured for the Discovery. When the ad forest finds that the identity is assigned to the ad site, the CM will convert the Super network to the IP address range boundary. 2. Support User-Defined accounts to discover resources in each forest 3. When "Publish to forest" is enabled and the specified account has permission for the forest, the ad domain service can be published to the forest.
Active Directory System discovery	No	Active Directory System found account or site server computer account	Find a computer from a specified location in the ad domain service
Active Directory user discovery	No	Active Directory user found account or site server computer account	User Account discovery from specified location in the ad domain service
Active Directory group discovery	No	Active Directory group found account or site server computer account	Local, global, and general security groups, membership in these groups, and membership in the distribution group are found from a specified location in the ad domain service. The distribution group is not found in the form of group resources.
Detection Signal discovery	Yes	Client Computer Account	1. The active cm client is used to update its discovery records in the database. 2. Detection Signal discovery can force Computer discovery in the form of new resource records, or you can re-enter the database records of computers deleted from the database.
Network discovery	No	Computer Account of the Site Server	1. Search for network devices with IP addresses in the network infrastructure. 2. You can find devices that may not be found by other methods. This includes printers, routers, and bridges.

This article is from the IT achievement future blog, please be sure to keep this source http://lhcheng.blog.51cto.com/5525717/1545210

Deploying SCCM 2012r2: configuration discovery