Blog Post

SCCM Passive Site Server Configuration Step-By-Step Guide

Dujon Walsham • May 28, 2019

High Availability for your SCCM!

Introduction

SCCM 1810 introduces the new “Passive Site Server” feature which allows us to have multiple site servers in which we can failover to in case of a disaster and to provide high availability.

Instead of having to perform a site recovery to get the primary site system back after a rebuild we can now simply switch the passive site server by promoting it to the primary site, as the passive site server will be using the same database as your active site server.

This guide will provide a step-by-step breakdown and also prerequisites on how to install, configure and failover to your primary site servers.

Prerequisites

Install Windows PE 1809

( Note: This needs to be performed on both Active and Passive site servers)

Due to the current releases of the latest ADK kits, 1903 is the latest for the Windows ADK and also latest Windows 10 release writing this guide.

ADK 1903 no longer contains Windows PE as an add-on, only on the 1809 version and previous releases so you will need to install the Windows PE 1809 first. Without this the prerequisite check will fail.

You can download the Windows ADK 1809 Win-PE here - https://go.microsoft.com/fwlink/?linkid=2087112

1.Double click the adksetup.exe

2. Select the features you want to add – Keep as default and click install to complete the installation

Install Windows ADK 1903

( Note: This needs to be performed on both Active and Passive site servers)

You can download the Windows ADK 1903 here - https://go.microsoft.com/fwlink/?linkid=2086042

1.Double click the adksetup.exe

2. Select the features you want to Add – Keep as default and click install to complete the installation

Remove Distribution Point Role

( Note: This needs to be performed on the Active Primary site.)

One of the prerequisites is to remove the distribution point role from the primary standalone site server. The reasoning for this is because the content library is controlled by the distribution point role and with this still installed you will be unable to relocate the content library to a network share, which is also another prerequisite for the passive site server.

1.Go to Administration – Site Configuration – Servers and Site System Roles

2.Highlight the Primary Site Server

3.Under site system roles right click the Distribution point role and click Remove Role

Move Content Library to File Share

Next we need to move the content library to a network file share in which both the Active and Passive roles can access.

( Note: If the Manage Content Library option is “greyed out” it will be because you haven’t removed the distribution point role)

1.Go to Administration – Site Configuration – Sites

2.In the home tab Click Site – Manage Content Library

3. Enter the remote location you will move the content library to and click next.

4.In the summary tab give it a refresh and you will be able to see the percentage progress bar. You can also view the distmgr.log to view its progress in real time.

Adding Site Server in Passive Mode Role

1.Right click Servers and Site Server Roles and click Create Site System Server

2. General: Select a server to use as a system - Enter the FQDN of the server you are going to add this role to and enter the details of the account with enough permissions to do the installation for it.

3. Proxy: Specify Internet proxy server Click next

4. System Role Selection: Specify roles for this server – Select the Site server in passive mode then click next

5. Site Server in Passive Mode : Specify the location of the Configuration Manager Installation source files and directory to use – Keep the default selected to copy the files over and add a directory to which the install will take place on the remote server.

6. Summary : The wizard will create a new site system server with the following settings – Click next to start.

7.Go to the Monitoring – Site Server Status to check the install. Clicking the Show Status button will display its progress.

Failover to Passive Site Server

1.Open the Configuration Manager console

2.Go to Administration – Site Configuration – Sites

3.Click the Nodes tab below

4.Right click the Passive Site Server and choose Promote to Active

5.Check the Monitoring – Site Server Status and click Show Status on the newly promoted Site Server to see the progress of the actual failover.

by D Walsham 13 Dec, 2021
Looking through the current SQL Server topology and how it affects our decision
by D Walsham 07 Oct, 2021
Introduction
by D Walsham 06 Oct, 2021
Introduction
by D Walsham 12 Aug, 2021
All the parts of the series we went into great detail about how we analyse an end to end solution and how we would design a solution in which would allow us to build endpoints without SCCM being a dependency. Whilst we did this, there is another scenario which we have not touched on yet, which is the hybrid scenarios. In a perfect world ideally you would have your Azure Active Directory within the cloud, every machine meets the recommended requirements for Windows 10, everything is imported into Intune/Autopilot and everyone is happy. But we know this isn't realistic in all cases. Many organisations cannot just simply up and go from on-premise into the cloud therefore the checkpoint here is of course getting into hybrid solutions such as; Co-Management Between Intune and SCCM Hybrid AD with Azure AD and On-Premise AD syncing together These things can play a very interesting part in how you would tackle this if you envisage the next step in the blueprint is to be in a position in which you can build and manage endpoints soley within Intune. With this final part of the series we will go in-depth in how the common hybrid setups look like and how we go about moving into the next step of being able to manage and build devices without SCCM.
by D Walsham 29 Jul, 2021
In continuation from the previous part where we had discussed how we create the "on site" piece of the solution, this was the part which would allow us to get our endpoints into a state in which they would essentially be ready to go through the Autopilot process. Which leaves our next piece of the puzzle, to begin the configuration of the actual backend side that resides within our Endpoint Management console. And you will see how everything ties up together to satisfy the full end to end process of getting an unknown (or known) device to proceed thorough the whole workflow to be finally managed by Intune without the aid of SCCM taking part in any of the prerequisites or preparation at hand.
by D Walsham 15 Jul, 2021
In this part we are now going to look into the technical step by step points on how we put everything together. In the previous part we spoke about the structure of how we would asses whether a machine was actually ready to be built with Autopilot or not with a build checklist process which would step through all areas which would cover an endpoints eligibility. Now with everything planned out we finally want to step into making things reality by putting everything together.
by D Walsham 02 Jul, 2021
When it comes to managing your endpoints in endpoint manager, one of the things you may be looking to do is to get all of your Intune registered machines to also be enrolled as Autopilot devices. Now we can of course just have the deployment profile deployed to all machines and then hit the "Convert targeted machines to autopilot" but this might not necessarily be feasible for every client. We may want to perform some due diligence first so we can at least understand what devices in Intune are not in Autopilot.
Show More
Share by: