SCCM OMS Connector Setup Log Analytics Connector

0
SCCM OMS Connector SEN Diagram

In this post, you will see how to integrate SCCM and OMS to get the advantages of intelligent cloud attached environment. Let’s take a look at the SCCM OMS Connector Setup.

 Why – SCCM OMS Connector?

Windows 10 and Office 355 pro plus upgrades are happening at a fast pace. You normally go through a manual pilot process selecting pilot users, pilot devices, etc. But, the manual process is not very effective and not fast enough to cope up with the fast pace upgrade process. 

Use SCCM OMS Connector to connect Configuration Manager to Log Analytics in OMS to sync device collection data. This makes data from your Configuration Manager hierarchy available in OMS. But I’m not very sure how relevant or value-add of OMS connector after the production release of SCCM Desktop Analytics connector. 

Microsoft is coming up with data-driven analytics to make your life easy selecting pilot users, devices, and applications. This solution is called Desktop Analytics. The Desktop Analytics (extension to Windows Analytics) would help you to create pilot and production rings. With Desktop Analytics connector, you can integrate your SCCM Windows devices with desktop analytics.

OMS Connector = Log Analytics Connector

Prerequisites of SCCM OMS

In this section, you will see what the prerequisites to connect SCCM with OMS are.

  • Latest SCCM Version (Stay Current)
  • Access to create Azure Web apps (or Need help from the team)
  • Azure Subscription (Need some help from Azure Subscription Admins)
  • Log Analytics workspace (Need Some more help to get contributor access)
  • Install Log Analytics or SCCM OMS connector on the server where Service Connection Point is online
  • Install Azure Log Analytics Agent (on the same server as mentioned above) – I’m not covering this topic in the post. More details here.
SCCM OMS Connector SEN Diagram
Sample Diagram

Create Azure Web App for SCCM OMS Connector Authentication

Yes, you need to create Azure web apps to authenticate SCCM OMS connector with Azure Log Analytics (OMS) workspace. This Azure app helps to avoid repeated use of service account. And this Azure Web app authentication is more secure. 

The following are the steps which will help you to create the Azure web app for SCCM OMS connector authentication. 

  1. Sign in to your Azure Account through the Azure portal
  2. Select Azure Active Directory
  3. Select App registrations (Preview)
  4. Click on New Registration
  5. Enter a useful name for the Azure App
  6. Select Accounts in the organizational directory only (default option) from Supported account types
  7. Select Web and provide a URL in a valid format (NO Need to get a working URL https//a.com will work) from Redirect URI
  8. Click on Register to create the app
  9. Click on App registrations (NOT Preview)  and open the created Azure App for the next set of actions explained in the below section. 
SCCM OMS Connector
SCCM OMS Connector Azure App Creation

Get the Azure App Secret Key, APP ID, and Client ID 

The following steps will give you the details Azure App secret key, application ID, or Client ID. These details are needed to import
Azure authentication application
in SCCM OMS connector wizard.  

  • Sign in to your Azure Account through the Azure portal
  • Select Azure Active Directory
  • Select App Registrations
  • Copy the Application ID (This ID is the client ID which you need in SCCM console)
  • Select the Registered App and click Settings
  • Select Keys tab from Settings
  • Provide a description called “Key Description” = Any Name, Expires = Duration “1 Year”, and click on SAVE button from Passwords
  • Copy Secret Key (this key is required for Secret Key used in SCCM)
SCCM OMS Connector Azure Web App
Azure Web Application Secret Key

Create Azure Log Analytics Workspace 

When you already have OMS Azure log analytics workspace for your subscription, you can skip this step. If you don’t have an existing OMS workspace, please follow the below steps (SCCM OMS Connector).

  • Sign in to your Azure Account through the Azure portal
  • Select Log Analytics
  • Click +Add button
  • Click on Create New from Log Analytics workspace
  • Enter a useful name for the new OMS Workplace
  • Select your Subscription details
  • Create a new Resource Group or Use the existing Resource Group
  • Select the appropriate location
  • Select the appropriate Pricing tier – 1. Free, 2. Per Node (OMS), and 3. Per GB (Standalone)
  • Click OK and OK to complete OMS Workspace
SCCM OMS Connector Log Analytics
Log Analytics Workspace

Provide Contributor Access to Azure Web Application

To access Log analytics workspace and other related resource groups in your subscription, you will need to provide Contributor access to Azure web application which you have created in the above section. The following step will help you to provide Contributor access to Azure App (SCCM OMS Connector).

  • Sign in to your Azure Account through the Azure portal
  • Select Subscription tab
  • Select Access Control (IAM) tab from subscription blade
  • Click on +Add Role Assignment to bring up Add Role assignment blade
  • Select “Contributorrole from Role assignment blade
  • Select Azure AD user, group, or service principal from “Assign Access to
  • Select the Azure Web Application which we created in the above section to provide access
  • Make sure the Azure Web App is listed under Selected Members
  • Click Save to provide appropriate access to
SCCM OMS Connector IAM Contributor access
Azure Access Control – Contributor access

Create SCCM OMS Connector

As I mentioned in the prerequisite section above, you must install SCCM OMS connector on a service connection point configured for online mode. The following steps will help you complete the OMS connector setup.

SCCM OMS Connector Configure Azure Services
SCCM OMS Connector Configure Azure Services
  • Navigate to SCCM console – AdministrationCloud ServicesAzure Services
  • On the Configure Azure Services page – Enter the name SCCM OMS Connector and Description
  • Select OMS Connector and click on Next button
  • Select Azure Public cloud from App Properties page
  • Click on the Import button from the Web application to import an Azure web application which we created in the above section
  • From Import App windows, fill out all the below details which you collected from the above sections –
    • Azure AD Tenant Name
    • Azure AD Tenant ID
    • Application Name
    • Client ID
    • Secret Key
    • Secret Key Expiry – Select future date
    • App ID URI
    • Click on Verify button to enable the OK button. Once the Azure web App verified the permissions in Azure Log Analytics workspace the OK button will be enabled
  • Click on NEXT button to go the Collections page of SCCM OMS connector wizard
SCCM OMS Connector Import Apps
SCCM OMS Connector – Import Apps
  • All the fields on Configure OMS connector (Collection) page will be populated automatically populated
    • Azure Subscription
    • Azure Resource Group – Select the correct resource group from the drop down menu to get the correct Operations Management Suite (OMS) workspace
    • Select device collections that OMS can get data for:
      • Click on Add to select the device collections
  • Click on Next button to go to the next page of SCCM OMS connector Wizard
  • Click on Next and Close button to finish the SCCM OMS connector configuration
  • The last step is importing the SCCM collections to OMS. More details here.
SCCM OMS Connector - Collection Settings
SCCM OMS Connector – Collection Settings

Resources

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.