SCCM Preferred Management Points | Selection Criteria | ConfigMgr

2
SCCM Preferred Management Points

A quick post about SCCM Preferred Management Points options and how is it useful in many scenarios. A similar discussion came into “How to Manage Devices Live Digital Events.” In this post, let’s see how the ConfigMgr Preferred MP setting helps the client to contact the MPs in the particular boundary group.

Related PostConfigMgr DP Selection Criteria Content Source Location Priority List

Introduction – SCCM Preferred Management Points

The following two paragraphs were from the blog “FIX SCCM Management Point Rotation Issue with AllowedMPs” registry entry for SCCM 2012 and the current branch versions until the preferred MP concept was introduced in SCCM 1802.

SCCM MP rotation issue has been a big headache for loads of folks like me. SCCM comes with a workaround for the Management Point Rotation issue.  More details about the MP rotation issue in SCCM “Workaround for Untrusted Forest SCCM 2012 MP Rotation Issue“.

Microsoft introduced a registry key called “AllowedMPs” with this registry key you can force the client to communicate with specific MP which you’ve mentioned in the value of the registry key “AllowedMPs“.

Management Point Selection Criteria

The following are the SCCM Management Point Selection criteria as per Microsoft document. SCCM Preferred Management Points setting can significantly change the MP selection criteria from client side.

NOTE! – This is applicable only if you have NOT enabled the “Client prefer to use Management Points specified in boundary group” for preferred Management point option.

  1. Proxy MP if the client is part of a secondary server
    1. HTTPS capable in a trusted or local forest
    2. HTTPS capable NOT in a trusted or local forest
    3. HTTP capable in a trusted or local forest
    4. HTTP capable NOT in a trusted or local forest
  2. Local MP (within boundary groups if the client is part of multiple boundary groups all boundary groups will be considered as local).
    1. HTTPS capable in a trusted or local forest
    2. HTTPS capable NOT in a trusted or local forest
    3. HTTP capable in a trusted or local forest
    4. HTTP capable NOT in a trusted or local forest
  3. Assigned: Any SCCM MP that is a site system for the client’s assigned site
    1. HTTPS capable in a trusted or local forest
    2. HTTPS capable NOT in a trusted or local forest
    3. HTTP capable in a trusted or local forest
    4. HTTP capable NOT in a trusted or local forest

NOTE! – Reference of some old client-side Locationservices.log.

Attempting to retrieve lookup MP(s) from AD LocationServices
Lookup Management Points from AD: LocationServices
Name: 'ACNCMMP1.XYZ.DMZ.com' HTTPS: 'N' ForestTrust: 'N' LocationServices
Name: 'ACNCMMP2.ABC.DMZ.com' HTTPS: 'N' ForestTrust: 'N' LocationServices
Retrieved lookup MP(s) from AD LocationServices
Refreshed security settings over AD LocationServices
Default Management Points from AD: LocationServices
Name: 'ACNCMMP1.XYZ.DMZ.com' HTTPS: 'N' ForestTrust: 'N' LocationServices
Name: 'ACNCMMP2.ABC.DMZ.com' HTTPS: 'N' ForestTrust: 'N' LocationServices Persisting the default management points in WMI LocationServices 

SCCM Preferred Management Points

Configuration Manager preferred Management Point is the best option introduced (in 1802 version of ConfigMgr) by Microsoft to avoid MP Rotation and AllowedMPs registry key from the previous versions.

The Preferred MP option from hierarchy settings enables a client to identify a management point that’s associated within its boundary.

An SCCM client places the preferred management points at the top of its list when you configure preferred management points!

Enable Preferred Management Point

Enable SCCM preferred MP with the following steps.

  1. Launch Console
  2. Navigate to the Administration – Site ConfigurationSites node
  3. select Hierarchy Settings from the site server
  4. Select Clients prefer to use management points specified in boundary groups option from the General tab
  5. Select OK to save the configuration.
SCCM Preferred Management Points - Preferred Management Point Settings
SCCM Preferred Management Points – Preferred Management Point Settings

Make sure boundary group configurations are appropriate with Site system servers. SCCM Preferred Management Points should be part of boundary group Site system servers to make this work as expected.

Reference Boundary Groups - SCCM Preferred Management Points
Reference Boundary Groups – SCCM Preferred Management Points

Resources

2 COMMENTS

  1. Hello!

    Im my scenario I have two MPs, the main MP is acting as a DP as well, so if I put my MP on another boundary, of a different country, when a client on that boundary group (in thos caase in another country), downloads something, it does it from the MP/DP, and not from its DP. How could I do in this case? Is there any way to specify that this boundary uses the main MP as just an MP and not the DP role?

    Thanks!

LEAVE A REPLY

Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.