Completed project: Unified Device Management (SCCM)

Primary UITS contact: Pete Bucklin

Last update: December 17, 2015

Team lead: Troy Chastain

Strategic Plan Action Items: 5, 6, 7, 29

Description:

Unified Device Management (SCCM) is a highly available service built using Microsoft System Center Configuration Manager and maintained by the Leveraged Services SCCM service engineering team. The service provides a unified framework that will allow system management/inventory, centralized antivirus, patching, software distribution, and reporting for schools and departments across all campuses at Indiana University in direct support of university policies, asset management requirements, and compliance reporting.

Phase I:

Phase I started as an "Edge"-led initiative to develop a Group Level Service that included Athletics, Auxiliary IT, Informatics and Computing, Recreational Sports, and Leveraged Services. The goal was to build a pilot production environment to prove that multiple units could come together under a common device management strategy which would be more efficient than developing an environment individually.

Phase I was completed in June 2013 and determined to be successful.

Phase II:

Phase II moved the "Edge"-led initiative into a full-scale enterprise device management service within UITS Leveraged Services, establishing a Steering Committee and moving into production in August 2013. The Unified Device Management Enterprise service includes a fully developed test environment (site code UDT) which mirrors, to the greatest degree possible, the main production environment. The production environment (site code UDM) was designed in conjunction with Microsoft Solution Architects and is currently capable of supporting 20,000 client devices, scalable to 100,000 client devices. Phase II also provides the framework for a new distribution channel to replace the old Universal Build Service which services STC and partner labs across all campuses at Indiana University.

Phase II Goals:

  • Provide a framework and distribution channel for the new IU Lab Build (replacing the Universal Build Service)
  • Provide a framework for "Edge" units to manage their Windows devices
  • Provide the future of inventory and antivirus for all "Edge" units

Phase II was completed in December 2013 and determined to be successful.

Phase III:

Phase III will see the service expand throughout the university as "Edge" units across all eight Indiana University campuses begin using the centralized antivirus and inventory functions. These services will continue to evolve based on feedback from units, and during this phase, the production environment will be scaled accordingly to serve machines as they are added. Phase III will also see continued testing and final implementation of the IU Lab Build delivered via Configuration Manager.

Phase III Goals:

  • Provide the IU Lab Build to all STC and partner labs across all eight campuses
  • 20,000 clients in production
  • Standardized set of applications, patched on a regular schedule
  • More software titles available

Outcome:

A unified management structure that delivers and manages user experiences across all Windows-based university devices.

Milestones and status:

  • Phase I
    • May 2012: Pilot kick-off session
    • June 2012: Pilot site (CMB) created
    • July 2012: Edge units migrate into CMB site
      • Auxiliary IT (900 machines)
      • RECSports (50 machines)
      • IU Athletics (120 machines)
    • January 2013: IUB Universal Build machines into CMB site (690 machines)
    • March 2013: Regional campus (IU Kokomo) testing (5 machines)
    • June 2013: Phase I complete
  • Phase II
    • July 2013: Test site (UDT) online/available
      • Content migrated and tested from pilot (CMB) site
      • Edge units begin entering test site
    • August 2013: Production site (UDM) online/available
      • Tested content moved from UDT for use
    • September 2013: First regional campus (IU Kokomo) joins UDM
      • 448 machines
    • September 2013: Network traffic analysis IUSB
    • November 2013: Pilot groups migrate all machines into UDM
      • Auxiliary IT (1,300 machines)
      • RECSports (112 machines)
      • IU Athletics (365 machines)
    • December 2013: SCCM agent deployed to 3,750 IUB/IUPUI Universal Build machines
    • December 2013: Pilot site (CMB) shutdown
    • December 2013: 7,500 machines under management
    • January 2014: SCCM Agent deployed to 1,150 regional Universal Build machines
  • Phase III
    • Q1 - 2014
      • 10,000 machines under management
        • February 2014: 8,700 machines managed in production site (UDM)
        • March 2014: 9,700 machines managed in production site (UDM)
      • Implement site-wide boundaries for distribution points
        • February 2014: Production Distribution points scoped to current customers
      • Incorporate enterprise active directory certificates for secure communication
        • February 2014: Management Point and Distribution Point in test site (UDT) migrated to enterprise certificates and actively tested
        • February 2014: Client migration to enterprise certificates began
      • Complete testing of the following:
        • Standard IU Lab Build (Beta)
        • IU Lab Hybrid-Build (Beta)
        • IU Lab Thin-Build (Beta)
        • IU Time Kiosk-Build (Beta)
    • Q2 - 2014
      • March 2014: Test and implement physical software distribution on IUSE campus
      • May 2014: Test and implement physical software distribution point on IUSB campus
      • May 2014: Deliver the Standard IU Lab Build
        • Work performed in conjunction with CNI team on Multicast delivery
      • June 2014: 12,000 machines under management
      • June 2014: Test and implement physical software distribution points on the following campuses:
        • March 2014: IU Southeast
        • May 2014: IU South Bend
        • June 2014: IU Northwest
      • June 2014: Begin lab rebuilds using the Standard IU Lab Build
      • June 2014: Finalize hardware and begin testing IU Time Kiosk build
    • Q3 - 2014
      • 15,000 machines under management
        • August 1, 2014: 13,600 machines under management
        • September 1, 2014: 14,900 machines under management
      • New SCCM sites for PCI-DSS systems
        • August 1, 2014: Began provisioning test site
      • Complete formal UISO security review
      • Finalize testing and begin delivery of IU Time Kiosk machines
        • August 1, 2014: Hardware build complete, ready for pilot program
        • September 1, 2014: 9 Kiosk machines in testing at RecSports

Comment Process: Under development

Primary client: Edge units

Project team:

  • School of Informatics and Computing
  • Recreational Sports
  • Auxiliary IT
  • Athletics
  • Leveraged Services Engineers
  • Enterprise Systems Administration (ESA)
  • Database Administration (DBA)
  • Storage and Virtualization (SAV)
  • Campus Network Engineering

Governance:

  • Duane Schau, Leveraged Services
  • Pete Bucklin, Leveraged Services
  • Ranji Abraham, Auxiliary IT
  • Janssen Jones, Auxiliary IT
  • Charlie McClary, Recreational Sports
  • Dan Fitzsimmons, IU Athletics
  • Jim Anderson, Kelley School of Business
  • Marc Wilson, Health Sciences

This is document bdwl in the Knowledge Base.
Last modified on 2015-12-17 00:00:00.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.