IT Knowledgebase - http://www.ahmedgroup.co.uk
Step by step guide installing SCCM 2007 Part 7
http://www.ahmedgroup.co.uk/articles/54/1/Step-by-step-guide-installing-SCCM-2007-Part-7/Page1.html
Huzaifah Ahmad

I am currently working as a Senior Field Consultant. I started my professional career in 1999 in India. In the year 1999 I decided to transition from the Retail Industry to hard core Information Technology, which was always my strength and desire. I realised my strengths and keen interest when I worked on Dbase III Plus a few years back but due to various constraints I could not pursue my career at that point in time. I have worked in various capacities in the fields of Software Technology, as Systems administrator, Systems Support Engineer, Implementations Engineer and Senior Implementation Engineer. Currently, I am based as Senior Field Consultant for a Microsoft Gold Partner in Oxford, U.K.

I am certified in various disciplines

CCIE # 23368
CCNP
CCNA
CCA
MCSE NT, 2k & 2k3
MCSA 2k & 2k3
MCSE 2k & 2k3 (Messaging & Security)
MCSA 2k & 2k3 (Messaging & Security)


I devote my free time to the technology communities. I believe knowledge grows by sharing and I love to share my knowledge. I believe it is important to be passionate and really enjoy whatever you do. I am also the founder and maintain Ahmedgroup (http://www.ahmedgroup.co.uk)

 
By Huzaifah Ahmad
Published on 12/24/2009
 
Step by step guide installing SCCM 2007 Part 7 series will have multiple pages to this Part 7. Part 7 will cover Installing relevant IIS features, Install & configure Webdav, Install Desktop Experience, Configuration of Authentication, Configuration of Authorization, Installaling Remote Differential Compression, Installing BITS, Configure IIS Application Config file & in the end test WebDav.

Step by step guide installing SCCM 2007 Part 7 A
Step by step guide installing SCCM 2007 Part 7 series will have multiple pages to this Part 7.


a. Install relevant IIS features.
b. Install & configure Webdav.
c. Install Desktop Experience
d. Configure Authentication + Authorization + Install Remote Differential Compression + BITS.
e. Configure Application Config file & than test WebDav.

 
Install the following IIS features:
 

Role service

Status

Web Server

Installed

Common HTTP Features

Installed

Static Content

Installed

Default Document

Installed

Directory Browsing

Installed

HTTP Errors

Installed

HTTP Redirection

Installed

Web Dav Publishing

Note: If the Operating System is NOT R2 than this needs to be downloaded separately and installed as it is now integrated with R2 IIS 7.5

For IIS 7.0 you can download Webdav from the following locations
.


Microsoft WebDAV Extension for IIS 7.0 (x64)

Microsoft WebDAV Extension for IIS 7.0 (x86)

Installed

Application Development

Installed

ASP.NET

Installed

.NET Extensibility

Installed

ASP

Installed

CGI

Not installed

ISAPI Extensions

Installed

ISAPI Filters

Installed

Server Side Includes

Not installed

Health and Diagnostics

Installed

HTTP Logging

Installed

Logging Tools

Installed

Request Monitor

Installed

Tracing

Installed

Custom Logging

Not installed

ODBC Logging

Not installed

Security

Installed

Basic Authentication

Installed

Windows Authentication

Installed

Digest Authentication

Not installed

Client Certificate Mapping Authentication

Not installed

IIS Client Certificate Mapping Authentication

Not installed

URL Authorization

Installed

Request Filtering

Installed

IP and Domain Restriction

Installed

Performance

Installed

Static Content Compression

Installed

Dynamic Content Compression

Not installed

Management Tools

Installed

IIS Management Console

Installed

IIS Management Scripts and Tools

Installed

Management Service

Installed

IIS 6 Management Compatibility

Installed

IIS 6 Metabase Compatibility

Installed

IIS 6 WMI Compatibility

Installed

IIS 6 Scripting Tools

Installed

IIS 6 Management Console

Installed

FTP Publishing Service

Not installed

FTP Server

Not installed

FTP Management Console

Not installed



Once these services have been installed test IIS to check if it does respond & the local firewall is not blocking any ports.

http://localhost


This should display the IIS 7.5 welcome page.










Step by step guide installing SCCM 2007 Part 7 B

Once the IIS features have been installed in the earlier article; now you need to configure Webdav.

You can configure Webdav using the command line or using the GUI I will cover both.



===========================================
@ECHO OFF
Echo Enabling WebDAV
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /enabled:true /commit:apphost Echo Configuring WebDAV
Echo Creating and configure a WebDAV authoring rule
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoringRules /+[users='*',path='*',access='Read'] /commit:apphost
Echo Allowing anonymous property queries
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /properties.allowAnonymousPropfind:true /commit:apphost Echo Allowing Custom Properties
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /properties.allowCustomProperties:false /commit:apphost Echo Allowing property queries with infinite depth
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /properties.allowInfinitePropfindDepth:true /commit:apphost Echo Allowing hidden files to be listed
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /fileSystem.allowHiddenFiles:true /commit:apphost Echo Allowing access to hidden files
AppCmd set config "Default Web Site/" /section:system.webServer/webdav/authoring /fileSystem.allowHiddenFiles:true /commit:apphost pause
@ECHO ON
exit

===========================================

Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.

IIS Manager starts

.





In the Connections pane, expand the Sites node in the console tree, and then click SMSWEB (if you are using a custom Web site) or Default Web Site (if you are using the default Web site for the site system).




Click Features View at the bottom of the console. In the workspace, double-click WebDAV Authoring Rules.





When the WebDAV Authoring Rules page appears, in the Actions pane, click Enable WebDAV




When WebDAV has been enabled, in the Actions pane, click Add Authoring Rule.

In the Add Authoring Rule dialog box, under Allow access to, click All content. Under Allow access to this content to, click All users. Under Permissions, click Read, and then click OK.










To change the WebDAV Property Behavior settings

In the WebDAV Authoring Rules workspace, in the Actions pane, click WebDAV Settings.

In the WebDAV Settings workspace, under Property Behavior, set Allow anonymous property queries to True.

Set Allow Custom Properties to False.

Set Allow property queries with infinite depth to True.

If this is a BITS-enabled distribution point, under WebDAV Behavior, set Allow access to hidden files to True.
If this is a BITS-enabled distribution point, under WebDAV Behavior, set Allow hidden files to be listed to True.






In the Actions pane, click Apply

Close IIS Manager.


Now we will install RDS.

==================Troubleshooting ===================

If you are using windows 2008 IIS 7.0

A hotfix rollup is available for the out-of-band WebDAV module for IIS 7.0
http://support.microsoft.com/default.aspx/kb/957001

==================Troubleshooting ===================
---- From SCCM Technet forums ----
I had another issue when using Server 2008 R2 x64, and I hope this will help others.

After SCCM install, but would not create the necessary virtual directories in IIS. After going through logs, here is what I found you have to do.

1. Change a few WebDAV settings (refresher: WebDAV, as explained previously, is a part of IIS 7.5, so no download is needed). Go to IIS Manager, Default Web Site, WebDAV, then select "WebDAV Settings..."

•Allow property queries with infinite depth - TRUE

•Allow Custom Properties - FALSE

•Allow anonymous property queries - TRUE

2. Go back to WebDAV authoring rules. Add a new rule: All content - All Users - Read
3. This next step is an installer hack. The installer seems to have permissions issues with the SCCM folder. Go to your Program Files (or Program Files x86 for 64-bit users) and select the SMS_CCM folder's security properties. TEMPORARILY (important this is temporary because we are reducing security here) add Everyone - Full Control.
4. Back in SCCM management console, remove the Management Point role and then add it back.
5. Remove the Everyone group from the folder to restore security.

==================Troubleshooting ===================



Step by step guide installing SCCM 2007 Part 7 C
Installing Desktop Experience.

Note: This will be required on Windows 2008 R2 if carrying out testing for Webdav on the local server.

From Server Maanger > Add Features >














Step by step guide installing SCCM 2007 Part 7 D
Now ensure that Authentication & Authorization are confgiured as discribed below.

These settings need to be set under the default website.

Default Website > Authentication
Default Website > Authorization











In addition to installing the required Windows Server 2008 server roles, add the following required features in Server Manager in the Features Summary section:
BITS Server Extensions
Remote Differential Compression




To add Remote Differential Compression for site server and branch distribution point computers

In Server Manager, on the Features node, click Add Features to start the Add Features Wizard.

On the Select Features page, select Remote Differential Compression, and then click Next.

Complete the rest of the wizard.

Close Server Manager.

 




In Server Manager, on the Features node, click Add Features to start the Add Features Wizard.

On the Select Features page, select BITS, and then click Next.

Complete the rest of the wizard.




Step by step guide installing SCCM 2007 Part 7 E

To modify the request Filtering section on BITS-enabled distribution point computers:

Open the applicationHost.config file located in the %windir%\System32\inetsrv\config\ directory on the BITS-enabled distribution point site system.

Search for the <requestFiltering> section.

Determine the file extensions that you will have in the packages on that distribution point. For each file extension that you require, change allowed to true.

For example, if your package will contain a file with an .mdb extension, change the line

<add fileExtension=".mdb" allowed="false" />
 
to

<add fileExtension=".mdb" allowed="true" />

Allow only the file extensions required for your packages.

Save and close the applicationHost.config file.


Now try to map a drive to the the following location on the PILOT-SCCM-01 server.

Right click My Computer > map Network Drive > http://localhost





If webdav fails to work now I would go back uninstall webdav and start again on webdav. Ensure this is fixed now rather than rushing into it ahead as this would cause problems later and make it more difficult to troubleshoot.