1. Create VM on Azure Portal. (3 VM in Region (a) and one client VM in Region (b)).
2. Configure peering between Virtual network already Created by Region.
3. Setup DNS Configuration to allow all VM to use the same DNS.
4. Configure Domain Controller by adding Active Directory Role and DNS role.
5. Add All VM to the domain.
6. Give Admin access to each server with each corresponding user.
7. Create GPO to allow edge as default Browser and disable IE.
8. Install and configure SQL Server.
9. Configure SQL User as default user on SQL instance.
10. Configure the SQL server to generate reports.
11. Install SQL server Management Studio.
12. Add MECM server as admin of Database Server.
13. Reserve Memory on DataBase Server For Sql Server better performance. (at least 8GB and
max )GB
14. Create New Container in DC named System Management containing information of all our
clients.
Connect to ADSI .
Create Container under system Container.
Go to ADUC and choose the select Advanced featured in view
Go to the system and find the Container created.
Right click and choose Delegate Control.
Added MECM Server to the User Group.
Select “Create a Custom task to delegate.
Go to the end of panel and select full control save and quit.
15. Extend Active Directory Schema (Add MCM Class)
Download ExtAdsCh.exe.
Run the exe file.
ExtADSch.log will be created on C: confirmed installation successful.
16. Prevent user to change RDP setting.
17. Open inbound port using GPO
80,443,1433,3389,4022,5830,5831.
Files and Printers sharing ports.
Windows management instrumentation WMI ports.
18. Open outbound ports Using GPO
Files and Printers sharing ports.
19. Install Roles on MECM server
Install WSUS Role On MECM server
Check windows server Update Service
Create C:\WSUS_Content
Add the link to the content Selection
Add DataBase server Path
Go to the services.msc and set WSUS service to automatically
On Server Manager launch the MECM configuration
20. Installing WADK and WINPE TOOLS ON MECM Server, Windows Assessment Deployment Kit help
to customize Windows OS, WINPE is boot image help to boot machine over network.
21. Install Dot Net Framework 4.8 on DB Server and MECM Server
22. Install SQL Native Client on MECM Server (Microsoft Recommendation it help to change the
transport layer security from TLS 1.0 to TLS 1.2)
23. Restart SQL SERVER Service on DB Server
24. Extract MECM 2023 file
25. Take Snapshot of MECM server in order to keep safe our configuration in case of something goes
wrong.
26. Restart MECM and DATABASE servers