如何在 Configuration Manager 中將用戶端指派給站台How to assign clients to a site in Configuration Manager

適用於: Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

在安裝 Configuration Manager 用戶端之後,必須將用戶端加入 Configuration Manager 主要站台,您才能加以管理。After a Configuration Manager client is installed, it must join a Configuration Manager primary site before you can manage it. 用戶端所加入的站台即稱為其「指派的站台」 。The site that a client joins is called its assigned site. 不可將用戶端指派至管理中心網站或次要站台。Clients cannot be assigned to a central administration site or to a secondary site.

成功安裝用戶端後便會發生指派程序,並且決定由哪個站台管理用戶端電腦。The assignment process happens after the client is successfully installed and determines which site manages the client computer. 您可以直接將用戶端指派至站台或者使用自動站台指派,使用自動站台指派時用戶端會自動根據目前其已針對階層設定的網路位置或後援站台尋找適當的站台。You can either directly assign the client to a site, or you can use automatic site assignment where the client automatically finds an appropriate site based on its current network location or a fallback site that has been configured for the hierarchy.

當您在 Configuration Manager 註冊期間安裝行動裝置用戶端時,一律會自動將裝置指派至站台。When you install the mobile device client during Configuration Manager enrollment, the device is always automatically assigned to a site. 當您在電腦上安裝用戶端時,您可以選擇是否要將用戶端指派至站台。When you install the client on a computer, you can choose whether or not to assign the client to a site. 不過,若安裝用戶端而不指派,則到成功指派站台為止,用戶端都不受管理。However, when the client is installed but not assigned, the client is unmanaged until site assignment is successful.

注意

一律將用戶端指派至執行相同 Configuration Manager 版本的站台。Always assign clients to sites running the same version of Configuration Manager. 避免將較新版本的 Configuration Manager 用戶端指派至較舊版本的站台。Avoid assigning a Configuration Manager client from a newer release to a site from an older release. 必要時,將主要站台更新為您在用戶端所使用的相同 Configuration Manager 版本。If necessary, update the primary site to same Configuration Manager version that you are using for the clients.

在將用戶端指派至站台後,即使用戶端變更其 IP 位址以及漫遊至其他站台,仍然維持指派至該站台。After the client is assigned to a site, it remains assigned to that site, even if the client changes its IP address and roams to another site. 只有系統管理員可以手動將用戶端指派至其他站台或者移除用戶端的指派。Only an administrator can manually assign the client to another site or remove the client assignment.

警告

用戶端維持指派至站台的例外狀況,是您在啟用寫入篩選器下在 Windows Embedded 裝置上指派用戶端。An exception to a client remaining assigned to a site is if you assign the client on a Windows Embedded device when the write filters are enabled. 如果您沒有在指派用戶端之前先停用寫入篩選器,用戶端的站台指派狀態會在裝置下一次重新啟動時還原為其原本的狀態。If you do not first disable write filters before you assign the client, the site assignment status of the client reverts to its original state when the device next restarts.

例如,如果用戶端設定為自動站台指派,則在啟動時用戶端會重新指派並且可能會指派到不同的站台。For example, if the client is configured for automatic site assignment, it will reassign on startup and might be assigned to a different site. 如果用戶端未設定為自動站台指派,但是需要手動站台指派,您就必須在啟動後以手動方式重新指派用戶端,才能再次使用 Configuration Manager 管理此用戶端。If the client is not configured for automatic site assignment but requires manual site assignment, you must manually reassign the client after startup before you can manage this client again by using Configuration Manager.

若要避免發生此類行為,請先停用寫入篩選器再在 Embedded 裝置上指派用戶端,然後在您確認站台指派成功之後再啟用寫入篩選器。To avoid this behavior, disable the write filters before you assign the client on embedded devices, and then enable the write filters after you have verified that site assignment was successful.

如果用戶端指派失敗,用戶端軟體仍維持安裝在上面,但是將不受管理。If client assignment fails, the client software remains installed, but will be unmanaged. 當用戶端已安裝但沒有指派至站台,或是指派至站台但無法與管理點通訊時,會被視為不受管理。A client is considered unmanaged when it is installed but not assigned to a site, or is assigned to a site but cannot communicate with a management point.

針對電腦使用手動站台指派Using Manual Site Assignment for Computers

您可以使用以下兩種方式將用戶端電腦手動指派至站台:You can manually assign client computers to a site by using the following two methods:

  • 使用指定站台碼的用戶端安裝內容。Use a client installation property that specifies the site code.

  • 在控制台的 [Configuration Manager] 中指定站台碼。In Control Panel, in Configuration Manager, specify the site code.

注意

如果您手動將用戶端電腦指派至不存在的 Configuration Manager 站台碼,則站台指派將失敗。If you manually assign a client computer to a Configuration Manager site code that does not exist, the site assignment fails.

針對電腦使用自動站台指派Using Automatic Site Assignment for Computers

自動站台指派可以在用戶端部署期間進行,或者在您按一下控制台中 [Configuration Manager 內容] 的 [進階] 索引標籤上的 [尋找站台] 時進行。Automatic site assignment can occur during client deployment, or when you click Find Site in the Advanced tab of the Configuration Manager Properties in the Control Panel. Configuration Manager 用戶端會比對其自身的網路位置與 Configuration Manager 階層中所設定的界限。The Configuration Manager client compares its own network location with the boundaries that are configured in the Configuration Manager hierarchy. 當用戶端的網路位置落在已針對站台指派啟用的界限群組內,或者當階層已針對後援站台設定時,用戶端便會自動指派至該站台,您不需要指定站台代碼。When the network location of the client falls within a boundary group that is enabled for site assignment, or the hierarchy is configured for a fallback site, the client is automatically assigned to that site without your having to specify a site code.

您可以使用以下一種或多種方式設定界限:You can configure boundaries by using one or more of the following:

  • IP 子網路IP subnet

  • Active Directory 站台Active Directory site

  • IP v6 首碼IP v6 prefix

  • IP 位址範圍IP address range

注意

如果 Configuration Manager 用戶端具有多個網路介面卡,便會因此擁有多個 IP 位址,而用來評估用戶端站台指派的 IP 位址為隨機指派。If a Configuration Manager client has multiple network adapters and therefore has multiple IP addresses, the IP address used to evaluate client site assignment is assigned randomly.

如需如何針對站台指派設定界限群組以及如何針對自動站台指派設定後援站台的資訊,請參閱為 Configuration Manager 定義站台界限和界限群組For information about how to configure boundary groups for site assignment and how to configure a fallback site for automatic site assignment, see Define site boundaries and boundary groups for Configuration Manager.

使用自動站台指派的 Configuration Manager 用戶端會嘗試尋找發行至 Active Directory 網域服務的站台界限群組。Configuration Manager clients that use automatic site assignment attempt to find site boundary groups that are published to Active Directory Domain Services. 如果此方法失敗 (例如 Active Directory 架構沒有針對 Configuration Manager 擴充,或者用戶端是工作群組電腦),則用戶端可以從管理點取得界限群組資訊。If this fails (for example, the Active Directory schema is not extended for Configuration Manager, or clients are workgroup computers), clients can get boundary group information from a management point.

您可以在安裝用戶端時指定用戶端電腦所使用的管理點,或者用戶端可以使用 DNS 發行或 WINS 找出管理點。You can specify a management point for client computers to use when they are installed, or clients can locate a management point by using DNS publishing or WINS.

如果用戶端找不到包含其網路位置的相關界限群組,而階層並沒有後援站台,則用戶端會每 10 分鐘重試一次,直到可以指派至站台為止。If the client cannot find a site that is associated with a boundary group that contains its network location, and the hierarchy does not have a fallback site, the client retries every 10 minutes until it can be assigned to a site.

如果以下任何情形適用,則 Configuration Manager 用戶端電腦無法自動指派至站台,必須手動指派:Configuration Manager client computers cannot be automatically assigned to a site if any of the following apply, and then they must be manually assigned:

  • 目前已指派至站台。They are currently assigned to a site.

  • 位在網際網路上,或者設定為僅限網際網路的用戶端。They are on the Internet or configured as Internet-only clients.

  • 其網路位置不是落在 Configuration Manager 階層中其中一個已設定的界限群組內,並且階層沒有後援站台。Their network location does not fall within one of the configured boundary groups in the Configuration Manager hierarchy, and there is no fallback site for the hierarchy.

檢查站台相容性以完成站台指派Completing Site Assignment by Checking Site Compatibility

在用戶端找到其指派的站台後,會檢查用戶端的版本和作業系統以確保 Configuration Manager 站台可以管理用戶端。After a client has found its assigned site, the version and operating system of the client is checked to ensure that a Configuration Manager site can manage it. 例如,Configuration Manager 無法管理 Configuration Manager 2007 用戶端、System Center 2012 Configuration Manager 用戶端或執行 Windows 2000 的用戶端。For example, Configuration Manager cannot manage Configuration Manager 2007 clients, System Center 2012 Configuration Manager clients, or clients that are running Windows 2000.

如果您將執行 Windows 2000 的用戶端指派至 Configuration Manager 站台,則站台指派會失敗。Site assignment fails if you assign a client that runs Windows 2000 to a Configuration Manager site. 當您將 Configuration Manager 2007 用戶端或 System Center 2012 Configuration Manager 用戶端指派至 Configuration Manager (最新分支) 站台時,站台指派可成功支援自動用戶端升級。When you assign a Configuration Manager 2007 client or a System Center 2012 Configuration Manager client to a Configuration Manager (current branch) site, site assignment succeeds to support automatic client upgrade. 不過,只有將較舊世代的用戶端升級至 Configuration Manager (最新分支) 用戶端之後,Configuration Manager 才能使用用戶端設定、應用程式或軟體更新來管理此用戶端。However, until the older generation clients are upgraded to a Configuration Manager (current branch) client, Configuration Manager cannot manage this client by using client settings, applications, or software updates.

注意

若要支援 Configuration Manager 2007 或 System Center 2012 Configuration Manager 用戶端至 Configuration Manager (最新分支) 站台的站台指派,您必須為階層設定自動用戶端升級。To support the site assignment of a Configuration Manager 2007 or a System Center 2012 Configuration Manager client to a Configuration Manager (current branch) site, you must configure automatic client upgrade for the hierarchy. 如需詳細資訊,請參閱如何升級 Windows 電腦的用戶端For more information, see the How to upgrade clients for Windows computers.

Configuration Manager 也會檢查您是否已將 Configuration Manager (最新分支) 用戶端指派至支援的站台。Configuration Manager also checks that you have assigned the Configuration Manager (current branch) client to a site that supports it. 下列為從舊版 Configuration Manager 移轉期間可能發生的案例。The following scenarios might occur during migration from previous versions of Configuration Manager.

  • 案例:您已使用自動站台指派,而您的界限與舊版 Configuration Manager 中定義的界限重疊。Scenario: You have used automatic site assignment and your boundaries overlap with those defined in a previous version of Configuration Manager.

    在此情況下,用戶端會自動嘗試尋找 Configuration Manager (最新分支) 站台。In this case, the client automatically tries to find a Configuration Manager (current branch) site.

    用戶端會先檢查 Active Directory 網域服務,如果找到已發佈的 Configuration Manager (最新分支) 站台,站台指派便會成功。The client first checks Active Directory Domain Services and if it finds a Configuration Manager (current branch) site published, site assignment succeeds. 如果此方法失敗 (例如 Configuration Manager 站台未發佈,或者電腦是工作群組用戶端),用戶端就會透過其指派的管理點檢查站台資訊。If this fails (for example, the Configuration Manager site is not published or the computer is a workgroup client), the client then checks for site information from its assigned management point.

    注意

    您可以使用 Client.msi 內容 SMSMP=<伺服器名稱> ,在用戶端安裝期間將管理點指派至用戶端。You can assign a management point to the client during client installation by using the Client.msi property SMSMP=<server_name>.

    如果兩種方法都失敗,則站台指派失敗,並且您必須手動指派用戶端。If both these methods fail, site assignment fails and you must manually assign the client.

  • 案例:您已使用特定站台碼指派 Configuration Manager (最新分支) 用戶端,而非自動站台指派,但不小心指定了版本比 System Center 2012 R2 Configuration Manager 還舊的 Configuration Manager 站台碼。Scenario: You have assigned the Configuration Manager (current branch) client by using a specific site code rather than automatic site assignment, and mistakenly specified a site code for a version of Configuration Manager earlier than System Center 2012 R2 Configuration Manager.

    在此情況下,站台指派會失敗,而您必須手動將用戶端重新指派至 Configuration Manager (最新分支) 站台。In this case, site assignment fails and you must manually reassign the client to a Configuration Manager (current branch) site.

    必須符合以下條件之一才能檢查站台相容性:The site compatibility check requires one of the following conditions:

  • 用戶端可以存取已發行至 Active Directory 網域服務的站台資訊。The client can access site information published to Active Directory Domain Services.

  • 用戶端可以與站台中的管理點通訊。The client can communicate with a management point in the site.

    如果無法成功完成站台的相容性檢查,則站台指派會失敗,而於再次執行站台相容性檢查並且成功之前,用戶端皆不受管理。If the site compatibility check fails to finish successfully, the site assignment fails, and the client remains unmanaged until the site compatibility check runs again and succeeds.

    當用戶端已針對以網際網路為基礎的管理點設定時,會發生執行站台相容性檢查的例外情況。The exception to performing the site compatibility check occurs when a client is configured for an Internet-based management point. 在此案例中,不會執行站台相容性檢查。In this case, no site compatibility check is made. 如果您將用戶端指派至含有以網際網路為基礎的站台系統的站台,並且指定以網際網路為基礎的管理點,請確認您是否將用戶端指派至正確的站台。If you are assigning clients to a site that contains Internet-based site systems, and you specify an Internet-based management point, ensure that you are assigning the client to the correct site. 如果您誤將用戶端指派至 Configuration Manager 2007 站台、System Center 2012 Configuration Manager 站台,或不具有以網際網路為基礎之站台系統角色的 Configuration Manager 站台,用戶端將不受管理。If you mistakenly assign the client to a Configuration Manager 2007 site, a System Center 2012 Configuration Manager site, or to a Configuration Manager site that does not have Internet-based site system roles, the client will be unmanaged.

尋找管理點Locating Management Points

在成功將用戶端指派至站台後,用戶端會找出站台中的管理點。After a client is successfully assigned to a site, it locates a management point in the site.

用戶端電腦會下載站台中可連線的管理點清單。Client computers download a list of management points that they can connect to in the site. 這會在以下情況發生:每次用戶端重新啟動時、每 25 個小時,或用戶端偵測到網路變更 (例如電腦與網路中斷連線再重新連線,或者電腦接收新的 IP 位址) 時。This happens whenever the client restarts, or every 25 hours, or if the client detects a network change, such as the computer disconnects and reconnects on the network or it receives a new IP address. 清單中包括內部網路的管理點,以及是否接受透過 HTTP 或 HTTPS 的用戶端連線。The list includes management points on the intranet and whether they accept client connections over HTTP or HTTPS. 當用戶端電腦位在網際網路上且用戶端還沒有管理點清單時,它會連線到指定的網際網路型管理點,以取得管理點清單。When the client computer is on the Internet and the client doesn't yet have a list of management points, it connects to the specified Internet-based management point to obtain a list of management points. 當用戶端具有指派站台的管理點清單時,接著會選取一個要與其連線的管理點:When the client has a list of management points for its assigned site, it then selects one to connect to:

  • 當用戶端位在內部網路並且具有有效的 PKI 憑證可供使用時,用戶端會在選擇 HTTP 管理點之前先選擇 HTTPS 管理點。When the client is on the intranet and it has a valid PKI certificate that it can use, the client chooses HTTPS management points before HTTP management points. 然後再根據其樹系成員資格找出最近的管理點。It then locates the closest management point, based on its forest membership.

  • 當用戶端位在網際網路上時,則會隨機選擇其中一個以網際網路為基礎的管理點。When the client is on the Internet, it randomly chooses one of the Internet-based management points.

Configuration Manager 所註冊的行動裝置用戶端只會連線至其指派站台中的一個管理點,永遠不會連線至次要站台中的管理點。Mobile device clients that are enrolled by Configuration Manager only connect to one management point in their assigned site and never connect to management points in secondary sites. 這些站台一律會透過 HTTPS 連線,而管理點必須設定為接受透過網際網路的用戶端連線。These clients always connect over HTTPS and the management point must be configured to accept client connections over the Internet. 當行動裝置用戶端在主要站台中有一個以上的管理點時,Configuration Manager 會在指派期間隨機選擇這些管理點之一,而行動裝置用戶端會繼續使用相同的管理點。When there is more than one management point for mobile device clients in the primary site, Configuration Manager randomly chooses one of these management points during assignment and the mobile device client continues to use the same management point.

當用戶端已從站台中的管理點下載用戶端原則時,即成為受管理的用戶端。When the client has downloaded client policy from a management point in the site, the client is then a managed client.

下載站台設定Downloading Site Settings

在站台指派成功,並且用戶端已找到管理點後,使用 Active Directory 網域服務進行站台相容性檢查的用戶端電腦,會針對其指派站台下載與用戶端相關的站台設定。After site assignment succeeds, and the client has found a management point, a client computer that uses Active Directory Domain Services for its site compatibility check downloads client-related site settings for its assigned site. 這些設定包括用戶端憑證選擇準則、是否要使用憑證撤銷清單以及用戶端要求連接埠號碼。These settings include the client certificate selection criteria, whether to use a certificate revocation list, and the client request port numbers. 用戶端會繼續定期檢查這些設定。The client continues to check these settings on a periodic basis.

當用戶端電腦無法從 Active Directory 網域服務取得站台設定時,則會從其管理點下載。When client computers cannot obtain site settings from Active Directory Domain Services, they download them from their management point. 用戶端電腦也可以在使用用戶端推入安裝時取得站台設定,或者您可以透過 CCMSetup.exe 以及用戶端安裝內容以手動方式加以指定。Client computers can also obtain the site settings when they are installed by using client push, or you can specify them manually by using CCMSetup.exe and client installation properties. 如需用戶端安裝內容的詳細資訊,請參閱關於用戶端安裝內容For more information about the client installation properties, see About client installation properties.

下載用戶端設定Downloading Client Settings

所有的用戶端皆會下載預設的用戶端設定原則,以及任何適用的自訂用戶端設定原則。All clients download the default client settings policy and any applicable custom client settings policy. 軟體中心仰賴 Windows 電腦的這些用戶端設定原則,並且在下載此設定資訊之前,不會通知使用者軟體中心無法成功執行。Software Center relies on these client configuration policies for Windows computers and will notify users that Software Center cannot run successfully until this configuration information is downloaded. 視用戶端的設定而定,用戶端設定的初始下載可能需要一點時間,而在此程序完成之前,部分用戶端管理工作可能無法執行。Depending on the client settings that are configured, the initial download of client settings might take a while, and some client management tasks might not run until this process is complete.

確認站台指派Verifying Site Assignment

您可以使用下列任何方法以確認站台指派是否成功:You can verify site assignment success by any of the following methods:

  • 若是 Windows 電腦上的用戶端,請使用控制台中的 Configuration Manager,並確認站台碼正確顯示在 [站台] 索引標籤中。For clients on Windows computers, use Configuration Manager in the Control Panel and verify that the site code is correctly displayed on the Site tab.

  • 針對用戶端電腦,請在 [資產與合規性] 工作區 > [裝置] 節點中,確認電腦針對 [用戶端] 欄顯示 [是] ,且 [站台碼] 欄顯示的是正確的主要站台碼。For client computers, in the Assets and Compliance workspace > Devices node, verify that the computer displays Yes for the Client column and the correct primary site code for the Site Code column.

  • 針對行動裝置用戶端,請在 [資產與相容性] 工作區中使用 [所有行動裝置] 集合以確認行動裝置的 [用戶端] 欄顯示 [是] ,且 [站台碼] 欄顯示正確的主要站台碼。For mobile device clients, in the Assets and Compliance workspace, use the All Mobile Devices collection to verify that the mobile device displays Yes for the Client column and the correct primary site code for the Site Code column.

  • 使用用戶端指派與行動裝置註冊的報告。Use the reports for client assignment and mobile device enrollment.

  • 針對用戶端電腦,請使用用戶端上的 LocationServices.log 檔案。For client computers, use the LocationServices.log file on the client.

漫遊至其他站台Roaming to Other Sites

若您將內部網路上的用戶端電腦指派至主要站台後,變更其網路位置以將其置於針對另一個站台所設定的界限群組,這些電腦將會漫遊至另一個站台。When client computers on the intranet are assigned to a primary site but change their network location so that it falls within a boundary group that is configured for another site, they have roamed to another site. 若此站台為其指派之站台的次要站台,則用戶端可以使用次要站台中的管理點以下載用戶端原則並上傳用戶端資料,以避免在速度可能較慢的網路上傳送此資料。When this site is a secondary site for their assigned site, clients can use a management point in the secondary to download client policy and upload client data, which avoids sending this data over a potentially slow network. 但是,如果這些用戶端漫遊至另一個主要站台界限,或是次要站台不是其指派之站台的子系站台,這些用戶端會一律使用其指派站台內的管理點以下載用戶端原則以及上傳資料至其站台。However, if these clients roam into the boundaries for another primary site or a secondary that is not a child site of their assigned site, these clients always use a management point in their assigned site to download client policy and to upload data to their site.

這些漫遊至其他站台 (所有主要站台與所有次要站台) 的用戶端電腦可隨時使用其他站台中的管理點進行內容位置要求。These client computers that roam to other sites (all primary sites and all secondary sites) can always use management points in other sites for content location requests. 目前站台中的管理點可提供用戶端一個發佈點清單,其中包含用戶端要求的內容。Management points in the current site can give clients a list of distribution points that have the content that clients request.

針對已設為僅限網際網路用戶端管理的用戶端電腦,以及由 Configuration Manager 註冊的行動裝置與 Mac 電腦,這些用戶端只會與指派站台中的管理點通訊。For client computers that are configured for Internet-only client management, and for mobile devices and Mac computers that are enrolled by Configuration Manager, these clients only communicate with management points in their assigned site. 這些用戶端不會與次要站台內的管理點或是其他主要站台內的管理點進行通訊。These clients never communicate with management points in secondary sites or with management points in other primary sites.