Install the Service
After you configure the initialization file, you can use Rservice to install the PCM service. To execute the installation, log on to an NT workstation or server that is a member of any domain that has a trust relationship with the domain your initialization file specifies. To avoid a possible logon credential conflict, disconnect all your local machine's drives that connect to computers you list in the initialization file. The syntax of the command line that starts an Rservice installation is
rservice /install /c /l:<log_file> [/v] <initialization_file> [/t] [/m <machine_list>]
The /c parameter directs Rservice to use the service account that the initialization file specifies, rather than the account of the user who executes the Rservice command. You specify the log file's path after /l, the logging parameter. Be sure to use the full path to the initialization file, including the UNC name of the server and share.
Rservice also includes several optional parameters that you can enter. To see a more detailed command output than the standard Rservice output, include the /v parameter. To specify which machines you want the PCM service to install on (instead of the computers your initialization file lists), use the /m parameter, followed by machine names separated by spaces. To take advantage of Rservice's multithreading capabilities (and run multiple installations for faster completion), you can set a higher number of threads. Enter the /t option and the number of threads you want.
When you execute the PCM service's installation, Rservice prompts you for the password for your PCM service account. After you enter the password, Rservice connects to each computer that the initialization file lists. (If you used the /m parameter in the command line to replace the initialization file's computer list, Rservice connects to the entries on your /m list.) Rservice creates an installation directory on each computer and copies pcmsvc32.exe from the source directory your initialization file specifies to each machine's installation directory. Rservice then makes the Registry entries you specified in the Registry settings section of the initialization file and grants the service account logon-as-service rights to system resources. Rservice registers the PCM service with each computer, but Rservice does not start the service. (The service automatically starts on each computer when the computer reboots. You can manually start the service through the Services applet in the Control Panel.)
Before you install the PCM service on many computers, test your initialization file's syntax. Run the Rservice command, and use the /m option to install the PCM service on your computer. If your initialization file is correct, the service will install on your computer. Run the command in verbose mode with the /v option, and check the command output closely. If you see any errors, check permissions and initialization file syntax. When you are confident that your initialization file is correct, you can perform larger installations.
When you install the PCM service, you might receive error message 203, which says, "The system could not find the environment option that was entered." The message also says that the service did not install. You might receive this message even if the service installs correctly. Therefore, if you receive this error message, check to see whether the service installed correctly before you try to reinstall the service.
You can also use Rservice to stop, start, or uninstall a service. If you use Rservice to uninstall a service, be sure to stop the service first. You can find more information about these Rservice functions in the SMS resource kit and SP2's Rservice documentation.
Create a Package and Job
After you install the PCM service, you can use it to install applications. Creating automated packages is similar to creating packages that require user interaction, except that you have a few different package options.
First, you must define your package in the SMS Administrator. In the Packages window, select New from the File menu to create a new package. In the Package Properties dialog box that appears, click the Workstation button to get to the Command Line Properties dialog box, which Screen 1, page 203, shows. The dialog box displays a list of installation commands you can choose from. SMS executes a command line to install applications, as a user would type a command at a command prompt, and manages package installations with Package Definition Files (PDFs), which contain information about the application you want to install. Your package's PDF contains command lines, each of which includes several options. SMS SP2 includes new PDFs that take advantage of the PCM service. In the Command Line Properties dialog box, select a script that doesn't require user interaction. (To find out which scripts require no user interaction, consult your PDFs' documentation.) Also, select the Automated Command Line and System (Background) Task check boxes, and remove your non-NT operating systems (OSs) from the Supported Platforms field.
Second, you must create a job for this package. In the SMS Administrator's Sites window, select the package that you just created, and drag it onto a computer or machine group. This action automatically opens the Job Properties dialog box. To make the job mandatory, click the Details button of the Job Properties dialog box and set the Mandatory After date to be equal to the Offer After date, as Screen 2 shows. The PCM service doesn't install jobs until they are mandatory.
When you send a package that will run as a System Task (i.e., one that will install automatically), keep in mind that it will run only on systems that have the PCM service. When you create the job, limit the job target to NT machines with the service. You can design an SMS query to look for pcmsvc32.exe and send the job only to machines that have this file. If you send the job to machines without the PCM service, the job will not run. The job will remain incomplete until you delete it through the SMS Administrator.
Test the System
Before you use the PCM service to install applications on all your SMS machines, test your system thoroughly. If you can, test the service on an isolated SMS network that includes a server and several workstations. If you don't have an isolated SMS network available, you can follow a test plan I developed to minimize the PCM service's impact on my network.
You can run SMS's Audit package job to audit all the software on a computer. This package scans the files on a computer and compares them to the files in an Audit rule file. If SMS finds matching files in both places, it stores the results in the SMS database on the SMS site server. The Audit job is a good test of your SMS configuration, because it is simple and can run quickly. The Audit rule file that comes with SMS contains entries for more than 5000 applications. To make my test run more quickly, I configured an Audit rule file that contained information about only one application; I checked my computer's hard disk for Word 95. I created an Audit package and sent the job through the PCM service to my workstation. Then, I used SMS to upgrade my workstation to Office 97. These tests let me see the problems with my PCM service configuration before I installed the service on all my network's SMS computers.
When I was satisfied with the results of my PCM installation on my workstation, I targeted a group of power users in the IS department to test my Audit and Office 97 packages. These users understand computers and know the Audit and Office 97 software, so they provided me with thorough, invaluable feedback about the PCM installations.
Only after testing the PCM service on my workstation and my IS department did I use it to distribute applications to groups of general users. Because I had tested the service so carefully, my PCM service installations to my general user population proceeded smoothly.
Head Off Potential Problems
The PCM service can cause several problems for you and your users. You can easily bypass these problems if you properly plan your installations and anticipate conflicts the PCM service might have with other applications.
Jobs that the PCM service distributes use the PCM service account to access resources. These jobs can cause problems if the PCM service attempts to access resources while a logged-on user is using those resources. For example, when you install an application through the PCM service on a machine running an NT version earlier than 4.0, the PCM service uses a Dynamic Data Exchange (DDE) interface to create Program Manager groups for program icons. However, when users are logged on to their computers, they have exclusive rights to the Program Manager interface. Therefore, the application's setup program won't create desktop icons because the user's NT system denies the PCM service access to the Program Manager. To avoid this problem, send jobs that require access to the Program Manager only when users are logged off their machines.
The PCM application also causes problems if it executes at the same time as the PCM service. If a user attempts to install an application or upgrade software at the same time that the PCM service is executing an installation, the user will receive an error message. To avoid this conflict, distribute applications through the PCM service when users are unlikely to execute the PCM application.
Make Your Life Easier
The PCM service for SMS is valuable for systems administrators. One of my clients has a large SMS infrastructure, but before the release of SMS SP2, the company preferred not to use SMS to distribute applications to users. Users had difficulty understanding the PCM application, and the company noticed a spike in the number of calls to the internal Help desk after every software distribution. Rather than engage users in the installation process, the company sent a technician to every desktop to install applications manually.
Now the company uses the PCM service to distribute software to user desktops. The number of calls to the Help desk has fallen, and every desktop has a standard set of applications. Total administration time on the system has dropped dramatically.
The newly improved PCM service does much to ease systems administrators' headaches. You can now distribute packages in the evening, and users can return to their desks in the morning to find a new set of applications on their machines. If only the PCM service could teach users how to operate the new applications.