Project Management – Resource Planning – Technology Teams and What You Need to Know

This is Part 1 of a multi-part article series concerning resource planning in a technology-centric PMO.

With the complexities present in today’s organizations, PMOs face many obstacles, pitfalls and challenges. In my opinion, one of the biggest challenges which PMOs face, is resource allocation. Specifically, the planning and allocation of resources while dealing with conflicting projects or job duties which require the same resources. Although human resources are those which are most frequently cited for these types of issues, physical resources must be considered as well. As far as physical resources, we are speaking of systems, networks, storage devices, etc.; those infrastructure pieces which are necessary to complete a particular portion of a project, which may be unavailable during the project task timeline due to conflicts.

Interacting with Teams

As a technical project manager, you need to be keenly familiar with each distinct area of your organization’s technical infrastructure. In Part 1 of this article, I will go over the technical areas of which a project manager will need to be aware when planning for resource allocation, their order of awareness (based on my experience in the field), and potential “gotchas.” This certainly does not contain everything involved with the teams and the tasks, but does grab the essential item descriptions a project manager will need to get themselves injected into the correct processes.

Organizational Areas of Technical Infrastructure (listed in order of awareness):

· App / Dev – Commonly known as the “development teams,” this group deals primarily in the development and maintenance of either internally-developed applications or framework applications which have internally maintained customizations. In most organizations, this is the most visible group and the group around which most projects and activities revolve. Many projects and changes start with this group and move outward as it is discovered that other groups are needed in order for a project or change to be successful. Projects and changes coming out of this group can require any or all of the remaining groups. Careful requirements gathering and planning is required for anything coming out of this group. Remember that most development teams are very focused on their own areas and will generally depend on other teams to let them know what they need for an implementation to be successful.

· Database – Database teams have complicated jobs in many instances, being a combination of server administrators, database engineers/administrators and database programmers. In many instances, database teams are also part of certain development efforts when it comes to actual database programming, such as SQL. They are called upon to validate code, be available for troubleshooting, and other tasks related to development change efforts. Additionally, database teams are traditionally pretty thinly staffed, which means there are few people, pulled in many different directions. That, coupled with their day-to-day duties, makes this team’s members very difficult to reserve.

· Server – Server teams are sometimes divided into two teams, operations and engineering. If this is the case in your organization, the operations team will most likely be needed for assistance with projects involving server changes, while the engineering team will be called upon for new server builds and/or refreshes. Typically, this team is responsible for up/down and operating system functionality, as well as monitoring and alerting with respect to the server infrastructure. Additionally, this team is usually responsible not only for Active Directory (and everything that entails), DNS (depending upon the technology used), and DHCP, but also virtualization technologies such as Citrix, VMWare and Hyper-V. This would place them in the mix for anything related to hosted applications, VDI or virtual server tasks. Much like database teams, the server team is generally thinly staffed, so plan accordingly.

· Network – The easiest way to describe a network to the uninitiated is to equate it to the spinal cord of your body. The network IS, in my opinion, the single most important piece of an organization’s infrastructure. Without a functioning network, there is not much that will work in today’s world of distributed technology systems. Here is a short list of things you will need the network team for with respect to your projects: IP address assignment, VLAN creation, switch port assignment and configuration, network cabling, and new site build-outs. Unfortunately, the network team is typically the second-to-last team to be notified of a change which needs their assistance and this usually occurs when the server has arrived, has been racked, and the person performing the server build-out asks when they will have network connectivity. My advice to all technical project managers is to engage the network team first, if there is any chance that you will need network connectivity – and that is most likely, always.

· Desktop – Desktop teams can be divided into two separate teams, depending upon the level of technical expertise present in the organization. Sometimes, this team consists of “Desktop Support,” which is made up of level 1 (help desk) and level 2 (field service) support and “Desktop Infrastructure,” which could be a support level in between field service personnel and vendor support. This level will typically exist in organizations which have mature technology departments and is usually responsible for desktop management systems, such as Configuration Manager and virus protection projects as they relate to the desktop infrastructure. The Desktop teams are generally the last teams to know about any change except their own. Regardless of the change occurring, it will almost always need the assistance of the Desktop teams so it is important to involve them early in the planning process to determine if they are needed and define their roles.

In Part 2 of this article, I will discuss the various activities routinely handled by the teams mentioned above and what types of scheduling conflicts you can expect as a project manager.

CM 2012 – Configuration – Custom Client Settings for SUP

A client recently requested preliminary design for moving security updates from WSUS to CM 2012.  There were several requirements for the move as well:  1) SUP would need to be tested on a small group of clients initially;  2) WSUS would need to remain in parallel during the process in order to keep current desktop/laptop clients and servers patched; 3) WSUS would need to remain in place after the move as the server team would continue to use it until their conversion to CM 2012.

I’m only going to focus on how custom client settings were used to segment out the test group from the main body of desktops and laptops.  (There were Group Policy and other adjustments which had to be made as well, but they are not part of this discussion.)

First, I created a test collection to house the initial software updates test group.

CCSSUP01

Current Default Client settings have Software Updates turned off.

CCSSUP02

I created a custom client device setting specifically targeted at software updates.  You can do this by navigating to Administration > [expand] Overview > [expand] Site Configuration > [select] Client Settings, then either right-click on Client Settings and select “Create Custom Client Device Settings” or click the same-named icon in the top ribbon.

On the General tab of the resulting screen, I named the Custom Device Settings “Software Updates – Enabled” and checked the Software Updates box.  Checking this box reveals the Software Updates tab in the left panel.

CCSSUP03

On the Software Updates tab, I enabled software updates on clients (1 in the picture below), set bundling of updates having deadlines within 1 day of any update which has reached its deadline. (2 and 3 in the picture below) Save the custom client setting by clicking OK and then deploy it to the test collection.  I set the priority of the setting to 1.  If this is your first custom setting, it will default to a priority of 1.  You can change the priority of any custom setting by right-clicking on the setting and using the Increase or Decrease Priority selections from the drop-down menu.  Remember that the lower the priority number, the higher the priority in settings application on the client machine.

CCSSUP04

The newly deployed shows up under the deployments tab of the custom settings.

CCSSUP06

Force a Machine Policy Retrieval & Evaluation Cycle on the machines located in the test collection and the new custom settings will be applied.  You can check this by looking at the Components tab of the Configuration Manager control panel applet.

CCSSUP08

Initiate a Software Updates Scan Cycle on the machines located in the test collection and then spot-check the WUAHandler.log file on those machines to validate that the clients are pointing to the correct SUP server and that the scan is not encountering any errors which need addressing.  You should see something similar to the below entries in the log file.

Enabling WUA Managed server policy to use server: [YOUR SERVER HERE]
Async searching of updates using WUAgent started.
Async searching completed.
Successfully completed scan.

If you feel so inclined, use a tool such as Roger Zanders Client Center to check things out. (http://sccmclictr.codeplex.com/  –  don’t forget to donate!)

CCSSUP10

Server 2012 – Configuration – Disable Internet Explorer Enhanced Security

Another one of those items which can be hard to find if you are new to the GUI of Server 2012.

Within Server 2012, startup Server Manager and select your server (select local server if performing configuration on the server on which you are currently logged).  Then look to the second column to the right for an item labeled “IE Enhanced Security Configuration.”  Click the link to the right of the word “Configuration.”

SRV2012-DES01

I generally do not disable this except for Administrators of the server, and then only temporarily to make things easier during a build.  Click the “Off” radio button and then click OK.  Be sure to turn this back on if it is required by your security polices and the temporary task is complete.

SRV2012-DES02

CM 2012–Configuration – Software Update Point Settings

I’ve had this question posed a number of times, “How do I change the Software Update Point settings after I’ve installed SUP?”  If you’re new to the CM 2012 console, finding where to configure additional settings can be somewhat challenging at times.

Navigate to Administration > Site Configuration > Sites > the site which has SUP installed
Right-click on the site and select Configure Site Components > Software Update Point

Step 01

Choose the tab which contains the items you want to configure. In the picture below, I drew arrows to the update classifications tab and the products tab.  When you are finished, click Apply and OK.

Step 02