# SCCM

{% hint style="info" %}
SCCM 서버는 DC에서 구성할 수 없고 반드시 별도의 호스트가 필요합니다.
{% endhint %}

1. SCCM 서버 웹 브라우저에서 다음 경로 접속

* <https://learn.microsoft.com/ko-kr/windows-hardware/get-started/adk-install>

2. adksetup.exe 및 adkwinpesetup.exe 설치

<figure><img src="/files/Y6wUaoo9eUcXpNFFGu4V" alt=""><figcaption></figcaption></figure>

3. adksetup.exe 관리자 권한 실행 및 다음의 순서대로 설치 진행

<figure><img src="/files/23uGoKATVNt1qvbVpbZF" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/5lf611UOxkS8A6W7VkKb" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/mVyRBDhOTJrg1LdNPODN" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/ncgWXnh8cOD0xlMnQqHF" alt=""><figcaption></figcaption></figure>

4. adkwinpesetup.exe 관리자 권한 실행 및 다음의 순서대로 설치 진행

<figure><img src="/files/aKzpjXXrXQBWZluxENHY" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/g9kgYmkt9tPxnLf8cKzg" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/z4NPe6sH07VBKKM7a10R" alt=""><figcaption></figcaption></figure>

5. `DC 서버 > 서버 관리자 > ADSI Edit`

<figure><img src="/files/VPl1biABWmgdaHiksle7" alt=""><figcaption></figcaption></figure>

6. `ADSI Edit > Connect to > OK` 를 통해 기본 컨텍스트 연결

<figure><img src="/files/Dbz9u4teSKMZZFN9pCau" alt=""><figcaption></figcaption></figure>

7. `ADSI > Default naming context > CN=System > New > Object` 를 통해 새 객체 생성

<figure><img src="/files/khQTkPNsDjlsOLKvxyfQ" alt=""><figcaption></figcaption></figure>

8. container 객체 선택

<figure><img src="/files/q38IN5ryZA7DoFPf2GQV" alt=""><figcaption></figcaption></figure>

9. `System Management 입력 > Next > finish`

<figure><img src="/files/4J1svorZFULhCsCeiLeb" alt=""><figcaption></figcaption></figure>

10. `DC 서버 > 서버 관리자 > Active Directory Users and Computers`

<figure><img src="/files/ygOPSyakCe4Xof0JAvkW" alt=""><figcaption></figcaption></figure>

11. `Active Directory Users and Computers > View > Advanced Features`  클릭

<figure><img src="/files/9LkdLdSTeVR5PIOaL8Td" alt=""><figcaption></figcaption></figure>

12. `System > System Management > Delegate Control`

<figure><img src="/files/REEeVI1fKCXBiJnXVctI" alt=""><figcaption></figcaption></figure>

13. `Add > Object Types > Computers`  체크

<figure><img src="/files/NSmaL0Hfg1sjDXK46hTX" alt=""><figcaption></figcaption></figure>

14. computers 객체 추가 후 SCCM 서버로 사용할 컴퓨터 등록

<figure><img src="/files/hvsoijJqtUXFN7cvTZV6" alt=""><figcaption></figcaption></figure>

15. `Create a custom task to delegate > Next`

<figure><img src="/files/4vYkc4dvcHAdw8MWfWww" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/ZhTL205zI8c9nEHImH0d" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/4bwkEQKZRGTKMPeDimKS" alt=""><figcaption></figcaption></figure>

16. `Active Directory Users and Computers > Users > New Object - User` 을 통해 SQL 서비스 계정 생성

<figure><img src="/files/QjsqoGyENv1gy5ws2PXh" alt=""><figcaption></figcaption></figure>

17. `SCCM 서버 > win + r > gpedit.msc` 를 통해 그룹 정책 편집기 실행

<figure><img src="/files/tJFvN6pzXCitUKBx6zaG" alt=""><figcaption></figcaption></figure>

18. `Computer Configuration > Windows Settings > Security Settings > Local Policy > User Rights Assignment > Log on as a service > Add User or Group`  이후 생성했던 SQL 서비스 계정 등록

<figure><img src="/files/hoeuw3NORcPlVZRVA9Zs" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/Nuj14GLVg8IuGJfGb3RH" alt=""><figcaption></figcaption></figure>

19. SCCM 서버 웹 브라우저에서 다음 주소 접속

* <https://www.microsoft.com/ko-kr/evalcenter/download-microsoft-endpoint-configuration-manager>

20. MCM 2403 다운로드

<figure><img src="/files/8jxj4lZzp8w1h0Kk6jwr" alt=""><figcaption></figcaption></figure>

21. 설치 파일 압축 해제

<figure><img src="/files/ymGjtFwIBKRkJBXI7HSB" alt=""><figcaption></figcaption></figure>

22. SCCM 서버에서 SMB 공유 디렉토리 생성 (편의상 Downloads 경로 지정)

<pre class="language-powershell"><code class="lang-powershell"><strong># 공유 디렉토리 생성 및 SMB 서버 실행
</strong>net share Shared=C:\Users\Administrator\Downloads /grant:Everyone,FULL
net start lanmanserver
netsh advfirewall firewall add rule name="Allow SMB" protocol=TCP dir=in localport=445 action=allow
</code></pre>

<figure><img src="/files/qgHucx9dkGeOt2zQodpk" alt=""><figcaption></figcaption></figure>

23. `SCCM 서버 > C:\Users\Administrator\Downloads\cd.retail.LN\SMSSETUP\BIN\X64`  내에서 다음 파일을 DC 서버의 C드라이브로 복사

* extadsch.exe
* mfc140.dll
* msvcp140.dll
* vcruntime140.dll
* vcruntime140\_1.dll

<figure><img src="/files/IDaHBwNDznleg5G9NThy" alt=""><figcaption></figcaption></figure>

24. `DC 서버 > C:\extadsch.exe` 실행 후 ExtADSch.log 파일 생성 및 성공 로그 확인

<figure><img src="/files/3S3Gl274DUUR213r7rVv" alt=""><figcaption></figcaption></figure>

25. SCCM 서버 웹 브라우저에서 다음 주소 접속&#x20;

* <https://www.microsoft.com/ko-kr/evalcenter/download-sql-server-2019>

26. SQL Server 2019 설치

<figure><img src="/files/bRbtP5FtfI0xfMqSrlEq" alt=""><figcaption></figcaption></figure>

27. SQL Server Installation Center 실행 (본 페이지에서는 iso 파일을 사용했으므로 exe 설치와 다르게 나타날 수 있지만 무관합니다.

<figure><img src="/files/opxVLHouDC5uh5NpgyZz" alt=""><figcaption></figcaption></figure>

28. `Installation > New SQL Server stand-alone installation`

<figure><img src="/files/yUqlJx7RwuQwxOMoESfw" alt=""><figcaption></figcaption></figure>

29. 다음 단계를 거쳐 설치 진행

<figure><img src="/files/3XmoL6Jcuh13Ui6DogRM" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/rYT6scWGJlzBniOmtZAP" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/sYWoh6qG0U2FzLByTOtv" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/zg3cdJilPHOSp3yrWaHd" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/EwLOsoI88aADVRNonTnK" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/X7wagc2oLzI1jZJviyvV" alt=""><figcaption></figcaption></figure>

30. 이전에 생성한 SQL 서비스 계정 정보 입력

<figure><img src="/files/2HxK6LGDUY2MkdkH9zJT" alt=""><figcaption></figcaption></figure>

31. 혼합모드 인증 선택 후 SA 계정 패스워드 설정 및 SQL 서버 관리자에 SQL 서비스 계정 등록

{% hint style="danger" %}
사진에는 나오지 않았지만, Add Current User를 클릭하여 SCCM 서버 로컬 관리자도 추가합니다.
{% endhint %}

<figure><img src="/files/4BcgP1f25wJQkDxbQN9q" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/NIXimtRyf5nQOxVWJqfs" alt=""><figcaption></figcaption></figure>

32. SCCM 서버 웹 브라우저에서 다음 주소 접속&#x20;

* <https://www.microsoft.com/ko-kr/download/details.aspx?id=100122>

33. SQL Server 2019 Reporting Services 설치

<figure><img src="/files/oMGLwbOhETCtFGeJsAWF" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/J7LK2IsMR88Alt1fRYGn" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/1zhMtYOScgAYY5KuM5kw" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/NMbyXjLo8Pf7tAJIeTz6" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/mj6hTYPFpm1pzjUy8C8i" alt=""><figcaption></figcaption></figure>

34. SCCM 서버 웹 브라우저에서 다음 주소 접속

* <https://learn.microsoft.com/ko-kr/ssms/install/install>

35. SSMS 설치

<figure><img src="/files/c7AoimgFRFWs0MkK8vSv" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/YR0M8gC8R9viFF59dce2" alt=""><figcaption></figcaption></figure>

36. `SCCM 서버 > 서버 관리자 > Manage > Add roles and features > Server Roles`&#x20;

<figure><img src="/files/lBLunAAUZpUUxUEhJqGa" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/qKX9YuRZQJgXPvFkyTMH" alt=""><figcaption></figcaption></figure>

37. Features에서 다음 옵션 선택

* .NET Framework 3.5 Features
* .NET Framework 4.7 Features (2 of 7 installed)
* Background Intelligent Transfer Service(BITS)
* Remote Differential Compression

<figure><img src="/files/HzMwjPhoQYa2Ljkh9Zbf" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/5xW9x1HCrfBjgQ6azXCk" alt=""><figcaption></figcaption></figure>

38. Role Services에서 다음 옵션 선택

* .NET Extensibility 3.5
* ASP.NET 3.5
* IIS 6 Management Console
* IIS 6 Scripting Tools
* IIS 6 WMI Compatibility

<figure><img src="/files/unPHyToRgPbFAWQ07Q7l" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/hS8vEjx39DMotK3Aqi3m" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/0jIifgwwvBB4z7cEDrgU" alt=""><figcaption></figcaption></figure>

39. SCCM 서버 C드라이브 하위에 WSUS\_Content 디렉토리 생성

<figure><img src="/files/8uP08XU5L5lzav5FXJGj" alt=""><figcaption></figcaption></figure>

40. Store updates in the following location 항목에 생성한 C:\WSUS\_Content 경로 입력

<figure><img src="/files/fhMVIE54sWC6HPkGJtXv" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/bM0RMJE97pCzr8Um65T3" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/4ROaKdlu1OGchOX3eT8F" alt=""><figcaption></figcaption></figure>

41. SCCM 서버에서 splash 파일 실행

<figure><img src="/files/XyUnADDnkVl8gh2Zq4kR" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/58OYjwbhXqpDwDqwhQ0t" alt=""><figcaption></figcaption></figure>

42. `Before You Begin > Next`

<figure><img src="/files/Thtt1xxAisqeg6hdtmvY" alt=""><figcaption></figcaption></figure>

43. 설치 과정에서 다음과 같은 오류 발생 시 다음 주소로 접속하여 파일 설치

* <https://go.microsoft.com/fwlink/?linkid=2220989>

<figure><img src="/files/WfREg7pGFUn953wHm22Y" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/4KGt2cyBUwAauCblnmX3" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/Ih08lqdHX31cDxLhpYOh" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/ckJn2G2NBNzXeIGavZva" alt=""><figcaption></figcaption></figure>

44. splash 설치 마법사로 돌아와서 설치 재개

<figure><img src="/files/QzDnDfjLRy1BtxNWtQLV" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/sSneOiVHTt7qw39aOtnY" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/rqk9uafjI0y84ykzktQd" alt=""><figcaption></figcaption></figure>

45. SCCM 서버 C드라이브 하위에 디렉토리 생성

<figure><img src="/files/yUWvIpl7PoyREf12QQbh" alt=""><figcaption></figcaption></figure>

46. Download required files 경로에 생성한 디렉토리를 입력

<figure><img src="/files/YY81wfOmyB6nrqqMDNHL" alt=""><figcaption></figcaption></figure>

47. 사이트 코드와 사이트 이름 작명 후 설치 진행

<figure><img src="/files/RCBOmrtU6AGeLCe4wxuo" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/M2KfZyhfwPHcnMtwZob5" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/zW3z8Bu420b2oK9TzuAH" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/aRzDKuJqpl4jX1QIOHv2" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/CBcfegPqonVPYTJhcyJW" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/gELKh0TPk5J7tPwj0pVS" alt=""><figcaption></figcaption></figure>

48. Configuration Manager Console 프로그램 확인 및 실행

<figure><img src="/files/kv4N98AfidtHghKUsIXs" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/5GRAt7mCp0M6IjMqBoKO" alt=""><figcaption></figcaption></figure>

## References

{% embed url="<https://ksyksy595.tistory.com/1>" %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://www.pentestwiki.com/home-lab/active-directory/sccm.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.