SCCM 2012
Features and Benefits
Or: How I learned to stop worrying and love Centralized
Administration
Evolution of Microsoft Client Management
2012
2012
2011
2007
2003
1999
1994
SMS 2.0
SMS 1.0
Client Management
Infancy (NT Domain)
Groups Model
Laptops, Servers,
Enterprise Scale
Comprehensive
Management
Management
from the Cloud
Consumerization
of IT
Unified Device Management
Windows PCs
(x86/64, Intel SoC),
Windows to Go
Windows Embedded
Mac OS X
Linux
Windows RT,
Windows Phone 8
iOS, Android
Delivery Evaluation Criteria
• Deliver best user experience on each device
• Define application once
< >
• User
• Device type
• Network connection
User/Device Relationships
Windows
Embedded
Primary Devices
• MSI
• App-V
Non-primary Devices
• VDI
• Presentation Server
• Remote Desktop
Administrators publish software
titles to catalog, complete with meta
data to enable search
• Deliver best user experience
on each device
Admin
User
Users can browse, select and install
directly from Catalog
• Application model determines
format and policies for delivery
User preferences to control ConfigMgr behaviors:
“My business hours” – used to control when to install
software
Presentation mode – don’t notify when presenting
Remote control settings – when allowed, end user can
control their experience
General Information
Application
“Package”
< >
Administrator Properties
End User Metadata
Deployment Type
App-V
Detection Method
Windows Script
Install Command
Windows Installer
Requirement Rules
CAB
Dependencies
Supersedence
DEMO
Client Settings
Application Delivery
End User Experience
Security and Compliance
Endpoint Protection
Unified Infrastructure
• Simplified server
and client deployment
• Streamlined updates
• Consolidated reporting
Comprehensive Protection Stack
•
•
•
•
Behavior monitoring
Antimalware
Dynamic Translation
Windows and Firewall
Management
Security and Compliance
Settings Management (Desired Configuration Management)
ConfigMgr MP
Baseline
ConfigMgr Agent
Assignment to
collections
Baseline drift
!
Auto Remediate
OR
Create Alert
(to Service Manager)
Baseline Configuration Items
Active
Directory
Script
WMI
XML
SQL
File
Software
Updates
Registry
MSI
IIS
Improved functionality
• Copy settings
• Trigger console alerts
• Richer reporting
Enhanced versioning and audit tracking
• Ability to specify versions to be used in baselines
• Audit tracking includes who changed what
Pre-built industry standard baseline templates
through IT GRC Solution Accelerator
Week 1: Monitor
•Enable client management agent
•Begin monitoring usage and activity
Week 2: Plan
•Continue monitoring on usage and activity
•Begin to develop Power Plan
•VM awareness (new compared to 2007)
•Copy power policies (new compared to 2007)
Mid-Month:
•Power Plan has been confirmed
Week 3: Apply Power policy
•Begin applying Power Plan
•End user opt-out (new compared to 2007)
Week 4: Compliance & Analyze
•Review before and after usage and activity
•Determine savings in Kwh and Co2 saved
Non-Peak & Peak
Role Based Administration
Map the faculty roles to defined security roles
•
•
•
•
Applications Manager
OSD Manager
Updates Manager
Only “see” the computers and objects they can
manage
Reduces error, defines span of control for our
environment
John- IST Central System
Administrator
Louis-Software Update
Manager for France
Can see & update
“France” desktops
• Cannot modify security
settings on “France”
desktops
• Cannot see “All Systems”
or “U.S.” desktops
•
Bob- US & France
Security Admin
Can see & modify
security settings on
“France” and “U.S.”
desktops
• Cannot update “France”
or “U.S.” desktops
• Cannot see “All
Systems”
•
Asset Intelligence, Inventory, and
Software Metering
• Track application usage
• Up to date, detailed inventory of both hardware and
software
• Identify over or under licensing issues
Real-time Application
and Hardware Intelligence
Asset Intelligence Service
ConfigMgr Inventory
Asset Intelligence Catalog
Software Metering & License Reports
Exchange Connector Integration
• Easy configuration
• Simply enter exchange server/hosted URL and credentials
• Inventory
• Pulls data from Exchange Server
• Full and fast/delta synchronization
• Key info: user, deviceID, device type, last contact time
• Policy
• Parity with exchange: security, sync, device lockdown
• Define globally per Exchange Server
• Wipe
• Wipe a device from console action
Reduced Infrastructure Requirements
Central Administration Site
Primary Sites
Secondary Sites
• Central primary site administration
• Reporting
• Client management and settings
• Delegated administration
• Content routing
• Distribution points
Central
Administration
Site
Primary Site
Secondary Site
Secondary Site
Primary Site
Secondary Site
Secondary Site
Secondary Site
Secondary Site
Our Infrastructure
Primary Site
• Client management and settings
• Delegated administration
Primary Site
Secondary Sites (As required)
Client Computers
• Content routing
• Distribution points
• Directly Assigned
• Report to Primary Site
Secondary Site
Client
Computer
Client
Computer