MGT 309 Microsoft System Center 2012 Configuration Manager

MGT 309 Microsoft System Center 2012 Configuration Manager Overview Mark Florida Principal Program Manager Lead Microsoft Corporation Wally Mead Senior Program Manager Microsoft Corporation

Evolution of Microsoft Client Management 2012 2011 2007 2003 1999 1994 SMS 2. 0 SMS 1. 0 Client Management Infancy (NT Domain) Groups Model Laptops, Servers, Enterprise Scale Comprehensive Management from the Cloud Consumerization of IT

Challenges to. Considerations Enabling Consumerization Infrastructure Management of. I want to use the diverse devicesdevice I prefer How can IT support Devices User and manage all Corporate Consumer those devices? I want to connect to Secure, anywhere be access to appspeople and Application Experience productive & data anywhere, anytime How can IT provide access to appsand and. Access data Security while maintaining security?

Empower Users Unify Infrastructure Simplify Administration Empower people to be more productive from almost anywhere on almost any device. Reduce costs by unifying IT management infrastructure. Improve IT effectiveness and efficiency.

Empower Users Unify Infrastructure Simplify Administration Application Delivery Mobile Device Management Empower people to be more productive from anywhere on any device. Reduce costs by unifying IT management infrastructure. Improve IT effectiveness and efficiency.

Empower Delivery Evaluation Criteria • Deliver best user experience on each device • Define application once < > • User • Device type • Network connection User/Device Relationships Windows Embedded Primary Devices • MSI • App-V Non-primary Devices • VDI • Presentation Server • Remote Desktop

Empower General Information Application “Package” < > Administrator Properties Keep your apps organized and managed End User Metadata The “friendly” information for your users (appears in Catalog) Deployment Type App-V Detection Method Is app installed? Windows Script Install Command line and options Windows Installer Requirement Rules Can/cannot install app CAB Dependencies Apps that must be present Supersedence Application version control

Empower IT User Administrators publish software titles to catalog, complete with meta data to enable search • Deliver best user experience on each device Users can browse, select and install directly from Catalog • Application model determines format and policies for delivery

Empower Management for all Exchange Active. Sync (EAS) connected devices • • EAS-based policy delivery Discovery and inventory Settings policy Remote Wipe 7

DEMO People-Centric Software Distribution

Empower

Linux & UNIX: Supported Operating Systems AIX HP-UX Red Hat Enterprise Linux • Version 5. 3 (Power) • Version 6. 1 (Power) • Version 7. 1 (Power) • Version 11 iv 2 (PA-RISC/IA 64) • Version 11 iv 3 (PA-RISC/IA 64) • Version 4 (x 86/x 64) • Version 5 (x 86/x 64) • Version 6 (x 86/x 64) Solaris • Version 9 (SPARC) • Version 10 (SPARC/x 86) • Version 11 (SPARC/x 86) SUSE Linux Enterprise Server • Version 9 (x 86) • Version 10 SP 1 (x 86/x 64) • Version 11 (x 86/x 64) • Supported OS’s across both: • Configuration Manager • Operations Manager • Newer versions of operating systems will be supported within 180 days of release • Old versions will be supported as long as vendor provides support • Broader Linux distro support being evaluated for future releases

DEMO Metro Style Applications and MAC OS X Software Distribution

Unify Infrastructure Reduced Infrastructure Requirements Unified Management of Virtual Clients Endpoint Protection Compliance & Settings Management Reduce costs by unifying IT management infrastructure. Software Update Management Power Management Internet-based Client Management

Reduced Infrastructure Requirements Unify Central Administration Site Primary Sites Secondary Sites • Central primary site administration • Reporting • Client management and settings • Delegated administration • Content routing • Distributions points Central Administration Site Primary Site Secondary Site Secondary Site

Unified Management of Virtual Clients Unify User-centric application delivery through App-V or Citrix Xen. App. CONNECTION BROKER Single admin experience for managing physical and virtual desktops. Integrates with RDS and Xen. Desktop. • Recognizes pooled and personal virtual desktops • Randomizes tasks APP-V CONFIGMGR SEQUENCER DP/MP HYPER-V

Security and Compliance Endpoint Protection Unified Infrastructure • Simplified server and client deployment • Streamlined updates • Consolidated reporting Comprehensive Protection Stack • • Behavior monitoring Antimalware Dynamic Translation Windows and Firewall Management Unify

Security and Compliance Unify Software Update Microsoft Update Identifies who needs updates and reports on compliance Downloads updates CAS Auto Deployment • Faster deployment through search • Schedule content download and deployment to avoid reboot during work hours State-based Updates Primary Site SUP Role/WSUS Primary Site DP Role MP Role Distributes updates Reports compliance Assigns policy to scan for update status or to deploy update • Allows individual or group deployment • Updates added to groups auto deploy to targeted collections Optimized for New Content Model • Reduce replication and storage • Expired updates and content deleted

Security and Compliance Unify Settings Management Config. Mgr MP Baseline Config. Mgr Agent Assignment to collections Baseline drift ! Auto Remediate OR Create Alert (to Service Manager) Baseline Configuration Items Active Directory Script WMI XML SQL File Software Updates Registry MSI IIS Improved functionality • Copy settings • Trigger console alerts • Richer reporting Enhanced versioning and audit tracking • Ability to specify versions to be used in baselines • Audit tracking includes who changed what Pre-built industry standard baseline templates through IT GRC Solution Accelerator

Unify Week 1: Monitor • Enable client management agent • Begin monitoring usage and activity Week 2: Plan • Continue monitoring on usage and activity • Begin to develop Power Plan • VM awareness (new compared to 2007) • Copy power policies (new compared to 2007) Mid-Month: • Power Plan has been confirmed Week 3: Apply Power policy • Begin applying Power Plan • End user opt-out (new compared to 2007) Week 4: Compliance & Analyze • Review before and after usage and activity • Determine savings in Kwh and Co 2 saved Non-Peak & Peak

Internet-based Client Management Intranet Reduced Complexity Internet • Single Primary site can manage both Intranet clients (over HTTP) and Internet clients (over HTTPS) PR 1 MP MP DP DP Flexibility • Primary sites can be configured to either support only HTTPS roles or both HTTP and HTTPS site roles Reliability Non PKI enabled site system Unify • Intelligent client behavior enables client to communicate using the most secure option available • Tighter security enforcement by only allowing clients with Enterprise-issued certificates to communicate with the Config. Mgr roles

DEMO Settings Management

Unify

What’s new in SP 1 Scenario 1: Hierarchy Expansion Central Administration Site Must be a new installation Scenario 2: Merger Primary Site Houston Primary Site 10, 000 Clients Migration Primary Site Miami Primary Site 5, 000 Clients

Simplify Administration Modern GUI Role-based Administration Operating System Deployment Client Health Improve IT effectiveness and efficiency. Asset Intelligence Remote Control

Modern GUI • • Intuitive ribbon interface In-console alerts Global search capability New collection membership rules allow better filtering of members Simplify

Role Based Administration Map the organizational roles of your administrators to defined security roles Simplify Meg- WW Central System Administrator • Security organization role • Geography Louis-Software Update Manager for France Reduces error, defines span of control for the organization Functionality Config. Mgr 2007 Config. Mgr 2012 What types of objects can I see and what can I do to them? Class rights Security roles Which instances can I see and interact with? Object instance permissions Security scopes Which resources can I interact with? Site specific resource permissions Collection limiting Can see & update “France” desktops • Cannot modify security settings on “France” desktops • Cannot see “All Systems” or “U. S. ” desktops • Bob- US & France Security Admin Can see & modify security settings on “France” and “U. S. ” desktops • Cannot update “France” or “U. S. ” desktops • Cannot see “All Systems” •

DEMO Role Based Administration

Operating System Deployment Simplify Multiple Deployment Method Support CAS Image Task Sequence Report WDS PXE Server Primary Site DP Role Primary Site MP Role • PXE initiated deployment allows client computers to request deployment over the network • Multi-cast deployment to conserve network bandwidth • Stand-alone media deployment for no network connectivity or low bandwidth • Pre-staged media deployment allows you to deploy an operating system to a computer that is not fully provisioned USMT 4. 0 UI integration makes it easier transfer files and user settings from one machine to another

Operating System Deployment What’s new in SP 1

Simplify • • • In-console view of client health Threshold-based console alerts Heartbeat DDRs HW/SW inventory and status Remediation (same as Setting Mgmt)

Asset Intelligence, Inventory, and Software Metering Simplify Consolidated/simplified reporting that allows you to • Understand software installation profiles • Plan for hardware upgrades • Identify over or under licensing issues • Track custom apps or groups of titles Real-time Application and Hardware Intelligence Asset Intelligence Service Config. Mgr Inventory Asset Intelligence Catalog Software Metering & License Reports

Simplify

What’s new in SP 1

Assist with Migration of Objects Assist with Migration of Clients Minimize WAN impact Maximize Re-usability of x 64 Server Hardware Assist with Flattening of Hierarchy

Unify Empower Summary Application Delivery 2007 R 3 2012 SP 1 Application Delivery Device Centric User Centric Metro style Mobile Device Management MDM licensing Integrated End user platform support Windows and EAS Windows 8, Mac, Linux Reduced Infrastructure Requirements New Flexible hierarchies Unified Management of Virtual Clients Improved Endpoint Protection Integrated Real-time actions Compliance & Settings Management Auto Remediation User Profile and Data Software Update Management Improved Simplify Power Management Internet-based Client Management Improved Role-based Administration New Operating System Deployment Asset Intelligence, Client Health, and Inventory Improved

Breakout Sessions MGT 310 | Microsoft System Center 2012 Endpoint Protection Overview MGT 311 | Microsoft System Center 2012 Configuration Manager Deployment and Infrastructure Technical Overview MGT 312 | Deep Application Management with Microsoft System Center 2012 Configuration Manager MGT 313 | Microsoft System Center 2012 Configuration Manager: Plan, Deploy, and Migrate from Configuration Manager 2007 to 2012 MGT 318 | Patch and Settings Management in Microsoft System Center 2012 Configuration Manager WCL 388 | Client Management Scenarios in the Windows 8 Timeframe

Hands-on Labs: MGT 23 -HOL | Deploying Windows 7 to Bare Metal Systems with Microsoft System Center 2012 Configuration Manager MGT 24 -HOL | Implementing Endpoint Protection 2012 in Microsoft System Center 2012 Configuration Manager MGT 12 -HOL | Compliance and Settings Management in Microsoft System Center 2012 Configuration Manager MGT 25 -HOL | Deep Dive: Microsoft System Center 2012 Configuration Manager SQL Replication Labs MGT 21 -HOL | Basic Software Distribution in Microsoft System Center 2012 Configuration Manager MGT 16 -HOL | Migrating from Microsoft System Center Configuration Manager 2007 to System Center 2012 Configuration Manager MGT 14 -HOL | Implementing Role Based Administration in Microsoft System Center 2012 Configuration Manager MGT 15 -HOL | Deploying a Microsoft System Center 2012 Configuration Manager Hierarchy MGT 11 -HOL | Introduction to Microsoft System Center 2012 Configuration Manager

Learning Connect. Share. Discuss. Microsoft Certification & Training Resources http: //northamerica. msteched. com www. microsoft. com/learning Tech. Net Resources for IT Professionals Resources for Developers http: //microsoft. com/technet http: //microsoft. com/msdn

Complete an evaluation on Comm. Net and enter to win!

Scan the Tag to evaluate this session now on my. Tech. Ed Mobile