SCCM 2012 Features and Benefits Or How I

SCCM 2012 Features and Benefits Or: How I learned to stop worrying and love Centralized Administration

• • • Unified Device Management User Centric Application Delivery Operating System Deployment Software Updates Integrated Endpoint Management Configuration Compliance Power Management Role Based Administration Software Metering, Asset Intelligence Other features

Evolution of Microsoft Client Management 2012 2011 2007 2003 1999 1994 SMS 2. 0 SMS 1. 0 Client Management Infancy (NT Domain) Groups Model Laptops, Servers, Enterprise Scale Comprehensive Management from the Cloud Consumerization of IT

Unified Device Management System Centre Configuration Manager 2012 R 2 Windows PCs (x 86/64, Intel So. C), Windows to Go Windows Embedded Mac OS X Linux Windows RT, Windows Phone 8 i. OS, Android

Delivery Evaluation Criteria • Deliver best user experience on each device • Define application once < > • User • Device type • Network connection User/Device Relationships Windows Embedded Primary Devices • MSI • App-V Non-primary Devices • VDI • Presentation Server • Remote Desktop

Administrators publish software titles to catalog, complete with meta data to enable search • Deliver best user experience on each device Admin Users can browse, select and install directly from Catalog • Application model determines format and policies for delivery

User preferences to control Config. Mgr behaviors: “My business hours” – used to control when to install software Presentation mode – don’t notify when presenting Remote control settings – when allowed, end user can control their experience

General Information Application “Package” < > Administrator Properties Keep your apps organized and managed End User Metadata The “friendly” information for your users (appears in Catalog) Deployment Type App-V Detection Method Is app installed? Windows Script Install Command line and options Windows Installer Requirement Rules Can/cannot install app CAB Dependencies Apps that must be present Supersedence Application version control

DEMO Client Settings Application Delivery End User Experience

Security and Compliance Endpoint Protection Unified Infrastructure • Simplified server and client deployment • Streamlined updates • Consolidated reporting Comprehensive Protection Stack • • Behavior monitoring Antimalware Dynamic Translation Windows and Firewall Management

Security and Compliance Settings Management (Desired Configuration Management) Config. Mgr MP Baseline Config. Mgr Agent Assignment to collections Baseline drift ! Auto Remediate OR Create Alert (to Service Manager) Baseline Configuration Items Active Directory Script WMI XML SQL File Software Updates Registry MSI IIS Improved functionality • Copy settings • Trigger console alerts • Richer reporting Enhanced versioning and audit tracking • Ability to specify versions to be used in baselines • Audit tracking includes who changed what Pre-built industry standard baseline templates through IT GRC Solution Accelerator

• Create and manage power management profiles • Enforce profiles based on usage statistics • Different profiles “On Peak”, “Off Peak” • Create reports showing usage data and power savings • Users can “opt-out” (if we let them)

Week 1: Monitor • Enable client management agent • Begin monitoring usage and activity Week 2: Plan • Continue monitoring on usage and activity • Begin to develop Power Plan • VM awareness (new compared to 2007) • Copy power policies (new compared to 2007) Mid-Month: • Power Plan has been confirmed Week 3: Apply Power policy • Begin applying Power Plan • End user opt-out (new compared to 2007) Week 4: Compliance & Analyze • Review before and after usage and activity • Determine savings in Kwh and Co 2 saved Non-Peak & Peak

Role Based Administration Map the faculty roles to defined security roles • • Applications Manager OSD Manager Updates Manager Only “see” the computers and objects they can manage Reduces error, defines span of control for our environment John- IST Central System Administrator Louis-Software Update Manager for France Can see & update “France” desktops • Cannot modify security settings on “France” desktops • Cannot see “All Systems” or “U. S. ” desktops • Bob- US & France Security Admin Can see & modify security settings on “France” and “U. S. ” desktops • Cannot update “France” or “U. S. ” desktops • Cannot see “All Systems” •

Asset Intelligence, Inventory, and Software Metering • Track application usage • Up to date, detailed inventory of both hardware and software • Identify over or under licensing issues Real-time Application and Hardware Intelligence Asset Intelligence Service Config. Mgr Inventory Asset Intelligence Catalog Software Metering & License Reports

Exchange Connector Integration • Easy configuration • Simply enter exchange server/hosted URL and credentials • Inventory • Pulls data from Exchange Server • Full and fast/delta synchronization • Key info: user, device. ID, device type, last contact time • Policy • Parity with exchange: security, sync, device lockdown • Define globally per Exchange Server • Wipe a device from console action

Reduced Infrastructure Requirements Central Administration Site Primary Sites Secondary Sites • Central primary site administration • Reporting • Client management and settings • Delegated administration • Content routing • Distribution points Central Administration Site Primary Site Secondary Site Secondary Site

Our Infrastructure Primary Site • Client management and settings • Delegated administration Primary Site Secondary Sites (As required) Client Computers • Content routing • Distribution points • Directly Assigned • Report to Primary Site Secondary Site Client Computer

jmayall@uwaterloo. ca