SCCM 2012

Features and Benefits

Or: How I learned to stop worrying and love Centralized

Administration
 Evolution of Microsoft Client Management
2012 2012

2011

2007

2003

1999 SMS 2.0

1994
SMS 1.0

Client Management Laptops, Servers, Comprehensive Management Consumerization

Groups Model
Infancy (NT Domain) Enterprise Scale Management from the Cloud of IT
Unified Device Management
Windows PCs
(x86/64, Intel SoC),
Windows to Go
Windows Embedded

Mac OS X

Linux

Windows RT,
Windows Phone 8
iOS, Android
• Deliver best user experience on each device Delivery Evaluation Criteria
• Define application once
• User
• Device type
< > • Network connection

User/Device Relationships

Primary Devices
• MSI
• App-V
Non-primary Devices
• VDI
• Presentation Server
• Remote Desktop
Windows
Embedded
 Administrators publish software
titles to catalog, complete with meta
data to enable search
• Deliver best user experience
on each device

Admin

Users can browse, select and install

directly from Catalog
• Application model determines
format and policies for delivery
User
User preferences to control ConfigMgr behaviors:
“My business hours” – used to control when to install
software
Presentation mode – don’t notify when presenting
Remote control settings – when allowed, end user can
control their experience
 General Information
Application Administrator Properties
“Package”
< > End User Metadata

Deployment Type
App-V Detection Method

Windows Script Install Command

Windows Installer Requirement Rules

CAB Dependencies

Supersedence
 DEMO
Client Settings

Application Delivery

End User Experience

Security and Compliance
Endpoint Protection

Unified Infrastructure

• Simplified server
and client deployment
• Streamlined updates
• Consolidated reporting

Comprehensive Protection Stack

• Behavior monitoring
• Antimalware
• Dynamic Translation
• Windows and Firewall
Management
Security and Compliance
Settings Management (Desired Configuration Management)

ConfigMgr MP Baseline ConfigMgr Agent

Auto Remediate
Assignment to OR
Baseline drift
collections
!
Create Alert
(to Service Manager)

Baseline Configuration Items

Active
Script WMI XML SQL
Directory
Software
File Registry MSI IIS
Updates

Improved functionality Pre-built industry standard baseline templates

• Copy settings through IT GRC Solution Accelerator
• Trigger console alerts
• Richer reporting

Enhanced versioning and audit tracking

• Ability to specify versions to be used in baselines
• Audit tracking includes who changed what
Week 1: Monitor
•Enable client management agent
•Begin monitoring usage and activity

Week 2: Plan
•Continue monitoring on usage and activity
•Begin to develop Power Plan
Non-Peak & Peak
•VM awareness (new compared to 2007)
•Copy power policies (new compared to 2007)
Mid-Month:
•Power Plan has been confirmed

Week 3: Apply Power policy

•Begin applying Power Plan
•End user opt-out (new compared to 2007)

Week 4: Compliance & Analyze

•Review before and after usage and activity
•Determine savings in Kwh and Co2 saved
Role Based Administration

Map the faculty roles to defined security roles

John- IST Central System
Administrator
• Applications Manager
• OSD Manager
• Updates Manager
Louis-Software Update
• Only “see” the computers and objects they can Manager for France
manage
• Can see & update
“France” desktops
Reduces error, defines span of control for our • Cannot modify security
environment settings on “France”
desktops
• Cannot see “All Systems”
or “U.S.” desktops
Bob- US & France
Security Admin
• Can see & modify
security settings on
“France” and “U.S.”
desktops
• Cannot update “France”
or “U.S.” desktops
• Cannot see “All
Systems”
Asset Intelligence, Inventory, and
Software Metering
• Track application usage
• Up to date, detailed inventory of both hardware and
software
• Identify over or under licensing issues

Real-time Application Asset Intelligence Service Software Metering & License Reports
and Hardware Intelligence

ConfigMgr Inventory Asset Intelligence Catalog

Exchange Connector Integration
• Easy configuration
• Simply enter exchange server/hosted URL and credentials
• Inventory
• Pulls data from Exchange Server
• Full and fast/delta synchronization
• Key info: user, deviceID, device type, last contact time
• Policy
• Parity with exchange: security, sync, device lockdown
• Define globally per Exchange Server
• Wipe
• Wipe a device from console action
Reduced Infrastructure Requirements
Central Administration Site Primary Sites Secondary Sites
• Central primary site administration • Client management and settings • Content routing
• Reporting • Delegated administration • Distribution points

Central
Administration
Site

Primary Site Primary Site

Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site
Our Infrastructure

Primary Site
• Client management and settings
• Delegated administration

Primary Site

Secondary Sites (As required) Client Computers

• Content routing • Directly Assigned
• Distribution points • Report to Primary Site
Secondary Site Client Client
Computer Computer