SCCM 2012

Features and Benefits

Or: How I learned to stop worrying and love Centralized

Administration
System Centre Configuration Manager 2012
Unified Device Management
User Centric Application Delivery
Operating System Deployment
Software Updates
Integrated Endpoint Management
Configuration Compliance
Power Management
Role Based Administration
Software Metering, Asset Intelligence
Other features
 Evolution of Microsoft Client
Management 2012 2012

2011

2007

2003

1999 SMS 2.0

1994
SMS 1.0

Laptops,
Management
Client Management Servers, Comprehensive Consumerizati
Groups Model from the
Infancy (NT Domain) Enterprise Management on of IT
Cloud
Scale
Unified Device Management Windows PCs
(x86/64, Intel SoC),
Windows to Go
Windows Embedded

System Centre Mac OS X

Configuration
Manager 2012 R2
Linux

Me Single Admin
Console

Windows RT,
Windows Phone 8
iOS, Android
Mac Support
Supported Releases: Mac OS X 10.6 (Snow Leopard), Mac
OS X 10.7 (Lion), Mac OS X 10.8 (Mountain Lion)
Discovery
Discovers Mac OS X system in Active Directory and through network
discovery
Hardware/Software Inventory
Provides hardware inventory and auditing of computers running Mac OS X,
including a list of installed software similar to add/remove programs for
Windows systems.
Settings Management
Ensures computers running Mac OS X comply with company policies, i.e.
patches and installed software
Application Deployment
Distributes required software via app model.
Software Updates Management
Distributes patches utilizing Software Distribution and Settings management
Linux & UNIX Support
Supported Platforms: AIX, HP-UX, Red Hat Enterprise,
Solaris, SUSE Enterprise

Hardware Inventory
Software Inventory
Software Deployment
Consolidated reports
User-centric Application Delivery
Administrator
Delivery Evaluation
Deliver best user experience on each device Criteria
Define application once
User
Device type
< Network connection
>

User/Device Relationships

Primary Devices
MSI
App-V
Non-primary Devices
VDI
Presentation Server
Remote Desktop
Windows
Embedded
User-centric Application Delivery
End User Self-service

Administrators publish software

titles to catalog, complete with
meta data to enable search
Deliver best user experience
on each device

Admin

Users can browse, select and

install directly from Catalog
Application model determines
format and policies for
Use delivery
r
User Centric: End-User Experience
The Right End-User Experience
Web based Software catalog
Easily search, install or request software

User preferences to control ConfigMgr

behaviors:
My business hours used to control when to
install software
Presentation mode dont notify when presenting
Remote control settings when allowed, end user
can control their experience
User-centric Application Delivery
New Application Model

General Information
Application Administrator Properties Keep your apps organized and managed
Package The friendly information for your users (appears in
< End User Metadata
Catalog)
>
Deployment Type
App-V Detection Method Is app installed?

Windows Script Install Command Command line and options

Windows Installer Requirement Rules Can/cannot install app

CAB Dependencies
Apps that must be present
Supersedence
Application version control
User-centric Application Delivery cont.
Manage applications with built-in mechanisms; not scripts
Application Management:
Detection method re-evaluated for presence:
Required application reinstall if missing
Prohibited application uninstall if detected
Requirement rules evaluated at install time to ensure the app only installs in
places it can, and should
Dependencies relationships with other apps that are all evaluated prior to
installing anything
Supersedence relationships with other apps that should be uninstalled prior
to installing anything
Update an app Automatic revision management
 DEMO
Client Settings

Application Delivery

End User Experience

Operating System Deployment
No-Touch, Manual or Lite-Touch imaging
Scheduled imaging for after-hours
No more Sneaker-net
On-the-fly software and updates deployment
Deploy an image then update the software and/or OS
Standing Advertisements

Offline Servicing of Images

Support for Component Based Servicing compatible updates
Uses updates already approved

Full support for Windows 8, 8.1, Server 2012, 2012 R2

Security and Compliance
Software Updates

Auto Deployment Rules

Use search criteria to identify class of updates to
automatically deploy: category, products, language, date
revised, article id, bulletin id, etc.
Schedule content download and deployment based on sync
schedule or define a separate schedule per rule
Deploy updates individually or in groups
Updates added to an update group automatically deploy to
collections targeted with the group
Security and Compliance
Endpoint Protection

Unified Infrastructure

Simplified server
and client deployment
Streamlined updates
Consolidated reporting

Comprehensive Protection
Stack
Behavior monitoring
Antimalware
Dynamic Translation
Windows and Firewall
Management
Security and Compliance
Settings Management (Desired Configuration
Management)
ConfigMgr MP Baseline ConfigMgr Agent

Auto Remediate
Assignment to OR
Baseline drift
collections Create Alert
! (to Service
Manager)

Baseline Configuration Items

Active
Script WMI XML SQL
Directory
Software
File Registry MSI IIS
Updates

Improved functionality
Copy settings
Trigger console alerts
Richer reporting

Enhanced versioning and audit tracking

Ability to specify versions to be used in baselines
Audit tracking includes who changed what
Pre-built industry standard baseline templates
Power Management
Create and manage power management
profiles
Enforce profiles based on usage statistics
Different profiles On Peak, Off Peak
Create reports showing usage data and
power savings
Users can opt-out (if we let them)
 Power Management
Week 1: Monitor
Enable client management agent
Begin monitoring usage and activity

Week 2: Plan
Continue monitoring on usage and activity
Begin to develop Power Plan
Non-Peak & Peak
VM awareness (new compared to 2007)
Copy power policies (new compared to 2007)
Mid-Month:
Power Plan has been confirmed

Week 3: Apply Power policy

Begin applying Power Plan
End user opt-out (new compared to 2007)

Week 4: Compliance & Analyze

Review before and after usage and activity
Determine savings in Kwh and Co2 saved
Role Based Administration

Map the faculty roles to defined security

roles John- IST Central
System Administrator

Applications Manager
OSD Manager Louis-Software
Bob- US & France
Updates Manager Update Manager for
Security Admin
France
Only see the computers and objects
they can manage Can see & update Can see & modify
France desktops security settings on
Cannot modify France and U.S.
Reduces error, defines span of control for security settings on desktops
France desktops Cannot update
our environment Cannot see All France or U.S.
Systems or U.S. desktops
desktops Cannot see All
Systems
Asset Intelligence, Inventory, and
Software Metering
Track application usage
Up to date, detailed inventory of both
hardware and software
Identify over or under licensing issues

Real-time Application Asset Intelligence Software Metering & License Reports

and Hardware Intelligence Service

ConfigMgr Inventory Asset Intelligence

Catalog
Remote Control
What's New in Remote
Control
Ability to send Ctrl-Alt-Del
keystroke to host device
Granular client settings per
collection
Lock keyboard and Mouse
Ability to create Firewall
exception rule
Exchange Connector Integration
Easy configuration
Simply enter exchange server/hosted URL and credentials
Inventory
Pulls data from Exchange Server
Full and fast/delta synchronization
Key info: user, deviceID, device type, last contact time
Policy
Parity with exchange: security, sync, device lockdown
Define globally per Exchange Server
Wipe
Wipe a device from console action
Reduced Infrastructure Requirements
Central Administration Site Primary Sites Secondary Sites
Central primary site Client management and settings Content routing
administration Delegated administration Distribution points
Reporting

Central
Administration
Site

Primary Site Primary Site

Secondary Secondary Secondary Secondary Secondary Secondary

Site Site Site Site Site Site
Our Infrastructure

Primary Site
Client management and settings
Delegated administration

Primary Site

Secondary Sites (As

Client Computers
required)
Content routing Directly Assigned
Distribution points Report to Primary Site
Secondary Client Client
Site Computer Computer
jmayall@uwaterloo.
ca