SCCM 2012 Features and Benefits

1. SCCM 2012Features and Benefits Or: How I learned to stop worrying and love Centralized Administration

2. System Centre Configuration Manager 2012 • Unified Device Management • User Centric Application Delivery • Operating System Deployment • Software Updates • Integrated Endpoint Management • Configuration Compliance • Power Management • Role Based Administration • Software Metering, Asset Intelligence • Other features

3. Evolution of Microsoft Client Management 2012 2012 2011 2007 2003 1999 SMS 2.0 1994 SMS 1.0 Client Management Infancy (NT Domain) Management from the Cloud Groups Model Laptops, Servers, Enterprise Scale Comprehensive Management Consumerization of IT

4. Unified Device Management Windows PCs (x86/64, Intel SoC), Windows to Go Windows Embedded Mac OS X System Centre Configuration Manager 2012 R2 Linux Me Single Admin Console Windows RT, Windows Phone 8iOS, Android

5. Mac Support Supported Releases: Mac OS X 10.6 (Snow Leopard), Mac OS X 10.7 (Lion), Mac OS X 10.8 (Mountain Lion) • Discovery • Discovers Mac OS X system in Active Directory and through network discovery • Hardware/Software Inventory • Provides hardware inventory and auditing of computers running Mac OS X, including a list of installed software similar to add/remove programs for Windows systems. • Settings Management • Ensures computers running Mac OS X comply with company policies, i.e. patches and installed software • Application Deployment • Distributes required software via app model. • Software Updates Management • Distributes patches utilizing Software Distribution and Settings management features.

6. Linux & UNIX Support Supported Platforms: AIX, HP-UX, Red Hat Enterprise, Solaris, SUSE Enterprise • Hardware Inventory • Software Inventory • Software Deployment • Consolidated reports

7. User-centric Application DeliveryAdministrator • Deliver best user experience on each device • Define application once Delivery Evaluation Criteria • User • Device type • Network connection < > User/Device Relationships • Primary Devices • MSI • App-V • Non-primary Devices • VDI • Presentation Server • Remote Desktop Windows Embedded

8. User-centric Application DeliveryEnd User Self-service • Administrators publish software titles to catalog, complete with meta data to enable search • Deliver best user experience on each device Admin • Users can browse, select and install directly from Catalog • Application model determines format and policies for delivery User

9. User Centric: End-User Experience • “The Right End-User Experience” • Web based ‘Software catalog’ • Easily search, install or request software • User preferences to control ConfigMgr behaviors: • “My business hours” – used to control when to install software • Presentation mode – don’t notify when presenting • Remote control settings – when allowed, end user can control their experience

10. User-centric Application DeliveryNew Application Model General Information • Administrator Properties • End User Metadata Application “Package” Keep your apps organized and managed < > The “friendly” information for your users (appears in Catalog) Deployment Type • Detection Method • Install Command • Requirement Rules • Dependencies • Supersedence Is app installed? App-V Windows Script Command line and options Windows Installer Can/cannot install app CAB Apps that must be present Application version control

11. User-centric Application Delivery cont. • Manage applications with built-in mechanisms; not scripts • Application Management: • Detection method – re-evaluated for presence: • Required application – reinstall if missing • Prohibited application – uninstall if detected • Requirement rules – evaluated at install time to ensure the app only installs in places it can, and should • Dependencies – relationships with other apps that are all evaluated prior to installing anything • Supersedence – relationships with other apps that should be uninstalled prior to installing anything • Update an app – Automatic revision management

12. Client SettingsApplication DeliveryEnd User Experience DEMO

13. Operating System Deployment No-Touch, Manual or Lite-Touch imaging • Scheduled imaging for after-hours • No more Sneaker-net • On-the-fly software and updates deployment • Deploy an image then update the software and/or OS • Standing Advertisements Offline Servicing of Images • Support for Component Based Servicing compatible updates • Uses updates already approved Full support for Windows 8, 8.1, Server 2012, 2012 R2

14. Security and ComplianceSoftware Updates • Auto Deployment Rules • Use search criteria to identify class of updates to automatically deploy: category, products, language, date revised, article id, bulletin id, etc. • Schedule content download and deployment based on sync schedule or define a separate schedule per rule • Deploy updates individually or in groups • Updates added to an update group automatically deploy to collections targeted with the group

15. Security and ComplianceEndpoint Protection Unified Infrastructure • Simplified server and client deployment • Streamlined updates • Consolidated reporting Comprehensive Protection Stack • Behavior monitoring • Antimalware • Dynamic Translation • Windows and Firewall Management

16. Security and ComplianceSettings Management (Desired Configuration Management) ConfigMgrMP Baseline ConfigMgr Agent Auto Remediate OR Create Alert (to Service Manager) Assignment to collections Baseline drift ! Baseline Configuration Items • Improved functionality • Copy settings • Trigger console alerts • Richer reporting • Enhanced versioning and audit tracking • Ability to specify versions to be used in baselines • Audit tracking includes who changed what • Pre-built industry standard baseline templates through IT GRC Solution Accelerator Active Directory Script WMI XML SQL File Software Updates Registry MSI IIS

17. Power Management • Create and manage power management profiles • Enforce profiles based on usage statistics • Different profiles “On Peak”, “Off Peak” • Create reports showing usage data and power savings • Users can “opt-out” (if we let them)

18. Power Management • Week 1: Monitor • Enable client management agent • Begin monitoring usage and activity • Week 2: Plan • Continue monitoring on usage and activity • Begin to develop Power Plan • VM awareness (new compared to 2007) • Copy power policies (new compared to 2007) • Mid-Month: • Power Plan has been confirmed Non-Peak & Peak • Week 3: Apply Power policy • Begin applying Power Plan • End user opt-out (new compared to 2007) • Week 4: Compliance & Analyze • Review before and after usage and activity • Determine savings in Kwh and Co2 saved

19. Role Based Administration • Map the faculty roles to defined security roles • Applications Manager • OSD Manager • Updates Manager • Only “see” the computers and objects they can manage • Reduces error, defines span of control for our environment John- IST Central System Administrator Louis-Software Update Manager for France Bob- US & France Security Admin • Can see & update “France” desktops • Cannot modify security settings on “France” desktops • Cannot see “All Systems” or “U.S.” desktops • Can see & modify security settings on “France” and “U.S.” desktops • Cannot update “France” or “U.S.” desktops • Cannot see “All Systems”

20. Asset Intelligence, Inventory, and Software Metering • Track application usage • Up to date, detailed inventory of both hardware and software • Identify over or under licensing issues Real-time Application and Hardware Intelligence Asset Intelligence Service Software Metering & License Reports ConfigMgr Inventory Asset Intelligence Catalog

21. Remote Control • What's New in Remote Control • Ability to send Ctrl-Alt-Del keystroke to host device • Granular client settings per collection • Lock keyboard and Mouse • Ability to create Firewall exception rule

22. Exchange Connector Integration • Easy configuration • Simply enter exchange server/hosted URL and credentials • Inventory • Pulls data from Exchange Server • Full and fast/delta synchronization • Key info: user, deviceID, device type, last contact time • Policy • Parity with exchange: security, sync, device lockdown • Define globally per Exchange Server • Wipe • Wipe a device from console action

23. Reduced Infrastructure Requirements Central Administration Site Primary Sites Secondary Sites • Central primary site administration • Reporting • Client management and settings • Delegated administration • Content routing • Distribution points Central Administration Site Primary Site Primary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site

24. Our Infrastructure Primary Site Secondary Sites (As required) Client Computers • Client management and settings • Delegated administration • Content routing • Distribution points • Directly Assigned • Report to Primary Site Primary Site Secondary Site Client Computer Client Computer

25. jmayall@uwaterloo.ca