Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center 2012 Endpoint Protection Cookbook
Andrew J Plue
Oct, 2012 | 208 pages
No titles found
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Client-Side Endpoint Protection Tasks
Getting Started with Client-Side Endpoint Protection Tasks
Introduction
Locating and interrupting client-side SCEP logs
Performing manual definition updates and checking definition version
Manually editing local SCEP policy using the user interface
Utilizing MpCmdRun.exe
2
Planning and Rolling Installation
Planning and Rolling Installation
Introduction
Creating role-based SCEP administrators
Creating auto deployment rules for SCEP definitions
Enabling the Endpoint Protection role
3
SCEP Configuration
SCEP Configuration
Introduction
Modifying SCEP default client settings
Creating, modifying, and deploying a SCEP policy
Setting up SCEP alerts
Configuring reports
4
Client Deployment Preparation and Deployment
Client Deployment Preparation and Deployment
Introduction
Preparing your environment for SCEP
Creating an effective deployment plan
Deploying SCEP clients with SCCM 2012
Verifying that SCEP policies are being applied correctly
Performing a manual FEP client installation
5
Common Tasks
Common Tasks
Introduction
Checking that your SCCM server has up-to-date SCEP definitions
Performing SCEP operational tasks using the SCCM console
Using SCEP reports to verify task completion
Utilizing the SCEP dashboard
Using MpCmdRun remotely
6
Management Tasks
Management Tasks
Introduction
Verifying that SCEP clients are installed on all systems
Changing control with SCEP policies
Using SCEP policy templates
Merging client policies
Responding to SCEP alerts
7
Reporting
Reporting
Introduction
Using the system-based SCEP reports
Utilizing the user-based SCEP reports
Providing access to reports
Building custom reports
8
Troubleshooting
Troubleshooting
Introduction
Resolving client-side definition update issues
Fixing SCCM client health issues
Resolving false positives
Dealing with infections that SCEP cannot resolve
9
Building an SCCM 2012 Lab
Building an SCCM 2012 Lab
Introduction
Installing SCCM 2012 and SCEP in a standalone environment
Appendix
Appendix
Integrating SCEP with SCOM 2012
Client deployment checklists
List of SCEP logfiles
Using Windows Intune Endpoint Protection
Index
Index

Creating role-based SCEP administrators

One of the most talked about new features in SCCM 2012 is the ability to create role- based administrators. This feature allows you to easily grant a user a limited subset of administrative rights within SCCM that will allow them to perform their assigned tasks, but prevent them from doing anything beyond that.

SCCM 2012 includes an Endpoint Protection Manager role right out of the box.

This recipe will demonstrate how to add a user or group of users to this role.

The majority of the recipes in this book refer to tasks done on the Central Administration Site (CAS) server, which assumes that your organization has one. Smaller organizations may only have a single primary site server. If that is the case for you, then simply perform the task on your primary site server as if it was a CAS server.

Getting ready

To complete this task, you will need to have full administrative access to the SCCM 2012 console on the CAS in your SCCM infrastructure. While...

Previous Section
End of Section 3
Next Section