Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Creating auto deployment rules for SCEP definitions


Auto deployment rules are a new feature of SCCM 2012. Among other things, this feature was developed to optimize the deployment of definition updates while minimizing the impact on your network connections.

Previous versions of SCEP relied on either Microsoft Updates in the cloud, WSUS, or UNC file shares (all of which can still be used in SCEP) to push out definitions. The use of ADRs allows you to tap into your existing SCCM distribution points without the need for human interaction to keep them up-to-date.

Getting ready

The creation and management of automatic deployment rules is done within the Software Updates Management (SUM) component of SCCM 2012. Therefore, it is required that the SCCM server on which you are configuring these rules has the software update point installed.

In a large-scale hierarchical SCCM environment, this task would typically be conducted on the CAS.

How to do it...

Follow these steps:

  1. 1. Log into the CAS or connect...