Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center 2012 Endpoint Protection Cookbook
Andrew J Plue
Oct, 2012 | 208 pages
No titles found
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Client-Side Endpoint Protection Tasks
Getting Started with Client-Side Endpoint Protection Tasks
Introduction
Locating and interrupting client-side SCEP logs
Performing manual definition updates and checking definition version
Manually editing local SCEP policy using the user interface
Utilizing MpCmdRun.exe
2
Planning and Rolling Installation
Planning and Rolling Installation
Introduction
Creating role-based SCEP administrators
Creating auto deployment rules for SCEP definitions
Enabling the Endpoint Protection role
3
SCEP Configuration
SCEP Configuration
Introduction
Modifying SCEP default client settings
Creating, modifying, and deploying a SCEP policy
Setting up SCEP alerts
Configuring reports
4
Client Deployment Preparation and Deployment
Client Deployment Preparation and Deployment
Introduction
Preparing your environment for SCEP
Creating an effective deployment plan
Deploying SCEP clients with SCCM 2012
Verifying that SCEP policies are being applied correctly
Performing a manual FEP client installation
5
Common Tasks
Common Tasks
Introduction
Checking that your SCCM server has up-to-date SCEP definitions
Performing SCEP operational tasks using the SCCM console
Using SCEP reports to verify task completion
Utilizing the SCEP dashboard
Using MpCmdRun remotely
6
Management Tasks
Management Tasks
Introduction
Verifying that SCEP clients are installed on all systems
Changing control with SCEP policies
Using SCEP policy templates
Merging client policies
Responding to SCEP alerts
7
Reporting
Reporting
Introduction
Using the system-based SCEP reports
Utilizing the user-based SCEP reports
Providing access to reports
Building custom reports
8
Troubleshooting
Troubleshooting
Introduction
Resolving client-side definition update issues
Fixing SCCM client health issues
Resolving false positives
Dealing with infections that SCEP cannot resolve
9
Building an SCCM 2012 Lab
Building an SCCM 2012 Lab
Introduction
Installing SCCM 2012 and SCEP in a standalone environment
Appendix
Appendix
Integrating SCEP with SCOM 2012
Client deployment checklists
List of SCEP logfiles
Using Windows Intune Endpoint Protection
Index
Index

Creating an effective deployment plan

As you move through these recipes, you're moving closer and closer to initiating an enterprise-wide SCEP deployment. Don't be scared, if you take the time to really think through the items in this recipe, you'll be setting yourself up for a pretty painless deployment.

Getting ready

To answer the following items, you will need to have a good understanding of your corporate network as a whole. If you were not a part of the initial SCCM 2012 design, you may need to reach out to your SCCM administrators to verify answers for some of the following items.

How to do it...

Working through the following items will walk you through the process of preparing your environment for SCEP:

  1. 1. Has your SCCM 2012 been scaled out to support the number of SCEP clients you are intending to deploy?

  2. 2. Have you implemented enough distribution points to supply SCEP definitions on a daily basis without affecting network performance?

  3. 3. Have you disseminated enough information about...

Previous Section
End of Section 4
Next Section