Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By : Andrew J Plue
Book Image

Microsoft System Center 2012 Endpoint Protection Cookbook

By: Andrew J Plue

Overview of this book

Microsoft System Center 2012 Endpoint Protection (previously known as Forefront Endpoint Protection 2012) protects client and server operating systems against threats with leading malware detection technologies. Built on Configuration Manager, it provides a unified infrastructure for client security and compliance management and "Microsoft System Center 2012 Endpoint Protection Cookbook" will help you get to grips with vital tasks for implementing this security tool. With the release of System Center 2012 Endpoint Protection, Microsoft is continuing its commitment to offering a cutting edge, enterprise- ready Anti-Virus solution. With its practical and easy to follow recipes, "Microsoft System Center 2012 Endpoint Protection Cookbook" fully prepares you for a simple, headache-free migration. This hands-on, practical cookbook will have you equipped with the knowledge to install and manage System Center 2012 Endpoint Protection like a pro in no time by following step by step recipes. You'll gain insight into a wide range of management tasks, such as building your SCEP infrastructure, deploying SCEP clients and building the perfect AV policies for your workstation and servers. You'll also benefit from a complete SCEP walk-through in a bonus appendix chapter. With "Microsoft System Center 2012 Endpoint Protection Cookbook" in hand, you will have the confidence to tackle essential tasks like deployment, policy and much more for SCEP.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center 2012 Endpoint Protection Cookbook
Andrew J Plue
Oct, 2012 | 208 pages
No titles found
Table of Contents (17 chapters)
Microsoft System Center 2012 Endpoint Protection Cookbook
Microsoft System Center 2012 Endpoint Protection Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Getting Started with Client-Side Endpoint Protection Tasks
Getting Started with Client-Side Endpoint Protection Tasks
Introduction
Locating and interrupting client-side SCEP logs
Performing manual definition updates and checking definition version
Manually editing local SCEP policy using the user interface
Utilizing MpCmdRun.exe
2
Planning and Rolling Installation
Planning and Rolling Installation
Introduction
Creating role-based SCEP administrators
Creating auto deployment rules for SCEP definitions
Enabling the Endpoint Protection role
3
SCEP Configuration
SCEP Configuration
Introduction
Modifying SCEP default client settings
Creating, modifying, and deploying a SCEP policy
Setting up SCEP alerts
Configuring reports
4
Client Deployment Preparation and Deployment
Client Deployment Preparation and Deployment
Introduction
Preparing your environment for SCEP
Creating an effective deployment plan
Deploying SCEP clients with SCCM 2012
Verifying that SCEP policies are being applied correctly
Performing a manual FEP client installation
5
Common Tasks
Common Tasks
Introduction
Checking that your SCCM server has up-to-date SCEP definitions
Performing SCEP operational tasks using the SCCM console
Using SCEP reports to verify task completion
Utilizing the SCEP dashboard
Using MpCmdRun remotely
6
Management Tasks
Management Tasks
Introduction
Verifying that SCEP clients are installed on all systems
Changing control with SCEP policies
Using SCEP policy templates
Merging client policies
Responding to SCEP alerts
7
Reporting
Reporting
Introduction
Using the system-based SCEP reports
Utilizing the user-based SCEP reports
Providing access to reports
Building custom reports
8
Troubleshooting
Troubleshooting
Introduction
Resolving client-side definition update issues
Fixing SCCM client health issues
Resolving false positives
Dealing with infections that SCEP cannot resolve
9
Building an SCCM 2012 Lab
Building an SCCM 2012 Lab
Introduction
Installing SCCM 2012 and SCEP in a standalone environment
Appendix
Appendix
Integrating SCEP with SCOM 2012
Client deployment checklists
List of SCEP logfiles
Using Windows Intune Endpoint Protection
Index
Index

Building custom reports

Out of the box, SCCM 2012 contains four hundred and twenty-three pre-built reports. Unfortunately, only six of them pertain to Endpoint Protection. The good news is that with SCCM 2012 comes the release of SQL Report Builder 3.0, which makes it easier than ever for almost anybody to quickly create a customized report based on any of the Endpoint Protection data that SCCM collects and stores in its database. And believe me, you'll be amazed when you peek under the hood and see the wealth of data just waiting there for you to groom and shape as you see it.

For this recipe,we will keep it simple and build a report that shows the count of PCs that have the Network Inspection Service(NIS) enabled as well as a count of those that do not have the service enabled. NIS usage is a valuable piece of security data that is not reflected in any of the built-in reports.

Getting ready

For this recipe, you will need to utilize an account that has administrator privileges for the SQL...

Previous Section
End of Chapter 7
Next Chapter