Book Image

Deploying Microsoft System Center Configuration Manager

By : Jacek Doktór, Paweł Jarosz
Book Image

Deploying Microsoft System Center Configuration Manager

By: Jacek Doktór, Paweł Jarosz

Overview of this book

It becomes important to plan, design, and deploy configurations when administrators know that Configuration Manager interacts with a number of infrastructure components such as Active Directory Domain Services, network protocols, Windows Server services, and so on. Via real-world-world deployment scenarios, this book will help you implement a single primary site or multiples sites. You will be able to efficiently plan and deploy a multiple-site hierarchy such as central administration site. Next, you will learn various methods to plan and deploy Configuration Manager clients, secure them and make the most of new features offered through ConfigMgr 1706 like compliance, deploying updates operating systems to the endpoints. Then, this book will show you how to install, configure, and run SQL reports to extract information. Lastly, you will also learn how to create and manage users access in an ConfigMgr environment By the end of this book, you will have learned to use the built-in mechanism to back up and restore data and also design maintenance plan.
Table of Contents (19 chapters)
Title Page
Credits
About the Authors
www.PacktPub.com
Customer Feedback
Preface
5
Creating Client Settings for Servers and Workstations
11
Configuration Manager Assets
13
Site Server Maintenance Tasks

Understanding Endpoint Protection


Managing and configuring the environment are not all the capabilities provided by the ConfigMgr server; a great feature is also fundamental protection against unwanted software, and a component responsible for this is Endpoint Protection. It is a part of the ConfigMgr used for hardening the environment against malware threats and for firewall rules configuration.

The ConfigMgr server provides the possibility of performing deployments, central management, and monitoring statuses of managed computers. In fact, Endpoint Protection is Windows Defender, which is managed using the ConfigMgr console. Endpoint Protection and Windows Defender have similar interfaces and settings.

Note

The ConfigMgr server license does not contain a license for Endpoint Protection; it is necessary to buy the subscription separately.

These are the steps that need to be taken in order to deploy the Endpoint Protection feature:

  1. Installation of Endpoint Protection point.
  2. Creation of the device...