Book Image

Microsoft System Center Configuration Manager Cookbook - Second Edition

By : Samir Hammoudi, Matthew Hudson, Greg Ramsey, Brian Mason, Chuluunsuren Damdinsuren
Book Image

Microsoft System Center Configuration Manager Cookbook - Second Edition

By: Samir Hammoudi, Matthew Hudson, Greg Ramsey, Brian Mason, Chuluunsuren Damdinsuren

Overview of this book

This practical cookbook is based on the 1602 current branch of System Center Configuration Manager (SCCM). It shows you how to administer SCCM, giving you an essential toolbox of techniques to solve real-world scenarios. Packed with over 60 task-based and instantly usable recipes, you’ll discover how design a SCCM Infrastructure, and dive into topics such as the recommended SQL configuration for SCCM and how to deploy Windows 10 with Operating System Deployment (OSD). You will learn to easily manage Windows 10 devices by deploying applications, software updates, and feature upgrades, andl be able to leverage Mobile Device Management (MDM) using SCCM and Microsoft Intune. Finally, you see how to gather the inventory of all your PC park and create reports based on it. By the end of the book, you will have learned the best practices when working with SCCM and have a handy reference guide for troubleshooting.
Table of Contents (15 chapters)
Microsoft System Center Configuration Manager Cookbook - Second Edition
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Preface

Creating and deploying MDM policies


Once a device has been enrolled in Microsoft Intune, the next step is to create and deploy an MDM policy to that device. As explained previously, in an Intune and CM integrated configuration, all the settings are done using the CM console. An MDM policy is very similar to what we have seen in Chapter 4Managing Compliance Settings about Compliance Settings. It basically sets all the settings that will be applied to a mobile device. By default, it autoremediates any settings that are not compliant.

Let's assume that your company's security policy requires to disable the camera on every Android mobile device that is managed by Microsoft Intune.

Getting ready

There is nothing specific that needs to be deployed. Watch the mobile device to verify the effect of the MDM policy once applied to the device.

Tip

If you don't have a physical Android device to do the MDM testing, there's an open source project which proposes Android x86 version (http://www.android-x86...