Book Image

Microsoft System Center Configuration Manager Cookbook - Second Edition

By : Samir Hammoudi, Matthew Hudson, Greg Ramsey, Brian Mason, Chuluunsuren Damdinsuren
Book Image

Microsoft System Center Configuration Manager Cookbook - Second Edition

By: Samir Hammoudi, Matthew Hudson, Greg Ramsey, Brian Mason, Chuluunsuren Damdinsuren

Overview of this book

This practical cookbook is based on the 1602 current branch of System Center Configuration Manager (SCCM). It shows you how to administer SCCM, giving you an essential toolbox of techniques to solve real-world scenarios. Packed with over 60 task-based and instantly usable recipes, you’ll discover how design a SCCM Infrastructure, and dive into topics such as the recommended SQL configuration for SCCM and how to deploy Windows 10 with Operating System Deployment (OSD). You will learn to easily manage Windows 10 devices by deploying applications, software updates, and feature upgrades, andl be able to leverage Mobile Device Management (MDM) using SCCM and Microsoft Intune. Finally, you see how to gather the inventory of all your PC park and create reports based on it. By the end of the book, you will have learned the best practices when working with SCCM and have a handy reference guide for troubleshooting.

Related Content you might be interested in

Current Title:

Small book image
Microsoft System Center Configuration Manager Cookbook - Second Edition
Samir Hammoudi | Matthew Hudson | Greg Ramsey | Brian Mason | Chuluunsuren Damdinsuren
Nov, 2016 | 354 pages
No titles found
Table of Contents (15 chapters)
Microsoft System Center Configuration Manager Cookbook - Second Edition
Microsoft System Center Configuration Manager Cookbook - Second Edition
Credits
Credits
About the Authors
About the Authors
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Designing a System Center Configuration Manager Infrastructure
Designing a System Center Configuration Manager Infrastructure
Introduction
What's changed from System Center 2012 Configuration Manager?
System Center Configuration Manager's new servicing models
Keeping your CM deployment up-to date
Infrastructure sizing considerations
Dividing up site system roles
Upgrading in-place from Configuration Manager 2012
Installing SQL the right way
Managing Internet-facing clients
Using remote and workstation distribution points and BranchCache
2
Deploying Windows 10 with Operating System Deployment
Deploying Windows 10 with Operating System Deployment
Introduction
Creating an OSD test environment
Leveraging the build and capture process
Migrating user state
Managing drivers
Customizing the build process with prestart hooks
Patching your reference build
Using the new Windows 10 in-place upgrade task sequence
Leveraging the Microsoft Deployment Toolkit with CM OSD
3
Deploying Applications and Software Updates
Deploying Applications and Software Updates
Introduction
Creating applications and deployment types
Deploying Store Apps - Windows, iOS, Android
Creating Mobile Application Management Policy
Managing Software Center and Application Catalog
Reducing collection dependencies with conditional rules and global conditions
Converting classic packages to applications
Creating and deploying Virtual Applications - App-V
Superseding applications
Monitoring content and deployment status
Preparing for software updates
Creating and monitoring software updates
Leveraging Automatic Deployment Rules - ADRs
Deploying custom updates
Leveraging Windows 10 Servicing to deploy features upgrades
4
Managing Compliance Settings
Managing Compliance Settings
Introduction
Building Configuration Items the old way
Building Configuration Items for Windows 10
Creating and deploying a baseline
Leveraging Security Compliance Manager
Monitoring compliance with SSRS
5
Managing Mobile Devices using Configuration Manager with Microsoft Intune
Managing Mobile Devices using Configuration Manager with Microsoft Intune
Introduction
Creating a Microsoft Intune subscription
Connecting Microsoft Intune to CM
Creating and deploying MDM policies
Using Conditional Access to control devices' access to Office 365 services
Managing mobile devices enrolled in Microsoft Intune via the CM console
6
Managing Sites
Managing Sites
Introduction
Managing collections
Configuring site maintenance
Managing site communications
Configuring Discovery
Managing Boundary Groups
Managing role-based security
Configuring the Application Catalog
Managing and validating content for DPs and DP groups
7
Managing Clients
Managing Clients
Introduction
Deploying clients
Upgrading client agents
Managing client health
Managing client settings
Enabling Device Health Attestation in Windows 10
Monitoring client installation and activity
Making use of user-centric improvements
Configuring power management
8
Managing Inventory
Managing Inventory
Introduction
Managing hardware inventory
Managing software inventory
Managing software metering
Monitoring inventory data flow
Integrating Asset Intelligence
9
Managing Reports and Queries
Managing Reports and Queries
Introduction
Installing SQL Server Reporting Services - SSRS
Configuring reporting services
Sharing your reports with others
Configuring report subscription
Building queries
Editing and creating reports

Enabling Device Health Attestation in Windows 10

Device Health Attestation (DHA) is a new Windows 10 feature that allows Windows 10 to do a health check to the cloud or to an on-premises server (requires Windows Server 2016) before gaining access to internal resources. It is a new health status that can be used as a rule in Conditional Access for Windows 10 devices.

Note

The compliance policy using DHA status as a rule is only available for Microsoft Intune managed Windows 10 devices for now. If you are managing your Windows 10 devices through the CM client agent, DHA will only be used for reporting.

DHA lets the administrator ensure that client computers have the following trustworthy BIOS, TPM (1.2 or 2.0), and boot software configurations enabled:

  • Early launch anti-malware: Early launch anti-malware (ELAM) protects your computer when it starts up and before third-party drivers initialize.

  • BitLocker: Windows BitLocker Drive Encryption is the software that lets you encrypt all data stored...

Previous Section
End of Section 7
Next Section