System Center Configuration Manager Current Branch Unleashed, First Edition

System Center Configuration Manager Current Branch Unleashed, First Edition

by Kerrie Meyler, Gerry Hampson, Saud Al-Mishari, Greg Ramsey, Kenneth van Surksum, Michael Wiles
Released April 2018
Publisher(s): Sams
ISBN: 9780134652450

Read it now on the O’Reilly learning platform with a 10-day free trial.

O’Reilly members get unlimited access to books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Book description

System Center Configuration Manager Current Branch provides a total systems management solution for a people-centric world. It can deploy applications to individuals using virtually any device or platform, centralizing and automating management across on-premise, service provider, and Microsoft Azure environments. In System Center Configuration Manager Current Branch Unleashed, a team of world-renowned System Center experts shows you how to make the most of this powerful toolset.

The authors begin by introducing modern systems management and offering practical strategies for coherently managing today’s IT infrastructures. Drawing on their immense consulting experience, they offer expert guidance for ConfigMgr planning, architecture, and implementation. You’ll walk through efficiently performing a wide spectrum of ConfigMgr operations, from managing clients, updates, and compliance to reporting. Finally, you’ll find current best practices for administering ConfigMgr, from security to backups.

Detailed information on how to:

  • Successfully manage distributed, people-centric, cloud-focused IT environments
  • Optimize ConfigMgr architecture, design, and deployment plans to reflect your environment
  • Smoothly install ConfigMgr Current Branch and migrate from Configuration Manager 2012
  • Save time and improve efficiency by automating system management
  • Use the console to centralize control over infrastructure, software, users, and devices
  • Discover and manage clients running Windows, macOS, Linux, and UNIX
  • Define, monitor, enforce, remediate, and report on all aspects of configuration compliance
  • Deliver the right software to the right people with ConfigMgr applications and deployment types
  • Reliably manage patches and updates, including Office 365 client updates
  • Integrate Intune to manage on-premise and mobile devices through a single console
  • Secure access to corporate resources from mobile devices
  • Manage Microsoft’s enterprise antimalware platform with System Center Endpoint Protection

Using this guide’s proven techniques and comprehensive reference information, you can maximize the value of ConfigMgr in your environment–no matter how complex it is or how quickly it’s changing.

Table of contents

  1. Cover Page
  2. Title Page
  3. Copyright Page
  4. Contents at a Glance
  5. Table of Contents
  6. About This E-Book
  7. About the Author
  8. About the Contributing Authors
  9. Dedication
  10. Acknowledgments
  11. Foreword
  12. Reader Services
  13. Introduction
    1. Part I: Configuration Manager Overview and Concepts
    2. Part II: Planning and Installation
    3. Part III: Configuration Manager Operations
    4. Part IV: Configuration Manager Administration
    5. Part V: Appendixes
    6. Lab Environment
    7. Disclaimers and Fine Print
  14. Part I Configuration Manager Overview and Concepts
    1. 1 Configuration Management Basics
      1. 10 Reasons to Use Configuration Manager
      2. The Evolution of Systems Management
        1. Hurdles in the Distributed Enterprise
        2. Automation Challenges
        3. Configuration “Shift and Drift”
        4. Lack of Security and Control
        5. Timeliness of Asset Data
        6. Lack of Automation and Enforcement
        7. Proliferation of Cloud Computing
        8. Lack of Process Consistency
        9. The Bottom Line
      3. Systems Management Defined
      4. Microsoft’s Strategy for Systems Management
        1. Microsoft’s Dynamic Systems Initiative (DSI)
        2. ITIL and MOF
        3. Judging Your IT Organization’s Maturity
      5. Bridging the Systems Management Gap
      6. The Value Proposition of Configuration Manager
      7. Summary
    2. 2 Configuration Manager Overview
      1. A Journey Through Time: SMS to ConfigMgr Current Branch
        1. Systems Management Server 1.x
        2. Systems Management Server 2.0
        3. Systems Management Server 2003
        4. System Center Configuration Manager 2007
        5. System Center 2012 and 2012 R2 Configuration Manager
      2. Configuration Manager Terminology
        1. Configuration Manager Site
        2. Site Hierarchy
        3. Central Administration Site
        4. Primary Site
        5. Secondary Site
        6. Site Systems
        7. Senders
        8. Managing Content (File) Replication
        9. Discovering Resources
        10. Configuration Manager Agent
        11. Configuration Manager Console
        12. Collections for Targeting Users and Devices
        13. Querying Client Data
        14. Using Alerts to Respond to Problems Quickly
        15. Using Packages
        16. Managing Applications
        17. Content Management
        18. Software Update Management
        19. Compliance Settings
        20. Content Transfer via BITS
        21. Measuring Software Usage
        22. Using BranchCache and Peer Cache to Reduce WAN Consumption
        23. Reporting
      3. What’s New in Current Branch (Through the 1710 Release)
        1. What’s New in Baseline Version 1511
        2. What’s New in Version 1602
        3. What’s New in Version 1606
        4. What’s New in Version 1610
        5. What’s New in Baseline Version 1702
        6. What’s New in Baseline Version 1706
        7. What’s New in Version 1710
      4. Deprecated Features, Software, and Operating Systems
      5. Summary
    3. 3 Looking Inside Configuration Manager
      1. Understanding the ConfigMgr Architecture
        1. External Components to ConfigMgr
        2. ConfigMgr Communication Methods
        3. ConfigMgr’s Internal Components
      2. A WMI Primer
        1. Understanding the WMI Architecture
        2. Inside the WMI Object Model
        3. Managing WMI
      3. Configuration Manager and WMI
        1. WMI on Configuration Manager Servers
        2. The Configuration Manager Client WMI Namespace
        3. Obtaining Hardware Inventory Through WMI
        4. Automating the ConfigMgr Client via WMI
        5. Interaction Between WMI and PowerShell
      4. Inside the ConfigMgr Database
        1. ConfigMgr Tables and Views
        2. Using SQL Server Management Studio
        3. Exploring the ConfigMgr Database
      5. Status and State Messages Overview
        1. Using Status Messages
        2. How State Messages Work
      6. Site-to-Site Replication
        1. About Configuration Manager Database Replication
        2. About Content Replication
      7. Active Directory Integration with ConfigMgr
        1. Implementing Schema Extensions
        2. Tools for Extending a Schema
        3. Extending a Schema
      8. Summary
  15. Part II Planning and Installation
    1. 4 Architecture Design Planning
      1. Developing the Solution Architecture
        1. Discovering Business Requirements
        2. Discovering IT Requirements
        3. Assessing Your Environment
        4. Envisioning the Solution and Scope of Delivery
      2. Planning for Infrastructure Dependencies
        1. ADDS Considerations
        2. Active Directory Certificate Services Considerations
      3. Hierarchy Planning in ConfigMgr
        1. About Configuration Manager Sites
        2. Planning Your Hierarchy Structure
        3. Planning Boundaries and Boundary Groups
      4. Site Planning for Configuration Manager
        1. Site Servers and Site Systems Planning
        2. Capacity Planning for ConfigMgr Sites
        3. Meeting Availability Requirements
        4. Planning for Content Management
      5. Planning for Client Deployment and Settings
        1. Planning Client Discovery and Installation
        2. Planning Your Client Settings
        3. Defining the User Experience
      6. Planning for External Device Management
        1. Planning for Internet-Based Clients
        2. Planning for Mobile Device Management
      7. Planning for Continuous Updates
        1. Servicing and Updates in Current Branch
        2. Testing and Release Management of Current Branch Releases
      8. Planning for Restorability and Recoverability
        1. Availability, Restorability, and Recoverability
        2. Determining Your Recovery Time and Point Objectives
        3. Planning for Backup
      9. Summary
    2. 5 Network Design
      1. Configuration Manager and the Network
        1. Network Considerations for Server Placement
        2. Using Distribution Points and Secondary Sites
      2. Understanding Data Flows
        1. Communication Going to the Client
        2. Communication from the Client
      3. Designing Intrasite Communication
        1. Understanding SQL Server Communication
        2. Using RPC Communication
        3. Using SMB Communication
        4. Using External Communication
      4. Using Intersite Communication
        1. File-Based Replication in ConfigMgr
        2. Using SQL Server–Based Replication
      5. Designing Client Communication
        1. Using the Service Location
        2. About Background Intelligent Transfer Service
        3. BITS Versions for ConfigMgr Clients
        4. Understanding BranchCache
        5. Understanding Peer Cache
        6. Using Boundaries and Boundary Groups
        7. About Client Communication Security
      6. Troubleshooting Network-Related Issues
        1. Troubleshooting Basic Network Connectivity
        2. Testing DNS Resolution
        3. Troubleshooting Routers and Firewall Ports
        4. Congested or Slow Network Links
        5. Testing MPs and DPs
        6. Troubleshooting Service Principal Names
      7. Summary
    3. 6 Installing and Updating System Center Configuration Manager
      1. Performing Preinstallation Tasks
        1. Required Windows and Hardware Components
        2. SQL Server Requirements
        3. Active Directory Requirements
        4. Windows Server Update Services
        5. Using the Prerequisite Checker
        6. Using the Prerequisite Files Downloader Tool
      2. Performing Site Installation Tasks
        1. Installing a Central Administration Site
        2. Installing a Primary Site
        3. Installing a Secondary Site
        4. Installation Validation
      3. Configuring Site Properties
        1. Initial ConfigMgr Configurations
        2. Connecting ConfigMgr to Cloud Services
        3. Installing Optional Site Systems
      4. Troubleshooting Site Installation
      5. Updating Configuration Manager
        1. Scheduling Updates
        2. Using CD.Latest
      6. Summary
    4. 7 Upgrading and Migrating to ConfigMgr Current Branch
      1. Deciding Whether to Upgrade or Migrate to Current Branch
      2. Upgrading to ConfigMgr Current Branch
        1. Preparing for Upgrade
        2. Performing the Upgrade
      3. Migrating to ConfigMgr Current Branch
        1. Migration, Not an Upgrade
        2. Planning the Migration
        3. Performing Pre-Migration Activities
        4. Coexistence Considerations
        5. Performing the Migration
        6. Configuring the Active Source Site
        7. Configuring Child Sites for Data Gathering (ConfigMgr 2007 Only)
        8. Performing Migration Jobs
      4. Migrating Reports and Clients
        1. Migrating Reports
        2. Migrating Custom Reports
        3. Client Migration and Methods
      5. Troubleshooting Migration Issues
      6. Summary
  16. Part III Configuration Manager Operations
    1. 8 Using the Configuration Manager Console
      1. Touring the Console
        1. Configuration Manager Console Panes
        2. Configuration Manager Console Bars
        3. Using the Backstage
      2. Configuration Manager Workspaces
        1. Using Assets and Compliance
        2. Functions of the Software Library
        3. Capabilities of the Monitoring Workspace
        4. Managing ConfigMgr Through the Administration Workspace
      3. Deploying the Console
        1. Console Placement
        2. Supported Platforms
        3. Installation Prerequisites
        4. Installation Using the Configuration Manager Setup Wizard
        5. Unattended Console Installation
      4. Using Role-Based Administration
        1. How Content Is Displayed
        2. The Three States of Objects Interaction
      5. Connecting to a Site
      6. Personalizing the Console
      7. The In-Console Alert Experience
        1. Viewing Alerts
        2. Managing Alerts
        3. Configuring Alerts
        4. Subscribing to Alerts
      8. Configuration Manager Service Manager
        1. Initiating the Configuration Manager Service Manager Console
        2. Operating the Configuration Manager Service Manager Console
      9. Using PowerShell with ConfigMgr
      10. Security Considerations
        1. SMS Provider Permissions
        2. DCOM Permissions
        3. WMI Permissions
      11. Troubleshooting Console Issues
        1. Console Logging
        2. Connectivity Issues
        3. Common Problems
      12. Summary
    2. 9 Client Management
      1. ConfigMgr Client Agent Requirements
        1. Agent Hardware Dependencies
        2. Supported Operating Systems for the Client Agent
        3. Agent Software Dependencies
        4. Other Agent Dependencies
      2. Installing, Upgrading, and Uninstalling ConfigMgr Client Agents
        1. Manually Installing on Windows Computers
        2. Manually Installing on Mac Computers
        3. Manually Installing on UNIX and Linux Computers
        4. Using Logon Scripts to Install on Windows Devices
        5. Installing Using Group Policy for Windows Devices
        6. Installing Using Software Update Point (SUP) for Windows Devices
        7. Installing and Assigning Windows 10 Clients Using Azure AD for Authentication
        8. Approving Clients
        9. Pushing the Client
        10. Automatically Upgrading the Client on Windows
        11. Uninstalling the ConfigMgr Client Agent
      3. Finding Potential ConfigMgr Clients in Your Network
        1. Using Active Directory Forest Discovery
        2. Using Active Directory Group Discovery
        3. Using Active Directory User Discovery
        4. Using Active Directory System Discovery
        5. Using Heartbeat Discovery
        6. Using Network Discovery
        7. Manually Importing Clients into ConfigMgr
        8. Using Azure AD User Discovery
      4. What to Know About Client Agent Assignment
      5. Monitoring Client Agent Health and Activity Status
      6. Understanding Client Settings
        1. Client Settings Priority
        2. Configurable Client Settings
        3. Using Remote Control
      7. Using the Resource Explorer
      8. Using Wake on LAN and Power Management
        1. Using Wake on LAN
        2. Configuring Power Management
      9. Summary
    3. 10 Managing Compliance
      1. Configuring Compliance Settings
      2. Understanding Compliance Settings
        1. Using Configuration Items
        2. Using Configuration Baselines
        3. Using User Data and Profiles
        4. Using Remote Connection Profiles
      3. Creating Configuration Items
        1. Devices with a ConfigMgr Client
        2. Using Devices Without a ConfigMgr Client
        3. Creating Baselines
        4. Deploying Baselines
      4. Developing a Compliance Strategy
        1. Obtaining On-Demand Results
        2. Correcting Issues Using Remediation
        3. Using Reporting to Track Compliance
      5. Troubleshooting Settings Management
      6. Summary
    4. 11 Creating and Managing Applications
      1. ConfigMgr Applications Overview
        1. Using the Requirement Rule Component in a DT
        2. Understanding Detection Methods
        3. User Device Affinity
      2. Creating and Modifying Applications
        1. Using a Definitive Software Library
        2. Creating a Windows Installer (.msi)-Based Application
        3. Viewing Application Properties
      3. Creating Detection Methods
        1. Creating Detection Methods for Windows Installer Applications
        2. Adding Other Detection Methods
        3. Using Custom Script Detection Methods
      4. Managing and Creating Global Conditions
        1. Device Global Conditions
        2. User Global Conditions
        3. Creating Custom Global Conditions
      5. Managing Application Management, Application Configuration, and Volume License Purchases
        1. About Mobile Application Management Policies
        2. Creating Application Management Policies
        3. App Configuration Policies
        4. Apple Volume License Purchasing
        5. Integrating Windows Store for Business
      6. More About Managing Applications
        1. Adding Application Dependencies
        2. Managing Revision History
        3. Exporting and Importing Applications
        4. Superseding Applications
        5. Retiring and Deleting Applications
        6. Best Practices for Working with Applications
        7. Support for Write Filters in Windows Embedded
      7. Deploying PowerShell Scripts
        1. PowerShell Script Prerequisites and Configuration
        2. Creating, Editing, Approving, and Denying Scripts
        3. Monitoring Scripts
      8. Summary
    5. 12 Creating and Using Deployment Types
      1. Creating and Using Windows Installer Deployment Types
        1. Creating a Windows Installer–Based Deployment Type
        2. Creating a Windows Installer Through MDM Deployment Type
      2. Creating and Using Application Virtualization Deployment Types
        1. Creating a Microsoft App-V 4.6 Deployment Type
        2. Creating a Microsoft App-V 5 Deployment Type
        3. Using App-V Virtual Environments
        4. Creating an App-V Virtual Environment
      3. Using Deployment Types for Mobile Devices
        1. Using Sideloading to Distribute Applications
        2. Using Deeplinking with DTs to Distribute Applications
      4. Creating and Using Other Deployment Types
        1. Creating a Script-Based Deployment Type
        2. Creating Deployment Types for Mac OS
        3. Creating Web Applications
        4. Synchronizing Apps from the Windows Store for Business
      5. Summary
    6. 13 Creating and Managing Packages and Programs
      1. Understanding Packages and Programs
      2. Creating a Package from a Definition File
        1. Creating a 7-Zip Package
        2. Advantages of Using an MSI File
      3. Configuring Package Properties
        1. Using the Package Properties Data Source Tab
        2. Using the Package Properties Data Access Tab
        3. Using the Package Properties Distribution Settings Tab
        4. Using the Package Properties Reporting Tab
        5. Using the Package Properties Content Locations Tab
      4. Defining Program Properties
        1. Using the Program Properties General Tab
        2. Using the Program Properties Requirements Tab
        3. Using the Program Properties Environment Tab
        4. Using the Program Properties Advanced Tab
        5. Program Properties Windows Installer Tab
        6. Program Properties OpsMgr Maintenance Mode Tab
      5. Creating Packages Using the Package and Program Wizard and for UNIX and Linux Systems
        1. Creating a Package Using the New Package Wizard
        2. Creating Packages for UNIX and Linux Systems
      6. Summary
    7. 14 Distributing and Deploying Applications and Packages
      1. Creating and Managing Collections
        1. Creating a Collection
        2. About Direct Rules
        3. Using Query Rules
        4. Using Include and Exclude Rules
        5. Updating Collections
        6. Modifying Collection Properties
        7. Using Maintenance Windows
      2. Using Distribution Points
        1. Installing Distribution Points
        2. Using and Configuring Cloud-Based Distribution Points
        3. Distributing Content
        4. Configuring Network Bandwidth for Content Distribution
        5. Monitoring Distribution Point Status
        6. Using BranchCache and Peer Cache
        7. Using Preferred Distribution Points
        8. Using Content
        9. Troubleshooting Content Distribution
      3. Deploying Applications and Packages
        1. Dealing with High-Risk Deployments
        2. Simulating Deployments
      4. Understanding the End-User Experience
        1. Using the Old Software Center
        2. Using the Application Catalog
        3. Using the New Software Center
        4. Notifications and Options for Required Deployments
      5. Monitoring and Troubleshooting
      6. Summary
    8. 15 Managing Software Updates
      1. What’s New with Software Updates in ConfigMgr Current Branch
      2. Creating Your Update Design
      3. Planning for Software Updates
        1. Capacity Planning
        2. Planning Your Software Update Point Infrastructure
        3. Using Windows Software Update Services
      4. Configuring Components
        1. Configuring Server-Side Components
        2. Configuring Client-Side Components
      5. Creating and Deploying Updates
        1. Using the All Software Updates Node
        2. Using Software Update Groups
        3. Using Deployment Packages
        4. Creating the Deployment
        5. Using Automatic Deployment Rules
      6. Understanding Windows 10 Servicing
        1. Servicing Branches in ConfigMgr
        2. About Deployment Rings
        3. About Windows 10 Servicing Prerequisites
        4. Using the Windows 10 Servicing Dashboard
        5. Servicing Plans
      7. Client Experience
        1. Compliance Scanning
        2. Using Notifications
        3. Using Software Center
        4. Installing Updates and Reporting Status
      8. Troubleshooting Software Updates
        1. Monitoring the Updates Process
        2. WSUS and SUP in Software Updates
        3. Downloading Updates
        4. Troubleshooting Client Scanning and Update Deployment
        5. Troubleshooting Software Updates
      9. Using the System Center Update Publisher
        1. Installing SCUP
        2. Configuring SCUP
        3. Using SCUP Catalogs
        4. Using SCUP Publications
        5. SCUP Updates
        6. Using SCUP Custom Updates
        7. Using SCUP Rules
      10. Summary
    9. 16 Integrating Intune Hybrid into Your Configuration Manager Environment
      1. Introducing Microsoft Intune
        1. Hybrid Versus Standalone
        2. Microsoft’s Enterprise Mobility + Security
        3. Purchasing Microsoft Intune
        4. Using the Management Portals
        5. Using Intune Storage
      2. User Identity Options
        1. Cloud Identity
        2. Synchronized Identity (Password Synchronization)
        3. Federated Identity
      3. Preparing Your Environment for Intune
        1. Adding and Verifying a Custom Domain
        2. Creating DNS Records
        3. Adding a User Principal Name
        4. Synchronizing Active Directory
        5. Implementing an Alternate Login ID (Optional)
      4. Integrating Intune with Configuration Manager
        1. Configuring User Discovery
        2. Creating a User Collection
        3. Adding an Intune Subscription
        4. Adding the Service Connection Point
        5. Removing an Intune Subscription
        6. Removal of Intune Extensions
      5. Troubleshooting Intune Hybrid
        1. Viewing Site and Component Status
        2. Using Log Files
        3. Viewing Intune Status
        4. Troubleshooting Directory Synchronization
        5. Utilizing Microsoft Support for Intune
        6. Accessing the Microsoft TechNet Forum
        7. Using the Configuration Manager Hybrid Diagnostics Tool
      6. Summary
    10. 17 Managing Mobile Devices
      1. Enabling Devices for Management
        1. Enabling Android Devices for Management
        2. Enabling iOS Devices for Management
        3. Enabling Windows Phone Devices for Management
        4. Using Windows Computers as Mobile Devices
      2. Managing Company Devices
        1. Device Enrollment Program (iOS Only)
        2. Apple Configurator (iOS Only)
        3. Device Enrollment Manager
      3. Protecting Mobile Devices
        1. Retiring and Wiping Mobile Devices
        2. Resetting Passcodes
        3. Remotely Locking a Device
        4. Accessing Activation Lock Bypass (iOS Only)
      4. Configuring Mobile Devices
        1. Creating Configuration Items and Baselines
        2. Using Custom Configuration Items
        3. About Device Policy Refresh Intervals
      5. Inventorying Mobile Devices
      6. Deploying Apps
        1. Leveraging Mobile Application Management (MAM)
        2. Creating Mobile Device Collections
      7. Using the Company Resource Access Workspace
        1. Using Certificate Profiles
        2. Using Email Profiles
        3. Deploying VPN Profiles
        4. Using Wi-Fi Profiles
      8. On-Premise Mobile Device Management
        1. Management Capabilities
        2. Advantages and Disadvantages of On-Premise MDM
        3. On-Premise MDM Configuration
        4. On-Premise MDM Client Configuration
      9. Summary
    11. 18 Conditional Access in Configuration Manager
      1. Understanding Modern Authentication
      2. Implementing Configuration Manager Policies
        1. Supported Compliance Policy Settings
        2. Creating a Compliance Policy
        3. Deploying a Compliance Policy
      3. Enabling Conditional Access for Exchange Online
        1. Requirements for Exchange Online
        2. Enabling Conditional Access for Exchange Online
        3. Exchange Online End-User Experience
      4. Enabling Conditional Access for SharePoint Online
        1. Requirements for SharePoint Online
        2. Enabling Conditional Access for SharePoint Online
        3. The SharePoint Online End-User Experience
      5. Enabling Conditional Access for Skype for Business Online
        1. Requirements for Skype for Business Online
        2. Configuring Conditional Access for Skype for Business Online
      6. Enabling Conditional Access for Exchange On-Premises
        1. Requirements for Exchange On-Premises
        2. Implementing the Exchange Server Connector
        3. Configuring Conditional Access for Exchange On-Premises
        4. The Exchange On-Premises End User Experience
      7. Monitoring and Troubleshooting Conditional Access
        1. Monitoring Conditional Access Compliance
        2. Troubleshooting Conditional Access
      8. Summary
    12. 19 Endpoint Protection
      1. Protection Capabilities of Microsoft’s Antimalware Platform
        1. Using Antimalware as a Service
        2. Understanding Microsoft’s Core Protection Technologies
        3. Understanding Windows Antimalware Capabilities
        4. Using Windows Defender Offline
        5. Microsoft’s Approach to Antimalware
      2. Prerequisites for Endpoint Protection
      3. Planning and Considerations
        1. Gathering Requirements for Endpoint Protection
        2. Determining Definition Update Sources
        3. Leveraging ConfigMgr’s Capabilities
        4. Using System Center Endpoint Protection with Windows 10
        5. Deployment Best Practices
      4. Deploying and Configuring Endpoint Protection
        1. Installing the Endpoint Protection Point Role
        2. Delivery of Definition Updates
        3. Working with Antimalware Policies
        4. Installing the Endpoint Protection Client
      5. Monitoring and Reporting in Endpoint Protection
        1. Operational Status of Endpoint Protection Clients
        2. Reports Available for Endpoint Protection
        3. Integrating Report Data with Other Systems
      6. Endpoint Protection Actions and Alerts
        1. Overview of Endpoint Protection Alerts
        2. Enabling Alerts for a Collection
        3. On-Demand Actions Related to Endpoint Protection
        4. Scripting Endpoint Protection Actions
      7. Windows Defender Advanced Threat Protection
        1. Windows Defender ATP Capabilities
        2. Prerequisites for Windows Defender ATP
        3. Configuring Windows Defender ATP Using ConfigMgr
      8. Summary
    13. 20 Configuration Manager Queries
      1. Introducing the Queries Node
        1. Organizing the Query List Pane
        2. Viewing Queries and Query Results
      2. Creating Queries
        1. Building Queries Using the WMI Query Language
        2. Understanding Query Objects, Classes, and Attributes
      3. Using the ConfigMgr Query Builder
      4. Understanding Criterion Types, Operators, and Values
        1. Filtering Queries with Criterion Types
        2. Using Relational and Logical Operators
        3. Specifying or Selecting Values
      5. Writing Advanced Queries
        1. Limitations of Extended WQL in ConfigMgr
        2. Utilizing the Date and Time Functions in WQL Queries
        3. Examples of Advanced Queries
        4. Converting WQL to SQL
      6. Understanding Relationships, Operations, and Joins
        1. Querying Discovery Data
        2. Querying Inventory Data
      7. Using Query Results
        1. Exporting Query Results to a Text File
        2. Importing and Exporting Queries between Sites
        3. Creating a Collection Based on Query Results
      8. Using Status Message Queries for In-Depth Analysis
        1. Viewing Status Messages
        2. Creating Status Message Queries
      9. Summary
    14. 21 Configuration Manager Reporting
      1. Overview of SSRS and Configuration Manager Reporting
        1. Using SQL Server Reporting Services
        2. Using the ConfigMgr Reporting Point Role
        3. Notable Reporting Point Information
      2. Understanding Configuration Manager Data
        1. Using Discovery Classes
        2. Using Hardware Inventory Classes
        3. ConfigMgr Software Inventory Classes
        4. Using Software Update Inventory Classes
        5. About Software Metering Inventory Classes
        6. About Status Message Classes
        7. About State Messages Classes
        8. Using Collection Data Classes
      3. Introducing Transact-SQL
        1. Introducing SQL Server Management Studio
        2. Basic SQL Sections in a Query
        3. Using Operators
      4. Building a Report Design
        1. About Report Series
        2. Creating Consistent Reports
      5. Building a Basic Report
        1. Tools for Creating Reports
        2. Getting Started with SSDT-BI
        3. Creating a Basic Report
        4. Creating a Data Source
        5. Creating a Dataset
        6. Accessing the Toolbox
        7. Adding a Table to a Report
        8. Previewing a Report
        9. Publishing a Report
      6. Advanced Reporting Concepts
      7. Summary
    15. 22 Operating System Deployment
      1. What’s New with OSD in Current Branch
      2. OSD Deployment Scenarios
      3. Tools Used with OSD
        1. Using Sysprep to Assist with Imaging
        2. Incorporating the Windows ADK
        3. Using the User State Migration Tool
      4. Planning for OSD
      5. Using the Console
        1. Using Drivers and Driver Packages
        2. Using Operating System Images
        3. Using Operating System Upgrade Packages
        4. Using Boot Images
        5. Using Task Sequences
      6. Using Tasks and Variables in a Task Sequence
        1. Using Tasks
        2. Using Variables
      7. Site System Roles for OSD
        1. Using Distribution Points
        2. Using State Migration Points
      8. Getting Ready for Deployment
        1. Distributing the Content
        2. Deploying the Task Sequence
      9. Creating the TS Media
        1. Creating Stand-alone Media
        2. Creating Bootable Media
        3. Creating Capture Media
        4. Creating Prestaged Media
      10. Troubleshooting OSD Deployments
        1. Monitoring OSD
        2. Boot Image Command-Line Support
        3. Using OSD Log Files
        4. Understanding the PXE Boot Process
        5. Updating Your OS Images
      11. Summary
  17. Part IV Configuration Manager Administration
    1. 23 Security and Delegation in Configuration Manager
      1. Planning for Security and Delegation
        1. Security Planning Overview
        2. A Security Primer
        3. Designing Your Hierarchy for Security
        4. Planning for Secure Administration
      2. ConfigMgr Security Solutions
      3. About Role-Based Administration in ConfigMgr
        1. Managing Administrative Users
        2. Security Roles
        3. Creating Custom Roles
        4. Using Security Scopes
        5. Associating Security Scopes and Collections with Individual Roles
        6. Using Administrative Security Reports
      4. Securing Administrative Access to ConfigMgr
        1. Securing Access at the Active Directory Level
        2. Securing Site System Local Administration
        3. The Just Enough Administration (JEA) Security Feature
        4. Securing Access at the Database Level
        5. Auditing ConfigMgr Administrative Actions
      5. Securing the ConfigMgr Infrastructure
        1. Securing Site Systems
        2. About ConfigMgr Cryptographic Controls
        3. Securing Network Communications
        4. ConfigMgr Content Security
        5. Securing ConfigMgr Accounts
      6. Summary
    2. 24 Backup, Recovery, and Maintenance
      1. Implementing Configuration Manager Backup
        1. Configuring the Backup Site Server Maintenance Task
        2. Using SQL Backup
        3. Additional Files to Back Up
      2. Recovering Configuration Manager Sites
        1. Selecting Recovery Options
        2. Restoring a Failed Site
      3. Maintaining a Configuration Manager Site
        1. Configuring Built-in Maintenance Tasks
        2. Optimizing SQL Server
        3. Maintaining Windows Server Update Services
        4. Using ConfigMgr Site Maintenance Options
      4. Monitoring Configuration Manager
        1. Monitoring Site Replication
        2. Using System Center Operations Manager
      5. Summary
  18. Part V Appendixes
    1. A Configuration Manager Log Files
      1. Viewing Log Files
      2. Configuring Logging
        1. Server-Side Logging Levels
        2. MP/Client and Console Logging Levels
      3. Client Logs
      4. Server Logs
        1. Site Server Logs
        2. Server Installation and Update Logs
        3. Site System Logs
        4. Cloud Management Gateway Logs in Azure
    2. B Co-Managing Microsoft Intune and ConfigMgr
      1. Modern Management in Windows 10
      2. Defining Co-Management
        1. Why Co-Management?
        2. Choosing Where to Start with Co-Management
      3. Configuring Co-Management in ConfigMgr
        1. Co-Management Prerequisites
        2. Enabling Devices for Co-Management
        3. Moving Workloads from ConfigMgr to Intune
    3. C Reference URLs
      1. General Resources
      2. Microsoft’s Configuration Manager Resources
      3. Other Configuration Manager Resources
      4. Blogs
      5. Public Forums
      6. Utilities
    4. D Available Online
      1. Configuration Manager Reporting
      2. Live Links
      3. Extending Hardware Inventory—Online Only
  19. Index
  20. E (Online Only) Extending Hardware Inventory

Product information

  • Title: System Center Configuration Manager Current Branch Unleashed, First Edition
  • Author(s): Kerrie Meyler, Gerry Hampson, Saud Al-Mishari, Greg Ramsey, Kenneth van Surksum, Michael Wiles
  • Release date: April 2018
  • Publisher(s): Sams
  • ISBN: 9780134652450