You are previewing Mastering System Center Configuration Manager.
O'Reilly logo
Mastering System Center Configuration Manager

Book Description

Master how to configure, back up, and secure access to System Center Configuration Manager with this practical guide

In Detail

Microsoft System Center Configuration Manager is a powerful system management product that helps IT administrators perform better asset and organization management by grouping them into logical containers. These logical containers allow you to perform application deployments and software and security updates in no time.

Mastering System Center Configuration Manager explains the Configuration Manager architecture, hierarchy, and components, as well as how to use them. It also provides advanced-level content on how to set up System Center Configuration Manager and integrate it with an existing system. You will also find information on deploying applications, creating client settings, and integrating Configuration Manager with Windows Azure to utilize its full power. At the end of the book, you will learn how to troubleshoot issues with SCCM 2012 R2 on the server side and also on the client side.

What You Will Learn

  • Set up System Center Configuration Manager servers
  • Configure System Center Configuration Manager hierarchy components
  • Create applications and packages
  • Deploy applications and software updates
  • Generate powerful and interactive reports
  • Define Site System roles
  • Back up System Center Configuration Manager settings
  • Secure access to the System Center Configuration Manager console
  • Downloading the example code for this book. You can download the example code files for all Packt books you have purchased from your account at http://www.PacktPub.com. If you purchased this book elsewhere, you can visit http://www.PacktPub.com/support and register to have the files e-mailed directly to you.

    Table of Contents

    1. Mastering System Center Configuration Manager
      1. Table of Contents
      2. Mastering System Center Configuration Manager
      3. Credits
      4. About the Author
      5. About the Reviewers
      6. www.PacktPub.com
        1. Support files, eBooks, discount offers, and more
          1. Why subscribe?
          2. Free access for Packt account holders
          3. Instant updates on new Packt books
      7. Preface
        1. What this book covers
        2. What you need for this book
        3. Who this book is for
        4. Conventions
        5. Reader feedback
        6. Customer support
          1. Errata
          2. Piracy
          3. Questions
      8. 1. Introduction to System Center Configuration Manager 2012 R2
        1. System Center Configuration Manager 2012 R2 – requirements
        2. Prerequisites for System Center Configuration Manager 2012 R2
          1. Creating the System Management container
          2. Extending the Active Directory schema for SCCM 2012 R2
          3. Installing Windows Server's roles and features
          4. Installing ADK 8.1 for SCCM 2012 R2
        3. Installing MS SQL Server 2012
          1. Installing Windows Server Update Services
        4. Installing System Center Configuration Manager 2012 R2
        5. Site system server and roles
          1. Site administration
          2. Planning and deploying sites
          3. Monitoring and maintaining the hierarchy
        6. Summary
      9. 2. Assets and Compliance
        1. The benefits of centralized system management
        2. Managing compliance
          1. Configuring compliance settings
          2. Configuration items and baselines
            1. Configuration items
            2. Configuration baselines
              1. Baseline deployment
          3. Compliance evaluation
          4. Configuration packs
          5. Exporting configuration items and baselines
        3. Compliance authoring
          1. Organization
          2. Using Microsoft tools
            1. Security Compliance Manager
            2. CP Studio
          3. The compliance strategy
        4. Endpoint Protection
          1. Prerequisites for Endpoint Protection
          2. Planning for Endpoint Protection
            1. Creating client settings and antimalware policies
            2. Deploying to a test collection
          3. Installing the Endpoint Protection role
          4. Setting up a software update point for Endpoint Protection
          5. Configuring the SUP to synchronize definition updates
          6. Creating autodeployment rules for definition updates
          7. Working with antimalware policies
            1. Understanding the default antimalware policy
            2. Creating a custom antimalware policy
            3. Importing and merging antimalware policies
              1. Merging policies
          8. Configuring alerts for Endpoint Protection
            1. Configuring e-mail notifications
            2. Alert subscriptions
        5. Configuring custom client device settings for Endpoint Protection
          1. Deploying Endpoint Protection for custom client agent settings
          2. Monitoring the status of Endpoint Protection
          3. Configuring collections to appear in the collection view
            1. Security state view
            2. Malware remediation status
              1. Top malware
              2. Monitoring malware details
              3. Monitoring Endpoint Protection details
              4. Performing on-demand actions for the malware
          4. Reporting in Endpoint Protection
        6. The Endpoint Protection client
          1. Installing the Endpoint Protection client
          2. Understanding Endpoint Protection client settings
          3. Automatic removal of antimalware software
          4. Removing the Endpoint Protection client
          5. Delivering definition updates
        7. Summary
      10. 3. The Software Library
        1. Introducing packages
          1. Programs in Configuration Manager
          2. Collections
          3. Distribution Points
          4. Deployments
            1. Combining the use of packages, programs, collections, and deployments
        2. Creating a package
          1. Package properties
            1. Program properties
          2. Creating a package with the new package wizard
          3. Custom packages
          4. Repackaging software
            1. Avoiding common issues
          5. Testing packages
        3. Creating and managing applications
          1. About applications
          2. About deployment types
            1. Requirements as a component of a deployment type
            2. Global conditions
            3. Detection methods
          3. User Device Affinity
        4. Creating applications
          1. Creating a Windows Installer application
          2. Application properties
        5. Creating deployment types
          1. Creating a Windows Installer deployment type
          2. Creating an application virtualization deployment type
          3. Creating a script-based deployment type
        6. Creating detection methods
          1. Detection methods for a Windows Installer application
          2. Other detection methods
          3. Custom script detection methods
            1. Custom detection methods with PowerShell
        7. Managing applications
          1. Dependencies
          2. Revision history
          3. Exporting and importing applications
          4. Superseding applications
          5. Application retirement and deletion
        8. Package conversion
        9. Operating System Deployment
        10. Summary
      11. 4. Reporting in Configuration Manager
        1. SQL Server Reporting Services
        2. Implementing SQL Server Reporting Services
          1. SSRS requirements
          2. SQL Server Reporting Services installation
          3. SSRS configuration
            1. Role-based access control
            2. Accessing SSRS Point
            3. Data sources
          4. Backing up SSRS
          5. Reporting best practices
        3. Reports in the Configuration Manager console
          1. Creating a subscription
          2. Managing SSRS report security
        4. Creating a report
          1. Creating custom reports
            1. Development tools
            2. Building a custom report
            3. Interactive features of reporting services
          2. Advanced custom report example
          3. Authoring best practices for report development
        5. Troubleshooting SSRS
          1. SSRS logs
        6. Optimizing SSRS performance
          1. Subscriptions
          2. Report caching
          3. Report snapshots
          4. Report timeout values
          5. Best practices for performance
        7. System Center Data warehouse
        8. Summary
      12. 5. Administration and Monitoring
        1. The Configuration Manager's discovery methods
        2. Hierarchy planning
          1. Configuration Manager sites
          2. Central Administration Site
          3. Primary and secondary sites
          4. Hierarchy-wide site system roles
        3. Planning your hierarchy structure
        4. Planning boundaries and boundary groups
        5. Client discovery and installation methods
        6. Role-based administration
        7. In-console alerts
          1. Managing alerts
          2. Configuring alerts
          3. Subscribing to alerts
        8. Client settings
          1. Defining a priority
          2. Background Intelligent Transfer Service device settings
        9. Client policy device settings
          1. Mobile device client settings
          2. Compliance settings for device settings
          3. Computer agent device settings
          4. Computer restart device settings
          5. Hardware inventory device settings
          6. Network access protection device settings
          7. Power management device settings
          8. Remote control device settings
            1. Configuring remote control and remote assistance
            2. Using a remote control
            3. Remotely administering a client computer
            4. Providing remote assistance
        10. Software deployment device settings
          1. Software inventory device settings
        11. Using Resource Explorer
        12. Summary
      13. 6. Cloud Integration
        1. Cloud integration – prerequisites
        2. Subscribing to Windows Intune
        3. Adding the Windows Intune subscription to Configuration Manager
          1. Mobile device management
          2. Configuring the Windows Intune connector role
          3. Mobile device enrollment
          4. Mobile application delivery
        4. Cloud distribution points
          1. Cloud distribution points – prerequisites
          2. Creating certificates
            1. Importing the certificates in Windows Azure
          3. Creating the cloud distribution point
          4. Configuring DNS for the cloud distribution point
        5. Summary
      14. 7. Security and Backup
        1. Administrative users
        2. Security roles
          1. Built-in roles
          2. Custom roles
          3. Security scopes
            1. Associating security scopes and collections with individual roles
        3. Preventing unauthorized administrative access
          1. The Active Directory security
          2. Securing access at the database level
          3. Auditing the Configuration Manager's administrative actions
        4. Securing the Configuration Manager infrastructure
          1. Building security into your hierarchy
          2. Securing site systems
            1. Physical security and hardware selection
            2. System software security
            3. Attack surface reduction and server hardening
            4. Security software
            5. Securing the site system's local administration
            6. Securing the site database
          3. Configuration Manager's network security
            1. Client-to-server communications security
            2. Server-to-server communications security
            3. Site-to-site communications security
        5. Site and SQL Server backups
          1. Backing up Configuration Manager
          2. Restoring Configuration Manager
            1. Recovering from a site server operating system crash
            2. Recovering from a Configuration Manager functional crash
            3. Using backup and restore to migrate to a new environment
            4. Moving Configuration Manager to a new hardware
            5. Building a new Configuration Manager environment
        6. Summary
      15. 8. Troubleshooting
        1. Troubleshooting network issues
          1. Network configuration issues
          2. Troubleshooting connectivity issues
          3. Name resolution issues
          4. Blocked or unresponsive ports
          5. Timeout issues
          6. Identifying network issues
            1. Network issues affecting the site configuration
            2. Network issues affecting the client installation
            3. Issues with the Service Principal Name
            4. Network issues affecting the software distribution
            5. Network issues affecting site communications
            6. Troubleshooting the data replication service
        2. Troubleshooting console issues
          1. Console logging
          2. Verifying WMI permissions
          3. Verifying DCOM permissions
        3. Troubleshooting the client installation
        4. Troubleshooting compliance settings
        5. Troubleshooting application deployments
        6. Troubleshooting software updates
          1. Windows Server Update Services and Software Update Point
        7. Troubleshooting SQL Server Reporting Services
        8. Summary
      16. Index