System center 2012 configurations manager
Download as PPTX, PDF0 likes719 views
Microsoft Client Management has evolved from basic groups management to comprehensive management of laptops, servers, and diverse consumer devices at enterprise scale. Configuration Manager 2012 unifies infrastructure, simplifies administration, and empowers users by providing mobile device management, application delivery from any device, settings and update management, and reducing infrastructure requirements.
System center 2012 configurations manager
- 1. Wally Mead Senior Program Manager Microsoft Corporation Mark Florida Principal Program Manager Lead Microsoft Corporation
- 2. 2003 2012 2012 2011 2007 1999 SMS 2.0 1994 SMS 1.0 Evolution of Microsoft Client Management Client Management Infancy (NT Domain) Groups Model Comprehensive Management Laptops, Servers, Enterprise Scale Consumerization of IT Management from the Cloud
- 3. I want to connect to people and be productive anywhere, anytime Security and Access How can IT provide access to apps and data while maintaining security? How can IT support and manage all those devices? I want to use the device I prefer Challenges to Enabling Consumerization Management of diverse devices Secure, anywhere access to apps & data Application Experience Devices User Corporate Consumer Infrastructure Considerations
- 4. Empower Users Empower people to be more productive from almost anywhere on almost any device. Simplify Administration Improve IT effectiveness and efficiency. Unify Infrastructure Reduce costs by unifying IT management infrastructure.
- 5. Empower Users Empower people to be more productive from anywhere on any device. Application Delivery Mobile Device Management Unify Infrastructure Reduce costs by unifying IT management infrastructure. Simplify Administration Improve IT effectiveness and efficiency.
- 6. Empower Delivery Evaluation Criteria • User • Device type • Network connection User/Device Relationships Primary Devices • MSI • App-V Non-primary Devices • VDI • Presentation Server • Remote Desktop • Deliver best user experience on each device • Define application once < > Windows Embedded
- 7. Application “Package” App-V Windows Script CAB Windows Installer Empower General Information Administrator Properties End User Metadata Deployment Type Detection Method Install Command Requirement Rules Dependencies Supersedence < >
- 8. IT Empower Administrators publish software titles to catalog, complete with meta data to enable search • Deliver best user experience on each device Users can browse, select and install directly from Catalog • Application model determines format and policies for delivery User
- 9. Management for all Exchange ActiveSync (EAS) connected devices • EAS-based policy delivery • Discovery and inventory • Settings policy • Remote Wipe Empower 7
- 11. Empower
- 12. • Version 5.3 (Power) • Version 6.1 (Power) • Version 7.1 (Power) AIX • Version 11iv2 (PA-RISC/IA64) • Version 11iv3 (PA-RISC/IA64)HP-UX • Version 4 (x86/x64) • Version 5 (x86/x64) • Version 6 (x86/x64) Red Hat Enterprise Linux • Version 9 (SPARC) • Version 10 (SPARC/x86) • Version 11 (SPARC/x86) Solaris • Version 9 (x86) • Version 10 SP1 (x86/x64) • Version 11 (x86/x64) SUSE Linux Enterprise Server • Supported OS’s across both: • Configuration Manager • Operations Manager • Newer versions of operating systems will be supported within 180 days of release • Old versions will be supported as long as vendor provides support • Broader Linux distro support being evaluated for future releases
- 15. Unify Infrastructure Reduce costs by unifying IT management infrastructure. Reduced Infrastructure Requirements Unified Management of Virtual Clients Endpoint Protection Software Update Management Compliance & Settings Management Power Management Internet-based Client Management
- 16. Reduced Infrastructure Requirements Unify Central Administration Site • Central primary site administration • Reporting Primary Sites • Client management and settings • Delegated administration Secondary Sites • Content routing • Distributions points Central Administration Site Primary Site Primary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site
- 17. CONNECTION BROKER Unified Management of Virtual Clients User-centric application delivery through App-V or Citrix XenApp. Single admin experience for managing physical and virtual desktops. Integrates with RDS and XenDesktop. • Recognizes pooled and personal virtual desktops • Randomizes tasks Unify HYPER-V CONFIGMGR DP/MP APP-V SEQUENCER
- 18. Security and Compliance Endpoint Protection Unified Infrastructure • Simplified server and client deployment • Streamlined updates • Consolidated reporting Comprehensive Protection Stack • Behavior monitoring • Antimalware • Dynamic Translation • Windows and Firewall Management Unify
- 19. Security and Compliance Software Update CAS Primary Site MP Role Primary Site DP Role Assigns policy to scan for update status or to deploy update Distributes updates Reports compliance Microsoft Update Primary Site SUP Role/WSUS Unify Identifies who needs updates and reports on compliance Downloads updates Auto Deployment • Faster deployment through search • Schedule content download and deployment to avoid reboot during work hours State-based Updates • Allows individual or group deployment • Updates added to groups auto deploy to targeted collections Optimized for New Content Model • Reduce replication and storage • Expired updates and content deleted
- 20. ConfigMgr MP Security and Compliance Settings Management Baseline ConfigMgr Agent WMI XML Registry IISMSI Script SQL Software Updates File Active Directory Baseline Configuration Items Auto Remediate OR Create Alert (to Service Manager)! Unify Improved functionality • Copy settings • Trigger console alerts • Richer reporting Enhanced versioning and audit tracking • Ability to specify versions to be used in baselines • Audit tracking includes who changed what Pre-built industry standard baseline templates through IT GRC Solution Accelerator Assignment to collections Baseline drift
- 21. Week 1: Monitor •Enable client management agent •Begin monitoring usage and activity Non-Peak & Peak Week 2: Plan •Continue monitoring on usage and activity •Begin to develop Power Plan •VM awareness (new compared to 2007) •Copy power policies (new compared to 2007) Mid-Month: •Power Plan has been confirmed Week 3: Apply Power policy •Begin applying Power Plan •End user opt-out (new compared to 2007) Week 4: Compliance & Analyze •Review before and after usage and activity •Determine savings in Kwh and Co2 saved Unify
- 22. Internet-based Client Management PR1 MP DP MP DP Non PKI enabled site system PKI enabled site system Unify Intranet Internet Reduced Complexity • Single Primary site can manage both Intranet clients (over HTTP) and Internet clients (over HTTPS) Flexibility • Primary sites can be configured to either support only HTTPS roles or both HTTP and HTTPS site roles Reliability • Intelligent client behavior enables client to communicate using the most secure option available • Tighter security enforcement by only allowing clients with Enterprise-issued certificates to communicate with the ConfigMgr roles
- 24. Unify
- 25. Primary Site Houston Primary Site 10,000 Clients Central Administration Site Must be a new installation Primary Site Miami Primary Site 5,000 Clients
- 26. Simplify Administration Improve IT effectiveness and efficiency. Modern GUI Role-based Administration Operating System Deployment Asset Intelligence Client Health Remote Control
- 27. Modern GUI Simplify • Intuitive ribbon interface • In-console alerts • Global search capability • New collection membership rules allow better filtering of members
- 28. Role Based Administration Functionality ConfigMgr 2007 ConfigMgr 2012 What types of objects can I see and what can I do to them? Class rights Security roles Which instances can I see and interact with? Object instance permissions Security scopes Which resources can I interact with? Site specific resource permissions Collection limiting Simplify Meg- WW Central System Administrator Louis-Software Update Manager for France Bob- US & France Security Admin • Can see & update “France” desktops • Cannot modify security settings on “France” desktops • Cannot see “All Systems” or “U.S.” desktops • Can see & modify security settings on “France” and “U.S.” desktops • Cannot update “France” or “U.S.” desktops • Cannot see “All Systems” Map the organizational roles of your administrators to defined security roles • Security organization role • Geography Reduces error, defines span of control for the organization
- 30. CAS Primary Site MP Role Primary Site DP Role Image Task Sequence Report WDS PXE Server Simplify Multiple Deployment Method Support • PXE initiated deployment allows client computers to request deployment over the network • Multi-cast deployment to conserve network bandwidth • Stand-alone media deployment for no network connectivity or low bandwidth • Pre-staged media deployment allows you to deploy an operating system to a computer that is not fully provisioned USMT 4.0 UI integration makes it easier transfer files and user settings from one machine to another Operating System Deployment
- 32. Simplify • In-console view of client health • Threshold-based console alerts • Heartbeat DDRs • HW/SW inventory and status • Remediation (same as Setting Mgmt)
- 33. Asset Intelligence, Inventory, and Software Metering Software Metering & License ReportsAsset Intelligence Service Asset Intelligence Catalog Real-time Application and Hardware Intelligence Consolidated/simplified reporting that allows you to • Understand software installation profiles • Plan for hardware upgrades • Identify over or under licensing issues • Track custom apps or groups of titles ConfigMgr Inventory Simplify
- 34. Simplify
- 36. Assist with Migration of Objects Assist with Migration of Clients Minimize WAN impact Maximize Re-usability of x64 Server Hardware Assist with Flattening of Hierarchy
- 39. SummaryEmpowerUnifySimplify Role-based Administration Internet-based Client Management Power Management Software Update Management Reduced Infrastructure Requirements Mobile Device Management Application Delivery Compliance & Settings Management Endpoint Protection Unified Management of Virtual Clients Operating System Deployment Asset Intelligence, Client Health, and Inventory End user platform support Application Delivery 2007 R3 Device Centric MDM licensing 2012 User Centric Integrated Windows and EAS New Improved Integrated Auto Remediation Improved New 2012 SP1 Metro style Windows 8,Mac,Linux Flexible hierarchies Real-time actions User Profile and Data Improved Improved