Microsoft System Center 2012 Endpoint Protection Cookbook电子书

Microsoft System Center 2012 Endpoint Protection Cookbook

Table of Contents

Microsoft System Center 2012 Endpoint Protection Cookbook

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Instant Updates on New Packt Books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Getting Started with Client-Side Endpoint Protection Tasks

Introduction

Locating and interrupting client-side SCEP logs

Getting ready

How to do it...

How it works...

There's more…

More details about the MPLog

Other useful client-side logs

NisLog.txt

Performing manual definition updates and checking definition version

Getting ready

How to do it...

How it works...

There's more...

Alternate definition sources

Microsoft Update opt-in

Manually editing local SCEP policy using the user interface

Getting ready

How to do it...

How it works...

There's more...

Utilizing MpCmdRun.exe

Getting Ready…

How to do it…

How it works…

There's more...

Using MpCmdRun to pull definition updates from an alternate source

Using MpCmdRun to de-quarantine a false positive

MpCmdRun logging

2. Planning and Rolling Installation

Introduction

Creating role-based SCEP administrators

Getting ready

How to do it...

How it works...

Creating auto deployment rules for SCEP definitions

Getting ready

How to do it...

How it works...

Enabling the Endpoint Protection role

Getting ready

How to do it...

How it works...

3. SCEP Configuration

Introduction

Modifying SCEP default client settings

Getting ready

How to do it...

How it works...

Creating, modifying, and deploying a SCEP policy

Getting ready

How to do it...

How it works...

There's More…

Understanding policy precedence

Server policy templates

Setting up SCEP alerts

Getting ready

How to do it...

How it works...

Configuring reports

Getting ready

How to do it...

How it works...

There's More…

Accessing reports without the SCCM console

Delivering reports to smartphone users

4. Client Deployment Preparation and Deployment

Introduction

Preparing your environment for SCEP

Getting ready

How to do it...

How it works...

Creating an effective deployment plan

Getting ready

How to do it...

How it works...

Deploying SCEP clients with SCCM 2012

Getting ready

How to do it...

How it works...

Verifying that SCEP policies are being applied correctly

Getting ready

How to do it...

How it works...

Performing a manual FEP client installation

Getting ready

How to do it...

How it works...

5. Common Tasks

Introduction

Checking that your SCCM server has up-to-date SCEP definitions

Getting ready

How to do it...

How it works...

Performing SCEP operational tasks using the SCCM console

Getting ready

How to do it...

How it works...

Using SCEP reports to verify task completion

Getting ready

How to do it...

How it works...

Utilizing the SCEP dashboard

Getting ready

How to do it...

Using MpCmdRun remotely

Getting ready

How to do it...

How it works...

6. Management Tasks

Introduction

Verifying that SCEP clients are installed on all systems

Getting ready

How to do it...

How it works...

Changing control with SCEP policies

Getting ready

How to do it...

How it works...

Using SCEP policy templates

Getting ready

How to do it...

How it works...

Merging client policies

Getting ready

How to do it...

How it works...

Responding to SCEP alerts

Getting ready

How to do it...

How it works...

7. Reporting

Introduction

Using the system-based SCEP reports

Getting ready

How to do it...

How it works...

Utilizing the user-based SCEP reports

Getting ready

How to do it...

How it works...

Providing access to reports

Getting ready

How to do it...

How it works...

Building custom reports

Getting ready

How to do it...

How it works...

8. Troubleshooting

Introduction

Resolving client-side definition update issues

Getting ready

How to do it...

How it works...

Fixing SCCM client health issues

Getting ready

How to do it...

How it works...

Resolving false positives

Getting ready

How to do it...

How it works...

Dealing with infections that SCEP cannot resolve

Getting ready

How to do it...

How it works...

9. Building an SCCM 2012 Lab

Introduction

Installing SCCM 2012 and SCEP in a standalone environment

Getting ready

How to do it...

How it works...

A. Appendix

Integrating SCEP with SCOM 2012

Client deployment checklists

List of SCEP logfiles

Using Windows Intune Endpoint Protection

Index