Microsoft System Center Configuration Manager Cookbook - Second Edition电子书

Microsoft System Center Configuration Manager Cookbook - Second Edition

Microsoft System Center Configuration Manager Cookbook - Second Edition

Credits

About the Authors

About the Reviewer

www.PacktPub.com

Why subscribe?

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Getting ready

How to do it…

How it works…

There's more…

See also

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Designing a System Center Configuration Manager Infrastructure

Introduction

What's changed from System Center 2012 Configuration Manager?

Getting ready

How to do it...

Whats new in CM Capabilities

Removed features

See also

System Center Configuration Manager's new servicing models

Getting Ready

Windows 10's new servicing models

How to do it...

How will CM support Windows 10?

Why is there another version called Configuration Manager LTSB 2016?

Keeping your CM deployment up-to date

Getting ready

How to do it...

How it works...

There's more...

See also

Infrastructure sizing considerations

Supportable size and scale

Hardware recommendation

See also

Dividing up site system roles

Getting ready

How to do it...

How it works...

There's more...

Offloading the SUP

Offloading Endpoint Protection

Offloading SQL Reporting Services

See also

Upgrading in-place from Configuration Manager 2012

Getting ready

How to do it...

Starting the upgrade installation at the CAS or primary site

Starting the upgrade installation at a secondary site

Starting the upgrade installation of clients

How it works...

There's more...

See also

Installing SQL the right way

Getting ready

How to do it...

How it works...

There's more...

Installing SQL with an unattended file

Setting some limits

SQL file layout

Helping SQL

See also

Managing Internet-facing clients

Getting ready

How to do it...

How it works...

See also

Using remote and workstation distribution points and BranchCache

Getting ready

How to do it...

How it works...

There's more...

When to choose BranchCache

When to choose a workstation distribution point

When to choose a server-class distribution point

See also

2. Deploying Windows 10 with Operating System Deployment

Introduction

Creating an OSD test environment

Getting ready

How to do it...

How it works...

There's more...

The reference image in a VM

The production build in a VM

Leveraging the build and capture process

Getting ready

How to do it...

How it works...

There's more...

Creating bootable media

Deploying the task sequence to a device collection

Starting the build process and troubleshooting information

See also

Migrating user state

Getting ready

How to do it...

How it works...

There's more...

See also

Managing drivers

Getting ready

How to do it...

How it works...

There's more...

Auto Apply Drivers

Applying Driver Package

Customizing with WMI conditional statements

See also

Customizing the build process with prestart hooks

Getting ready

How to do it...

How it works...

There's more...

See also

Patching your reference build

Getting ready

How to do it...

How it works...

See also

Using the new Windows 10 in-place upgrade task sequence

Getting ready

How to do it...

Deploying the upgrade TS to a device collection containing Windows 7/8/8.1 clients

How it works...

There's more...

Leveraging the Microsoft Deployment Toolkit with CM OSD

How to do it...

How it works...

There's more...

See also

3. Deploying Applications and Software Updates

Introduction

Creating applications and deployment types

Getting ready

How to do it...

How it works...

There's more...

Creating deployment types

Specifying application settings

Distribute an application to your DPs

Deploying an application to workstations

See also

Deploying Store Apps - Windows, iOS, Android

Getting ready

How to do it...

Deploy Apps directly from Stores - Deep Link

Deploy Apps by Side-Loading

How it works...

There's more...

See also

Creating Mobile Application Management Policy

Getting ready

How to do it...

How it works...

There's more...

See also

Managing Software Center and Application Catalog

How to do it...

There's more...

See also

Reducing collection dependencies with conditional rules and global conditions

Getting ready

How to do it...

How it works...

There's more...

Testing the application using a Simulated Deployment

Converting classic packages to applications

Getting ready

How to do it...

How it works...

There's more...

Creating and deploying Virtual Applications - App-V

Getting ready

How to do it...

How it works...

Superseding applications

Getting ready

How to do it...

How it works...

Monitoring content and deployment status

Getting ready

How to do it...

How it works...

Preparing for software updates

Getting ready

How to do it...

How it works...

There's more...

The Active Software Update Point

Enable software updates on clients

Creating and monitoring software updates

Getting ready

How to do it...

How it works...

There's more...

Create a software update deployment

Monitor the deployment

See also

Leveraging Automatic Deployment Rules - ADRs

Getting ready

How to do it...

How it works...

There's more...

Deploying custom updates

Getting ready

How to do it...

How it works...

There's more...

See also

Leveraging Windows 10 Servicing to deploy features upgrades

Getting ready

How to do it...

How it works...

There's more...

See also

4. Managing Compliance Settings

Introduction

Building Configuration Items the old way

Getting ready

How to do it...

How it works...

There's more...

Disabling the local guest account

Disabling Internet Connection Sharing

Verifying recent antivirus definition

See also

Building Configuration Items for Windows 10

Getting ready

How to do...

How it works...

There's more...

Creating and deploying a baseline

Getting ready

How to do it...

How it works...

There's more...

Piloting the baseline

Testing the baseline

Managing revisions

See also

Leveraging Security Compliance Manager

Getting ready

How to do it...

How it works...

There's more...

Adding an additional CI to the baseline

See also

Monitoring compliance with SSRS

Getting ready

How to do it...

How it works...

There's more...

Creating an e-mail based subscription

Creating a file-based subscription

See also

5. Managing Mobile Devices using Configuration Manager with Microsoft Intune

Introduction

Creating a Microsoft Intune subscription

Getting ready

How to do it...

How it works...

There's more...

See also

Connecting Microsoft Intune to CM

Getting ready

How to do it...

Android management setup

Windows 10 management setup

Windows 10 Mobile management setup

iOS management setup

How it works...

There's more...

See also

Creating and deploying MDM policies

Getting ready

How to do it...

How it works...

There's more...

Deploying the MDM policy

Verifying the application of the MDM policy

See also

Using Conditional Access to control devices' access to Office 365 services

Getting ready

How to do it...

How it works...

There's more...

See also

Managing mobile devices enrolled in Microsoft Intune via the CM console

Getting ready

How to do it...

Full wipe action

Selective wipe action

Remote lock

Passcode reset

How it works...

There's more...

6. Managing Sites

Introduction

Managing collections

Getting ready

How to do it...

How it works...

There's more...

Creating maintenance windows

Configuring power management

Configuring alerts

Import/export and copying collections

See also

Configuring site maintenance

Getting ready

How to do it...

How it works...

There's more...

Setting up a Network Access Account

Disabling unused Status Filter Rules

Designating a fallback site

See also

Managing site communications

Getting ready

How to do it...

There's more...

Configuring bandwidth restrictions on standalone DPs

Configuring Discovery

Getting ready

How to do it...

How it works...

There's more...

Enabling Active Directory System Discovery

Enabling Active Directory User Discovery

Enabling Active Directory Group Discovery

See also

Managing Boundary Groups

Getting ready

How to do it...

How it works...

There's more...

Adding or editing Boundary Groups from the Boundaries node

See also

Managing role-based security

Getting ready

How to do it...

How it works...

There's more...

Creating scopes to manage security boundaries

Defining administrator groups

Setting security scopes on DPs

See also

Configuring the Application Catalog

Getting ready

How to do it...

How it works...

There's more...

See also

Managing and validating content for DPs and DP groups

Getting ready

How to do it...

How it works...

There's more...

Monitoring the content status

Monitoring DP group status

Monitoring the DP configuration status

Validating the content

See also

7. Managing Clients

Introduction

Deploying clients

Getting ready

How to do it...

How it works...

There's more...

Discovering computers

Configuring security

Pushing the client to a collection

Pushing the client to all computers automatically

See also

Upgrading client agents

Getting ready

How to do it...

How it works...

There's more...

See also

Managing client health

Getting ready

How to do it...

How it works...

There's more...

Viewing health in the console

Viewing health in SRS reports

Viewing alerts in the console

Disabling client remediation

See also

Managing client settings

Getting ready

How to do it...

How it works...

There's more...

Hiding all notifications

Deploying Endpoint Protection

See also

Enabling Device Health Attestation in Windows 10

Getting ready

How to do it...

How it works...

There's more

See also

Monitoring client installation and activity

Getting ready

How to do it...

How it works...

There's more...

See also

Making use of user-centric improvements

Getting ready

How to do it...

How it works...

There's more...

Associating users to devices

Enable the new Software Center

See also

Configuring power management

Getting ready

How to do it...

How it works...

There's more...

Copying power management settings from another computer

Enabling users to opt out of power management

Creating an "always on" collection

Configure wakeup time, but no other settings

Monitoring Power Management with Reporting

See also

8. Managing Inventory

Introduction

Managing hardware inventory

Getting ready

How to do it...

How it works...

There's more...

Extending hardware inventory

Using RegKeytoMof

Backing up your classes

See also

Managing software inventory

Getting ready

How to do it...

How it works...

There's more...

Adding new software inventory rules

Creating a software inventory rule with a custom client policy

Ignoring other options

See also

Managing software metering

Getting ready

How to do it...

How it works...

There's more...

Automatically create metering rules based on recent usage data

Reviewing metering reports

Automating uninstall processes to remove unused software

Leveraging CCM_RecentlyUsedApps

Monitoring inventory data flow

Getting ready

How to do it...

Client

Management Point

Site

How it works...

There's more...

Integrating Asset Intelligence

Getting ready

How to do it...

How it works...

There's more...

Submitting applications to Microsoft for categorization

See also

9. Managing Reports and Queries

Introduction

Installing SQL Server Reporting Services - SSRS

Getting ready

How to do it...

How it works...

There's more...

Remote SSRS - remote RSP

See also

Configuring reporting services

Getting ready

How to do it...

Making the SSRS server an RSP

Saving resources of your CAS or Primary - cache reports

See also

Sharing your reports with others

Getting ready

How to do it...

Configuring report subscription

Getting ready

Step 1: Enable e-mail notification for alerts

Step 2: Configure E-Mail Settings of Reporting Services Configuration Manager

Step 3: Configure SQL Server Agent Service

How to do it...

There's more...

See also

Building queries

Getting ready

How to do it...

How it works...

There's more...

Creating subselect queries in T-SQL

Creating a WMI query

Creating a WMI-based query collection

Creating subselect queries in WMI

See also

Editing and creating reports

Getting ready

How to do it...

How it works...

There's more...

Creating a new report with Report Builder 3.0

Incorporating readability aids in your report

Uploading reports to the RSP

See also