Deploying Microsoft System Center Configuration Manager电子书

Title Page

Copyright

Deploying Microsoft System Center Configuration Manager

Credits

About the Authors

www.PacktPub.com

Why subscribe?

Customer Feedback

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Downloading the color images of this book

Errata

Piracy

Questions

Design Planning

System Center Configuration Manager

When planning an upgrade

ConfigMgr hierarchy planning

Possible on-premise scenarios

Primary site

Primary site with secondary site

Central administration site with primary sites and secondary sites

Important servers roles

Management point server role

Distribution point server role

MS SQL Server role in ConfigMgr environment

Sizing and scaling of ConfigMgr

Site types

Central administration site

Primary site

Secondary site

Supported number of clients

ConfigMgr in Azure

ConfigMgr as a VM in Azure

Cloud-based distribution points

Planning for high availability with ConfigMgr

Reporting

Summary

Installing Configuration Manager

Configuration Manager installation process

System Center Configuration Manager 1706 requirements

Prerequisites for System Center Configuration Manager 1706

Environmental components

Granting permissions to the System container

Extending the Active Directory schema

Installing operating system components

Installing MS SQL Server

Installing Windows Assessment and Deployment Kit

ConfigMgr server installation

Checkouts after installation

Summary

Configure Sites and Boundaries

ConfigMgr server role types

Default roles

Optional roles

Roles installed during server deployment

Site server

Site system

Site database server

Service connection point

Distribution point

Management point

Methods of installing server roles

Create site system server

Add site system role

Fundamental optional server roles

Fallback status point

Reporting service point

Application Catalog

ConfigMgr server settings

Hierarchy site settings

Primary site settings

Discovery Methods

Active Directory Discovery Methods

Active Directory Forest Discovery

Active Directory User Discovery

Active Directory System Discovery

Active Directory Group Discovery

Heartbeat Discovery

Boundary and boundary groups

Configuring boundaries

Manually created boundaries

Automatically created boundaries

Configuring boundary groups

Default boundary group

Manual creation of boundary groups

Summary

Configuration Manager Agent Installation

Operating systems requirements

ConfigMgr client installation

Installation methods

Client push

Installing from the console

Manual installation on the operating system

Other installation methods

ConfigMgr client installation checkout

Troubleshooting client connectivity

Summary

Creating Client Settings for Servers and Workstations

Client settings

Default Client Settings

Creating custom settings for a device

Creating custom settings for a user

Assigning to a collection

Checkout of client settings

Collection settings

Summary

Compliance Settings

Compliance feature

Compliance Settings

Compliance Configuration Items

Compliance Configuration Baselines

Configuration Pack

Common tasks for managing compliance

Client setting for compliance

Deploying the compliance baseline

Viewing compliance results

Client reporting

Console reporting

Creating collections based on the compliance result

Managing resource and data access

Remote Connection Profiles

Company Resource Access

User Data and Profiles configuration

Summary

Software Distributions

Applications versus packages

Software distribution server roles

Application management features

Creating applications

Automatic application creation

Manual application creation

Global condition

Configuring application features

Supersedence

Application Catalog

References

Revision history

Deployment Types

Detection Method

Dependencies

Requirements

Application deployment

Simulating a deployment

Available deployments

Required deployments

Triggering an installation

Reporting

Invoking scripts on devices

Summary

Software Update Management

Software update features

Initial requirements

Server requirements

Client requirements

Client settings

Preparing ConfigMgr site for software updates

Installing WSUS

Software update point

The process of updates deployment

The process of synchronizing data with the WSUS server

The process of scanning for compliance

Scanning statuses

Updates deployment process

Integrating ConfigMgr server with Windows Update for Business and Windows 10

Supporting non-Microsoft Updates

Maintenance setting on collection

Update search

Server group

Deploying software updates

Deployment preparation

Manual update deployment

Windows 10 as a service

Office 365 Client Management

Monitoring software deployment

Software Update Reports

Software Update Dashboard

Summary

Endpoint Protection

Understanding Endpoint Protection

Endpoint Protection point

Client Settings for Endpoint Protection

Configuring a software update point for Endpoint Protection

Antimalware policies

Firewall policies

Windows Defender Advanced Threat Protection

Monitoring Endpoint Protection status

Endpoint Protection state

Endpoint Protection alerts

Summary

Operating System Deployment

Operating system deployment

Operating system deployment terminology

Windows Assessment and Deployment Kit

Windows PE

Operating system image

Deployment Image Servicing and Management

Windows System Image Manager

Windows image file format

System Preparation Tool

Windows Deployment Service

Microsoft Deployment Toolkit 2012

User State Migration Tool

Packages during operating system deployment

Unified Extensible Firmware Interface

Operating system deployment scenarios

Bare-metal installation

Operating system refresh

In-place upgrade

Side-by-side migration

Task sequences

Task sequence creation

Drivers

Installation of imported drivers

Driver installation using packages

Deployment types

Windows 10 servicing

Servicing plan

Windows Update for Business policies

Upgrade Readiness

Summary

Configuration Manager Assets

Data collection

Queries

Reports

Hardware inventory

Software inventory

Asset Intelligence

Collection queries

Console queries

Console reports

Summary

Role-Based Administration and Security

Introducing role-based administration and security

Hardening the infrastructure

Access to the console

Security scopes

Security roles

Granting permissions to the ConfigMgr console

Service accounts

Remote Tools

Client Settings

Securing remote control

Summary

Site Server Maintenance Tasks

Maintenance tasks

ConfigMgr backup

ConfigMgr server recovery

Other ConfigMgr server maintenance tasks

Environment monitoring

Summary