Mastering Microsoft system centre Configuration Manager电子书

Mastering System Center Configuration Manager

Table of Contents

Mastering System Center Configuration Manager

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe?

Free access for Packt account holders

Instant updates on new Packt books

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Introduction to System Center Configuration Manager 2012 R2

System Center Configuration Manager 2012 R2 – requirements

Prerequisites for System Center Configuration Manager 2012 R2

Creating the System Management container

Extending the Active Directory schema for SCCM 2012 R2

Installing Windows Server's roles and features

Installing ADK 8.1 for SCCM 2012 R2

Installing MS SQL Server 2012

Installing Windows Server Update Services

Installing System Center Configuration Manager 2012 R2

Site system server and roles

Site administration

Planning and deploying sites

Monitoring and maintaining the hierarchy

Summary

2. Assets and Compliance

The benefits of centralized system management

Managing compliance

Configuring compliance settings

Configuration items and baselines

Configuration items

Configuration baselines

Baseline deployment

Compliance evaluation

Configuration packs

Exporting configuration items and baselines

Compliance authoring

Organization

Using Microsoft tools

Security Compliance Manager

CP Studio

The compliance strategy

Endpoint Protection

Prerequisites for Endpoint Protection

Planning for Endpoint Protection

Creating client settings and antimalware policies

Deploying to a test collection

Installing the Endpoint Protection role

Setting up a software update point for Endpoint Protection

Configuring the SUP to synchronize definition updates

Creating autodeployment rules for definition updates

Working with antimalware policies

Understanding the default antimalware policy

Creating a custom antimalware policy

Importing and merging antimalware policies

Merging policies

Configuring alerts for Endpoint Protection

Configuring e-mail notifications

Alert subscriptions

Configuring custom client device settings for Endpoint Protection

Deploying Endpoint Protection for custom client agent settings

Monitoring the status of Endpoint Protection

Configuring collections to appear in the collection view

Security state view

Malware remediation status

Top malware

Monitoring malware details

Monitoring Endpoint Protection details

Performing on-demand actions for the malware

Reporting in Endpoint Protection

The Endpoint Protection client

Installing the Endpoint Protection client

Understanding Endpoint Protection client settings

Automatic removal of antimalware software

Removing the Endpoint Protection client

Delivering definition updates

Summary

3. The Software Library

Introducing packages

Programs in Configuration Manager

Collections

Distribution Points

Deployments

Combining the use of packages, programs, collections, and deployments

Creating a package

Package properties

Program properties

Creating a package with the new package wizard

Custom packages

Repackaging software

Avoiding common issues

Testing packages

Creating and managing applications

About applications

About deployment types

Requirements as a component of a deployment type

Global conditions

Detection methods

User Device Affinity

Creating applications

Creating a Windows Installer application

Application properties

Creating deployment types

Creating a Windows Installer deployment type

Creating an application virtualization deployment type

Creating a script-based deployment type

Creating detection methods

Detection methods for a Windows Installer application

Other detection methods

Custom script detection methods

Custom detection methods with PowerShell

Managing applications

Dependencies

Revision history

Exporting and importing applications

Superseding applications

Application retirement and deletion

Package conversion

Operating System Deployment

Summary

4. Reporting in Configuration Manager

SQL Server Reporting Services

Implementing SQL Server Reporting Services

SSRS requirements

SQL Server Reporting Services installation

SSRS configuration

Role-based access control

Accessing SSRS Point

Data sources

Backing up SSRS

Reporting best practices

Reports in the Configuration Manager console

Creating a subscription

Managing SSRS report security

Creating a report

Creating custom reports

Development tools

Building a custom report

Interactive features of reporting services

Advanced custom report example

Authoring best practices for report development

Troubleshooting SSRS

SSRS logs

Optimizing SSRS performance

Subscriptions

Report caching

Report snapshots

Report timeout values

Best practices for performance

System Center Data warehouse

Summary

5. Administration and Monitoring

The Configuration Manager's discovery methods

Hierarchy planning

Configuration Manager sites

Central Administration Site

Primary and secondary sites

Hierarchy-wide site system roles

Planning your hierarchy structure

Planning boundaries and boundary groups

Client discovery and installation methods

Role-based administration

In-console alerts

Managing alerts

Configuring alerts

Subscribing to alerts

Client settings

Defining a priority

Background Intelligent Transfer Service device settings

Client policy device settings

Mobile device client settings

Compliance settings for device settings

Computer agent device settings

Computer restart device settings

Hardware inventory device settings

Network access protection device settings

Power management device settings

Remote control device settings

Configuring remote control and remote assistance

Using a remote control

Remotely administering a client computer

Providing remote assistance

Software deployment device settings

Software inventory device settings

Using Resource Explorer

Summary

6. Cloud Integration

Cloud integration – prerequisites

Subscribing to Windows Intune

Adding the Windows Intune subscription to Configuration Manager

Mobile device management

Configuring the Windows Intune connector role

Mobile device enrollment

Mobile application delivery

Cloud distribution points

Cloud distribution points – prerequisites

Creating certificates

Importing the certificates in Windows Azure

Creating the cloud distribution point

Configuring DNS for the cloud distribution point

Summary

7. Security and Backup

Administrative users

Security roles

Built-in roles

Custom roles

Security scopes

Associating security scopes and collections with individual roles

Preventing unauthorized administrative access

The Active Directory security

Securing access at the database level

Auditing the Configuration Manager's administrative actions

Securing the Configuration Manager infrastructure

Building security into your hierarchy

Securing site systems

Physical security and hardware selection

System software security

Attack surface reduction and server hardening

Security software

Securing the site system's local administration

Securing the site database

Configuration Manager's network security

Client-to-server communications security

Server-to-server communications security

Site-to-site communications security

Site and SQL Server backups

Backing up Configuration Manager

Restoring Configuration Manager

Recovering from a site server operating system crash

Recovering from a Configuration Manager functional crash

Using backup and restore to migrate to a new environment

Moving Configuration Manager to a new hardware

Building a new Configuration Manager environment

Summary

8. Troubleshooting

Troubleshooting network issues

Network configuration issues

Troubleshooting connectivity issues

Name resolution issues

Blocked or unresponsive ports

Timeout issues

Identifying network issues

Network issues affecting the site configuration

Network issues affecting the client installation

Issues with the Service Principal Name

Network issues affecting the software distribution

Network issues affecting site communications

Troubleshooting the data replication service

Troubleshooting console issues

Console logging

Verifying WMI permissions

Verifying DCOM permissions

Troubleshooting the client installation

Troubleshooting compliance settings

Troubleshooting application deployments

Troubleshooting software updates

Windows Server Update Services and Software Update Point

Troubleshooting SQL Server Reporting Services

Summary

Index