What’s New in Configuration Manager Since RTM How to stay current with the new coolness available Aaron Czechowski Senior Program Manager Microsoft Wally Mead Product Owner Cireson

@AaronCzechowski 18 years working with ConfigMgr 4 years in PG, 9 with Microsoft Anything coconut Wally Mead Aaron Czechowski Wally_Mead Two time ECM MVP Before SMS had a version Chocolate

Agenda Pretty simple – talk about what’s changed since System Center Configuration Manager (current branch) was released as version 1511 Production build 1602 updates How to get to new builds beyond 1511 Technical previews post 1604 and potential updates

What’s New Since 1511What’s New Since 1511

Quick Review of RTM (1511) Y’all should know by now the improvements: Windows 10 support, including in-place upgrade in OSD and servicing plans and rings Additional OSD improvements On premises mobile device management More complete Microsoft Azure support Preferred management point configuration New Updates and Servicing model for self-updating Lots more greatness Lots of compelling reasons to upgrade or migrate

What’s New Since RTM (1511) Here are a list of new features/capabilities in 1602: Client online status Support for Windows Server 2008 R2 to 2012 R2 OS upgrade Clustered system support SQL Server AlwaysOn availability group support Windows 10 device health attestation reporting Windows 10 servicing improvements Office 365 update management New antimalware policy settings Improvements with Microsoft Intune integration

DemoDemo Cool newness since 1511

Review on how to updateReview on how to update

How do I get from 1511 to 1602? The Updates and Servicing node is your friend The easiest method is the online mode: Site automatically detects new builds, downloads, extracts, and injects into the Configuration Manager Console Admin is notified of new build, can choose to implement all, part, or none of it If new build has updated client, can ‘pilot’ the new client When ready, can move ‘pilot’ testing to full ‘production’ deployments

What about isolated environments? The servicing model supports an offline mode for those isolated/secure/locked down scenarios: The admin runs a tool to upload telemetry data and check for new builds Admin runs the tool to download and inject the new build into the Configuration Manager Console Admin is notified of new build, can choose to implement all, part, or none of it If new build has updated client, can ‘pilot’ the new client When ready, can move ‘pilot’ testing to full ‘production’ deployments

DemoDemo Initiating a site update

Lab versus Production updates

You’ve Heard About Other Updates? Remember, what has been discussed so far are production deployment updates There also are technical preview updates that you can test in limited scenarios (non-production) If you want to test the potential upcoming updates, you need to have an additional technical preview site installed in addition to your production and lab environments

Production versus Technical Preview Production sites have production ready updates available to them Not Technical preview builds Technical preview sites have technical preview (early release) builds available Not production ready builds Technical previews offer a glimpse at what “may” be released to “production” in some future production ready release

Technical Preview UpdatesTechnical Preview Updates

Technical Preview Baseline Builds The previous Technical Preview baseline is TP4 Essentially the same build at 1511 There have been monthly updates for it since then, most recently 1605 (yesterday) There is a new baseline TP build Part of System Center 2016 Technical Preview 5 The baseline build is one that you can install a clean site with Still has all the normal limitations to it Client count, no promoting to production, only TP build updates, etc., limited to standalone primary site, etc. Does last for 90 days

Technical Preview 1604 Updates Remember Install Packs are cumulative, so 1604 includes everything since 1511 In addition to everything in the production 1602 build: 1603: Improvements to Software Center Lists versus Tiles, multi-select software updates Improvements to Remote Control Prompt user for permission to copy clipboard Ability to customize RamDisk TFTP block size and window size for PXE-enabled DPs Content status links for in-console monitoring

Technical Preview 1604 Updates In addition to everything in the production 1602 build: 1604: Client cache settings Centralized control over client cache, as well as peer sharing On-premises Health Attestation Service integration Was previously only a cloud service Passport for Work policies For domain joined Windows 10 ConfigMgr clients Software updates compliance dashboard Monitoring, Security, Software Updates Dashboard On demand switching of software update points Context menu option on a device collection for Client Notifications

Technical Preview 1604 Updates In addition to everything in the production 1602 build: 1604: Windows Store for Business integration Manage and deploy apps purchased through WSfB VPN for Windows 10 Support for 3 rd party VPN vendors Mobile device updates Smart Lock disabling to prevent bypassing passcode policies Support for Passport for Work as a key storage provider

How do I install updates in TP sites? The Updates and Servicing node is your friend The same as production sites, just different update packs applicable Production updates are never applicable for TP TP updates are never applicable for production However the update process is exactly the same

DemoDemo TP 1603 and 1604 updates

A glimpse at the future?A glimpse at the future?

Insight into what’s coming in 1605 TechPreview Auto-connect app list in Windows 10 VPN profiles App installation from Company Portal for on-prem MDM Improvements to Install Software Updates TS step Software Center tabs for Updates and Operating Systems On-prem Health Attestation Service integration Ability to pre-declare company owned devices Remote device actions experience updates Remote full wipe for Windows 10 desktops Control settings for software updates in server groups Windows 10 Enterprise Data Protection policies Windows Defender Advanced Threat Protection integration Windows Store for Business integration

DemoDemo TP 1605 updates

And Then …