UD-B305

Features and Solutions Used User Centric Application Delivery Macintosh Client Management Orchestrator Runbooks Software Update Point List Automatic Client Deployment

Infrastructure Experiences Real Microsoft IT

Redmond Site 1 75k Clients Redmond Site 2 75k Clients North & South America 35k Clients Europe, MidEast, Africa 40k Clients Australia & Asia 75k Clients Unified Device Mgmt Site ~98K devices * MS Online Directory Services (MSODS) Active Directory Federation Server 2.0 MS Online Directory Sync (DirSync) AD User Discovery corp domains Intune Subscription Connector Site role Infrastructure 6 Primary Sites 13 Secondary Sites 250 Distribution Points PCs & Devices ~300,000 clients ~125k mobile devices Users ~98k FTEs ~82k Vendors

Task Configuration File Run (Task Location, Command, Parameter Variables), Expected Output, Run Order, Success Criteria One time creation of automation types / versions of product ( CM12 SP1 Upgrade, New CM07 Infra w/WSUS 3.0 SP2, New CM12 SP1 Infra ) Build Configuration File Where to run, Parameters, Start Task ID, Stop Task ID, Execute (Yes/No) Used Orchestrator Runbooks Used Configuration Files as Input for Runbook  Thursday, April 11, 2013 | 12:00 PM-1:15 PM  UD-B319- Microsoft IT - How Microsoft IT upgrades System Center Configuration Manager using System Center Orchestrator Automation More In Depth Session: UD-B319

Task TypeDescription Test DB UpgradeBackup DB, Copy & Restore DB Test DB UpgradeRun Test DB Upgrade UpgradeBackup old CM Logs UpgradeCopy Source Bits UpgradeRun QC Checks UpgradeDisable SQL Agent Jobs UpgradeUpgrade CAS, Primary, Secondary Sites UpgradeImport MOF Customizations UpgradeRe-Enable Application Catalog Performance Counters UpgradeRe-Apply Custom Share Permissions UpgradeRun Post QC checks CommonMonitor Logs CommonExecute SQL Script files Automated Upgrades – Consistent deployments Entire hierarchy upgraded in 24 hours

More info available here: distribution-points-in-configuration-manager-sp1.aspx distribution-points-in-configuration-manager-sp1.aspx

More info available here: us/library/gg aspx

Key Benefits Automatic Client Upgrade Provide an automatic deployment mechanism to distribute client language packs Simple, Easy, and Automatic Upgrades any clients less than hierarchy version to minimum client version Both Client Push and Software Distribution based upgrades have Administrator overhead Publishing new client via WSUS may cause server overload Provided a simple and automatic method for upgrading clients Ensured clients remained at a minimum baseline client version Ensure pre-reqs and language packs serviceability Automatic Client Upgrades

Sequence of Events Scheduled Task

Enabled for ~270,000 clients geo distributed across five primary sites Automatic Client Microsoft IT

Simplified Administration Experience Advanced Modern Device Management

Enterprise builds LOB app or gets app from ISV outside of the store BuildSign Sign with Enterprise trusted cert Publisher name in the certificate and package must match Deploy Deploy using System Center 2012 Configuration Manager SP1 Certify Certify LOB app using Windows App Certification kit

App-V 4.6 SP2 and App-V 5.0 can coexist for easy migration! App-V in ConfigMgr SP1 Next Generation DSC Packages can be deployed in multiple Virtual Application Connection Groups Configuration is separate from packages Integrated w/ App-V Mgmt. Server and ConfigMgr Create and configure via Server User Interface or PowerShell Know the dependencies Manage in Standalone Mode Can use PowerShell to create and manage Supported Configurations Applications + Plugins Applications + Middleware Applications + Applications Virtual Application Connection

Convert Packages to App-V 5.0 Deploy the App-V 5.0 client via Configuration Manager Copy App-V apps, create App-V 5.0 DTs and supersede Create Virtual Environments Deploy App-V apps

Mac Microsoft IT 123 Deployed below Microsoft IT security policies to all enrolled Mac machines PolicySetting Screen Saver Idle Time900 (Seconds) Require Password at Screen Saver Yes Password Strength Alphanumeric Required: Yes MinChars=8 MaxFailedLoginAttemps=8 MaxDaysUntilChangePassword=70 Deployed Skype and SCEP via Software Distribution deployments

Mac Management Food For Thought

Unified Device Management MSIT Native Management Scope Windows Phone 8 Current: 140 Planned: 24k Windows RT Current: 35 Planned: 19k Apps Published 9 WP8 LOB 1 Deep Linked Apps Published 12 WinRT Apps 2 Deep Linked Device Enrollments and Modern Apps

Unified Device Management MSIT Simplified Administration Unified Device Management ArchitectureUnified MSIT

 Wednesday, April 10, 2013 | 2:45 PM - 4:00 PM  UD-B311- Deploying System Center 2012 Configuration Manager SP1 With Windows Intune More In Depth Session: UD-B311

Enabled Wake Up Proxy agent installation using custom client agent setting Identified DA gateway address and configured Traced network performance after Wake Up Proxy agent installation during pilot Targeted Wake Up Proxy agent on regions having high opt out: 16k machines 3 machines be awake randomly Ping should be enabled in the network Food For Thought

UD-B328 The Top Ten Lessons Learned in Managing SQL & Reporting UD-B319 How Microsoft IT Upgrades System Center Configuration Manager 2012 Hierarchy with System Center Orchestrator Automation UD-B311 Deploying System Center 2012 Configuration Manager SP1 With Windows Intune

System Center in Action Site Technical Case Study: How Microsoft IT Deployed System Center 2012 Configuration Manager Technical Case Study: User-Centric Client Management with System Center 2012 Configuration Manager in Microsoft IT Shitanshu Verma’s Blog

Complete your session evaluations today and enter to win prizes daily. Provide your feedback at a CommNet kiosk or log on at Upon submission you will receive instant notification if you have won a prize. Prize pickup is at the Information Desk located in Attendee Services in the Mandalay Bay Foyer. Entry details can be found on the MMS website.