Microsoft Practice Computacenter Configuration Manager MVP since July 2009 Co-Founder of the System Center User Group : KennyBuntinx

ComponentMinimum Requirement Site Server and Site RolesWindows Server 2008 (64-bit ) Windows Server 2008 R2 (64-bit) DatabaseSQL Server 2008 SP1 & Cumulative Update 10+ (64-bit) Distribution PointWindows Server 2003 (including 32-bit) with limited functionality Windows Vista SP2 and later (including 32-bit) ClientWindows XP SP2 (64-bit) & SP3 (32-bit) Windows 2003 Server SP2 (32-bit & 64-bit) Vista SP2 (32-bit & 64-bit) Windows 7 RTM (32-bit & 64-bit) Windows 2008 SP2 (32-bit & 64-bit) Windows 2008 R2 RTM (64-bit)

Infrastructure ?

2012

DP MP Primary 3

EMEA.company.com DP MP AMT enabled devices

High available ?

Central Administration site ?

EMEA.woodgrove.com CAS DP MP AMT enabled devices

SQL ?

Data typeExamplesReplication typeWhere is data found? Global data Created by admin Collection rules, package metadata, software update metadata, Deployments SQLCentral administration site, all primary sites, secondary sites* Site data Created by system Collection members, HINV, alert messages SQLCentral administration site, originating primary site ContentSoftware package installation bits, software updates, boot images File-basedPrimary sites, secondary sites, distribution points

Global Data ExamplesSite Data Examples

Central Administration Site USA Europe USA -Texas Asia Central Administration Site Primary Site Secondary Site Global Data Available at: Central Administration Site and all Primary Sites Examples Collection rules Package metadata Deployments Security Scopes Site Data Available at: Central Administration Site, Replicating Primary Examples: HINV Status Collection Membership Results Content Available where content has been distributed to a Distribution Point

Primary site ?

EMEA.woodgrove.com CAS DP MP AMT enabled devices Primary 1 Primary 2

woodgrove.com USA.woodgrove.com Asia.woodgrove.co m CAS Woodgrove-emea.com SEC1 Distribution Point Management Point PR1 Management Point Distribution Point PR2 Management Point Distribution Point CAS, Primary and secondary sites must reside in a fully two way trusted Active Directory Domain/Forest.

Secondary site ?

EMEA.woodgrove.com CAS DP MP AMT enabled devices Primary 1 Primary 2 Secondary 1

Local Distribution Point ?

Delivering the Promise ?

PromiseConfiguration Manager 2007 Configuration Manager 2012 Scalability and data latency improvements Central primary reprocesses all data from child sites Central administration site – no data processing Consolidating infrastructure for primary sites Separate primaryCollection-based settings Role-based administration/ Admin Segmentation Minimizing infrastructure for remote offices Secondary Site Standard Distribution Points and Branch Distribution Points Secondary Site Distribution Points with throttling and scheduling Distribution Points BranchCache™

Internet Based Managed Clients ?

ConfigMgr 2007 ConfigMgr 2012 Intranet Internet Management Point Distribution Point PR1 Management Point Distribution Point Management Point Distribution Point PR1 (Site Properties) PR2 (Site Properties)

ConfigMgr 2007 Internet Management Point Distribution Point ConfigMgr 2012 Intranet Internet PR1 Management Point Distribution Point Management Point Distribution Point Single Primary site can manage both Intranet clients (over HTTP) and Internet clients (over HTTPS). Primary sites can be configured to either support only HTTPS roles or both HTTP and HTTPS site roles.

USA.woodgrove.com PR1 Management Point Distribution Point CAS Intranet Internet DMZ Distribution Point Distribution Point Management Point Management Point USA.woodgrove.com clientsWorkGroup clients Machine policies only Machine and user policies Software Update Point Software Update Point Software Catalog

Site Server CAS, Primary and secondary site must reside in a fully two way trusted Active Directory Domain/Forest. Client Facing roles can be deployed in untrusted forest. Intranet Client Same as in ConfigMgr 2007 Internet-Based client management Deploy remote site roles in DMZ for managing Internet- Based Clients. All Internet based clients can get machine policy but to retrieve user policy there should be: One way trust between DMZ and the forest to which the client belongs. Clients must be part of the trusted forest.

AMT ?

AMT Primary Site Out of Band Service Point Enrollment Server AMT/ConfigMgr Clients Active Directory

Firmware VersionConfigMgr 2007 SP 2 / R2 ConfigMgr 2012 < , , 6.1TBD 7.0 “Standard Manageability” (non vPro)

Thank You You. Empowered.

Your Feedback is extremely important