Walter Pitrof Technology Solution Professional Microsoft Switzerland Client Lifecycle Management mit Configuration Manager 2012 Chris Greuter Partner | Private Cloud Architect itnetx gmbh

Agenda What is in SCCM 2012? User-Centric Role-Based Administration Settings Management Mobile Device Management Cross Platform Management Software Updates Infrastructure Changes Demo Q & A

What is in SCCM 2012?

classic and App-V Applications IT Asset Intelligence Software Update Management Software Metering Support for the Mobile Workforce What is in SCCM 2012? Settings Management (aka DCM) Network Access Protection Power Management OS Deployment Antivirus Selfservice Portal Remote Control 3 rd party OS

User-Centric: The End-User of the Future

“A Fitting End-User Experience” Web based software catalog Easily find and request software Choose software intelligently thanks to clear, consistent and concise information about applications and their impact “The ability to define their relationships to their software” User preferences control ConfigMgr behaviors (e.g. “my business hours”) Manage impact from software installation and system restarts End-User Promises

Application Model Diagram General information about the software application

Application Lifecycle Application Installation Application Revision Application Retirement Application Supersedence Application Uninstall

App-V in ConfigMgr 2012

Integration requires App-V 4.6 client New Application Model, User-centric features Enable support for application dependencies Improved update behaviors Selective publishing of components Dynamic Suite Support Instant icon gratification for unlock events Integration with Remote Desktop Services (TS) Content Improvements Streaming improvements Reduce virtual app footprint when using Download and Execute App-V in ConfigMgr 2012: What’s changing?

Role-Based Administration

Role-Based Administration Example Peter as ‘ConfigMgr Admin’ has rights to entire console Peter assigns Application Deployment role to Meg Meg is responsible for deploying software Meg has a limited view

Microsoft Forefront Endpoint Protection 2012

Provides the following benefits: Easy to Deploy Seamless migration from previous antivirus solutions Easy to Manage Integration with your existing system management infrastructure Reporting functionality Unified Protection FEP delivers single-agent, multi-threat protection for desktops, portable computers. Backed by a world-class response center and a dedicated community (Microsoft SpyNet®) serving millions of users, the FEP client includes: Antimalware and antispyware Rootkit detection and remediation Critical vulnerability assessment and automatic updates Integrated Windows Firewall management Network vulnerability detection via Network Inspection System Forefront Endpoint Protection 2012

Settings Management (aka DCM)

Browse on gold system when creating CIs Scenario: Simplify configuration item creation. Design principal: Admin can create DCM setting and rule without typing by browsing gold system registry and file system, eliminating human errors.

Mobile Device Management

Integration of System Center Mobile Device Manager and Configuration Manager features: Secure over-the-air enrollment Monitor and remediate out-of-compliance devices Deploy and remove applications Inventory Remote wipe (WinCE 5.0, 6.0; Windows Mobile 6.0, 6.1, 6.5.x) 7 NOKIA Basic management for all Exchange ActiveSync (EAS) connected devices: EAS-based policy delivery Discovery and inventory Settings policy Remote Wipe Light Management Full Management

Cross Platform Management

Planned Features for UNIX/Linux Servers FeaturePlan Discovery - AD and Network Push Install of Native Client Hardware Inventory Inventory of Installed Software (OS Native - like ARP) Software Dist: Classic Software and Patch Installation Mixed and Native Mode Security Software/File Inventory? OS Deployment with OS native tools? User Centric Software Installation  Desired Configuration Management (DCM)  Remote Control  Internet-Based Client Management (IBCM) 

Software Updates

State-based Update Groups Deploy updates individually or in groups Updates added to an update group automatically deploy to collections targeted with the group Auto Deployment Rules Use search criteria to identify class of updates to automatically deploy: category, products, language, date revised, article id, bulletin id, etc. Schedule content download and deployment based on sync schedule or define a separate schedule per rule Software Updates

Infrastructure Changes

Simplify Your Hierarchy

demo… Chris Greuter Partner | Private Cloud Architect itnetx gmbh

Please help us make TechDays even better by Evaluating this Session. Thank you! Give us your feedback!

© 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.