1. System Center Configuration Manager 2007 Overview Amit Gatenyo Infrastructure & Security Team Lead Dario

2. Agenda SCCM 2007 Key Investments What’s new and Improved –Administrative Console –Software Distribution –Device Management –OS Deployment –Internet Based Client Management –Network Access Protection –Software Update Management –Desired Configuration Management –Remote Control –Miscellaneous Closing remarks

3. SCCM 2007 Key Investments SimplicityDeployment Simplified UI Advanced Task Sequencing Reduced SCCM infrastructure costs with branch office support Improved scheduling and greater control including Wake-on-LAN Common processes for Windows Mobile and embedded device Unified delivery of Windows operating system for clients and servers One worldwide image to manage with Vista Built on Windows Vista technologies including Windows Imaging Vista and Office 12 upgrade assessment and resolution planning Offline media support for full offline provisioning

4. SCCM 2007 Key Investments Configuration Security Integration with “Longhorn” Network Access Protection Simplified, comprehensive software updating w/ templates for common tasks Enterprise Vulnerability assessment Securely managing devices across the Internet Secure network storage of user state during Operating System deployment Knowledge-driven desired configuration management based on the System Modeling Language (SML) IT policies for analyzing corporate and regulatory compliance Out of the box configuration policies for server workloads i.e. Exchange License and asset management

5. Administrative Console Managed code (C# /.NET 2.0) Leverages MMC 3.0 Uses WMI/DCOM for communication with provider Extensible via SDK FeatureSMS 2003SCCM 2007 Drag-and-DropNoYes Multi-selectNoYes Actions PaneNoYes Preview PaneNoYes WizardsNot ManyPervasive HomepagesNoYes IconsNT 3.51-styleHigh Precision FoldersOnly organizational, no replication Organizational and Search Folders; replication to child sites

6. SCCM 2007 Admin UI Amit Gatenyo Infrastructure & Security Team Lead Dario

7. New Features –Copy Package Wizard –Maintenance Windows –Branch Support –Wake on LAN Improvements –Improved Package cache control –Binary delta replication –Program Re-Run (Never, Always, Previous Success\Fail) Software Distribution

8. Device Management Device –WinCE, PocketPC, Windows Mobile (Smartphone) Basic Management –Hardware/Software inventory –File collection –Software distribution –Settings management - Password policy management, Security policy management Support for Smartphone –Over-the-air management of devices –Connection Management Internet Based Management

9. OS Deployment THE way to deploy Vista/LH in an enterprise Major upgrade to OS deployment functionality –Significant enhancements from SMS 2003 OS Deployment Feature Pack –Brings in server deployment from ADS Integrated part of ConfigMgr 2007 Simplify planning for Vista/LH upgrade Unified client and server deployment Use Vista/LH tools Enhanced security

10. What’s New in ConfigMgr OSD? ScenarioSMS 2003 OSD FPConfigMgr 2007 OSD Feature deliveryFeature PackCore product End-to-end deploymentYes Fully automatedYes Wipe-and-load upgradeYes Bare metal deployment w/PXELoose integration w/RISBuilt-in integration w/WDS Side-by-sideBDD scriptsYes, w/built-in SMP Fully offline deploymentNoYes Integrated Vista upgrade planningNoYes Full server deploymentNoYes SecurityGoodMuch stronger Flexibility/customizabilityGoodExcellent Vista/LH compatibilityGoodExcellent Device driver managementNoYes

11. Target Environments All clients and servers Windows 2000 and later –Windows Vista & Longhorn Server –Windows Server 2003 –Windows XP –Windows 2000 Professional and Server –WePOS, WinFLP Supported architectures: 32-bit and x64 Great deployments of existing Windows Even better with Vista/Longhorn

12. Task Sequence Actions Two kinds of actions –Fixed set of built-in actions that are implemented as part of ConfigMgr –Custom actions that can be any command line executable, including running VBscript No requirement that OS deployment operations be included –Hence task sequences provide a more general purpose sequencing mechanism in ConfigMgr

13. SCCM 2007 OS Deployment Amit Gatenyo Infrastructure & Security Team Lead Dario

14. Internet Based Client Management Manage clients without a VPN –Road Warriors (Sales force, Consultant) –Point of Sale (Restaurant, Retail stores) –Employee’s home computers –Roam in and out intelligently Converge with standards based technology –PKI for certificate management –SSL/TLS for secure HTTP communication –Firewall for SSL termination “Deliver a secure and reliable infrastructure to enable IT administrators in an enterprise to manage computers on the internet with the same level of control as computers on the intranet.”

15. Network Access Protection Primary Site Health Registration Authority Network Policy Server X X DP Quarantine Restricted Network Boundary Network Protected Network Microsoft Update MP AD Download Updates to Site Server Publish Health State in Active Directory Retrieve Health State Policy Send Statement of Health for Evaluation Download New Policy Install Required Updates Healthy Client Deploy Updates to DP

16. Software Update Management WSUS Integration –Full Microsoft Update content –Zero-day and routine deployments –Simplified admin experience Also manage non-Microsoft software updates –OEMs and software vendors (ISVs) –Internally-developed applications

17. Desired Configuration Management Vision –Define configuration baselines –Identify required and prohibited configurations –Audit compliance of Windows systems Core Scenarios –Detect configuration “drift” –Improve Helpdesk troubleshooting and “time-to- resolve” –Regulatory compliance reporting –Change verification

18. SCCM 2007 Desired Configuration Management Amit Gatenyo Infrastructure & Security Team Lead Dario

19. Remote Control Completely rewritten! Significantly faster performance Using Vista native “collaboration” technology –Back-ported to Windows XP and Windows Server 2003 –Underlying protocol: RDP Same basic functionality as SMS 2003: –No need for end-user acceptance of new session NEW! 3 levels of access –Full control –View only –None Still integrated with Remote Assistance

20. Summary SCCM 2007 is a major upgrade of SMS functionality SCCM 2007 Beta 2 is full featured –Available now –Join the open beta and evaluate the changes! SCCM 2007 RTM – Summer 2007

21. See how great it feels when You’re NOT in control. Have you tried Skydiving?

22. Thank You! www.microsoft.com/systemcenter Amit Gatenyo amit.g@dario.co.il 054-2492499