1. CCIT Imaging and PC management
System Center Configuration Manager: 2012 Changes and Features
Sam Beckler
September 26th 2012

2. Itinerary Migration New features/changes in 2012 Console Changes
Imaging Changes

3. Migration Timeline 9/26/12 Access to imaging 10/8/12
Migrate test containers
10/15/ /12
Change PXE imaging server
Migrate colleges/departments
10/29/12
Use 2007 to push 2012 client to remaining 2007 clients
11/9/12
Remove client connectivity to 2007 environment

4. Group Policy SCCM2012_Managed_Config SCCM2012_Client_Push
SCCM2012_WSUS
SCCM_Remote_Assistance
SCCM_Firewall_RDP_MSRA
SCCM_Firewall_SMB
SCCM_Firewall_Wireless_RDP_MSRA
SCCM_Firewall_Wireless_SMB

5. SCCM2012_Managed_Config
Provides Automatic certificate enrollment for authentication and encryption
Provides code signing certificates for WSUS 3rd Party Updates
Basic Firewall settings
Allow DHCP server and SCCM Site server to ping client
Provide Application Catalog Shortcut
Application Catalog fix for if IE is not default browser

6. SCCM2012_client_push
Adds site server (sccm2012.campus.cu.clemson.edu) computer account as local administrator of desktop
Adds firewall exceptions to allow only it to connection and distribute the configmgr client

7. Sccm2012_wsus
Provide update server information for automatic configmgr client deployment
Also provides code signing certificates for 3rd party updates
This GPO will be used as the primary method to migrate computer from 2007 to 2012.

8. Sccm_Remote_Assistance
Enables remote assistance
Adds group sccm_admins to remote assistance helpers group

9. SCCM_Firewall_RDP_MSRA
Creates firewall exceptions for remote desktop and remote assistance
Local subnet, / , / , 2620:103:a000::/44
Does not include wireless IP ranges

10. SCCM_Firewall_SMB
Creates firewall exceptions for File and Printer sharing
Local subnet, / , / , 2620:103:a000::/44
Does not include wireless IP ranges

11. SCCM_Firewall_Wireless_RDP_MSRA
Creates firewall exceptions for remote desktop and remote assistance
Allows Wireless IP Ranges

12. SCCM_Firewall_Wireless_SMB
Creates firewall exceptions for File and Printer sharing
Allows Wireless IP Ranges

13. New Features in 2012

14. User Based Management
Currently we deploy software to computers with limited user based delivery
SCCM2012 default needs to be user based delivery for a more consistent experience
Can still do system based delivery if product requires or delivery doesn’t fit into the user based approval method
Benefits
User can just go get the software eliminating phone calls, s, and tickets.
If you are not using SCCM Software distribution it also eliminates scheduled visits, bringing in computer, and associated user downtime.

15. Software Distribution
Application Catalog website will display software for users to install (User targeted)
Software in the list can be restricted by AD, Central, or BB group
Software can be configured to require approval before installing
Software Center will display computer targeted software and currently installed software from the Application Catalog provides
Software Center provides uninstall ability
User does NOT need to have admin rights

16. Software Distribution
New SW_ADV collection structure
User Collections
Software Distribution
Program
Program SW_ADV_USER_MAN
Shows software in Application Catalog
Program SW_ADV_USER_MAN_Approval
Requires approval for the user to install
Computer Collections
Program SW_ADV_MAN
Program SW_ADV_AUTO
Program SW_ADV_LAB
Program SW_ADV_USER
Program SW_ADV_Administrative

17. Power Management Supports configuring power profiles similar to GPO
Benefit is you can add two profiles one for peak times and one for off peak times
Can configure auto wake time (prefer 5am)
User can exempt his/her system from the policy

18. Software Updates Now delivered through Software Center
Will be mandatory install after 5PM Thursday following patch Tuesday
Will prompt user to restart
Software Center will suspend all activity if the computer is in Presentation mode.

19. Workgroup Computers
Workgroup computers are now supported although functionality is limited
No application catalog
Not managing software updates
No user based software distribution
Can use computer based software distribution
Communicates over HTTP port 80
Private traffic is still encrypted just at a lower level
No internet based management requires VPN to use off campus
Stand alone installer
Installer can be used on domain joined machines functionality will automatically elevate

20. Console Changes

21. Console Changes No longer MMC based
System Center has their own console technology that is XML driven
Looks very similar to Outlook (even has the ribbons)
Provides more information at a glance and less clutter
Users and Computers now live in separate spaces
No more sub collections structure is now folder based containing collections
Collections can still be linked to software using collection linking instead
Ability to exclude a collection from another

22. Console Demo Collection navigation Folder structure
Global read permissions not read resource
Image collections
Advertisement Collections
Power Management

23. Imaging Changes

24. Registration Screen Minor UI Changes
Software tab will change to support new application model
Demo

25. Task Sequences Most Features the same as V3 task sequences
Now supports USMT from PE Boot

26. More Information http://www.clemson.edu/tsp/ipcm

27. Questions
Q&A