Microsoft System Center Configuration Manager 2007: Overview

1. Microsoft System Center Configuration Manager 2007: Overview

3. Configuration Manager Server Roles SQL Server SQL Server SCCM MP SCCM Primary Site Server SCCM SLP SCCM SHV SCCM RP SCCM FSP SCCM DP Branch DP SCCM SUP/WSUS SCCM PSP SCCM SMP

4. Administrative UI - New & Improved • Managed code (C# / .NET 2.0) • Leverages MMC 3.0 • Uses WMI/DCOM for communication with provider • Extensible via SDK

5. What’s changed in Software Distribution? • New Features • Copy Package Wizard • Maintenance Windows • Branch Support • Improvements • Improved Package cache control • Binary delta replication • Client Branding • Wake on LAN

6. Configuration Manager 2007 OS DeploymentThe way to deploy Vista/LH in an enterprise • Major upgrade to OS deployment functionality • Significant enhancements from SMS 2003 OS Deployment Feature Pack • Brings in server deployment from ADS • Integrated part of ConfigMgr 2007 • Simplify planning for Vista/LH upgrade • Unified client and server deployment • Use Vista/LH tools • Enhanced security

7. OS Deployment Scenarios • New machine • Clean install of OS on hardware – wipe and load • No scope for existing state • Designed for new or repurposed hardware • Wipe-and-load • Install OS on existing hardware • Reinstall applications under new OS • Side-by-side • Install new version of operating system on new client hardware for an existing user • Reinstall applications on new computer under new OS • State migration is possible • In-place migration • Scripted, targeted OS upgrade to a box • Not a wipe and load • Migrate installed applications in-place • Sent as a Software Distribution Package.

8. What’s New in ConfigMgr OSD?

9. Task Sequence Actions • Two kinds of actions • Fixed set of built-in actions that are implemented as part of ConfigMgr • Custom actions that can be any command line executable, including running VBscript

10. Driver Catalog • Catalog of Configuration Manager- managed device drivers • “Drivers” node • Import drivers into this node • Set properties on drivers • Assign drivers to Driver Packages • “Driver Packages” node • Configuration Manager packages that are copied to DPs • Typically group related drivers into one package

11. Internet Based Client Management • Manage clients without a VPN • Road Warriors (Sales force, Consultant) • Point Of Sale (Restaurant, Retail store, Gas station) • Employee’s home computers • Roam in and out intelligently • Converge with standards based technology • PKI for certificate management • SSL/TLS for secure HTTP communication • Firewall for SSL termination “Deliver a secure and reliable infrastructure to enable IT administrators in an enterprise to manage computers on the internet with the same level of control as computers on the intranet.”

12. Desired Configuration Management • Vision • Define configuration baselines • Identify required and prohibited configurations • Audit compliance of Windows systems • Core Scenarios • Detect configuration “drift” • Improve Helpdesk troubleshooting and “time-to-resolve” • Regulatory compliance reporting • Change verification

13. Overview: DCM Terms And Concepts Configuration Item (CI) • Units of configuration that can be detected, applied, and removed from ConfigMgr managed machines • Application CI • Operating System CI • General CI • Software Updates CI Configuration Baseline • A complex type of CI composed of other CIs which are: • Required • Optional • Prohibited • Can be assigned to collections for compliance monitoring

14. Software Update Management • Core Feature of Configuration Manager • Built on WSUS 3 architecture • Included as Managed Server role in site hierarchy • Full benefits of site management, Binary Delta Replication etc. • Provides Compliance assessment • Security updates / vulnerability assessment • Application updates • Supported update deployment • Full Microsoft update content • Zero-day and routine deployments • Simplified admin experience • Also manage non-Microsoft software updates • OEMs and software vendors (ISVs) • Internally-developed applications

15. Software Update Management • Full integration into other areas of Configuration Manager • OS Deployment • Internet Based Management • System Center Update Publisher • Desired Configuration Manager

16. Device Management - Core Scenarios • Device = CE, PPC, Windows Mobile (SmartPhone) • Basic Management • Hardware/Software inventory • File collection • Software distribution • Settings management - Password policy management, Security policy management • Support for Smartphone • Over-the-air management of devices • Connection Management • Internet Based Management • Fallback Status Point • LOB Device Management • CE on ARM at RTM • Deployment • Automated client distribution via SMS Advanced Client desktop • Full integration with SCCM 07 • Over-the-air client upgrade

17. Remote Control: What’s New • Completely rewritten! • Significantly faster performance • Using Vista native “collaboration” technology • Back-ported to Windows XP and Windows Server 2003 • Underlying protocol: RDP • Same basic functionality as SMS 2003: • No need for end-user acceptance of new session • NEW! 3 levels of access • Full control • View only • None • Still integrated with Remote Assistance

18. Miscellaneous • Inventory • SMS 2003 SP3 AssetMetrix features added • Last Usage Inventory • Auto-created Metering Rules from this • Discovery • Discover “Extended AD Attributes” • Pre-populated with default attributes • Ability to add additional attributes to discover • Supports hosting SCCM 2007 Site DB on SQL 2005 Clustered Server • VSS-based backup • Services off-line for minutes • Snapshot data moved to backup location

19. Summary • SCCM 2007 is a major upgrade of SMS functionality that provides features for • Network Access Protection • OS Deployment • Internet-based client management • WSUS integration for software update management • Desired configuration management • Device management of Smartphones over the air