1 / 29

Microsoft System Center Configuration Manager v.Next : Mobile Device Management

Required Slide. SESSION CODE: MGT305. Microsoft System Center Configuration Manager v.Next : Mobile Device Management. Jeffrey Sutherland Principal Lead Program Manager Microsoft Corporation. Session Objectives and Takeaways. Session Objective(s):

sancha
Download Presentation

Microsoft System Center Configuration Manager v.Next : Mobile Device Management

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Required Slide SESSION CODE: MGT305 Microsoft System Center Configuration Manager v.Next: Mobile Device Management Jeffrey Sutherland Principal Lead Program Manager Microsoft Corporation

  2. Session Objectives and Takeaways • Session Objective(s): • Understand how mobile device management fits within ConfigMgrv.Next • Understand the core features of mobile device management in ConfigMgrv.Next • Demonstrate the key mobile device management scenarios • Key Takeaways • Mobile device management is becoming a critical part of systems management • ConfigMgrv.Next is making significant investments in mobile device management • “Single pane of glass” administration of all device types and form factors • Reaching beyond Microsoft platforms

  3. Configuration Manager v.Next User Centric Client Management EMPOWER UNIFY CONTROL • Simplifies compliance remediation • Allow remote access of managed machine • Simplifies and automates software update management • Users can connect from anywhere, on any device they choose • Enables IT to provide a flexible work environment and always think user first • Automatically detects system conditions and configurations to deliver the most appropriate services • Simplifies and consolidates the IT infrastructure to provide a new operational cost model • Integrates mobile device management to deliver unified client management • Unified and partitioned view for administrators reduces training costs

  4. Why Mobile Device Management? • Smartphones continue to become more important as a business tool • For mobile devices, trend is away from platform conformance • Our customers are telling us that a “single pane of glass” is important • Consumer purchased, but used for business

  5. Microsoft Mobile Device Management - Today - v.Next • Single “pane of glass” for managing desktop, servers, mobile... • Secure over-the-air enrollment • Deploy applications and configuration policies to users or devices • Monitor and remediate non-compliant devices • Supports WinCE 6.0, WM 6.0/6.1 and WP 6.5 devices • Introduces support for non-MS mobile platforms ConfigMgrv.Next ConfigMgr 2007 R3 • ConfigMgr 2007 • WinCE 4.2+ and Windows Phone PPC2003+ • Basic device management functionality (settings; software deployment) • Single console for managing desktops, servers, mobile... • MDM 2008 SP1 • Windows Phone 6.1+ devices only • Mobile VPN access • Rich device management functionality (settings, remote wipe, over-the-air enrollment…)

  6. Mobile Device Management in v.Next • Extend and align mobile device management • Integration of System Center Mobile Device Manager and ConfigMgr 2007 features • Common administration for mobile and non-mobile devices • Introduction of support for additional mobile device platforms • Enable user-centric mobile device management • Deploy applications and configuration policies to users or devices • Enable secure, compliant mobile devices • Secure over-the-air enrollment • Monitor and remediate out-of-compliance devices • Application allow/deny and configuration policies

  7. Features by Platform More to Come… Beta 1

  8. Device Management Topology • Key Server Roles for DM • Enrollment Web Proxy Point • Enrollment Service Point • Software Catalog roles (optional) • Management Point (Device Management enabled) • Distribution Point • Native mode site required for Mobile Devices (Beta 1) • Site can only serve mobile devices in Beta 1 • Can report to mixed mode Central Administration Site • Beta 2/RTM plans still in planning • Microsoft enterprise CA

  9. Mobile Device Enrollment • Establishes mutual trust between the device and the management server • Windows Phone 6.5.x and WM 6.1 enrolled and provisioned securely over-the-air • Admin (or end user) registers new mobile device and receives one-time PIN from Site Server • Admin sends PIN and enrollment instructions to user • User enrolls via Domain Enroll utility on mobile device • WinCE 6.0 and WM 6.0 enrollment performed as in ConfigMgr 2007

  10. Enrollment On-Device Experience • Utility is in-ROM in WM 6.1 and WP 6.5.x • User runs the “Enterprise Activation” wizard on the device and enters email address and one-time activation PIN • User email address used to auto-discover host MobileEnroll.domain.com • If host not found, user is prompted for the FQDN of the Enrollment Server • SSL session established with Enrollment Server

  11. v.Next DM Architecture – Enrollment Active Directory Public DNS Microsoft CA DMZ Enrollment Web Proxy Computer Account Cert request FQDNDiscovery Enrollment Service Point User ID & PIN Cert request Primary Site User ID & PIN Cert request Management Point User ID & PIN Get Policy New Mobile Device for Melissa PIN Distribution Point Hi Melissa. Here’s your enrollment PIN.

  12. v.Next DM Architecture – Enrollment Active Directory Public DNS Microsoft CA DMZ Enrollment Web Proxy Computer Account Cert request FQDN Discovery Enrollment Service Point Primary Site User ID & PIN Cert request User ID & PIN Cert request Management Point User ID & PIN Get Policy New Mobile Device PIN New Mobile Device PIN Software Catalog Web Site Point Software Catalog Web Service Point Distribution Point PIN New Mobile Device

  13. Enrollment and Inventory Jeffrey SutherlandPrincipal Lead Program ManagerMicrosoft Corporation DEMO

  14. Device Settings Management • Fully integrated experience with non-Mobile settings management • Supports monitoring and enforcement • Standard Settings Groups with simplified UI • Supports admin-defined settings via mobile registry or OMA-URI • Evaluation is done on the server and remediate commands sent to client

  15. v.Next DM Architecture - Settings Active Directory Public DNS Microsoft CA DMZ Enrollment Web Proxy Baseline Get policy Get current configuration Enrollment Service Point Apply settings Report compliance Assess Compliance Primary Site Generate remediation commands Get policy Report compliance Management Point Assign Baseline Distribution Point

  16. Settings Management Jeffrey SutherlandPrincipal Lead Program ManagerMicrosoft Corporation DEMO

  17. New Features for Software Distribution v.Next • Application Model • Incorporates all supported software types (MSI, Script, App-V, Mobile CAB) • Greatly improved dependency handling • Installation requirement rules • User Device Affinity • Unified deployment process • Unified monitoring experience • End user experience • Software Catalog • Software Center • Content management • State based distribution point groups • Single instance content store

  18. v.Next DM Architecture –Software Distribution Windows Phone DMZ MSI Management Point Install App Primary Site Get policy Report install status Get policy Report install status New Application Deploy Application Get content Distribute content to DPs Distribution Point

  19. Software Distribution Jeffrey SutherlandPrincipal Lead Program ManagerMicrosoft Corporation DEMO

  20. Summary • Reviewed why mobile device management is important and how it fits within ConfigMgrv.Next • Reviewed the scenarios and features for mobile device management in ConfigMgrv.Next • Illustrated how the tasks you do today for non-mobile will be fully integrated when you add mobile device support

  21. Related Sessions this week: Hands on Labs • MGT21-HOL | Introduction to Microsoft System Center Configuration Manager v.Next • MGT01-HOL | Advanced Software Distribution in Microsoft System Center Configuration Manager v.Next • MGT05-HOL | Basic Software Distribution in Microsoft System Center Configuration Manager v.Next • MGT06-HOL | Deploying a Microsoft System Center Configuration Manager v.Next Hierarchy • MGT07-HOL | Deploying Microsoft System Center Configuration Manager v.Next • MGT08-HOL | Deploying Microsoft System Center Configuration Manager v.Next Device Management • MGT10-HOL | Deploying Windows 7 with Microsoft System Center Configuration Manager 2007 • MGT11-HOL | Generating Asset Intelligence Data with Microsoft System Center Configuration Manager 2007 • MGT15-HOL | Implementing Microsoft System Center Configuration Manager v.Next Role-Based Access Control • MGT16-HOL | Implementing Desired Configuration Management in Microsoft System Center Configuration Manager v.Next • MGT18-HOL | Implementing Software Updates in Microsoft System Center Configuration Manager v.Next • MGT23-HOL | Maintaining Healthy Clients in Microsoft System Center Configuration Manager v.Next • MGT24-HOL | Migrating from Microsoft System Center Configuration Manager 2007 to Configuration Manager v.Next

  22. Related Sessions this week: Interactive Sessions and Booth Booth – Come talk to the experts……. • TLC-24 Microsoft System Center Configuration Manager

  23. Related Resources • Blogs • System Center Nexus Team Blog – link • OS Deployment Team blog - link • Configuration Manager Product Team Blog – link • Twitter #sysctr • Configuration Manager v.Next Beta 1 - Link • Configuration Manager R3 beta download • Configuration Manager SP2 download • ConfigMgr Product Homepage – link • Configuration Manager TechNet Documentation Library- link • Windows MDOP Product Pages – link • Windows Server 2008 R2 Branch Cache overview – link • Branch Cache ConfigMgr Deployment Guidance – link

  24. Management Track Resources • Don’t forget to visit the Management TLC area (Red Section) to see product demos and speak with experts about the System Center solutions • You can also find the latest information about the System Center products at the following links • System Center Site – http://www.microsoft.com/systemcenter/ • System Center Community –http://www.microsoft.com/systemcenter/en/us/community.aspx • TechNet Home Page – http://technet.microsoft.com/en-us/systemcenter/ • TechNet Community – http://technet.microsoft.com/en-us/systemcenter/cc511266.aspx

  25. Required Slide Resources Learning • Sessions On-Demand & Community • Microsoft Certification & Training Resources www.microsoft.com/teched www.microsoft.com/learning • Resources for IT Professionals • Resources for Developers • http://microsoft.com/technet • http://microsoft.com/msdn

  26. Required Slide Complete an evaluation on CommNet and enter to win!

  27. Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31st http://northamerica.msteched.com/registration You can also register at the North America 2011 kiosk located at registrationJoin us in Atlanta next year

  28. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

  29. Required Slide

More Related