CCIT Imaging and PC management

1. CCIT Imaging and PC management System Center Configuration Manager: 2012 Changes and Features Sam Beckler September 26th 2012

2. Itinerary • Migration • New features/changes in 2012 • Console Changes • Imaging Changes

3. Migration Timeline • 9/26/12 • Access to imaging • 10/8/12 • Migrate test containers • 10/15/12-10-26/12 • Change PXE imaging server • Migrate colleges/departments • 10/29/12 • Use 2007 to push 2012 client to remaining 2007 clients • 11/9/12 • Remove client connectivity to 2007 environment

4. Group Policy • SCCM2012_Managed_Config • SCCM2012_Client_Push • SCCM2012_WSUS • SCCM_Remote_Assistance • SCCM_Firewall_RDP_MSRA • SCCM_Firewall_SMB • SCCM_Firewall_Wireless_RDP_MSRA • SCCM_Firewall_Wireless_SMB

5. SCCM2012_Managed_Config • Provides Automatic certificate enrollment for authentication and encryption • Provides code signing certificates for WSUS 3rd Party Updates • Basic Firewall settings • Allow DHCP server and SCCM Site server to ping client • Provide Application Catalog Shortcut • Application Catalog fix for if IE is not default browser

6. SCCM2012_client_push • Adds site server (sccm2012.campus.cu.clemson.edu) computer account as local administrator of desktop • Adds firewall exceptions to allow only it to connection and distribute the configmgr client

7. Sccm2012_wsus • Provide update server information for automatic configmgr client deployment • Also provides code signing certificates for 3rd party updates • This GPO will be used as the primary method to migrate computer from 2007 to 2012.

8. Sccm_Remote_Assistance • Enables remote assistance • Adds group sccm_admins to remote assistance helpers group

9. SCCM_Firewall_RDP_MSRA • Creates firewall exceptions for remote desktop and remote assistance • Local subnet, 130.127.0.0/255.255.0.0, 172.23.0.0/255.255.0.0, 2620:103:a000::/44 • Does not include wireless IP ranges

10. SCCM_Firewall_SMB • Creates firewall exceptions for File and Printer sharing • Local subnet, 130.127.0.0/255.255.0.0, 172.23.0.0/255.255.0.0, 2620:103:a000::/44 • Does not include wireless IP ranges

11. SCCM_Firewall_Wireless_RDP_MSRA • Creates firewall exceptions for remote desktop and remote assistance • Allows Wireless IP Ranges

12. SCCM_Firewall_Wireless_SMB • Creates firewall exceptions for File and Printer sharing • Allows Wireless IP Ranges

13. New Features in 2012

14. User Based Management • Currently we deploy software to computers with limited user based delivery • SCCM2012 default needs to be user based delivery for a more consistent experience • Can still do system based delivery if product requires or delivery doesn’t fit into the user based approval method • Benefits • User can just go get the software eliminating phone calls, emails, and tickets. • If you are not using SCCM Software distribution it also eliminates scheduled visits, bringing in computer, and associated user downtime.

15. Software Distribution • Application Catalog website will display software for users to install (User targeted) • Software in the list can be restricted by AD, Central, or BB group • Software can be configured to require approval before installing • Software Center will display computer targeted software and currently installed software from the Application Catalog provides • Software Center provides uninstall ability • User does NOT need to have admin rights

16. Software Distribution • New SW_ADV collection structure • User Collections • Software Distribution • Program • Program SW_ADV_USER_MAN • Shows software in Application Catalog • Program SW_ADV_USER_MAN_Approval • Requires approval for the user to install • Computer Collections • Software Distribution • Program • Program SW_ADV_MAN • Program SW_ADV_AUTO • Program SW_ADV_LAB • Program SW_ADV_USER • Program SW_ADV_Administrative

17. Power Management • Supports configuring power profiles similar to GPO • Benefit is you can add two profiles one for peak times and one for off peak times • Can configure auto wake time (prefer 5am) • User can exempt his/her system from the policy

18. Software Updates • Now delivered through Software Center • Will be mandatory install after 5PM Thursday following patch Tuesday • Will prompt user to restart • Software Center will suspend all activity if the computer is in Presentation mode.

19. Workgroup Computers • Workgroup computers are now supported although functionality is limited • No application catalog • Not managing software updates • No user based software distribution • Can use computer based software distribution • Communicates over HTTP port 80 • Private traffic is still encrypted just at a lower level • No internet based management requires VPN to use off campus • Stand alone installer • Installer can be used on domain joined machines functionality will automatically elevate

20. Console Changes

21. Console Changes • No longer MMC based • System Center has their own console technology that is XML driven • Looks very similar to Outlook (even has the ribbons) • Provides more information at a glance and less clutter • Users and Computers now live in separate spaces • No more sub collections structure is now folder based containing collections • Collections can still be linked to software using collection linking instead • Ability to exclude a collection from another

22. Console Demo

23. Imaging Changes

24. Registration Screen • Minor UI Changes • Software tab will change to support new application model • Demo

25. Task Sequences • Most Features the same as V3 task sequences • Now supports USMT from PE Boot

26. More Information • http://www.clemson.edu/tsp/ipcm • http://technet.microsoft.com/en-us/virtuallabs/bb467605.aspx

27. Questions Q&A