O'Reilly logo

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Microsoft System Center Configuration Manager Cookbook - Second Edition

Microsoft System Center Configuration Manager Cookbook - Second Edition

by Greg Ramsey, Brian Mason, Chuluunsuren Damdinsuren, Samir Hammoudi
Publisher: Packt Publishing
Release Date: November 2016
ISBN: 9781785881206
View table of contents
Start reading

Book Description

Over 60 applicable recipes to administer and manage System Center Configuration Manager Current Branch

About This Book

  • Overcome the challenges of administering System Center Configuration Manager when deploying single and multiple-hierarchy sites
  • Help your organization to build a custom-line of business apps and also protect the server against malware threats with Endpoint protection
  • Get easy guidance and best practices to help you work with SCCM

Who This Book Is For

If you are an intermediate to advanced administrator who wants to administer SCCM and understand how to solve particular problems/scenarios, then this book is for you. You should have a working knowledge of SCCM, however, knowledge of the latest version is not required.

What You Will Learn

  • Administer System Center Configuration Manager
  • Upgrade computers from Windows 7/ 8.x to Windows 10, using Serivce Plans to keep Windows 10 machines up to date
  • Manage Compliance Settings effectively and monitor it with SSRS
  • Manage Sites in System Center Configuration Manager and also learn to create collections, leverage role-based administration (RBA), and support clients over the internet without a VPN connection
  • Implement multiple methods to deploy the client, as well as how to be proactive in monitoring client agent health
  • Achieve Mobile device management with Microsoft Intune

In Detail

This practical cookbook is based on the 1602 current branch of System Center Configuration Manager (SCCM). It shows you how to administer SCCM, giving you an essential toolbox of techniques to solve real-world scenarios. Packed with over 60 task-based and instantly usable recipes, you’ll discover how design a SCCM Infrastructure, and dive into topics such as the recommended SQL configuration for SCCM and how to deploy Windows 10 with Operating System Deployment (OSD).

You will learn to easily manage Windows 10 devices by deploying applications, software updates, and feature upgrades, andl be able to leverage Mobile Device Management (MDM) using SCCM and Microsoft Intune. Finally, you see how to gather the inventory of all your PC park and create reports based on it. By the end of the book, you will have learned the best practices when working with SCCM and have a handy reference guide for troubleshooting.

Style and approach

This cookbook is full of quick recipes that show you how to administer SCCM and will help you understand how to solve particular problems/situations encountered in day-to-day tasks.

Downloading the example code for this book. You can download the example code files for all Packt books you have purchased from your account at http://www.PacktPub.com. If you purchased this book elsewhere, you can visit http://www.PacktPub.com/support and register to have the code file.

Table of Contents

  1. Microsoft System Center Configuration Manager Cookbook - Second Edition
    1. Microsoft System Center Configuration Manager Cookbook - Second Edition
    2. Credits
    3. About the Authors
    4. About the Reviewer
    5. www.PacktPub.com
      1. Why subscribe?
    6. Preface
      1. What this book covers
      2. What you need for this book
      3. Who this book is for
      4. Sections
        1. Getting ready
        2. How to do it…
        3. How it works…
        4. There's more…
        5. See also
      5. Conventions
      6. Reader feedback
      7. Customer support
        1. Errata
        2. Piracy
        3. Questions
    7. 1. Designing a System Center Configuration Manager Infrastructure
      1. Introduction
      2. What's changed from System Center 2012 Configuration Manager?
        1. Getting ready
        2. How to do it...
          1. Whats new in CM Capabilities
          2. Removed features
        3. See also
      3. System Center Configuration Manager's new servicing models
        1. Getting Ready
          1. Windows 10's new servicing models
        2. How to do it...
          1. How will CM support Windows 10?
          2. Why is there another version called Configuration Manager LTSB 2016?
      4. Keeping your CM deployment up-to date
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      5. Infrastructure sizing considerations
        1. Supportable size and scale
        2. Hardware recommendation
        3. See also
      6. Dividing up site system roles
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Offloading the SUP
          2. Offloading Endpoint Protection
          3. Offloading SQL Reporting Services
        5. See also
      7. Upgrading in-place from Configuration Manager 2012
        1. Getting ready
        2. How to do it...
          1. Starting the upgrade installation at the CAS or primary site
          2. Starting the upgrade installation at a secondary site
          3. Starting the upgrade installation of clients
        3. How it works...
        4. There's more...
        5. See also
      8. Installing SQL the right way
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Installing SQL with an unattended file
          2. Setting some limits
          3. SQL file layout
          4. Helping SQL
        5. See also
      9. Managing Internet-facing clients
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. See also
      10. Using remote and workstation distribution points and BranchCache
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. When to choose BranchCache
          2. When to choose a workstation distribution point
          3. When to choose a server-class distribution point
        5. See also
    8. 2. Deploying Windows 10 with Operating System Deployment
      1. Introduction
      2. Creating an OSD test environment
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. The reference image in a VM
          2. The production build in a VM
      3. Leveraging the build and capture process
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating bootable media
          2. Deploying the task sequence to a device collection
          3. Starting the build process and troubleshooting information
        5. See also
      4. Migrating user state
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      5. Managing drivers
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Auto Apply Drivers
          2. Applying Driver Package
          3. Customizing with WMI conditional statements
        5. See also
      6. Customizing the build process with prestart hooks
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      7. Patching your reference build
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. See also
      8. Using the new Windows 10 in-place upgrade task sequence
        1. Getting ready
        2. How to do it...
          1. Deploying the upgrade TS to a device collection containing Windows 7/8/8.1 clients
        3. How it works...
        4. There's more...
      9. Leveraging the Microsoft Deployment Toolkit with CM OSD
        1. How to do it...
        2. How it works...
        3. There's more...
        4. See also
    9. 3. Deploying Applications and Software Updates
      1. Introduction
      2. Creating applications and deployment types
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating deployment types
          2. Specifying application settings
          3. Distribute an application to your DPs
          4. Deploying an application to workstations
        5. See also
      3. Deploying Store Apps - Windows, iOS, Android
        1. Getting ready
        2. How to do it...
          1. Deploy Apps directly from Stores - Deep Link
          2. Deploy Apps by Side-Loading
        3. How it works...
        4. There's more...
        5. See also
      4. Creating Mobile Application Management Policy
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      5. Managing Software Center and Application Catalog
        1. How to do it...
        2. There's more...
        3. See also
      6. Reducing collection dependencies with conditional rules and global conditions
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Testing the application using a Simulated Deployment
      7. Converting classic packages to applications
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
      8. Creating and deploying Virtual Applications - App-V
        1. Getting ready
        2. How to do it...
        3. How it works...
      9. Superseding applications
        1. Getting ready
        2. How to do it...
        3. How it works...
      10. Monitoring content and deployment status
        1. Getting ready
        2. How to do it...
        3. How it works...
      11. Preparing for software updates
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. The Active Software Update Point
          2. Enable software updates on clients
      12. Creating and monitoring software updates
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Create a software update deployment
          2. Monitor the deployment
        5. See also
      13. Leveraging Automatic Deployment Rules - ADRs
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
      14. Deploying custom updates
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      15. Leveraging Windows 10 Servicing to deploy features upgrades
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
    10. 4. Managing Compliance Settings
      1. Introduction
      2. Building Configuration Items the old way
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Disabling the local guest account
          2. Disabling Internet Connection Sharing
          3. Verifying recent antivirus definition
        5. See also
      3. Building Configuration Items for Windows 10
        1. Getting ready
        2. How to do...
        3. How it works... 
        4. There's more...
      4. Creating and deploying a baseline
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Piloting the baseline
          2. Testing the baseline
          3. Managing revisions
        5. See also
      5. Leveraging Security Compliance Manager
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Adding an additional CI to the baseline
        5. See also
      6. Monitoring compliance with SSRS
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating an e-mail based subscription
          2. Creating a file-based subscription
        5. See also
    11. 5. Managing Mobile Devices using Configuration Manager with Microsoft Intune
      1. Introduction
      2. Creating a Microsoft Intune subscription
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      3. Connecting Microsoft Intune to CM
        1. Getting ready
        2. How to do it...
          1. Android management setup
          2. Windows 10 management setup
          3. Windows 10 Mobile management setup
          4. iOS management setup
        3. How it works...
        4. There's more...
        5. See also
      4. Creating and deploying MDM policies
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Deploying the MDM policy
          2. Verifying the application of the MDM policy
        5. See also
      5. Using Conditional Access to control devices' access to Office 365 services
        1. Getting ready
        2. How to do it...
        3. How it works... 
        4. There's more...
        5. See also
      6. Managing mobile devices enrolled in Microsoft Intune via the CM console
        1. Getting ready
        2. How to do it...
          1. Full wipe action
          2. Selective wipe action
          3. Remote lock
          4. Passcode reset
        3. How it works... 
        4. There's more...
    12. 6. Managing Sites
      1. Introduction
      2. Managing collections
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating maintenance windows
          2. Configuring power management
          3. Configuring alerts
          4. Import/export and copying collections
        5. See also
      3. Configuring site maintenance
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Setting up a Network Access Account
          2. Disabling unused Status Filter Rules
          3. Designating a fallback site
        5. See also
      4. Managing site communications
        1. Getting ready
        2. How to do it...
        3. There's more...
          1. Configuring bandwidth restrictions on standalone DPs
      5. Configuring Discovery
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Enabling Active Directory System Discovery
          2. Enabling Active Directory User Discovery
          3. Enabling Active Directory Group Discovery
        5. See also
      6. Managing Boundary Groups
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Adding or editing Boundary Groups from the Boundaries node
        5. See also
      7. Managing role-based security
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating scopes to manage security boundaries
          2. Defining administrator groups
          3. Setting security scopes on DPs
        5. See also
      8. Configuring the Application Catalog
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      9. Managing and validating content for DPs and DP groups
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Monitoring the content status
          2. Monitoring DP group status
          3. Monitoring the DP configuration status
          4. Validating the content
        5. See also
    13. 7. Managing Clients
      1. Introduction
      2. Deploying clients
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Discovering computers
          2. Configuring security
          3. Pushing the client to a collection
          4. Pushing the client to all computers automatically
        5. See also
      3. Upgrading client agents
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      4. Managing client health
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Viewing health in the console
          2. Viewing health in SRS reports
          3. Viewing alerts in the console
          4. Disabling client remediation
        5. See also
      5. Managing client settings
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Hiding all notifications
          2. Deploying Endpoint Protection
        5. See also
      6. Enabling Device Health Attestation in Windows 10
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more
        5. See also
      7. Monitoring client installation and activity
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
        5. See also
      8. Making use of user-centric improvements
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Associating users to devices
          2. Enable the new Software Center
        5. See also
      9. Configuring power management
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Copying power management settings from another computer
          2. Enabling users to opt out of power management
          3. Creating an "always on" collection
          4. Configure wakeup time, but no other settings
          5. Monitoring Power Management with Reporting
        5. See also
    14. 8. Managing Inventory
      1. Introduction
      2. Managing hardware inventory
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Extending hardware inventory
          2. Using RegKeytoMof
          3. Backing up your classes
        5. See also
      3. Managing software inventory
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Adding new software inventory rules
          2. Creating a software inventory rule with a custom client policy
          3. Ignoring other options
        5. See also
      4. Managing software metering
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Automatically create metering rules based on recent usage data
          2. Reviewing metering reports
          3. Automating uninstall processes to remove unused software
          4. Leveraging CCM_RecentlyUsedApps
      5. Monitoring inventory data flow
        1. Getting ready
        2. How to do it...
          1. Client
          2. Management Point
          3. Site
        3. How it works...
        4. There's more...
      6. Integrating Asset Intelligence
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Submitting applications to Microsoft for categorization
        5. See also
    15. 9. Managing Reports and Queries
      1. Introduction
      2. Installing SQL Server Reporting Services - SSRS
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Remote SSRS - remote RSP
        5. See also
      3. Configuring reporting services
        1. Getting ready
        2. How to do it...
          1. Making the SSRS server an RSP
          2. Saving resources of your CAS or Primary - cache reports
        3. See also
      4. Sharing your reports with others
        1. Getting ready
        2. How to do it...
      5. Configuring report subscription
        1. Getting ready
          1. Step 1: Enable e-mail notification for alerts
          2. Step 2: Configure E-Mail Settings of Reporting Services Configuration Manager
          3. Step 3: Configure SQL Server Agent Service
        2. How to do it...
        3. There's more...
        4. See also
      6. Building queries
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating subselect queries in T-SQL
          2. Creating a WMI query
          3. Creating a WMI-based query collection
          4. Creating subselect queries in WMI
        5. See also
      7. Editing and creating reports
        1. Getting ready
        2. How to do it...
        3. How it works...
        4. There's more...
          1. Creating a new report with Report Builder 3.0
          2. Incorporating readability aids in your report
          3. Uploading reports to the RSP
        5. See also