System Center Configuration Manager 2012 Overview

System Center Configuration Manager 2012Technical Overview (Beta 2)
Amit Gatenyo
Infrastructure & Security Manager, Dario
Microsoft Regional Director – Windows Server & Security
054-2492499
Amit.g@dario.co.il
2012

Agenda
Where is the focus in SCCM 2012?
Embracing User-Centric
New Administrator Experience
Client Health
Settings Management
Mobile Device Management
Cross Platform Management
Software Updates
Operating System Deployment
Remote Control
Infrastructure Changes
Demo

What is in SCCM 2012?

What is in SCCM 2012?
IT AssetIntelligence
Software Update Management
Software Metering
Remote Control
Support forthe Mobile Workforce
Classic and App-V Applications
Selfservice Portal
Power Management
OS Deployment
Network Access Protection
Antivirus*
Settings Management(aka DCM)
* FEP 2012 has to be licensed separately – Beta available in June 2011

Where is the focus on Configuration Manager 2012 ?

Configuration Manager 2012
User Centric Client Management
EMPOWER
CONTROL
UNIFY
Reduces the complexity and improves visibility into systems compliance
Keeps assets available and helps keep the IT environment audit-ready
Simplifies and automates patch management
Simplifies and consolidates the IT infrastructure to provide a new operational cost model
Integrates security to create unified client management
New features around administrative control to reduce infrastructure
Enables IT to provide a flexible work environment
Users can connect from anywhere, on any device they choose
Automatically detects network conditions and device configurations to determine the most appropriate services

Embracing User-CentricThe End-User of the Future

System and User-Centric

Application Model Diagram
Keep your apps organized and managed
Administrator Properties
General information about the software application
End User Metadata
The “friendly” information for your users
App-V
Windows
Script
Windows
Installer (MSI)
Mobile (CAB)
Deployment Type
Workhorse for application
Is app installed?
Detection Method
Command line and options
Install Command
Can/cannot install app
Requirement Rules
Apps that must be present
Dependencies
Source files for the app
Content

Embracing User Centric: End-User Promises
“A Fitting End-User Experience”
Web based software catalog
Easily find and request software
Choose software intelligently thanks to clear, consistent and concise information about applications and their impact
“The ability to define their relationships to their software”
User preferences control ConfigMgr behaviors (e.g. “my business hours”)
Manage impact from software installation and system restarts

Application Lifecycle
Application Installation
(beta1)
Application Revision
(beta1)
Application Uninstall
(beta2)
New Application
Update Application
Remove Application
Application Retirement
(beta1)
Application Supersedence
(beta2)
Replace Application
Retire Application

App-V in ConfigMgr 2012

App-V in ConfigMgr 2012: What’s changing?
Integration requires App-V 4.6 client
New Application Model, User-centric features
Enable support for application dependencies
Improved update behaviors
Selective publishing of components
Dynamic Suite Support
Instant icon gratification for unlock events
Integration with Remote Desktop Services (TS)
Content Improvements
Streaming improvements
Reduce virtual app footprint when using Download and Execute

New Administrator Experience

Administrator Experience
Common look and feel across System Center products
Improve discoverability
Only show what is relevant
Complete scenarios within the console
Simplified navigation
Consolidated elements

Role-Based Administration
Simplified administration of security permissions
Security Role
Group sets of permissions together that collectively define an administrative span of control
e.g. Read Program + Deploy Program + Read Collection + Advertise to Collection = Software Distribution Administrator
Supports assignment of Security Roles to Users, once in a hierarchy
Also supports instance level controls
ConfigMgr provides out-of-the-box Security Roles
Supports custom Security Roles
Removes clutter from the console
Supports “Show me what’s relevant to me” based on my Security Role and Scope

Role-Based Administration Example
Peter assigns Application Deployment role to Meg
Meg is responsible for deploying software
Meg has a limited view

Client Health

Client Health
Server-side metrics covering policy requests, HW & SW Inventory, Heartbeat, Data Discovery Record (DDRs) and Status Messages
Customizable monitoring/remediation for:
Client prerequisites
ConfigMgr client reinstallation
Dependent Windows Services
WMI Repository, Namespace, Class, and Instance health evaluation and repair
In-console alerts when healthy/unhealthy ratio drops below configurable threshold

Settings Management(aka DCM)

Features and Improvements
Unified compliance-settings mgmt across servers, desktops laptops, and mobile devices
Simplify administrator experience
Role-based administration built in “Compliance Settings Management Role”
Browse gold system when creating configuration items
Simplified Baseline creation experience
Re-use of settings across CI boundary
Deployment of Baselines
User and Device targeting of Baselines
Define compliance SLAs for Baseline deployments and generate Alerts
True per user evaluation and remediation
Monitoring Baseline deployment compliance status
In Console monitoring
Updated reports to include remediation, conflict and error reporting
Automatic remediation (aka DCM “set”)
CI revisioning and change control
Migration of existing Configuration Manager 2007 Baselines and CIs

Browse on gold system when creating CIs
Scenario: Simplify configuration item creation.
Design principal: Admin can create DCM setting and rule without typing by browsing gold system registry and file system, eliminating human errors.
Browse local / remote machine
Registry and File System only

Mobile Device Management

Mobile Device Support
New: SCCM 2012 will supportthefollowingdevices:
iPads
iPhones
Symbian
Android
Windows Phone 7

Managing users means managing beyond desktops with “Single pane of glass” administration
Reaching beyond Windows platforms
User Centric – Device Management
“Light”
Provides basic management for all Exchange ActiveSync (EAS) connected devices
“Depth”
Broad feature set
Common administration model for mobile devices, desktops, and servers

Cross Platform Management

Who we are Targeting
Targeting enterprises where:
Windows clients and servers predominate
UNIX/Linux management is important due to security, regulatory requirements
Simplification and cost drivers demand a unified management solution
Targeting servers & server scenarios, not desktops & client scenarios
Most comprehensive solution for heterogeneous environments, but is not “best-of-breed” for a specific UNIX/Linux OS
“Just a Check-Box”
“Best-of-Breed”
ConfigMgr for UNIX/Linux

Planned Features for UNIX/Linux Servers

Planned OS Platforms Supported at (Release To Web) RTW
21 Platforms supported at RTW
AIX
Version 7.1 (Power)
Version 6.1 (Power)
Version 5.3 (Power)
HP-UX
Version 11iv3 (IA64 & PA-RISC)
Version 11iv2 (IA64 & PA-RISC)
Red Hat Enterprise Linux
Version 6 (x86 & x64)
Version 5 (x86 & x64)*
Solaris
Version 11(x86 and SPARC)
Version 10 (x86 & SPARC*)
Version 9 (SPARC)
SUSE Linux Enterprise Server
Version 9 (x86)
* CTP Support for 3 Platforms

Software Updates

Software Updates
State-based Update Groups
Deploy updates individually or in groups
Updates added to an update group automatically deploy to collections targeted with the group
Auto Deployment Rules
Use search criteria to identify class of updates to automatically deploy: category, products, language, date revised, article id, bulletin id, etc.
Schedule content download and deployment based on sync schedule or define a separate schedule per rule

Offline Servicing of Images
Support for Component Based Servicing compatible updates
Uses updates already approved
Boot Media Updates
Hierarchy wide boot media – no longer need one per site
Unattended boot media mode – no longer need to press “next”
Use pre-execution hooks to automatically select a task sequence – no longer see many optional task sequences
USMT 4.0 - UI integration and support for hard-link, offline and shadow copy features

Remote Control

Remote Control
IS BACK!
Send Ctrl-Alt-Del to host device to regain previous feature parity

Infrastructure Changes

Infrastructure Promises
Modernizing Architecture
Minimizing infrastructure for remote offices
Consolidating infrastructure for primary sites
Scalability and Data Latency Improvements
Central Administration Site is just for administration and reporting – Other work distributed to the primaries as much as possible
File processing occurs once at the Primary Site and uses replication to reach other sites (no more reprocessing at each site in the hierarchy)
System-generated data (HW Inventory and Status) can be configured to flow to the Central Administration Site directly
Be Trustworthy
Interactions with SQL DBA are consistent with Configuration Manager 2007
Configuration Manager admin can monitoring and troubleshoot new replication approach independently

Simplify Your Hierarchy
Central Site
Primary
Primary Site
Primary
Primary Site
Primary Site
Primary Site
Distribution Point
Distribution Point
Distribution Point
Distribution Point
Secondary Site
Secondary Site
Secondary Site

Simplify Your Hierarchy
Primary
Primary
Central Administration Site
Distribution Point
Distribution Point
Distribution Point
Secondary Site
Secondary Site
Secondary Site

Infrastructure Changes: Modernizing our architecture

Modernizing our architecture
Improved Distribution Point Groups
Manage content distribution to individual Distribution Points or Groups
Content automatically added or removed from Distribution Points based on Group membership
Associate Distribution Point Groups with a collections to automate content staging for software targeted to the collection
Enhanced investment in SQL technologies
New replication methods for site to site communications
Only supporting SQL Server Reporting Services

Infrastructure Changes: Modernizing our architecture

System Center Configuration Manager 2012Technical Overview (Beta 2)
Amit Gatenyo
Infrastructure & Security Manager, Dario
Microsoft Regional Director – Windows Server & Security
054-2492499
Amit.g@dario.co.il
2012

http://www.dario.co.il	523
http://blogs.microsoft.co.il	179
http://beta.blogs.microsoft.co.il	23
http://feeds.feedburner.com	8
http://feeds2.feedburner.com	4
http://localhost	1

System Center Configuration Manager 2012 Overview

by Amit Gatenyo on Oct 04, 2011

Accessibility

Categories

Tags

Upload Details

Usage Rights

6 Embeds 738

Statistics

System Center Configuration Manager 2012 Overview — Presentation Transcript