ITCamp 2013 - Adrian Stoian - Whats new in ConfigMgr 2012 SP1
1. itcampro@ itcamp13# Premium conference on Microsoft technologies
What’s new in
System Center 2012
Configuration Manager
Adrian Stoian
IT Consultant
2. itcampro@ itcamp13# Premium conference on Microsoft technologies
Private & Public
CloudHuge thanks to our sponsors!
3. itcampro@ itcamp13# Premium conference on Microsoft technologies
Agenda
• Changes to the managed environment
• Changes between versions: 2007, 2012 and
2012 SP1
• Windows Enhancements
• Modern Device Management
• Unified Infrastructure
• Simplified Administration
5. itcampro@ itcamp13# Premium conference on Microsoft technologies
Users + IT
• Device Choice
• Application Self-service
• Personalized Application Experience
• Non-intrusive management
• Manage all devices through single interface
• Deliver applications to the user, not the
device
• Integrated security and compliance
• Reduced infrastructure complexity
Access to corp
resources across
devices & platforms
Single admin
console
6. itcampro@ itcamp13# Premium conference on Microsoft technologies
Configuration ManagerEmpowerUnifySimplify
Role-based Administration
Distribution Point for Windows Azure
Software Update Management
Reduced Infrastructure Requirements
Application Delivery
Modern Device Management
Compliance & Settings Management
Endpoint Protection
Unified Management of Virtual Clients
Operating System Deployment
Asset Intelligence, Inventory &
Software Metering
2007 R3
MDM licensing
Device-centric
2012
EAS
User-centric
New
Improved
Integrated
Auto
Remediation
Improved
New
Improved
Improved
2012 SP1
Unified
+Win 8 Apps
Flexible
hierarchies
Improved
Real-time actions
User Profile and
Data
Improved
New
Improved
Improved
Modern Management Console New PowerShell
Client Activity and Health Improved Improved
8. itcampro@ itcamp13# Premium conference on Microsoft technologies
Windows 8 Applications
Deployment
• Benefits
– Runs across x86 and
Windows RT
– Inherently more secure
– Easier and faster to
deploy
• Software distribution
updated
– New object
– Same deployment
process
– Similar management
functionality
• End user installation
same as today
• End users have one
location for all
enterprise apps
Windows RTWindows 8
Windows
Store
Self-Service
Portal
FIREWALL
IT
9. itcampro@ itcamp13# Premium conference on Microsoft technologies
Always On Always Connected
devices
• Network
• Power states
• Idle
• Windows Automatic
Maintenance
ConfigMgr agent aware of
different states of a system:
10. itcampro@ itcamp13# Premium conference on Microsoft technologies
Metered Connection Support
• Trends
• Increased use of devices connecting via paid networks
• Mobile end users
• Admin with Windows 8 is able to
control traffic
• Block network impactful client management activities
• Avoid being unpleasantly surprised with their network bill
• End user can opt-in
11. itcampro@ itcamp13# Premium conference on Microsoft technologies
•Windows XP Embedded
•Windows Embedded
Standard 2009
•Windows Embedded
Standard 7
Thin Clients
•Same as Thin Clients, plus
•POS Ready 2009
•POS Ready 8
POS/Kiosk
•Windows Embedded
Standard 2009
•Windows Embedded
Standard 7
Digital
Signage
•Windows Thin PC
Repurposed
PC
• Supported Write Filters
• File Based Write Filters (FBFW)
(preferred for scalability)
• Enhanced Write Filters (EWF) RAM
• Ability to force persistence of
changes for
• Applications
• Packages and programs
• Software updates
• Task sequences
• Endpoint Protection client
installation
• Eventual persistence of changes
for
• Client agent settings
• Settings management
remediation
• Power management
Windows Embedded Support
13. itcampro@ itcamp13# Premium conference on Microsoft technologies
Modern Device Management
Devices & Platforms
Single admin
console
14. itcampro@ itcamp13# Premium conference on Microsoft technologies
Enterprise app management
Distribute token to phone during enrollment
Distribute self service portal app
Self-service portal makes it easy to find apps
Auto-update of already installed enterprise apps
Remote or local un-enroll results in app and app data
removal
15. itcampro@ itcamp13# Premium conference on Microsoft technologies
Android + iOS Management
• On premise:
– Exchange Active Sync based management
– Settings Management
– Device Wipe
• Cloud infrastructure:
– Exchange Active Sync for settings and device
wipe
– Pull Software Distribution
16. itcampro@ itcamp13# Premium conference on Microsoft technologies
Mac OS X
• Configuration Manager native
client
– 10.6 (Snow Leopard)
– 10.7 (Lion)
• Key management capabilities
– Push Software
Distribution
– Settings Management
– Hardware and
Software Inventory
17. itcampro@ itcamp13# Premium conference on Microsoft technologies
•Version 5.3 (Power)
•Version 6.1 (Power)
•Version 7.1 (Power)
AIX
•Version 11iv2 (PA-RISC/IA64)
•Version 11iv3 (PA-RISC/IA64)HP-UX
•Version 4 (x86/x64)
•Version 5 (x86/x64)
•Version 6 (x86/x64)
Red Hat
Enterprise
Linux
•Version 9 (SPARC)
•Version 10 (SPARC/x86)
•Version 11 (SPARC/x86)
Solaris
•Version 9 (x86)
•Version 10 SP1 (x86/x64)
•Version 11 (x86/x64)
SUSE Linux
Enterprise
Server
• Supported OS’s across both:
• Configuration Manager
• Operations Manager
• Old versions supported as long as
vendor provides support
• Broader Linux distro support being
evaluated for future releases
• Hardware and Software Inventory
• Software Deployment
• Using the Package and
Program model
• Deploy/patch software, deploy
OS patches and run
maintenance scripts that
target a collection
• Consolidated reports
Linux and Unix Servers
19. itcampro@ itcamp13# Premium conference on Microsoft technologies
Reduced Infrastructure
Requirements
Central
Administration Site
• Scale
• Support multiple
primary sites
• Future proofing
your hierarchy
(SP1)
Primary Sites
• Client assignment
(up to 100k)
• Reduce impact of a
primary site failing
• Political reasons
• Delegated
administration
• Different client
agent settings
• Language packs
• Internet Facing
Secondary Sites
• Site data
replication
• Content
routing
• Throttling (DPs)
ReasonsWhyObsoleteReasons
Distribution
Points
• Prestage
content
• Lack of
BranchCache
• Runs on any
computer
(client or
server)
20. itcampro@ itcamp13# Premium conference on Microsoft technologies
Distribution Point in
Windows Azure
• Rich feature set
– Provision from the admin console
– Most capabilities as on-prem.
Except:
– OSD and task sequences
– Custom updates
– App-V streaming
– Full BranchCache support
– Software Updates from Microsoft
Update
• Integrated monitoring
– In console content monitoring
– Ability to monitor storage and
traffic out usage
• Content is fully
encrypted PR1
MP
MP DP
Windows Azure
DistributionPoint
Microsoft
Update
Policy
Content
FIREWALL
Corporate
Network
22. itcampro@ itcamp13# Premium conference on Microsoft technologies
End User Client UI
Improvements
• Software Center support multi-
select install
• All object types (Applications, updates, etc)
• Except for OS Deployment Task Sequences
• No more ActiveX control
• Application Catalog depends on Silverlight 5
23. itcampro@ itcamp13# Premium conference on Microsoft technologies
Microsoft Application
Virtualization
• App-V 4.6 SP2 support
• Needed for Windows 8
• Same feature functionality
• App-V 5.0
• New Deployment Type for App-V 5.0 applications
• Virtual connection groups replaces dynamic suite composition
24. itcampro@ itcamp13# Premium conference on Microsoft technologies
PowerShell
• PowerShell Provider
• Cmdlet Scope
– Hundreds of cmdlets: Tasks exposed in the Administration
Console
– Suitable experience for administrator (not the SDK)
– Align with PowerShell general conventions
25. itcampro@ itcamp13# Premium conference on Microsoft technologies
Operating System
Deployment
• BitLocker Enhancements
• TPM and PIN
• Used Space BitLocker
• Prestage media now support
additional content types
• Before: WIM
• Now: WIM, Applications, Drivers, Package/Programs
26. itcampro@ itcamp13# Premium conference on Microsoft technologies
Configuration ManagerEmpowerUnifySimplify
Role-based Administration
Distribution Point for Windows Azure
Software Update Management
Reduced Infrastructure Requirements
Application Delivery
Modern Device Management
Compliance & Settings Management
Endpoint Protection
Unified Management of Virtual Clients
Operating System Deployment
Asset Intelligence, Inventory &
Software Metering
2007 R3
MDM licensing
Device-centric
2012
EAS
User-centric
New
Improved
Integrated
Auto
Remediation
Improved
New
Improved
Improved
2012 SP1
Unified
+Win 8 Apps
Flexible
hierarchies
Improved
Real-time actions
User Profile and
Data
Improved
New
Improved
Improved
Modern Management Console New PowerShell
Client Activity and Health Improved Improved
27. itcampro@ itcamp13# Premium conference on Microsoft technologies
Private & Public
CloudQUIZ
1. What is the functionality that blocks application
deployment on 3G networks?
2. What distributions of Linux/Unix can be managed with
Configuration Manager?
3. How can you manage Windows RT, Windows Phone 8, iOS
and Android?
4. What feature enables application deployment from the
cloud?
5. How can you automate tasks in Configuration Manager?