The document discusses Microsoft System Center 2012 R2 and its components for managing IT infrastructure and automating processes. It provides an overview of System Center capabilities for data center and client automation. Key components described include System Center Configuration Manager for device management, Operations Manager for monitoring, Virtual Machine Manager for hypervisor management, and Service Manager for IT service management. The document demonstrates System Center's unified management capabilities and how customers can get started or advance their use of System Center.

1. May 2014
System Center Suite: The Good,
The Bad, The Automated

2. Quick Facts
About Us
• 24th Year
• Grand Rapids &
Detroit
• 25 Staff
Approach
• Vendor
Independent
• Non-reseller
• Professional
Services Only
Partnerships
• Microsoft Gold
• VMware
Enterprise
• Citrix Silver
• Cisco Premier
• Novell Gold

3. Microsoft Gold Partner
PinpointCompetencies Successes

4. Expertise
• Microsoft SharePoint
• Development
• User Interface & User
Experience
• Business Intelligence
• Project Management
• IT and Project
Planning
• Enterprise Project
Management
• Project Management
Office
• Microsoft System
Center
• Virtualization
• Cloud Computing
• Security
Infrastructure
• Policy Development
Infrastructure
• Mobile Device
Management
• Application
Development
Mobility
• Microsoft Lync
• Microsoft Exchange
• Enterprise Voice
• Communication
Enabled Business
Process
Unified
CommunicationsCollaboration
Project
Management

5. Collaboration and Feedback
Collaboration and Feedback
We love questions and we love
seeing you! If you have a camera,
turn it on.
Collateral is uploaded to the meeting.
Click Ctrl+F or the paperclip in the upper right.
We’ll ask for your feedback
immediately following this event.

6. Get Social with C/D/H
@cdhtweetstech
/cdhtech
/company/cdh
cdhtalkstech.com

7. Your Presenter
Gil Lalo
Enterprise Architecture
Director
GilL@cdh.com

8. Microsoft System Center 2012R2
The good, the bad and the automated

9. Agenda
• Introduction
• Overview - System Center Suite capabilities
• System Center components and what they do
• Benefits of unified management, integration &
automation
• System Center on-premise and in the Cloud
demonstration
• How to get started or if you have System
Center where to go next

10. Introduction
• IT has to let go
• What does systems management even mean?
• Business unit leaders call the shots
• BYOD is here to stay
• Cloud is the new reality
• System Center does not stand alone –
– PowerShell, Azure, O365, SQL, mobile
• What’s an IT guy to do?

11. Overview - System Center Suite
Capabilities
• Virtual Machine Manager
• Service Manager
• Configuration Manager
• Orchestrator
• Operations Manager
• Endpoint Protection
• Data Protection Manager

12. V-SCOOPED

13. Data Center Automation
• Template based VM deployment
• Monitoring of critical servers
• Backup and disaster recovery
• Dynamic scaling of heavy use
applications

14. Client Automation
• User driven incident management
• Self-service request portal
• Automated provisioning
• Web based knowledgebase

15. Service Desk Automation
• Automated incident remediation
• Change Management Workflows
• Runbook Driven Escalation
• ITIL / MOF aligned knowledge
management

16. System Center
Configuration Manager
• Client Application and Desktop
Deployment
Updates Management, Operating System Deployment
• Multi-Platform Device Management
iOS, Android, Mac, Linux, Unix
• EndPoint Protection
• Hardware and Software Inventory
Reporting, Asset Intelligence
• New in SP1: Windows 8 and Mobile
Device
Intune Integration for On-Demand MDM, Robust Alerting

17. What’s New In Platform Support?
• Windows Server 2012 R2 and Windows 8.1
– Full client and site system role support
• Windows Embedded
– Support for Windows Embedded 8 Industry
– Support for Unified Write Filters (UWF)
• Mac OS X
– Enrollment UI

18. Upgrade/Interoperability Considerations
• Only supported upgrade path is from ConfigMgr 2012
SP1
• Must upgrade Windows ADK first
• Improved site to site interoperability
This hierarchy currently contains sites that have not been upgraded to
System Center 2012 Configuration Manager SP1. Objects of this type
cannot be created until all primary sites have been upgraded.

19. SQL Server Flexibility In Setup
• Specify file locations for database and transaction log

20. SQL Server Flexibility In Setup
• Specify file locations for database and transaction log
• Restore to a different SQL Server instance
– Requires same SQL Server version

21. Reduced Need For Multiple Sites
• Why might you need multiple primary sites?
– More than 100K clients
– Organizational politics
– Reporting from the CAS
– Clients reside in multiple untrusted forests

22. Reduced Need For Multiple Sites
• Why might you need multiple primary sites?
– More than 100K clients
– Organizational politics
– Reporting from the CAS
– Clients reside in multiple untrusted forests
• Solution: multiple network access accounts per site
– Supports backward compatibility for SP1 clients
– Troubleshooting assistance provided through
DataTransferService.log

23. Easy Client Mobility
• Scenario: I installed a new primary site in my
hierarchy and would like to move some or all of the
clients from an existing site to the new site (e.g. load-
balancing, server replacement).
• Solution: Client reassignment
– Supports single or multi-select client reassignment
– Enforces proper client/site versioning
– Uses standard client policy channel (no client
notification)
• Note: This will not work for disaster recovery
scenarios.

24. PowerShell Improvements
• New: Remove-CMContentDistribution
– To remove a content from distribution points
• Modified: Add-CMDistributionPoint and Set-
CMDistributionPoint
– New parameters:
• IsPullDP
• SourceDPs
• SourceDPRanks

25. System Center Orchestrator
• Graphical IT Workflow Engine
Activities Managed through Custom Workflows
• Automation for System Center Suite
OpsManager, ConfigMgr, ServiceMgr, DPM, VMM, Self-
Service
• Extends to entire Microsoft stack
Windows Server, SQL, Exchange, SharePoint, FTP
• Extensive Third Party Integration
VMware, HP, IBM
• New in R2: Server 2012 and SQL 2012

26. Orchestrator Concepts
Create Incident Create Checkpoint Start Maint Mode Shut Down VM
E-mail on error Update on success
Invoke Web
Services
Compare Values
Send e-mail
Query Database
Run .Net
Script
Clone Linux VM
Return Data
Check Schedule
Activities Runbooks Databus
Executes a task Collection of Activities Published Data from Activities
Get Data Source Create Recovery Point Update
Service Request

27. •
– Provide ready-built defined activities
– Packaged and Deployed
– Brings version control to activities
•
– All major enterprise management products
– HP, IBM, CA, BMC, EMC
•
– Leverage the Community ecosystem
Integration Packs

28. Example - Deploy Web site
Create
Folder
Copy
Content
Create Web
Site
Test Web
Site

29. When to Automate Activities ?
Easy to Automate Occurs Often
Visible to
Customers
High Risk
Breaches SLA
Often
Time Consuming

30. •
•
•
•
Identify the best processes

31. •
•
•
•
Scenario 1 – Basic Task

32. Scenario 1 – Basic Task
4 Hours
37.5 Hours
0
5
10
15
20
25
30
35
40
45
0 1 2 3 4 5 6 7 8 9 10
Hours
Year

33. •
•
•
•
•
Scenario 2 – Incident Remediation

34. Scenario 2 – Incident Remediation
122 Hours
1217 Hours
37.5 Hours 37.5 Hours
0
200
400
600
800
1000
1200
1400
0 1 2 3 4 5 6 7 8 9 10
Hours
Year

35. •
•
•
Summary

36. System Center Operations Manager
• Server and Application Monitoring
Extensible through Management Packs
• Alerts and Incident Generation
Integrates with Exchange and/or ServiceMgr
• Agentless Monitoring
Unix, Linux, Network Devices, Web
Applications
• Synthetic Transactions
Simulate Client Activities
• New in R2: Improved Application
Monitor
360 .NET Dashboards, TFS
Integration

37. MONITORING
OPERATIONS MANAGER | ADVISOR | APP INSIGHTS
 Enterprise grade monitoring, scalability and
reliability
 Simplified upgrades from
previous 2012 based versions
 New and enhanced management packs including
Azure & Office365
 Enhanced Open Source Software monitoring

38. MONITORING
OPERATIONS MANAGER | ADVISOR | APP INSIGHTS
 Enterprise grade monitoring, scalability
and reliability
 Simplified upgrades from
previous 2012 based versions
 New and enhanced management
packs including Azure & Office365
 Enhanced Open Source Software
monitoring
Continuing investment in System Center Advisor
services attached to Operations Manager
Application Insights integration driving enhanced
application monitoring & devops scenarios

39. New System Center Advisor

40. Operational
Investigation
Ready Made
Intelligence
Modern/Fast
Easily collect & search massive
amount of machine data from
multiple sources
 Capacity Planning
 Update Assessment
 Malware Protection Status
Configuration Assessment
 …and more!
 Fast & responsive exploration
of your operational data
 Modern experience that runs
on any device
New System Center Advisor

42. System Center Virtual Machine Manager
• Heterogeneous Hypervisor Management
Microsoft, VMware, Citrix (Public and Private Cloud)
• Enterprise Toolset for Hyper-V
Libraries, Templates, Live-Migration, Backup, Dynamic Optimization
• Service and Application Management
Integrates with App Controller, App-V, and Azure
• Optimization and Standardization
Power, Compute Resources, Bare Metal Hypervisor Deployment
• New in R2: Highly Available VMM MS
SMB 3.0, Cluster-Free Live Migration, Virtual Networking

43. Service
Manageme
nt
Service
Templates
Application
Deployment
Custom
Command
Execution
Image Based
Servicing
Services
Cloud
Managem
ent
Application
Owner
Usage
Capacity and
Capability
Delegation
and Quota
Cloud
Infrastructure
Enhancements
HA VMM Server
Upgrade
Custom
properties
Powershell
Deployment Fabric
Hyper-V Bare
Metal
Provisioning
Hyper-V,
VMware, Citrix
XenServer
Network
Management
Storage
Management
Update
Management
Dynamic
Optimization
Power
Management
Monitoring
Integration
Fabric
Management
System Center Virtual Machine Manager
2012

44. Service Lifecycle Management

45. System Center Endpoint Protection
• Enterprise Malware and Security
Platform
Antivirus, Firewall
• Integrates with ConfigMgr
• Seamless Updates
Software Update Point, Automatic Deployment
Rules
• New in SP1: ADR Template

46. System Center Data Protection Manager
• Volume Shadow Copy Based
Backup
• Disk-to-Disk: Archive to Tape
• SQL, Exchange, Hyper-V,
SharePoint
• New in R2: Live Migration Support
Azure Online Backup, “Phase 13”

47. System Center Service Manager
• ITIL / MOF Aligned IT Processes
Incident, Problem, Change, Knowledge Management - CMDB
• Integrations with SC2012 Suite
OpsManager, ConfigMgr, Orchestrator, VMM
• Integration with Microsoft Infrastructure
Exchange, Active Directory, SharePoint, Project, Azure
• User Self Service Catalog
Driven by Workflows and Orchestrator Runbooks
• New in R2: Cost Center Chargeback
SQL 2012 & OLAP, Windows 8 SSP Support

48. How to get started/where to go next

49. Looking back…
October 2013
• Depth of
settings
• Native
Company
Portal for iOS
and Android
• App
management
• Certificates,
VPN/WiFi
profiles
January 2014
• Standalone
MDM
• Email
Profiles/Wipe
• iOS 7 Data
Protection
Settings
• Remote
Lock/PIN
Reset
May 2014
• Windows
Phone 8.1
Support
• Samsung
KNOX
Standard
Support
• Remote to
My PC for
iOS and
Android

50. Managed Corporate-owned Devices
• Enable IT to bulk enroll devices
• Device management focused on task-worker scenarios
Conditional Access Policy
• Provide access to email and documents only if device is managed
• Exchange and OneDrive for Business
Managed Mobile Productivity and Data Protection
• Managed Office Mobile Apps
• App Wrapper for existing iOS, Android apps
• Protected web browser
• Managed PDF, audio, video viewers
Q4 Roadmap

51. Managed Corporate-Owned Devices
Bulk
Enrollment
• Support for Apple Device Enrollment
Program and Apple Configurator
• Service account enrollment
Configuration
Policies
• Device lockdown through supervisor mode
• Policies and apps targeted to devices
• Application install allow/deny list
• URL allow/deny

52. MOWA
Native
E-mail
Browser
L
o
B
for Business
Managed Mobile Productivity
L
o
B

53. Protected Corporate Email and Collaboration
Conditional
Access Policy
• Access email and documents only if device is
managed
• Deny access if device falls out of compliance
• Deploy certificates and Wi-Fi, VPN profiles
• Configure email profiles across devices
Mobile App &
Data Protection
• Contain corporate data to corporate apps and services
• Push, publish and uninstall apps centrally
• Provision iOS managed apps and accounts
• App wrapper for protected internal LoB apps
• Provide access to internal resources via per-app VPN
• Protected web browser, PDF, audio, video
• Selective wipe for managed apps and documents

54. Getting to unified device management
????

55. From Configuration Manager 2007
Microsoft System Center 2007
Configuration Manager
Maintain your existing
ConfigMgr 2007 deployment
Stand up new
ConfigMgr 2012 R2
+ Windows Intune
Add new devices for management
Migrate

56. From Configuration Manager 2012
Add new devices
for management
Connect with Intune

57. From Windows Intune
Add new devices for management
Intune upgrades are available automatically

58. Mobile Device Management
Enable users
Access to company resources
consistently across devices
Simplified registration and
enrollment of devices
Synchronized corporate data
Unify your environment
On-premises and cloud-based
management of devices within a
single console.
Simplified, user-centric application
management across devices
Comprehensive settings
management across platforms,
including certificates, VPNs, and
wireless network profiles
Protect your data
Protect corporate information by
selectively wiping apps and data
from retired/lost devices
A common identity for accessing
resources on-premises and in
the cloud
Identify which mobile devices
have been compromised
√

59. Hybrid Identity Management
Mobile Device Management
Data Protection
• Group management & Self Service Password Reset
• Security audit reports & MultiFactor Authentication
• Connection between AD / Azure AD
• Information protection
• Connection to on-premises assets
• Mobile device settings management
• Mobile app management
• Selective wipe
Enterprise Mobility Suite
Enterprise Agreement Prices starting at $4 per user per month*
* Limited time EA Level A promo pricing. Requires 250 seat minimum purchase and underlying CAL Suite license (CoreCAL/ECAL/BridgeCAL)
EMS will enable customers with:

60. Thank You
cdh.com