empower people to bedownload.microsoft.com/documents/hk/technet/techdays2012... · 2018-12-05 ·...

Empower people to be

more productive from

almost anywhere on

almost any device.

Empower Users Simplify

Administration

Improve IT effectiveness

and efficiency.

Unify Infrastructure

Reduce costs by unifying

IT management

infrastructure.

Empower people to be

more productive from

anywhere on any device.

Application Delivery

Mobile Device Management

Empower Users

Configuration Manager

2007

Optimized for Systems Management scenarios

Challenging to manage users: Forced to translate a user to a device

Explicit: run a specific program on a specific

device

Software Distribution is a glorified script

execution

Configuration Manager

2007

Optimized for Systems Management scenarios

Challenging to manage users: Forced to translate a user to a device

Explicit: run a specific program on a specific

device

Software Distribution is a glorified script

execution

Configuration Manager

2012

Still committed and focused on System

Management scenarios

Embrace User Centric scenarios: Moving to a state based design, for apps,

deployments, content on DPs.

Full application lifecycle model. Install, Revision

Mgt, Supersedence and Uninstall

Understand and intelligently target the

relationships between user systems

Management solution tailored for applications

Let the administrator think user first

Let the administrator think user first Deploy applications to users

Manage users beyond the desktop

Let the administrator think user first Deploy applications to users

Manage users beyond the desktop

Maintains relationship between users and systems

Let the administrator think user first Deploy applications to users

Manage users beyond the desktop

Maintains relationship between users and systems Set conditions to control installations

Schedule ‘Pre-deploy’ to users’ primary devices for WoL, off-hrs, workgroup, etc.

Let the administrator think user first Deploy applications to users

Manage users beyond the desktop

Maintains relationship between users and systems Set conditions to control installations

Schedule ‘Pre-deploy’ to users’ primary devices for WoL, off-hrs, workgroup, etc.

ConfigMgr will remember the relationship between

the user and their applications

Manage applications; not scripts

Manage applications; not scripts

Application Management

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Required Application – Reinstall if missing

Prohibited Application – Uninstall if detected

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Required Application – Reinstall if missing

Prohibited Application – Uninstall if detected

Requirement Rules – Evaluated at install time to ensure the App only Install

in places it can, and should

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Required Application – Reinstall if missing

Prohibited Application – Uninstall if detected

Requirement Rules – Evaluated at install time to ensure the App only Install

in places it can, and should

Dependencies – Relationships with other Apps that are all evaluated prior to

install anything

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Required Application – Reinstall if missing

Prohibited Application – Uninstall if detected

Requirement Rules – Evaluated at install time to ensure the App only Install in

places it can, and should

Dependencies – Relationships with other Apps that are all evaluated prior to install

anything

Supersedence – Relationships with other Apps that should be uninstalled prior to

install anything

Manage applications; not scripts

Application Management Detection Method – Evaluate for Presence;

Required Application – Reinstall if missing

Prohibited Application – Uninstall if detected

Requirement Rules – Evaluated at install time to ensure the App only Install in

places it can, and should

Dependencies – Relationships with other Apps that are all evaluated prior to install

anything

Supersedence – Relationships with other Apps that should be uninstalled prior to

install anything

Update an App – Automatic Revision Management

IT

Administrators publish software

titles to catalog, complete with

meta data to enable search • Deliver best user experience

on each device

Users can browse, select and

install directly from Catalog • Application model determines

format and policies for delivery

User

Support for new software distribution features

during operating system deployment

Support for new software distribution features

during operating system deployment Evaluate application requirement rules, dependencies

and supersedence

User Device Affinity support – install applications deployed to

the primary user

As Citrix XenDesktop and Microsoft RDS

integrates, then

As Citrix XenDesktop and Microsoft RDS

integrates, then Conditional rules for application deployment are available (Desktop Type,

Pool Name)

As Citrix XenDesktop and Microsoft RDS

integrates, then Conditional rules for application deployment are available (Desktop Type,

Pool Name)

Gather inventory from Guest VM for Broker Site Name, Desktop Type and

Pool Name and exposed for compliance monitoring and inventory reports

As Citrix XenDesktop and Microsoft RDS

integrates, then Conditional rules for application deployment are available (Desktop Type,

Pool Name)

Gather inventory from Guest VM for Broker Site Name, Desktop Type and

Pool Name and exposed for compliance monitoring and inventory reports

SCCM uniqueness is persisted through Pooled VM shutdown and startup

As Citrix XenDesktop and Microsoft RDS

integrates, then Conditional rules for application deployment are available (Desktop Type,

Pool Name)

Gather inventory from Guest VM for Broker Site Name, Desktop Type and

Pool Name and exposed for compliance monitoring and inventory reports

SCCM uniqueness is persisted through Pooled VM shutdown and startup

Randomization of schedules automatically for any

client:

As Citrix XenDesktop and Microsoft RDS

integrates, then Conditional rules for application deployment are available (Desktop Type,

Pool Name)

Gather inventory from Guest VM for Broker Site Name, Desktop Type and

Pool Name and exposed for compliance monitoring and inventory reports

SCCM uniqueness is persisted through Pooled VM shutdown and startup

Randomization of schedules automatically for any

client: Hardware Inventory scan

Software Inventory scan

Software Update scan, download and install

Extend and align mobile device management

Extend and align mobile device management Integration of System Center Mobile Device Manager and

ConfigMgr 2007 features

Extend and align mobile device management Integration of System Center Mobile Device Manager and

ConfigMgr 2007 features

Enable secure, compliant mobile devices

Extend and align mobile device management Integration of System Center Mobile Device Manager and

ConfigMgr 2007 features

Enable secure, compliant mobile devices Secure over-the-air enrollment

Monitor and remediate out-of-compliance devices

Deploy and remove applications

Inventory

Provide Basic Management for ALL EAS

Connected Devices

Provide Basic Management for ALL EAS

Connected Devices

Feature Supported:

Provide Basic Management for ALL EAS

Connected Devices

Feature Supported: Discovery/Inventory

Settings Policy

Remote Wipe (including Memory Cards)

Provide Basic Management for ALL EAS

Connected Devices

Feature Supported: Discovery/Inventory

Settings Policy

Remote Wipe (including Memory Cards)

Support on-premise and hosted Exchange Server

Provide Basic Management for ALL EAS

Connected Devices

Feature Supported: Discovery/Inventory

Settings Policy

Remote Wipe (including Memory Cards)

Support on-premise and hosted Exchange Server

3rd party add-on for non-Exchange Environment

“A Fitting End-User Experience”

“A Fitting End-User Experience” Web based ‘Software Catalog’

Easily search, install or request software

Choose software intelligently: Clear, consistent information about applications and their impact, supported by App

model

“A Fitting End-User Experience” Web based ‘Software Catalog’

Easily search, install or request software

Choose software intelligently: Clear, consistent information about applications and their impact, supported by App

model

User preferences to control ConfigMgr behaviors:

“A Fitting End-User Experience” Web based ‘Software Catalog’

Easily search, install or request software

Choose software intelligently: Clear, consistent information about applications and their impact, supported by App

model

User preferences to control ConfigMgr behaviors: “My business hours” – used to control when to install software

Presentation mode – don’t notify when presenting

Remote control settings – when allowed, end user can control their

experience

User-Centric Application Management

Unify Infrastructure

Reduce costs by unifying

IT management

infrastructure.

Reduced Infrastructure Requirements

Endpoint Protection

Software Update Management

Compliance & Settings Management

Power Management

Internet-based Client Management

Central Administration Site

• Central primary site administration

• Reporting

Central

Administration

Site

Central Administration Site

• Central primary site administration

• Reporting

Primary Sites

• Client management and settings

• Delegated administration

Central

Administration

Site

Primary Site Primary Site

Central Administration Site

• Central primary site administration

• Reporting

Primary Sites

• Client management and settings

• Delegated administration

Secondary Sites

• Content routing

• Distributions points

Central

Administration

Site

Primary Site Primary Site

Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site Secondary Site

Unified Infrastructure

• Simplified server

and client deployment

• Streamlined updates

• Consolidated reporting

Comprehensive Protection Stack

• Behavior monitoring

• Antimalware

• Dynamic Translation

• Windows and Firewall

Management

CAS

Primary Site

MP Role Primary Site

DP Role

Microsoft

Update

Primary Site

SUP Role/WSUS

CAS

Primary Site

MP Role Primary Site

DP Role

Microsoft

Update

Primary Site

SUP Role/WSUS

Downloads updates

CAS

Primary Site

MP Role Primary Site

DP Role

Microsoft

Update

Primary Site

SUP Role/WSUS

Identifies who needs updates

and reports on compliance

Downloads updates

CAS

Primary Site

MP Role Primary Site

DP Role

Assigns policy to scan for

update status or to

deploy update

Microsoft

Update

Primary Site

SUP Role/WSUS

Identifies who needs updates

and reports on compliance

Downloads updates

CAS

Primary Site

MP Role Primary Site

DP Role

Assigns policy to scan for

update status or to

deploy update

Distributes updates

Reports

compliance

Microsoft

Update

Primary Site

SUP Role/WSUS

Identifies who needs updates

and reports on compliance

Downloads updates

Endpoint Protection Software Updates

SCCM MP

SCCM MP

SCCM MP Baseline

SCCM MP Baseline

WMI XML

Registry IIS MSI

Script SQL

Software

Updates File

Active

Directory

Baseline Configuration Items

SCCM MP Baseline

WMI XML

Registry IIS MSI

Script SQL

Software

Updates File

Active

Directory

Baseline Configuration Items

Assignment to

collections

SCCM MP Baseline Client Agent

WMI XML

Registry IIS MSI

Script SQL

Software

Updates File

Active

Directory

Baseline Configuration Items

Assignment to

collections

SCCM MP Baseline Client Agent

WMI XML

Registry IIS MSI

Script SQL

Software

Updates File

Active

Directory

Baseline Configuration Items

Assignment to

collections Baseline drift

SCCM MP Baseline Client Agent

WMI XML

Registry IIS MSI

Script SQL

Software

Updates File

Active

Directory

Baseline Configuration Items

Auto Remediate

OR

Create Alert

(to Service

Manager) !

Assignment to

collections Baseline drift

Unified settings management across servers,

desktops and mobile devices

Unified settings management across servers,

desktops and mobile devices

SCCM 2012 can “set” for Registry, WMI and Script-

Based

Unified settings management across servers,

desktops and mobile devices

SCCM 2012 can “set” for Registry, WMI and Script-

Based

Improved functionality:

Unified settings management across servers,

desktops and mobile devices

SCCM 2012 can “set” for Registry, WMI and Script-

Based

Improved functionality: Copy settings

Define compliance SLAs for Baselines to trigger console alerts

Richer reporting to include troubleshooting, conflict, remediation information

Unified settings management across servers,

desktops and mobile devices

SCCM 2012 can “set” for Registry, WMI and Script-

Based

Improved functionality: Copy settings

Define compliance SLAs for Baselines to trigger console alerts

Richer reporting to include troubleshooting, conflict, remediation information

Enhanced versioning and audit tracking

Unified settings management across servers,

desktops and mobile devices

SCCM 2012 can “set” for Registry, WMI and Script-

Based

Improved functionality: Copy settings

Define compliance SLAs for Baselines to trigger console alerts

Richer reporting to include troubleshooting, conflict, remediation information

Enhanced versioning and audit tracking

Ability to specify specific versions to be used in baselines

Audit tracking includes who changed what

Settings Management

Monitor current power state and consumptions

Monitor current power state and consumptions

Plan and create a power management policy,

check for exceptions

Monitor current power state and consumptions

Plan and create a power management policy,

check for exceptions

Apply power management policy

Monitor current power state and consumptions

Plan and create a power management policy,

check for exceptions

Apply power management policy

Check compliance and remediate non-

compliance

Monitor current power state and consumptions

Plan and create a power management policy,

check for exceptions

Apply power management policy

Check compliance and remediate non-

compliance

Report saving in power consumption and costs

and environmental impact

Non PKI enabled site system

PKI enabled site system

Intranet Internet

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity • Single Primary site can manage both

Intranet clients (over HTTP) and Internet

clients (over HTTPS)

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity • Single Primary site can manage both

Intranet clients (over HTTP) and Internet

clients (over HTTPS)

Flexibility

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity • Single Primary site can manage both

Intranet clients (over HTTP) and Internet

clients (over HTTPS)

Flexibility • Primary sites can be configured to either

support only HTTPS roles or both HTTP and

HTTPS site roles

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity • Single Primary site can manage both

Intranet clients (over HTTP) and Internet

clients (over HTTPS)

Flexibility • Primary sites can be configured to either

support only HTTPS roles or both HTTP and

HTTPS site roles

Reliability

PR1

MP DP

MP

DP

Non PKI enabled site system

PKI enabled site system

Intranet Internet

Reduced Complexity • Single Primary site can manage both

Intranet clients (over HTTP) and Internet

clients (over HTTPS)

Flexibility • Primary sites can be configured to either

support only HTTPS roles or both HTTP and

HTTPS site roles

Reliability • Intelligent client behavior enables client to

communicate using the most secure option

available

• Tighter security enforcement by only

allowing clients with Enterprise-issued

certificates to communicate Roles

PR1

MP DP

MP

DP

Simplify Administration

Improve IT effectiveness

and efficiency.

Modern GUI

Role-based Administration

Operating System Deployment

Asset Intelligence

Client Health

• Intuitive ribbon interface

• In-console alerts

• Global search capability

• New collection membership

rules allow better filtering of

members

PXE initiated deployment

PXE initiated deployment allows client computers to request deployment over the network

PXE initiated deployment allows client computers to request deployment over the network

Multi-cast deployment to conserve network bandwidth

PXE initiated deployment allows client computers to request deployment over the network

Multi-cast deployment to conserve network bandwidth

Stand-alone media deployment

PXE initiated deployment allows client computers to request deployment over the network

Multi-cast deployment to conserve network bandwidth

Stand-alone media deployment

Pre-staged media deployment allows you to deploy an operating system to a computer that

is not fully provisioned

PXE initiated deployment allows client computers to request deployment over the network

Multi-cast deployment to conserve network bandwidth

Stand-alone media deployment

Pre-staged media deployment allows you to deploy an operating system to a computer that

is not fully provisioned

USMT 4.0 UI integration makes it easier transfer

files and user settings from one machine to

another

Software Metering &

License Reports

Asset Intelligence Service

Asset Intelligence Catalog

Real-time Application

and Hardware Intelligence

Consolidated/simplified reporting that allows you to Understand software installation profiles

Plan for hardware upgrades

Identify over or under licensing issues

Track custom apps or groups of titles

ConfigMgr Inventory

Asset Intelligence Reporting Client Health

Functionality ConfigMgr 2007 ConfigMgr 2012

Meg- WW Central System

Administrator

Louis-Software Update

Manager for France

Bob- US & France

Security Admin

• Can see & update “France” desktops

• Cannot modify security settings on “France” desktops

• Cannot see “All Systems” or “U.S.” desktops

• Can see & modify security settings on “France” and “U.S.” desktops

• Cannot update “France” or “U.S.” desktops

• Cannot see “All Systems”

Map the organizational roles of your administrators

to defined security roles

• Security organization role

• Geography

Reduces error, defines span of control for the organization

SCCM2012: Plan, Deploy and Migrate from 2007 to 2012

SCCM2012: Plan, Deploy and Migrate from 2007 to 2012

Orchestrator and Service Manager – Integration

SCCM2012: Plan, Deploy and Migrate from 2007 to 2012

Orchestrator and Service Manager – Integration

Automating Protection and Recovery with System Center

SCCM2012: Plan, Deploy and Migrate from 2007 to 2012

Orchestrator and Service Manager – Integration

Automating Protection and Recovery with System Center

Microsoft Desktop Virtualization: Choose the Right Technology