Details

Introduction  xxiii <p><b>Chapter 1 • Overview of Service Management  1</b></p> <p>Understanding IT Service Management  1</p> <p>Exploring the IT Infrastructure Library  2</p> <p>Select ITIL Functions and Processes  5</p> <p>Exploring the Microsoft Operations Framework 9</p> <p>Select MOF Service Management Functions  10</p> <p>Overview of System Center Configuration Manager 12</p> <p>Configuration Manager Features 12</p> <p>Summary 20</p> <p><b>Chapter 2 • Planning a Configuration Manager Infrastructure  21</b></p> <p>Gathering Deployment Intelligence  21</p> <p>Determining What You Need to Accomplish  22</p> <p>Describing the Network 23</p> <p>Describing Your Migration Needs 23</p> <p>Planning the Configuration Manager Environment  24</p> <p>System Requirements 24</p> <p>Extending the Active Directory Schema 37</p> <p>Hierarchies and Sites  38</p> <p>Site Boundaries and Boundary Groups 44</p> <p>Site System Roles 45</p> <p>Best Practices for Site System Design 47</p> <p>SQL Considerations  49</p> <p>Site Communications 50</p> <p>Site Security Mode  51</p> <p>Discovery of Your Resources  51</p> <p>Client Settings and Client Deployment 52</p> <p>Content Management 52</p> <p>Role-Based Administration 53</p> <p>Migration  54</p> <p>Disaster Recovery 56</p> <p>Designing Your Configuration Manager Environment 56</p> <p>Planning the Configuration Manager Hierarchy  58</p> <p>Planning Configuration Manager Site Systems 59</p> <p>Planning Configuration Manager Clients  59</p> <p>Determining How to Deploy Configuration Manager 60</p> <p>Building a Proof-of-Concept Environment 60</p> <p>The Bottom Line 64</p> <p><b>Chapter 3 • Migrating to Configuration Manager 2012  65</b></p> <p>Introducing Migration 66</p> <p>Migration Functionality in Configuration Manager 2012 67</p> <p>Source Hierarchy  67</p> <p>Data-Gathering Process 68</p> <p>Migration Job Types 68</p> <p>Objects Not Supported for Migration  79</p> <p>Distribution Point Sharing  79</p> <p>Planning a Migration 80</p> <p>Preparing Your Migration 81</p> <p>Planning Your Migration Strategy 81</p> <p>Performing the Migration 83</p> <p>Using the Side-by-Side Migration Strategy 83</p> <p>Using the Wipe-and-Load Strategy 100</p> <p>Upgrading the Configuration Manager Console 100</p> <p>Post-Migration or Installation Considerations 101</p> <p>Migrating Packages to the New Application Model 103</p> <p>What Is Package Conversion Manager?  103</p> <p>The Conversion Process 104</p> <p>The Conversion Process Steps 109</p> <p>Package Conversion Manager Best Practices 110</p> <p>Monitoring Conversion  110</p> <p>Migrating Branch Offices with the Physical-to-Virtual Migration Toolkit 111</p> <p>Requirements 112</p> <p>P2V Migration Scenario 112</p> <p>The Task Sequence  113</p> <p>Steps for Using the Configuration Manager 2012 P2V Migration Toolkit 113</p> <p>The Bottom Line 120</p> <p><b>Chapter 4 • Installation and Site Role Configuration  121</b></p> <p>Understanding Configuration Manager 2012 R2 Site Types 122</p> <p>Implementing Site Servers  125</p> <p>Software Requirements 125</p> <p>Implementing a Central Administration Site 127</p> <p>Implementing a Primary Site  136</p> <p>Implementing a Secondary Site  140</p> <p>Verifying Proper Site Installation 147</p> <p>Troubleshooting a Configuration Manager 2012 R2 Site Installation 154</p> <p>Unattended Installation 157</p> <p>Installing Site System Roles  160</p> <p>Understanding Configuration Manager 2012 R2 Site System Roles  163</p> <p>Component Server  165</p> <p>Distribution Point 165</p> <p>Management Point  178</p> <p>Site Database Server 183</p> <p>Site Server 184</p> <p>Site System 184</p> <p>System Health Validator Point  184</p> <p>State Migration Point  186</p> <p>Fallback Status Point  189</p> <p>Out of Band Service Point  191</p> <p>Reporting Services Point 193</p> <p>Application Catalog Web Service Point and Application Catalog Website Point  195</p> <p>Enrollment Point and Enrollment Proxy Point 199</p> <p>Software Update Point 203</p> <p>Endpoint Protection Point 209</p> <p>Asset Intelligence Synchronization Point 210</p> <p>The Bottom Line 212</p> <p><b>Chapter 5 • Cloud Integration 213</b></p> <p>Windows Azure Integration 214</p> <p>Management Certificate for Site Server to Distribution Point Communication 215</p> <p>Creating a Cloud Distribution Point 215</p> <p>Creating and Exporting the Management Certificate 216</p> <p>Creating the Service Certificate Template 219</p> <p>Requesting and Exporting the Service Certificate  220</p> <p>Uploading the Management Certificate to Windows Azure 222</p> <p>Creating the Cloud Distribution Point  222</p> <p>Configure Name Resolution for Cloud-based Distribution Points 225</p> <p>The Bottom Line 225</p> <p><b>Chapter 6 • Client Installation  227</b></p> <p>Creating Client Settings  227</p> <p>Supported Operating Systems  232</p> <p>Discovering Network Objects  234</p> <p>Active Directory Discovery Methods  235</p> <p>Configuring Boundaries and Boundary Groups  244</p> <p>Client Installation Methods  247</p> <p>Command-Line Properties  247</p> <p>Manually Installing the Client     252</p> <p>Client Push 253</p> <p>Group Policy  257</p> <p>Software Update 257</p> <p>Software Distribution 258</p> <p>Logon Script Installation 258</p> <p>Imaging  258</p> <p>Installing Linux/Unix Clients  259</p> <p>Installing a Mac Client 262</p> <p>Verifying Client Installation 265</p> <p>Troubleshooting a Client Installation 266</p> <p>Ensuring Client Health 266</p> <p>Automatic Client Remediation 266</p> <p>Determining Client Health 267</p> <p>Monitoring Client Status 268</p> <p>Configuring Alerts 268</p> <p>Automatic Client Upgrade 270</p> <p>The Bottom Line 271</p> <p><b>Chapter 7 • Client Health 273</b></p> <p>Understanding the Client Health Mechanism  273</p> <p>Scheduled Task  274</p> <p>CCMEval Process  279</p> <p>Client Health Evaluation: Results  283</p> <p>Configuring Client Health 284</p> <p>Monitoring: Client Status  286</p> <p>Alert: Client Health  287</p> <p>The Bottom Line 289</p> <p><b>Chapter 8 • Application Deployment  291</b></p> <p>What’s New in Application Deployment?  291</p> <p>Distribution Point Changes 293</p> <p>Applications: Application References  296</p> <p>Deployments  296</p> <p>Dependencies for Application Deployment 299</p> <p>Management Point  299</p> <p>Distribution Point 299</p> <p>Default Client Settings 300</p> <p>Elements of Application Deployment 308</p> <p>Applications 308</p> <p>Deployment Types  308</p> <p>Deployments  310</p> <p>The Application Deployment Process 310</p> <p>Create Application Wizard  311</p> <p>Creating an Application with PowerShell  314</p> <p>Options for Application Deployment: the Ribbon  314</p> <p>Exploring the Sample Application 319</p> <p>Exploring the Deployment Type  323</p> <p>Create Deployment Wizard 333</p> <p>Application Deployment—Client Experience  339</p> <p>Application Deployment—Advanced Configurations 343</p> <p>User Device Affinity 355</p> <p>Troubleshooting Application Deployment 358</p> <p>The Bottom Line 361</p> <p><b>Chapter 9 • Software Updates 363</b></p> <p>What’s New in Software Updates     364</p> <p>Prerequisites for Software Updates 366</p> <p>Elements of Software Updates 367</p> <p>Software Update Point 367</p> <p>Software Updates Agent  368</p> <p>Software Updates Metadata  368</p> <p>Software Update Files  369</p> <p>Software Update Objects 369</p> <p>Software Update Groups 371</p> <p>Deployment Templates  371</p> <p>Deployment Packages  372</p> <p>Deployments  373</p> <p>Automatic Deployment Rules 374</p> <p>System Center Updates Publisher  376</p> <p>The Software Update Process in Configuration Manager 376</p> <p>Synchronization  376</p> <p>Compliance  377</p> <p>Deployment 378</p> <p>Planning to Use Software Updates in Configuration Manager  380</p> <p>Determining What Needs to Be Accomplished 380</p> <p>Role-Based Administration 393</p> <p>System Center Updates Publisher  394</p> <p>Testing in an Isolated Lab  395</p> <p>Configuring Software Updates  396</p> <p>Configuring the Software Updates Client Agent  396</p> <p>Installing Windows Server Update Services 30 Server  398</p> <p>Installing the Windows Server Update Services 30 SP2 Administrative Console  402</p> <p>Setting Up the Software Update Point  402</p> <p>Configuring Software Updates Settings and Synchronization 414</p> <p>Synchronizing Updates with Export and Import  418</p> <p>Preparing Software Updates for Deployment 419</p> <p>Finding the Software Updates to Be Deployed  420</p> <p>Downloading Software Updates  424</p> <p>Creating a Software Update Group 427</p> <p>Deploying Software Updates with the Deploy Software Updates Wizard  427</p> <p>Using System Center Updates Publisher  436</p> <p>Installing System Center Updates Publisher  436</p> <p>Configuring System Center Updates Publisher 436</p> <p>Using System Center Updates Publisher 438</p> <p>Third-Party Updates in Configuration Manager 443</p> <p>Monitoring Software Update Deployments 445</p> <p>In-Console Monitoring 445</p> <p>Reporting 448</p> <p>The Bottom Line 450</p> <p><b>Chapter 10 • Operating System Deployment  451</b></p> <p>What’s New in Operating System Deployment  451</p> <p>Planning for OSD with Configuration Manager 2012  452</p> <p>Deployment Scenarios 452</p> <p>The Kind of Images to Deploy  452</p> <p>Operating System Deployment Components 453</p> <p>User Device Affinity 459</p> <p>Deployment Process  460</p> <p>Prepare for Operating System Deployment 460</p> <p>Build and Capture an Operating System  460</p> <p>Deploy an Operating System  460</p> <p>Preparing Configuration Manager 2012 for Operating System Deployment 461</p> <p>Configuring the Network Access Account 461</p> <p>Configuring the State Migration Point Role 462</p> <p>Configuring PXE on Distribution Points  464</p> <p>Distributing the Boot Image Package  466</p> <p>Enabling Boot Images for PXE  467</p> <p>Adding Operating System Source 468</p> <p>Developing a Task Sequence for Creating a Capture Image 471</p> <p>Task Sequences Used with PXE Boot 471</p> <p>Task Sequences Used with Media Boot 475</p> <p>Capturing an Operating System Image  477</p> <p>Building and Capturing Automatically  477</p> <p>Capturing a Reference Computer  480</p> <p>Deploying an Image 482</p> <p>Adding a Captured Image 482</p> <p>Distributing and Deploying the Image 483</p> <p>Developing a Task Sequence for Deployment  483</p> <p>Deploying the Task Sequence 487</p> <p>Deploying the Operating System on Bare Metal 492</p> <p>Importing Computer Information 492</p> <p>Creating a Task Sequence for the Bare-Metal OSD 493</p> <p>Deploying the Bare-Metal Task Sequence  494</p> <p>Installing Device Drivers into OSD 497</p> <p>Using User Device Affinity 500</p> <p>Manually Configure a Primary User for a Device 500</p> <p>Manually Configure a Primary Device for a User  501</p> <p>Configure a Site to Automatically Create User Device Affinities 501</p> <p>Import User Device Affinities 502</p> <p>Enable Users to Configure Their Primary Device 503</p> <p>Pre-deploy User Applications 503</p> <p>Deploying Windows To Go  504</p> <p>Creating a Prestaged Media for the Task Sequence  504</p> <p>Creating a Windows To Go Creator Package 506</p> <p>Update the Task Sequence to Enable BitLocker 507</p> <p>Running the Windows To Go Package  509</p> <p>Microsoft Deployment Toolkit 2013  510</p> <p>Installing Microsoft Deployment Toolkit 2013 510</p> <p>Integrating the Deployment Toolkit 511</p> <p>Creating a New Boot Image  512</p> <p>Creating a Deployment Toolkit Task Sequence  513</p> <p>Using a Replace Scenario 515</p> <p>Deploying a Virtual Hard Drive  516</p> <p>Creating a VHD Task Sequence  516</p> <p>Creating a Virtual Hard Disk 517</p> <p>Managing the Virtual Hard Disk 519</p> <p>Servicing Your Operating System Images and VHDs Offline  520</p> <p>Support for Legacy Boot Images  522</p> <p>Maintaining the User State 524</p> <p>The Bottom Line 525</p> <p><b>Chapter 11 • Inventory and Software Metering 527</b></p> <p>Inventory in Configuration Manager 2012 527</p> <p>Collecting Hardware Inventory 528</p> <p>Collecting Software Inventory  533</p> <p>Using Resource Explorer to View Inventory  535</p> <p>Scheduling Inventory 536</p> <p>Configuring Inventory 537</p> <p>Configuring Software Inventory for a Configuration Manager Site  542</p> <p>Troubleshooting Inventory  550</p> <p>Software Metering in Configuration Manager 2012 553</p> <p>Overview of Software Metering 553</p> <p>Configuring Software Metering 553</p> <p>The Bottom Line 562</p> <p><b>Chapter 12 • Asset Intelligence  563</b></p> <p>Requirements for Asset Intelligence 563</p> <p>Client Agent Prerequisites 564</p> <p>Maintenance Tasks 564</p> <p>Windows Ekvent Log Settings  565</p> <p>Elements of Asset Intelligence 566</p> <p>Asset Intelligence Catalog 566</p> <p>Asset Intelligence Validation States 568</p> <p>Asset Intelligence Synchronization Point 569</p> <p>The Asset Intelligence Home Page 569</p> <p>Asset Intelligence Reports 571</p> <p>Configuring Asset Intelligence  575</p> <p>Enabling Asset Intelligence 575</p> <p>Import Software License into Asset Intelligence  578</p> <p>Importing Software License Information 579</p> <p>Creating the Microsoft Volume License Statement 579</p> <p>Creating the General License Statement 580</p> <p>The Bottom Line 581</p> <p><b>Chapter 13 • Reporting  583</b></p> <p>Installing SQL Server Reporting Services  584</p> <p>Considerations for Installing SQL Server Reporting Services  585</p> <p>Installation of the Reporting Services Site System  586</p> <p>Default Reports 590</p> <p>Running a Report 593</p> <p>Viewing Available Reports  593</p> <p>Running a Report from the Administrative Console 593</p> <p>Running a Report from Report Manager  594</p> <p>Working with Reporting Security 596</p> <p>Permissions Required to Run Reports  596</p> <p>Managing Reports  601</p> <p>Working with Subscriptions 609</p> <p>Creating Reports  611</p> <p>Basic SQL Commands  612</p> <p>Report Models 613</p> <p>Creating a Report Using Report Builder  613</p> <p>Creating a Report Using Business Intelligence Development Studio  616</p> <p>Moving Reports 619</p> <p>Linked Reports  619</p> <p>Importing and Exporting Reports 620</p> <p>Importing Reports  620</p> <p>Exporting Reports 621</p> <p>The Bottom Line 621</p> <p><b>Chapter 14 • Compliance Settings  623</b></p> <p>Overview of Compliance Settings 623</p> <p>What’s New in Configuration Manager 2012 R2?  624</p> <p>What Can You Do with Compliance Settings? 625</p> <p>Configuration Items  625</p> <p>Configuring Compliance Settings Client Settings  627</p> <p>Creating Configuration Items  628</p> <p>Name, Description, and Category  629</p> <p>Choosing a Detection Method  631</p> <p>Creating and Validating a Setting  632</p> <p>Building a Configuration Baseline  639</p> <p>Creating the Initial Baseline  639</p> <p>Baseline Rules  640</p> <p>Assigning the Configuration Baseline to Clients  643</p> <p>Additional Configuration Baseline Options 644</p> <p>Client Validation of Compliance Baseline Rules  644</p> <p>Compliance Settings Reporting 646</p> <p>Importing Configuration Packs 647</p> <p>User Data and Profiles 650</p> <p>Remote Connection Profiles 654</p> <p>Company Resource Access 656</p> <p>Certificate Profiles 656</p> <p>VPN Profiles  660</p> <p>Wi-Fi Profiles 665</p> <p>The Bottom Line 668</p> <p><b>Chapter 15 • System Center Endpoint Protection  669</b></p> <p>Differences between FEP and SCEP   669</p> <p>Additional Benefits of SCEP 670</p> <p>Deployment 670</p> <p>Protection 670</p> <p>Monitoring 672</p> <p>Security 672</p> <p>Endpoint Protection Site System Role 672</p> <p>Endpoint Protection Client Agent 675</p> <p>Endpoint Protection Policies  679</p> <p>Antimalware Policy  679</p> <p>Windows Firewall Policy 685</p> <p>Assigning Policy 687</p> <p>Definition Files 687</p> <p>Alerts  690</p> <p>Reporting 693</p> <p>Client Notifications  694</p> <p>The Bottom Line 699</p> <p><b>Chapter 16 • Mobile Device Management  701</b></p> <p>What’s New in Mobile Device Management 701</p> <p>Mobile Device Management Options 702</p> <p>Lite Management  705</p> <p>Depth Management via Client  715</p> <p>Depth Management via Windows Intune  728</p> <p>Managing Mobile Devices  742</p> <p>Device Settings Management 742</p> <p>Wipe vs Selective Wipe 769</p> <p>Troubleshooting 771</p> <p>The Bottom Line 772</p> <p><b>Chapter 17 • Role-Based Administration  773</b></p> <p>Overview of Role-Based Administration 773</p> <p>Using Security Roles and Security Scopes   774</p> <p>Managing with Flat Hierarchies  774</p> <p>Security Roles 774</p> <p>Security Scopes 778</p> <p>Creating a Custom Security Scope 779</p> <p>Assigning Resources to a Security Scope 781</p> <p>Viewing Security Scope Objects 783</p> <p>Collections 784</p> <p>Using Collections  784</p> <p>Understanding the Default Collections 785</p> <p>Administrative Users  785</p> <p>RBA Viewer 793</p> <p>The Bottom Line 795</p> <p><b>Chapter 18 • Disaster Recovery  797</b></p> <p>Planning for Disaster Recovery 797</p> <p>What Is Not Included in the Backup 798</p> <p>Backing Up Configuration Manager 801</p> <p>Backup Considerations for the Central Administration Site 801</p> <p>Copying Site Backups to Another Location  802</p> <p>Archiving the Backup Snapshot to Another Server with AfterBackupbat 802</p> <p>Windows Application Log Entries Created by the Backup Process 804</p> <p>Configuring the Backup ConfigMgr Site Server Maintenance Task 805</p> <p>Restoring Configuration Manager  807</p> <p>Understanding the Effects of a Site Failure  808</p> <p>Recovering a Configuration Manager Site  809</p> <p>Recovering Configuration Manager  811</p> <p>How to Start a Recovery Process  811</p> <p>Recovering a Central Administration Site  811</p> <p>Recovering a Primary Child Site  817</p> <p>Recovering a Primary Standalone Site  817</p> <p>Recovering a Secondary Site 818</p> <p>Recovery Scenarios for Multisite Environments 818</p> <p>Unattended Recovery of a Site 818</p> <p>Other Site Maintenance Options 819</p> <p>The Hierarchy Maintenance Tool  819</p> <p>Post-Recovery Tasks 821</p> <p>The Bottom Line 824</p> <p><b>Chapter 19 • Troubleshooting 827</b></p> <p>Creating the Maintenance Plan 827</p> <p>Using Troubleshooting Tools         832</p> <p>Log Files 832</p> <p>Status Messages 837</p> <p>Troubleshooting Configuration Manager Deployment 845</p> <p>Troubleshooting Configuration Manager Database Replication  845</p> <p>Data Types  847</p> <p>DRS Initialization 848</p> <p>Additional Tools 852</p> <p>Server-Based Tools  852</p> <p>Client-Based Tools  856</p> <p>The Bottom Line 860</p> <p><b>Appendix • The Bottom Line 861</b></p> <p>Chapter 2: Planning a Configuration Manager Infrastructure 861</p> <p>Chapter 3: Migrating to Configuration Manager 2012 862</p> <p>Chapter 4: Installation and Site Role Configuration 865</p> <p>Chapter 5: Cloud Integration  867</p> <p>Chapter 6: Client Installation 867</p> <p>Chapter 7: Client Health  869</p> <p>Chapter 8: Application Deployment   869</p> <p>Chapter 9: Software Updates  870</p> <p>Chapter 10: Operating System Deployment 871</p> <p>Chapter 11: Inventory and Software Metering  872</p> <p>Chapter 12: Asset Intelligence  873</p> <p>Chapter 13: Reporting  874</p> <p>Chapter 14: Compliance Settings 875</p> <p>Chapter 15: System Center Endpoint Protection 877</p> <p>Chapter 16: Mobile Device Management  878</p> <p>Chapter 17: Role-Based Administration 879</p> <p>Chapter 18: Disaster Recovery 880</p> <p>Chapter 19: Troubleshooting  881</p> <p>Index 883</p>

<p><b>Santos Martinez</b>, Senior Premier Field Engineer for Microsoft, has been working on ConfigMgr for the past 10 years. He was awarded MVP for ConfigMgr and Databases prior to joining Microsoft. <b>Peter Daalmans</b> is a senior technical consultant at IT-Concern, a Microsoft Gold Certified Partner in the Netherlands. He is an MVP in Enterprise Client Management (ConfigMgr and Windows Intune). Read his blog at ConfigMgrBlog.com. <b>Brett Bennett</b> is a Senior Premier Field Engineer for Microsoft and has been working with SMS/ConfigMgr since SMS Version 1.0.</p>

<p><b>Sharpen Your ConfigMgr 2012 R2 Skills with this Updated Guide</b></p> <p>Completely updated for System Center 2012 R2 Configuration Manager, this comprehensive book provides intermediate and advanced coverage of all aspects of the product, including planning and installation, migrating from previous versions of Configuration Manager, deploying software and operating systems, security, monitoring and troubleshooting, and automating and customizing. <i>Mastering System Center 2012 R2 Configuration Manager</i> uses real-world scenarios to anchor the conceptual explanations in practical application in order to ensure that readers gain a technical and visual understanding of the latest features and functionality in ConfigMgr 2012 R2.</p> <p>Coverage includes:</p> <ul> <li>Planning and installing ConfigMgr 2012 R2</li> <li>Implementing site servers</li> <li>Migrating from previous versions of Configuration Manager</li> <li>Deploying software and operating systems</li> <li>Enabling and managing security protocols</li> <li>Automating and customizing ConfigMgr 2012 R2</li> <li>Aligning with updates, including Windows 8.1 and Windows Server 2012 R2</li> <li>Managing the Bring Your Own Device (BYOD) phenomenon</li> <li>Handling virtual machines</li> <li>Integrating Windows Intune with ConfigMgr for full MDM capabilities</li> </ul> <p>Install and Understand Site System Roles</p> <p>Create Cloud Distribution Points with Windows Azure</p> <p>Configure Site Assignments and Boundaries with Boundary Groups</p> <p>Understand and Manage the Client Health Mechanism</p> <p>Master the New Features in Application Deployment</p>

US