System Center Configuration Manager Current Branch Unleashed

Title Page......Page 3
Copyright Page......Page 4
Contents at a Glance......Page 7
Table of Contents......Page 9
About This E-Book......Page 2
About the Author......Page 31
About the Contributing Authors......Page 33
Dedication......Page 34
Acknowledgments......Page 35
Foreword......Page 36
Reader Services......Page 38
Part I: Configuration Manager Overview and Concepts......Page 39
Part II: Planning and Installation......Page 40
Part V: Appendixes......Page 41
Disclaimers and Fine Print......Page 42
Part I Configuration Manager Overview and Concepts......Page 43
1 Configuration Management Basics......Page 44
10 Reasons to Use Configuration Manager......Page 46
The Evolution of Systems Management......Page 47
Hurdles in the Distributed Enterprise......Page 48
Automation Challenges......Page 49
Lack of Security and Control......Page 50
Timeliness of Asset Data......Page 51
Proliferation of Cloud Computing......Page 52
The Bottom Line......Page 53
Systems Management Defined......Page 54
Microsoft’s Strategy for Systems Management......Page 55
Microsoft’s Dynamic Systems Initiative (DSI)......Page 56
ITIL and MOF......Page 60
Judging Your IT Organization’s Maturity......Page 68
Bridging the Systems Management Gap......Page 69
The Value Proposition of Configuration Manager......Page 70
Summary......Page 71
A Journey Through Time: SMS to ConfigMgr Current Branch......Page 73
Systems Management Server 2.0......Page 74
Systems Management Server 2003......Page 75
System Center Configuration Manager 2007......Page 77
System Center 2012 and 2012 R2 Configuration Manager......Page 79
Configuration Manager Site......Page 82
Site Hierarchy......Page 83
Central Administration Site......Page 84
Secondary Site......Page 85
Site Systems......Page 86
Senders......Page 88
Managing Content (File) Replication......Page 89
Discovering Resources......Page 90
Configuration Manager Console......Page 92
Collections for Targeting Users and Devices......Page 94
Using Alerts to Respond to Problems Quickly......Page 95
Using Packages......Page 96
Managing Applications......Page 97
Content Management......Page 100
Software Update Management......Page 102
Compliance Settings......Page 103
Using BranchCache and Peer Cache to Reduce WAN Consumption......Page 104
What’s New in Baseline Version 1511......Page 105
What’s New in Version 1602......Page 109
What’s New in Version 1606......Page 110
What’s New in Version 1610......Page 114
What’s New in Baseline Version 1702......Page 116
What’s New in Baseline Version 1706......Page 119
What’s New in Version 1710......Page 121
Deprecated Features, Software, and Operating Systems......Page 123
Summary......Page 124
3 Looking Inside Configuration Manager......Page 125
Understanding the ConfigMgr Architecture......Page 126
External Components to ConfigMgr......Page 127
ConfigMgr Communication Methods......Page 128
ConfigMgr’s Internal Components......Page 131
A WMI Primer......Page 134
Understanding the WMI Architecture......Page 135
Inside the WMI Object Model......Page 141
Managing WMI......Page 144
Configuration Manager and WMI......Page 151
WMI on Configuration Manager Servers......Page 152
The Configuration Manager Client WMI Namespace......Page 157
Obtaining Hardware Inventory Through WMI......Page 159
Automating the ConfigMgr Client via WMI......Page 163
Interaction Between WMI and PowerShell......Page 167
ConfigMgr Tables and Views......Page 169
Using SQL Server Management Studio......Page 170
Exploring the ConfigMgr Database......Page 171
Using Status Messages......Page 175
Site-to-Site Replication......Page 176
About Configuration Manager Database Replication......Page 177
Active Directory Integration with ConfigMgr......Page 180
Implementing Schema Extensions......Page 181
Tools for Extending a Schema......Page 182
Extending a Schema......Page 184
Summary......Page 185
Part II Planning and Installation......Page 186
Developing the Solution Architecture......Page 187
Discovering Business Requirements......Page 189
Discovering IT Requirements......Page 190
Assessing Your Environment......Page 192
ADDS Considerations......Page 194
Active Directory Certificate Services Considerations......Page 201
Hierarchy Planning in ConfigMgr......Page 204
About Configuration Manager Sites......Page 205
Planning Your Hierarchy Structure......Page 209
Planning Boundaries and Boundary Groups......Page 210
Site Servers and Site Systems Planning......Page 214
Capacity Planning for ConfigMgr Sites......Page 218
Meeting Availability Requirements......Page 223
Planning for Content Management......Page 224
Planning for Client Deployment and Settings......Page 226
Planning Client Discovery and Installation......Page 227
Planning Your Client Settings......Page 233
Defining the User Experience......Page 239
Planning for Internet-Based Clients......Page 241
Planning for Mobile Device Management......Page 247
Planning for Continuous Updates......Page 248
Servicing and Updates in Current Branch......Page 249
Testing and Release Management of Current Branch Releases......Page 252
Planning for Restorability and Recoverability......Page 254
Availability, Restorability, and Recoverability......Page 255
Determining Your Recovery Time and Point Objectives......Page 256
Planning for Backup......Page 257
Summary......Page 258
5 Network Design......Page 260
Configuration Manager and the Network......Page 261
Network Considerations for Server Placement......Page 263
Using Distribution Points and Secondary Sites......Page 264
Understanding Data Flows......Page 265
Communication Going to the Client......Page 266
Communication from the Client......Page 267
Designing Intrasite Communication......Page 268
Using RPC Communication......Page 269
Using SMB Communication......Page 270
Using Intersite Communication......Page 272
File-Based Replication in ConfigMgr......Page 273
Using SQL Server–Based Replication......Page 279
Designing Client Communication......Page 283
Using the Service Location......Page 285
About Background Intelligent Transfer Service......Page 287
BITS Versions for ConfigMgr Clients......Page 288
Understanding BranchCache......Page 292
Understanding Peer Cache......Page 296
Using Boundaries and Boundary Groups......Page 303
About Client Communication Security......Page 307
Troubleshooting Network-Related Issues......Page 308
Troubleshooting Basic Network Connectivity......Page 309
Testing DNS Resolution......Page 311
Troubleshooting Routers and Firewall Ports......Page 313
Congested or Slow Network Links......Page 315
Testing MPs and DPs......Page 316
Summary......Page 317
6 Installing and Updating System Center Configuration Manager......Page 319
Required Windows and Hardware Components......Page 320
SQL Server Requirements......Page 323
Windows Server Update Services......Page 325
Using the Prerequisite Checker......Page 326
Performing Site Installation Tasks......Page 330
Installing a Central Administration Site......Page 332
Installing a Primary Site......Page 337
Installing a Secondary Site......Page 341
Installation Validation......Page 346
Initial ConfigMgr Configurations......Page 347
Connecting ConfigMgr to Cloud Services......Page 352
Installing Optional Site Systems......Page 356
Troubleshooting Site Installation......Page 360
Updating Configuration Manager......Page 362
Scheduling Updates......Page 365
Using CD.Latest......Page 366
Summary......Page 367
7 Upgrading and Migrating to ConfigMgr Current Branch......Page 368
Deciding Whether to Upgrade or Migrate to Current Branch......Page 369
Preparing for Upgrade......Page 370
Performing the Upgrade......Page 372
Migrating to ConfigMgr Current Branch......Page 378
Migration, Not an Upgrade......Page 379
Planning the Migration......Page 380
Performing Pre-Migration Activities......Page 384
Performing the Migration......Page 387
Configuring the Active Source Site......Page 389
Performing Migration Jobs......Page 391
Migrating Custom Reports......Page 398
Client Migration and Methods......Page 399
Summary......Page 401
Part III Configuration Manager Operations......Page 403
8 Using the Configuration Manager Console......Page 404
Configuration Manager Console Panes......Page 406
Configuration Manager Console Bars......Page 407
Using the Backstage......Page 408
Using Assets and Compliance......Page 410
Functions of the Software Library......Page 411
Capabilities of the Monitoring Workspace......Page 412
Managing ConfigMgr Through the Administration Workspace......Page 414
Console Placement......Page 415
Installation Prerequisites......Page 416
Installation Using the Configuration Manager Setup Wizard......Page 417
Unattended Console Installation......Page 418
How Content Is Displayed......Page 419
Connecting to a Site......Page 420
Personalizing the Console......Page 421
The In-Console Alert Experience......Page 422
Viewing Alerts......Page 423
Managing Alerts......Page 424
Configuring Alerts......Page 425
Subscribing to Alerts......Page 426
Configuration Manager Service Manager......Page 427
Initiating the Configuration Manager Service Manager Console......Page 428
Operating the Configuration Manager Service Manager Console......Page 429
Using PowerShell with ConfigMgr......Page 431
Security Considerations......Page 432
DCOM Permissions......Page 433
WMI Permissions......Page 434
Console Logging......Page 436
Common Problems......Page 439
Summary......Page 440
9 Client Management......Page 442
Agent Hardware Dependencies......Page 443
Agent Software Dependencies......Page 444
Manually Installing on Windows Computers......Page 445
Manually Installing on Mac Computers......Page 446
Manually Installing on UNIX and Linux Computers......Page 448
Using Logon Scripts to Install on Windows Devices......Page 449
Installing Using Software Update Point (SUP) for Windows Devices......Page 450
Installing and Assigning Windows 10 Clients Using Azure AD for Authentication......Page 451
Approving Clients......Page 453
Pushing the Client......Page 455
Automatically Upgrading the Client on Windows......Page 461
Finding Potential ConfigMgr Clients in Your Network......Page 466
Using Active Directory Forest Discovery......Page 467
Using Active Directory Group Discovery......Page 469
Using Active Directory User Discovery......Page 471
Using Active Directory System Discovery......Page 472
Using Heartbeat Discovery......Page 475
Using Network Discovery......Page 476
Manually Importing Clients into ConfigMgr......Page 478
What to Know About Client Agent Assignment......Page 480
Monitoring Client Agent Health and Activity Status......Page 483
Understanding Client Settings......Page 485
Client Settings Priority......Page 487
Configurable Client Settings......Page 488
Using Remote Control......Page 505
Using the Resource Explorer......Page 507
Using Wake on LAN......Page 508
Configuring Power Management......Page 512
Summary......Page 514
10 Managing Compliance......Page 515
Configuring Compliance Settings......Page 517
Using Configuration Items......Page 519
Using Configuration Baselines......Page 521
Using User Data and Profiles......Page 523
Using Remote Connection Profiles......Page 524
Creating Configuration Items......Page 525
Devices with a ConfigMgr Client......Page 527
Using Devices Without a ConfigMgr Client......Page 548
Creating Baselines......Page 552
Deploying Baselines......Page 555
Developing a Compliance Strategy......Page 557
Obtaining On-Demand Results......Page 558
Correcting Issues Using Remediation......Page 560
Using Reporting to Track Compliance......Page 561
Troubleshooting Settings Management......Page 563
Summary......Page 565
11 Creating and Managing Applications......Page 566
ConfigMgr Applications Overview......Page 567
Using the Requirement Rule Component in a DT......Page 571
User Device Affinity......Page 572
Creating a Windows Installer (.msi)-Based Application......Page 575
Viewing Application Properties......Page 578
Creating Detection Methods......Page 590
Creating Detection Methods for Windows Installer Applications......Page 591
Adding Other Detection Methods......Page 593
Using Custom Script Detection Methods......Page 596
Device Global Conditions......Page 599
Creating Custom Global Conditions......Page 601
About Mobile Application Management Policies......Page 607
Creating Application Management Policies......Page 608
App Configuration Policies......Page 612
Apple Volume License Purchasing......Page 615
More About Managing Applications......Page 616
Adding Application Dependencies......Page 617
Managing Revision History......Page 619
Exporting and Importing Applications......Page 621
Superseding Applications......Page 622
Retiring and Deleting Applications......Page 623
Best Practices for Working with Applications......Page 624
Deploying PowerShell Scripts......Page 629
Creating, Editing, Approving, and Denying Scripts......Page 630
Summary......Page 631
12 Creating and Using Deployment Types......Page 632
Creating a Windows Installer–Based Deployment Type......Page 634
Creating a Windows Installer Through MDM Deployment Type......Page 637
Creating a Microsoft App-V 4.6 Deployment Type......Page 639
Creating a Microsoft App-V 5 Deployment Type......Page 642
Creating an App-V Virtual Environment......Page 643
Using Sideloading to Distribute Applications......Page 646
Using Deeplinking with DTs to Distribute Applications......Page 662
Creating a Script-Based Deployment Type......Page 668
Creating Deployment Types for Mac OS......Page 670
Creating Web Applications......Page 673
Synchronizing Apps from the Windows Store for Business......Page 675
Summary......Page 676
13 Creating and Managing Packages and Programs......Page 677
Understanding Packages and Programs......Page 678
Creating a 7-Zip Package......Page 680
Advantages of Using an MSI File......Page 683
Using the Package Properties Data Source Tab......Page 684
Using the Package Properties Data Access Tab......Page 686
Using the Package Properties Distribution Settings Tab......Page 687
Using the Package Properties Content Locations Tab......Page 689
Using the Program Properties General Tab......Page 690
Using the Program Properties Requirements Tab......Page 693
Using the Program Properties Environment Tab......Page 696
Using the Program Properties Advanced Tab......Page 699
Program Properties Windows Installer Tab......Page 702
Program Properties OpsMgr Maintenance Mode Tab......Page 703
Creating a Package Using the New Package Wizard......Page 705
Creating Packages for UNIX and Linux Systems......Page 709
Summary......Page 714
14 Distributing and Deploying Applications and Packages......Page 715
Creating and Managing Collections......Page 716
Creating a Collection......Page 717
About Direct Rules......Page 718
Using Query Rules......Page 719
Updating Collections......Page 721
Modifying Collection Properties......Page 723
Using Maintenance Windows......Page 724
Installing Distribution Points......Page 726
Using and Configuring Cloud-Based Distribution Points......Page 728
Distributing Content......Page 729
Configuring Network Bandwidth for Content Distribution......Page 733
Monitoring Distribution Point Status......Page 735
Using BranchCache and Peer Cache......Page 739
Using Content......Page 740
Troubleshooting Content Distribution......Page 747
Deploying Applications and Packages......Page 748
Dealing with High-Risk Deployments......Page 753
Understanding the End-User Experience......Page 758
Using the Old Software Center......Page 759
Using the Application Catalog......Page 761
Using the New Software Center......Page 765
Notifications and Options for Required Deployments......Page 767
Monitoring and Troubleshooting......Page 771
Summary......Page 773
15 Managing Software Updates......Page 775
What’s New with Software Updates in ConfigMgr Current Branch......Page 776
Creating Your Update Design......Page 778
Capacity Planning......Page 780
Planning Your Software Update Point Infrastructure......Page 781
Using Windows Software Update Services......Page 784
Configuring Components......Page 788
Configuring Server-Side Components......Page 789
Configuring Client-Side Components......Page 802
Creating and Deploying Updates......Page 809
Using the All Software Updates Node......Page 810
Using Software Update Groups......Page 813
Using Deployment Packages......Page 815
Creating the Deployment......Page 819
Using Automatic Deployment Rules......Page 829
Understanding Windows 10 Servicing......Page 834
Servicing Branches in ConfigMgr......Page 835
About Deployment Rings......Page 836
About Windows 10 Servicing Prerequisites......Page 838
Using the Windows 10 Servicing Dashboard......Page 841
Servicing Plans......Page 843
Client Experience......Page 847
Compliance Scanning......Page 848
Using Notifications......Page 849
Using Software Center......Page 852
Installing Updates and Reporting Status......Page 853
Troubleshooting Software Updates......Page 855
Monitoring the Updates Process......Page 856
WSUS and SUP in Software Updates......Page 857
Downloading Updates......Page 858
Troubleshooting Client Scanning and Update Deployment......Page 859
Troubleshooting Software Updates......Page 860
Using the System Center Update Publisher......Page 861
Installing SCUP......Page 862
Configuring SCUP......Page 864
Using SCUP Catalogs......Page 871
Using SCUP Publications......Page 873
SCUP Updates......Page 875
Using SCUP Custom Updates......Page 877
Summary......Page 882
16 Integrating Intune Hybrid into Your Configuration Manager Environment......Page 884
Hybrid Versus Standalone......Page 885
Microsoft’s Enterprise Mobility + Security......Page 886
Purchasing Microsoft Intune......Page 887
Using the Management Portals......Page 888
Using Intune Storage......Page 889
Federated Identity......Page 890
Adding and Verifying a Custom Domain......Page 891
Creating DNS Records......Page 893
Adding a User Principal Name......Page 894
Synchronizing Active Directory......Page 896
Implementing an Alternate Login ID (Optional)......Page 902
Integrating Intune with Configuration Manager......Page 903
Configuring User Discovery......Page 904
Adding an Intune Subscription......Page 905
Adding the Service Connection Point......Page 914
Removing an Intune Subscription......Page 915
Viewing Site and Component Status......Page 916
Using Log Files......Page 918
Troubleshooting Directory Synchronization......Page 920
Utilizing Microsoft Support for Intune......Page 921
Using the Configuration Manager Hybrid Diagnostics Tool......Page 922
Summary......Page 923
17 Managing Mobile Devices......Page 925
Enabling Devices for Management......Page 926
Enabling Android Devices for Management......Page 927
Enabling iOS Devices for Management......Page 930
Enabling Windows Phone Devices for Management......Page 935
Using Windows Computers as Mobile Devices......Page 939
Managing Company Devices......Page 942
Device Enrollment Program (iOS Only)......Page 943
Apple Configurator (iOS Only)......Page 944
Device Enrollment Manager......Page 945
Retiring and Wiping Mobile Devices......Page 946
Resetting Passcodes......Page 949
Accessing Activation Lock Bypass (iOS Only)......Page 950
Creating Configuration Items and Baselines......Page 951
Using Custom Configuration Items......Page 955
About Device Policy Refresh Intervals......Page 957
Inventorying Mobile Devices......Page 958
Deploying Apps......Page 961
Leveraging Mobile Application Management (MAM)......Page 963
Creating Mobile Device Collections......Page 965
Using the Company Resource Access Workspace......Page 967
Using Certificate Profiles......Page 968
Using Email Profiles......Page 969
Using Wi-Fi Profiles......Page 971
On-Premise Mobile Device Management......Page 972
On-Premise MDM Configuration......Page 973
On-Premise MDM Client Configuration......Page 975
Summary......Page 976
18 Conditional Access in Configuration Manager......Page 977
Understanding Modern Authentication......Page 978
Implementing Configuration Manager Policies......Page 980
Supported Compliance Policy Settings......Page 981
Creating a Compliance Policy......Page 982
Deploying a Compliance Policy......Page 987
Enabling Conditional Access for Exchange Online......Page 988
Requirements for Exchange Online......Page 989
Enabling Conditional Access for Exchange Online......Page 991
Exchange Online End-User Experience......Page 994
Enabling Conditional Access for SharePoint Online......Page 995
Requirements for SharePoint Online......Page 996
Enabling Conditional Access for SharePoint Online......Page 998
The SharePoint Online End-User Experience......Page 999
Enabling Conditional Access for Skype for Business Online......Page 1000
Requirements for Skype for Business Online......Page 1001
Configuring Conditional Access for Skype for Business Online......Page 1003
Enabling Conditional Access for Exchange On-Premises......Page 1005
Requirements for Exchange On-Premises......Page 1006
Implementing the Exchange Server Connector......Page 1007
Configuring Conditional Access for Exchange On-Premises......Page 1009
The Exchange On-Premises End User Experience......Page 1012
Monitoring Conditional Access Compliance......Page 1013
Troubleshooting Conditional Access......Page 1015
Summary......Page 1016
19 Endpoint Protection......Page 1017
Using Antimalware as a Service......Page 1018
Understanding Microsoft’s Core Protection Technologies......Page 1020
Understanding Windows Antimalware Capabilities......Page 1023
Using Windows Defender Offline......Page 1026
Microsoft’s Approach to Antimalware......Page 1027
Prerequisites for Endpoint Protection......Page 1028
Gathering Requirements for Endpoint Protection......Page 1029
Determining Definition Update Sources......Page 1030
Using System Center Endpoint Protection with Windows 10......Page 1031
Deployment Best Practices......Page 1032
Deploying and Configuring Endpoint Protection......Page 1033
Installing the Endpoint Protection Point Role......Page 1034
Delivery of Definition Updates......Page 1038
Working with Antimalware Policies......Page 1053
Installing the Endpoint Protection Client......Page 1056
Monitoring and Reporting in Endpoint Protection......Page 1059
Operational Status of Endpoint Protection Clients......Page 1060
Reports Available for Endpoint Protection......Page 1065
Integrating Report Data with Other Systems......Page 1066
Endpoint Protection Actions and Alerts......Page 1067
Overview of Endpoint Protection Alerts......Page 1068
Enabling Alerts for a Collection......Page 1071
On-Demand Actions Related to Endpoint Protection......Page 1072
Scripting Endpoint Protection Actions......Page 1074
Windows Defender Advanced Threat Protection......Page 1076
Prerequisites for Windows Defender ATP......Page 1077
Configuring Windows Defender ATP Using ConfigMgr......Page 1078
Summary......Page 1079
20 Configuration Manager Queries......Page 1081
Introducing the Queries Node......Page 1082
Organizing the Query List Pane......Page 1083
Viewing Queries and Query Results......Page 1086
Building Queries Using the WMI Query Language......Page 1087
Understanding Query Objects, Classes, and Attributes......Page 1088
Using the ConfigMgr Query Builder......Page 1091
Filtering Queries with Criterion Types......Page 1096
Using Relational and Logical Operators......Page 1099
Specifying or Selecting Values......Page 1102
Writing Advanced Queries......Page 1104
Limitations of Extended WQL in ConfigMgr......Page 1105
Utilizing the Date and Time Functions in WQL Queries......Page 1106
Examples of Advanced Queries......Page 1107
Converting WQL to SQL......Page 1111
Understanding Relationships, Operations, and Joins......Page 1112
Querying Discovery Data......Page 1116
Querying Inventory Data......Page 1117
Importing and Exporting Queries between Sites......Page 1119
Creating a Collection Based on Query Results......Page 1122
Using Status Message Queries for In-Depth Analysis......Page 1123
Viewing Status Messages......Page 1124
Creating Status Message Queries......Page 1126
Summary......Page 1128
21 Configuration Manager Reporting......Page 1129
Using the ConfigMgr Reporting Point Role......Page 1130
Understanding Configuration Manager Data......Page 1132
Using Hardware Inventory Classes......Page 1133
Using Software Update Inventory Classes......Page 1135
About Status Message Classes......Page 1136
Using Collection Data Classes......Page 1137
Introducing SQL Server Management Studio......Page 1138
Basic SQL Sections in a Query......Page 1139
Using Operators......Page 1141
About Report Series......Page 1142
Creating Consistent Reports......Page 1143
Building a Basic Report......Page 1144
Tools for Creating Reports......Page 1145
Getting Started with SSDT-BI......Page 1147
Creating a Data Source......Page 1149
Creating a Dataset......Page 1150
Accessing the Toolbox......Page 1151
Adding a Table to a Report......Page 1153
Previewing a Report......Page 1155
Publishing a Report......Page 1156
Advanced Reporting Concepts......Page 1163
Summary......Page 1164
22 Operating System Deployment......Page 1166
What’s New with OSD in Current Branch......Page 1167
OSD Deployment Scenarios......Page 1169
Incorporating the Windows ADK......Page 1171
Planning for OSD......Page 1173
Using the Console......Page 1175
Using Drivers and Driver Packages......Page 1176
Using Operating System Images......Page 1183
Using Operating System Upgrade Packages......Page 1184
Using Boot Images......Page 1186
Using Task Sequences......Page 1190
Using Tasks and Variables in a Task Sequence......Page 1197
Using Tasks......Page 1198
Using Variables......Page 1200
Using Distribution Points......Page 1202
Using State Migration Points......Page 1211
Distributing the Content......Page 1214
Deploying the Task Sequence......Page 1216
Creating the TS Media......Page 1223
Creating Stand-alone Media......Page 1224
Creating Bootable Media......Page 1227
Creating Prestaged Media......Page 1230
Monitoring OSD......Page 1232
Boot Image Command-Line Support......Page 1234
Using OSD Log Files......Page 1235
Understanding the PXE Boot Process......Page 1240
Updating Your OS Images......Page 1242
Summary......Page 1244
Part IV Configuration Manager Administration......Page 1246
23 Security and Delegation in Configuration Manager......Page 1247
Security Planning Overview......Page 1248
A Security Primer......Page 1251
Designing Your Hierarchy for Security......Page 1254
Planning for Secure Administration......Page 1255
ConfigMgr Security Solutions......Page 1256
Managing Administrative Users......Page 1258
Creating Custom Roles......Page 1261
Using Security Scopes......Page 1263
Associating Security Scopes and Collections with Individual Roles......Page 1266
Using Administrative Security Reports......Page 1268
Securing Access at the Active Directory Level......Page 1271
Securing Site System Local Administration......Page 1272
Securing Access at the Database Level......Page 1273
Auditing ConfigMgr Administrative Actions......Page 1274
Securing Site Systems......Page 1277
About ConfigMgr Cryptographic Controls......Page 1284
Securing Network Communications......Page 1285
ConfigMgr Content Security......Page 1288
Securing ConfigMgr Accounts......Page 1290
Summary......Page 1296
24 Backup, Recovery, and Maintenance......Page 1297
Implementing Configuration Manager Backup......Page 1298
Configuring the Backup Site Server Maintenance Task......Page 1299
Using SQL Backup......Page 1304
Additional Files to Back Up......Page 1311
Recovering Configuration Manager Sites......Page 1313
Selecting Recovery Options......Page 1314
Restoring a Failed Site......Page 1315
Maintaining a Configuration Manager Site......Page 1318
Optimizing SQL Server......Page 1319
Maintaining Windows Server Update Services......Page 1323
Using ConfigMgr Site Maintenance Options......Page 1325
Monitoring Configuration Manager......Page 1327
Monitoring Site Replication......Page 1329
Using System Center Operations Manager......Page 1331
Summary......Page 1332
Part V Appendixes......Page 1333
Viewing Log Files......Page 1334
Server-Side Logging Levels......Page 1335
MP/Client and Console Logging Levels......Page 1336
Client Logs......Page 1337
Site Server Logs......Page 1342
Server Installation and Update Logs......Page 1347
Site System Logs......Page 1348
Cloud Management Gateway Logs in Azure......Page 1351
B Co-Managing Microsoft Intune and ConfigMgr......Page 1353
Modern Management in Windows 10......Page 1354
Defining Co-Management......Page 1355
Choosing Where to Start with Co-Management......Page 1357
Configuring Co-Management in ConfigMgr......Page 1358
Co-Management Prerequisites......Page 1359
Enabling Devices for Co-Management......Page 1360
Moving Workloads from ConfigMgr to Intune......Page 1362
C Reference URLs......Page 1365
General Resources......Page 1366
Microsoft’s Configuration Manager Resources......Page 1374
Other Configuration Manager Resources......Page 1387
Blogs......Page 1392
Public Forums......Page 1393
Utilities......Page 1394
Configuration Manager Reporting......Page 1398
Extending Hardware Inventory—Online Only......Page 1399
Index......Page 1401
E (Online Only) Extending Hardware Inventory......Page 1561