System Center Configuration Manager Current Branch Unleashed

Kerrie Meyler, Cloud and Datacenter Management MVP, is the lead author of numerous System Center books in the Unleashed series, including Microsoft Hybrid Cloud Unleashed (2018), System Center 2012 R2 Configuration Manager Unleashed Supplement (2014), System Center 2012 Configuration Manager Unleashed (2012), and System Center Configuration Manager 2007 Unleashed (2009). She also coauthored System Center Configuration Manager Reporting (2016). Kerrie is an independent consultant with more than 20 years of information technology experience. She was responsible for evangelizing Systems Management Server (SMS) while a Senior Technology Specialist at Microsoft and has presented on System Center technologies at TechEd and MMS. Gerry Hampson, Enterprise Mobility MVP, is a senior consultant with Ergo Group, based in Dublin. He has 20 years of technology experience and specializes in deploying Microsoft solutions. Gerry has a bachelor of engineering degree and numerous Microsoft, HP, and Cisco certifications (MCSE, MCITP, ASE, CCNA). He previously coauthored Troubleshooting System Center Configuration Manager (Packt, 2016). Gerry has a popular blog where he shares device management tips and tricks (gerryhampsoncm.blogspot.com). He is an active member of the Windows Management Users Group and regularly presents at user group meetings and conferences in Ireland and the UK. Gerry has worked with SMS and Configuration Manager since SMS 2003. Saud Al-Mishari is a 15-year Microsoft veteran and a Program Manager with the Enterprise Mobility and Management (EMM) group, which owns Microsoft Intune and System Center Configuration Manager. He is part of EMM’s Customer Experience Team (CXP) organization and helps Microsoft’s largest customers deploy and adopt Microsoft Intune. Saud’s career has focused on systems and device management, along with enterprise operations across various roles in consulting and support. He has worked across Europe, the Middle East, and Africa; he has spent significant time working with industry-leading companies in the UK and Saudi Arabia. Greg Ramsey, Enterprise Mobility MVP, is the Enterprise Tools Strategist at Dell, Inc. He has a B.S. in computer sciences and engineering from Ohio State University. Greg coauthored System Center Configuration Manager 2012 R2 Unleashed, System Center Configuration Manager 2012 Unleashed, Microsoft System Center 2012 Configuration Manager: Administration Cookbook (Packt, 2012), and System Center Configuration Manager 2007 Unleashed. Greg is a cofounder of the Ohio SMS Users Group and the Central Texas Systems Management User Group. Kenneth van Surksum, MCT and former MVP, is a trainer and managing consultant at insight24, a company based in the Netherlands. With almost 20 years of experience, Kenneth has worked with SMS 1.2 and successive versions of the product and specializes in OS deployment. Kenneth was a contributing author for System Center 2012 R2 Configuration Manager Unleashed, System Center 2012 Configuration Manager Unleashed, System Center 2012 Service Manager Unleashed, and coauthored Mastering Windows 7 Deployment (Sybex, 2011). Michael Wiles begin working with SMS 1.1 as a Microsoft support engineer in 1997 and was a Senior Premier Field Engineer (PFE) from 2005 to 2012. He now works for NTT Data, as a Configuration Specialist Advisor, leading the infrastructure team and working on transitions and transformations with new customers at NTT Data Services. Michael was a contributing author on System Center 2012 R2 Configuration Manager Unleashed Supplement (2014).

Introduction     1
Lab Environment     4
Disclaimers and Fine Print     4
PART I:  CONFIGURATION MANAGER OVERVIEW AND CONCEPTS     5
Chapter 1  Configuration Management Basics     7
10 Reasons to Use Configuration Manager     8
The Evolution of Systems Management     9
Systems Management Defined     14
Microsoft’s Strategy for Systems Management     16
Bridging the Systems Management Gap     26
The Value Proposition of Configuration Manager     27
Chapter 2  Configuration Manager Overview     29
A Journey Through Time: SMS to ConfigMgr Current Branch     29
Configuration Manager Terminology     35
What’s New in Current Branch (Through the 1710 Release)     53
Deprecated Features, Software, and Operating Systems     67
Chapter 3  Looking Inside Configuration Manager     69
Understanding the ConfigMgr Architecture     70
A WMI Primer     76
Configuration Manager and WMI     89
Inside the ConfigMgr Database     101
Status and State Messages Overview     106
Site-to-Site Replication     107
Active Directory Integration with ConfigMgr     110
PART II:  PLANNING AND INSTALLATION     115
Chapter 4  Architecture Design Planning     117
Developing the Solution Architecture     117
Planning for Infrastructure Dependencies     122
Hierarchy Planning in ConfigMgr     130
Site Planning for Configuration Manager     138
Planning for Client Deployment and Settings     147
Planning for External Device Management     159
Planning for Continuous Updates     164
Planning for Restorability and Recoverability     168
Chapter 5  Network Design     173
Configuration Manager and the Network     174
Understanding Data Flows     177
Designing Intrasite Communication     179
Using Intersite Communication     182
Designing Client Communication     190
Troubleshooting Network-Related Issues     209
Chapter 6  Installing and Updating System Center Configuration Manager     217
Performing Preinstallation Tasks     218
Performing Site Installation Tasks     225
Configuring Site Properties     238
Troubleshooting Site Installation     248
Updating Configuration Manager     249
Chapter 7  Upgrading and Migrating to ConfigMgr Current Branch     255
Deciding Whether to Upgrade or Migrate to Current Branch     256
Upgrading to ConfigMgr Current Branch     256
Migrating to ConfigMgr Current Branch     263
Migrating Reports and Clients     278
Troubleshooting Migration Issues     280
PART III:  CONFIGURATION MANAGER OPERATIONS     283
Chapter 8  Using the Configuration Manager Console     285
Touring the Console     286
Configuration Manager Workspaces     289
Deploying the Console     294
Using Role-Based Administration     297
Connecting to a Site     298
Personalizing the Console     298
The In-Console Alert Experience     299
Configuration Manager Service Manager     303
Using PowerShell with ConfigMgr     306
Security Considerations     308
Troubleshooting Console Issues     311
Console Logging     311
Connectivity Issues     313
Common Problems     313
Chapter 9  Client Management     315
ConfigMgr Client Agent Requirements     316
Installing, Upgrading, and Uninstalling ConfigMgr Client Agents     317
Finding Potential ConfigMgr Clients in Your Network     332
What to Know About Client Agent Assignment     343
Monitoring Client Agent Health and Activity Status     345
Understanding Client Settings     347
Using the Resource Explorer     364
Using Wake on LAN and Power Management     365
Chapter 10  Managing Compliance     371
Configuring Compliance Settings     372
Understanding Compliance Settings     374
Creating Configuration Items     378
Developing a Compliance Strategy     402
Troubleshooting Settings Management     406
Chapter 11  Creating and Managing Applications     409
ConfigMgr Applications Overview     410
Creating and Modifying Applications     415
Creating Detection Methods     427
Creating Detection Methods for Windows Installer Applications     427
Managing and Creating Global Conditions     433
Managing Application Management, Application Configuration, and Volume License Purchases     440
More About Managing Applications     447
Deploying PowerShell Scripts     457
Chapter 12  Creating and Using Deployment Types     459
Creating and Using Windows Installer Deployment Types     460
Creating and Using Application Virtualization Deployment Types     464
Using Deployment Types for Mobile Devices     470
Creating and Using Other Deployment Types     486
Chapter 13  Creating and Managing Packages and Programs     493
Understanding Packages and Programs     494
Creating a Package from a Definition File     495
Configuring Package Properties     499
Defining Program Properties     503
Creating Packages Using the Package and Program Wizard and for UNIX and Linux Systems     515
Chapter 14  Distributing and Deploying Applications and Packages     523
Creating and Managing Collections     524
Using Distribution Points     531
Deploying Applications and Packages     548
Understanding the End-User Experience     555
Monitoring and Troubleshooting     565
Chapter 15  Managing Software Updates     567
What’s New with Software Updates in ConfigMgr Current Branch     567
Creating Your Update Design     569
Planning for Software Updates     571
Configuring Components     577
Creating and Deploying Updates     594
Understanding Windows 10 Servicing     612
Client Experience     623
Troubleshooting Software Updates     629
Using the System Center Update Publisher     633
Summary     650
Chapter 16  Integrating Intune Hybrid into Your Configuration Manager Environment     651
Introducing Microsoft Intune     651
User Identity Options     655
Preparing Your Environment for Intune     656
Integrating Intune with Configuration Manager     664
Troubleshooting Intune Hybrid     674
Summary     680
Chapter 17  Managing Mobile Devices     681
Enabling Devices for Management     682
Managing Company Devices     695
Protecting Mobile Devices     697
Configuring Mobile Devices     701
Inventorying Mobile Devices     707
Deploying Apps     709
Using the Company Resource Access Workspace     714
On-Premise Mobile Device Management     718
Chapter 18  Conditional Access in Configuration Manager     723
Understanding Modern Authentication     724
Implementing Configuration Manager Policies     725
Enabling Conditional Access for Exchange Online     731
Enabling Conditional Access for SharePoint Online     737
Enabling Conditional Access for Skype for Business Online     741
Enabling Conditional Access for Exchange On-Premises     744
Monitoring and Troubleshooting Conditional Access     750
Chapter 19  Endpoint Protection     755
Protection Capabilities of Microsoft’s Antimalware Platform     756
Prerequisites for Endpoint Protection     763
Planning and Considerations     764
Deploying and Configuring Endpoint Protection     767
Monitoring and Reporting in Endpoint Protection     788
Endpoint Protection Actions and Alerts     794
Windows Defender Advanced Threat Protection     801
Windows Defender ATP Capabilities     802
Chapter 20  Configuration Manager Queries     805
Introducing the Queries Node     806
Creating Queries     809
Using the ConfigMgr Query Builder     813
Understanding Criterion Types, Operators, and Values     816
Writing Advanced Queries     822
Understanding Relationships, Operations, and Joins     829
Using Query Results     834
Using Status Message Queries for In-Depth Analysis     837
Chapter 21  Configuration Manager Reporting     843
Overview of SSRS and Configuration Manager Reporting     844
Understanding Configuration Manager Data     846
Introducing Transact-SQL     850
Building a Report Design     853
Building a Basic Report     855
Advanced Reporting Concepts     869
Chapter 22  Operating System Deployment     871
What’s New with OSD in Current Branch     872
OSD Deployment Scenarios     873
Tools Used with OSD     874
Planning for OSD     876
Using the Console     878
Using Tasks and Variables in a Task Sequence     894
Site System Roles for OSD     897
Getting Ready for Deployment     905
Creating the TS Media     912
Troubleshooting OSD Deployments     919
PART IV:  CONFIGURATION MANAGER ADMINISTRATION     929
Chapter 23  Security and Delegation in Configuration Manager     931
Planning for Security and Delegation     931
ConfigMgr Security Solutions     938
About Role-Based Administration in ConfigMgr     939
Securing Administrative Access to ConfigMgr     949
Securing the ConfigMgr Infrastructure     954
Chapter 24  Backup, Recovery, and Maintenance     969
Implementing Configuration Manager Backup     970
Recovering Configuration Manager Sites     982
Maintaining a Configuration Manager Site     986
Monitoring Configuration Manager     993
PART V:  APPENDIXES     997
Appendix A  Configuration Manager Log Files     999
Viewing Log Files     999
Configuring Logging     1000
Client Logs     1001
Server Logs     1005
Appendix B  Co-Managing Microsoft Intune and ConfigMgr     1013
Modern Management in Windows 10     1013
Defining Co-Management     1015
Configuring Co-Management in ConfigMgr     1017
Appendix C  Reference URLs     1023
General Resources     1023
Microsoft’s Configuration Manager Resources     1030
Other Configuration Manager Resources     1040
Blogs     1043
Public Forums 1044
Utilities     1045   
Appendix D  Available Online     1049
Configuration Manager Reporting     1049
Live Links     1050
Extending Hardware Inventory–Online Only     1050
Index     1051

Appendix E (Online Only) Extending Hardware Inventory