System Center Configuration Manager Current Branch Unleashed

Kerrie Meyler, Cloud and Datacenter Management MVP, is the lead author of numerous System Center books in the Unleashed series, including Microsoft Hybrid Cloud Unleashed (2018), System Center 2012 R2 Configuration Manager Unleashed Supplement (2014), System Center 2012 Configuration Manager Unleashed (2012), and System Center Configuration Manager 2007 Unleashed (2009). She also coauthored System Center Configuration Manager Reporting (2016). Kerrie is an independent consultant with more than 20 years of information technology experience. She was responsible for evangelizing Systems Management Server (SMS) while a Senior Technology Specialist at Microsoft and has presented on System Center technologies at TechEd and MMS. Gerry Hampson, Enterprise Mobility MVP, is a senior consultant with Ergo Group, based in Dublin. He has 20 years of technology experience and specializes in deploying Microsoft solutions. Gerry has a bachelor of engineering degree and numerous Microsoft, HP, and Cisco certifications (MCSE, MCITP, ASE, CCNA). He previously coauthored Troubleshooting System Center Configuration Manager (Packt, 2016). Gerry has a popular blog where he shares device management tips and tricks (gerryhampsoncm.blogspot.com). He is an active member of the Windows Management Users Group and regularly presents at user group meetings and conferences in Ireland and the UK. Gerry has worked with SMS and Configuration Manager since SMS 2003. Saud Al-Mishari is a 15-year Microsoft veteran and a Program Manager with the Enterprise Mobility and Management (EMM) group, which owns Microsoft Intune and System Center Configuration Manager. He is part of EMM’s Customer Experience Team (CXP) organization and helps Microsoft’s largest customers deploy and adopt Microsoft Intune. Saud’s career has focused on systems and device management, along with enterprise operations across various roles in consulting and support. He has worked across Europe, the Middle East, and Africa; he has spent significant time working with industry-leading companies in the UK and Saudi Arabia. Greg Ramsey, Enterprise Mobility MVP, is the Enterprise Tools Strategist at Dell, Inc. He has a B.S. in computer sciences and engineering from Ohio State University. Greg coauthored System Center Configuration Manager 2012 R2 Unleashed, System Center Configuration Manager 2012 Unleashed, Microsoft System Center 2012 Configuration Manager: Administration Cookbook (Packt, 2012), and System Center Configuration Manager 2007 Unleashed. Greg is a cofounder of the Ohio SMS Users Group and the Central Texas Systems Management User Group. Kenneth van Surksum, MCT and former MVP, is a trainer and managing consultant at insight24, a company based in the Netherlands. With almost 20 years of experience, Kenneth has worked with SMS 1.2 and successive versions of the product and specializes in OS deployment. Kenneth was a contributing author for System Center 2012 R2 Configuration Manager Unleashed, System Center 2012 Configuration Manager Unleashed, System Center 2012 Service Manager Unleashed, and coauthored Mastering Windows 7 Deployment (Sybex, 2011). Michael Wiles begin working with SMS 1.1 as a Microsoft support engineer in 1997 and was a Senior Premier Field Engineer (PFE) from 2005 to 2012. He now works for NTT Data, as a Configuration Specialist Advisor, leading the infrastructure team and working on transitions and transformations with new customers at NTT Data Services. Michael was a contributing author on System Center 2012 R2 Configuration Manager Unleashed Supplement (2014).

• Introduction     1 Lab Environment     4 Disclaimers and Fine Print     4 PART I:  CONFIGURATION MANAGER OVERVIEW AND CONCEPTS     5Chapter 1  Configuration Management Basics     7 10 Reasons to Use Configuration Manager     8 The Evolution of Systems Management     9 Systems Management Defined     14 Microsoft’s Strategy for Systems Management     16 Bridging the Systems Management Gap     26 The Value Proposition of Configuration Manager     27 Chapter 2  Configuration Manager Overview     29 A Journey Through Time: SMS to ConfigMgr Current Branch     29 Configuration Manager Terminology     35 What’s New in Current Branch (Through the 1710 Release)     53 Deprecated Features, Software, and Operating Systems     67 Chapter 3  Looking Inside Configuration Manager     69 Understanding the ConfigMgr Architecture     70 A WMI Primer     76 Configuration Manager and WMI     89 Inside the ConfigMgr Database     101 Status and State Messages Overview     106 Site-to-Site Replication     107 Active Directory Integration with ConfigMgr     110 PART II:  PLANNING AND INSTALLATION     115Chapter 4  Architecture Design Planning     117 Developing the Solution Architecture     117 Planning for Infrastructure Dependencies     122 Hierarchy Planning in ConfigMgr     130 Site Planning for Configuration Manager     138 Planning for Client Deployment and Settings     147 Planning for External Device Management     159 Planning for Continuous Updates     164 Planning for Restorability and Recoverability     168 Chapter 5  Network Design     173 Configuration Manager and the Network     174 Understanding Data Flows     177 Designing Intrasite Communication     179 Using Intersite Communication     182 Designing Client Communication     190 Troubleshooting Network-Related Issues     209 Chapter 6  Installing and Updating System Center Configuration Manager     217 Performing Preinstallation Tasks     218 Performing Site Installation Tasks     225 Configuring Site Properties     238 Troubleshooting Site Installation     248 Updating Configuration Manager     249 Chapter 7  Upgrading and Migrating to ConfigMgr Current Branch     255 Deciding Whether to Upgrade or Migrate to Current Branch     256 Upgrading to ConfigMgr Current Branch     256 Migrating to ConfigMgr Current Branch     263 Migrating Reports and Clients     278 Troubleshooting Migration Issues     280 PART III:  CONFIGURATION MANAGER OPERATIONS     283Chapter 8  Using the Configuration Manager Console     285 Touring the Console     286 Configuration Manager Workspaces     289 Deploying the Console     294 Using Role-Based Administration     297 Connecting to a Site     298 Personalizing the Console     298 The In-Console Alert Experience     299 Configuration Manager Service Manager     303 Using PowerShell with ConfigMgr     306 Security Considerations     308 Troubleshooting Console Issues     311 Console Logging     311 Connectivity Issues     313 Common Problems     313 Chapter 9  Client Management     315 ConfigMgr Client Agent Requirements     316 Installing, Upgrading, and Uninstalling ConfigMgr Client Agents     317 Finding Potential ConfigMgr Clients in Your Network     332 What to Know About Client Agent Assignment     343 Monitoring Client Agent Health and Activity Status     345 Understanding Client Settings     347 Using the Resource Explorer     364 Using Wake on LAN and Power Management     365 Chapter 10  Managing Compliance     371 Configuring Compliance Settings     372 Understanding Compliance Settings     374 Creating Configuration Items     378 Developing a Compliance Strategy     402 Troubleshooting Settings Management     406 Chapter 11  Creating and Managing Applications     409 ConfigMgr Applications Overview     410 Creating and Modifying Applications     415 Creating Detection Methods     427 Creating Detection Methods for Windows Installer Applications     427 Managing and Creating Global Conditions     433 Managing Application Management, Application Configuration, and Volume License Purchases     440 More About Managing Applications     447 Deploying PowerShell Scripts     457 Chapter 12  Creating and Using Deployment Types     459 Creating and Using Windows Installer Deployment Types     460 Creating and Using Application Virtualization Deployment Types     464 Using Deployment Types for Mobile Devices     470 Creating and Using Other Deployment Types     486 Chapter 13  Creating and Managing Packages and Programs     493 Understanding Packages and Programs     494 Creating a Package from a Definition File     495 Configuring Package Properties     499 Defining Program Properties     503 Creating Packages Using the Package and Program Wizard and for UNIX and Linux Systems     515 Chapter 14  Distributing and Deploying Applications and Packages     523 Creating and Managing Collections     524 Using Distribution Points     531 Deploying Applications and Packages     548 Understanding the End-User Experience     555 Monitoring and Troubleshooting     565 Chapter 15  Managing Software Updates     567 What’s New with Software Updates in ConfigMgr Current Branch     567 Creating Your Update Design     569 Planning for Software Updates     571 Configuring Components     577 Creating and Deploying Updates     594 Understanding Windows 10 Servicing     612 Client Experience     623 Troubleshooting Software Updates     629 Using the System Center Update Publisher     633 Summary     650 Chapter 16  Integrating Intune Hybrid into Your Configuration Manager Environment     651 Introducing Microsoft Intune     651 User Identity Options     655 Preparing Your Environment for Intune     656 Integrating Intune with Configuration Manager     664 Troubleshooting Intune Hybrid     674 Summary     680 Chapter 17  Managing Mobile Devices     681 Enabling Devices for Management     682 Managing Company Devices     695 Protecting Mobile Devices     697 Configuring Mobile Devices     701 Inventorying Mobile Devices     707 Deploying Apps     709 Using the Company Resource Access Workspace     714 On-Premise Mobile Device Management     718 Chapter 18  Conditional Access in Configuration Manager     723 Understanding Modern Authentication     724 Implementing Configuration Manager Policies     725 Enabling Conditional Access for Exchange Online     731 Enabling Conditional Access for SharePoint Online     737 Enabling Conditional Access for Skype for Business Online     741 Enabling Conditional Access for Exchange On-Premises     744 Monitoring and Troubleshooting Conditional Access     750 Chapter 19  Endpoint Protection     755 Protection Capabilities of Microsoft’s Antimalware Platform     756 Prerequisites for Endpoint Protection     763 Planning and Considerations     764 Deploying and Configuring Endpoint Protection     767 Monitoring and Reporting in Endpoint Protection     788 Endpoint Protection Actions and Alerts     794 Windows Defender Advanced Threat Protection     801 Windows Defender ATP Capabilities     802 Chapter 20  Configuration Manager Queries     805 Introducing the Queries Node     806 Creating Queries     809 Using the ConfigMgr Query Builder     813 Understanding Criterion Types, Operators, and Values     816 Writing Advanced Queries     822 Understanding Relationships, Operations, and Joins     829 Using Query Results     834 Using Status Message Queries for In-Depth Analysis     837 Chapter 21  Configuration Manager Reporting     843 Overview of SSRS and Configuration Manager Reporting     844 Understanding Configuration Manager Data     846 Introducing Transact-SQL     850 Building a Report Design     853 Building a Basic Report     855 Advanced Reporting Concepts     869 Chapter 22  Operating System Deployment     871 What’s New with OSD in Current Branch     872 OSD Deployment Scenarios     873 Tools Used with OSD     874 Planning for OSD     876 Using the Console     878 Using Tasks and Variables in a Task Sequence     894 Site System Roles for OSD     897 Getting Ready for Deployment     905 Creating the TS Media     912 Troubleshooting OSD Deployments     919 PART IV:  CONFIGURATION MANAGER ADMINISTRATION     929Chapter 23  Security and Delegation in Configuration Manager     931 Planning for Security and Delegation     931 ConfigMgr Security Solutions     938 About Role-Based Administration in ConfigMgr     939 Securing Administrative Access to ConfigMgr     949 Securing the ConfigMgr Infrastructure     954 Chapter 24  Backup, Recovery, and Maintenance     969 Implementing Configuration Manager Backup     970 Recovering Configuration Manager Sites     982 Maintaining a Configuration Manager Site     986 Monitoring Configuration Manager     993 PART V:  APPENDIXES     997Appendix A  Configuration Manager Log Files     999 Viewing Log Files     999 Configuring Logging     1000 Client Logs     1001 Server Logs     1005 Appendix B  Co-Managing Microsoft Intune and ConfigMgr     1013 Modern Management in Windows 10     1013 Defining Co-Management     1015 Configuring Co-Management in ConfigMgr     1017 Appendix C  Reference URLs     1023 General Resources     1023 Microsoft’s Configuration Manager Resources     1030 Other Configuration Manager Resources     1040 Blogs     1043 Public Forums 1044 Utilities     1045    Appendix D  Available Online     1049 Configuration Manager Reporting     1049 Live Links     1050 Extending Hardware Inventory–Online Only     1050 Index     1051 Appendix E (Online Only) Extending Hardware Inventory