CCIT Imaging and PC management
description
Transcript of CCIT Imaging and PC management
![Page 1: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/1.jpg)
CCIT Imaging and PC management
System Center Configuration Manager: 2012 Changes and Features
Sam Beckler
September 26th 2012
![Page 2: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/2.jpg)
Itinerary
• Migration• New features/changes in 2012• Console Changes• Imaging Changes
![Page 3: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/3.jpg)
Migration Timeline
9/26/12• Access to imaging10/8/12• Migrate test containers10/15/12-10-26/12• Change PXE imaging server• Migrate colleges/departments10/29/12• Use 2007 to push 2012 client to remaining 2007 clients11/9/12• Remove client connectivity to 2007 environment
![Page 4: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/4.jpg)
Group Policy
• SCCM2012_Managed_Config• SCCM2012_Client_Push• SCCM2012_WSUS• SCCM_Remote_Assistance• SCCM_Firewall_RDP_MSRA• SCCM_Firewall_SMB• SCCM_Firewall_Wireless_RDP_MSRA• SCCM_Firewall_Wireless_SMB
![Page 5: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/5.jpg)
SCCM2012_Managed_Config
• Provides Automatic certificate enrollment for authentication and encryption
• Provides code signing certificates for WSUS 3rd Party Updates
• Basic Firewall settings• Allow DHCP server and SCCM Site server to ping
client• Provide Application Catalog Shortcut
• Application Catalog fix for if IE is not default browser
![Page 6: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/6.jpg)
SCCM2012_client_push
• Adds site server (sccm2012.campus.cu.clemson.edu) computer account as local administrator of desktop
• Adds firewall exceptions to allow only it to connection and distribute the configmgr client
![Page 7: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/7.jpg)
Sccm2012_wsus
• Provide update server information for automatic configmgr client deployment
• Also provides code signing certificates for 3rd party updates
This GPO will be used as the primary method to migrate computer from 2007 to 2012.
![Page 8: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/8.jpg)
Sccm_Remote_Assistance
• Enables remote assistance• Adds group sccm_admins to remote assistance helpers group
![Page 9: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/9.jpg)
SCCM_Firewall_RDP_MSRA
• Creates firewall exceptions for remote desktop and remote assistance
• Local subnet, 130.127.0.0/255.255.0.0, 172.23.0.0/255.255.0.0, 2620:103:a000::/44
• Does not include wireless IP ranges
![Page 10: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/10.jpg)
SCCM_Firewall_SMB
• Creates firewall exceptions for File and Printer sharing• Local subnet, 130.127.0.0/255.255.0.0,
172.23.0.0/255.255.0.0, 2620:103:a000::/44• Does not include wireless IP ranges
![Page 11: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/11.jpg)
SCCM_Firewall_Wireless_RDP_MSRA
• Creates firewall exceptions for remote desktop and remote assistance
• Allows Wireless IP Ranges
![Page 12: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/12.jpg)
SCCM_Firewall_Wireless_SMB
• Creates firewall exceptions for File and Printer sharing• Allows Wireless IP Ranges
![Page 13: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/13.jpg)
New Features in 2012
![Page 14: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/14.jpg)
User Based Management
• Currently we deploy software to computers with limited user based delivery
• SCCM2012 default needs to be user based delivery for a more consistent experience
• Can still do system based delivery if product requires or delivery doesn’t fit into the user based approval method
Benefits
• User can just go get the software eliminating phone calls, emails, and tickets.
• If you are not using SCCM Software distribution it also eliminates scheduled visits, bringing in computer, and associated user downtime.
![Page 15: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/15.jpg)
Software Distribution
• Application Catalog website will display software for users to install (User targeted)
• Software in the list can be restricted by AD, Central, or BB group
• Software can be configured to require approval before installing
• Software Center will display computer targeted software and currently installed software from the Application Catalog provides
• Software Center provides uninstall ability• User does NOT need to have admin rights
![Page 16: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/16.jpg)
Software Distribution
• New SW_ADV collection structure• User Collections
• Software Distribution• Program
• Program SW_ADV_USER_MAN• Shows software in Application Catalog
• Program SW_ADV_USER_MAN_Approval• Requires approval for the user to install
• Computer Collections• Software Distribution
• Program• Program SW_ADV_MAN• Program SW_ADV_AUTO• Program SW_ADV_LAB• Program SW_ADV_USER• Program SW_ADV_Administrative
![Page 17: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/17.jpg)
Power Management
• Supports configuring power profiles similar to GPO• Benefit is you can add two profiles one for peak times and
one for off peak times• Can configure auto wake time (prefer 5am)• User can exempt his/her system from the policy
![Page 18: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/18.jpg)
Software Updates
• Now delivered through Software Center• Will be mandatory install after 5PM Thursday following
patch Tuesday• Will prompt user to restart• Software Center will suspend all activity if the computer is
in Presentation mode.
![Page 19: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/19.jpg)
Workgroup Computers
• Workgroup computers are now supported although functionality is limited• No application catalog• Not managing software updates• No user based software distribution• Can use computer based software distribution• Communicates over HTTP port 80
• Private traffic is still encrypted just at a lower level• No internet based management requires VPN to use off
campus• Stand alone installer
• Installer can be used on domain joined machines functionality will automatically elevate
![Page 20: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/20.jpg)
Console Changes
![Page 21: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/21.jpg)
Console Changes
• No longer MMC based• System Center has their own console technology that is
XML driven• Looks very similar to Outlook (even has the ribbons)• Provides more information at a glance and less clutter• Users and Computers now live in separate spaces• No more sub collections structure is now folder based
containing collections• Collections can still be linked to software using collection
linking instead• Ability to exclude a collection from another
![Page 22: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/22.jpg)
Console Demo
![Page 23: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/23.jpg)
Imaging Changes
![Page 24: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/24.jpg)
Registration Screen
• Minor UI Changes• Software tab will change to support new application model
Demo
![Page 25: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/25.jpg)
Task Sequences
• Most Features the same as V3 task sequences• Now supports USMT from PE Boot
![Page 26: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/26.jpg)
More Information
• http://www.clemson.edu/tsp/ipcm• http://technet.microsoft.com/en-us/virtuallabs/bb467605.aspx
![Page 27: CCIT Imaging and PC management](https://reader035.fdocuments.us/reader035/viewer/2022081515/568168b3550346895ddf7f92/html5/thumbnails/27.jpg)
Questions
Q&A