Presentation is loading. Please wait.

Presentation is loading. Please wait.

4/6/2017 11:37 AM SMS 2003 R2 and System Center Configuration Manager 2007 Technical Drilldown Martin Dey Director, Product Marketing Windows and.

Similar presentations


Presentation on theme: "4/6/2017 11:37 AM SMS 2003 R2 and System Center Configuration Manager 2007 Technical Drilldown Martin Dey Director, Product Marketing Windows and."— Presentation transcript:

1 4/6/ :37 AM SMS 2003 R2 and System Center Configuration Manager 2007 Technical Drilldown <none> Martin Dey Director, Product Marketing Windows and Enterprise Management Division Microsoft Corporation, Redmond © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

2 Agenda SMS 2003 R2 Asset Management with AssetMetrix
4/6/ :37 AM Agenda SMS 2003 R2 Basic Product Features Scan Tool for Vulnerability Assessment Inventory Tool for Custom Updates Asset Management with AssetMetrix OS Deployment Feature Pack and Update Configuration Manager 2007 Design Goals NAP Support Update Deployment Desired Configuration Management <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

3 SMS 2003 R2 Capabilities Security Patch Management Asset Management
4/6/ :37 AM SMS 2003 R2 Capabilities Security Patch Management Asset Management Application Deployment Support for the Mobile Workforce <none> Leveraging Windows Management Services © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

4 Application Deployment
4/6/ :37 AM Application Deployment Delivery of large-scale projects in a timely and inexpensive manner Provisioning of the right services and applications to end-users Quickly and easily - in support of business requirements Business Demands Comprehensive solution for critical application delivery Plan, test, deploy and analyze applications Reliably and easily To the right place and at the right time <none> SMS 2003 Delivers © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

5 Application Deployment - Features
4/6/ :37 AM Plan, test, deploy, and analyze Enables the complete lifecycle of application deployment from planning through verification Provides complete inventory and usage tracking to be able to plan for such a rollout Integrated solution for all Windows computers Reliably and easily Deploys successfully and reliably to locked down Windows environments Enables rich targeting Reduces overall costs Right place at the right time. Delivers all of these applications to highly distributed and complex enterprise environments <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

6 Software Delivery Status (3)
4/6/ :37 AM Software Delivery Status (3) <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

7 Asset Management Business Demands
4/6/ :37 AM Asset Management Business Demands Reduction in hardware and software asset costs Software license compliance Reduced software costs through ability to track and report on compliance Application installation and usage information <none> SMS 2003 Delivers © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

8 Asset Management – Features
4/6/ :37 AM Asset Management – Features Integration with Active Directory allows asset targeting based on business process Allows for a granular and flexible inventory discovery process Provides an integrated way to Determine application installation Track application usage Simplicity in asset tracking through integrated metering and inventory <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

9 Security Patch Management
4/6/ :37 AM Security Patch Management Tools and processes to Identify critical patches Determine vulnerable systems Deliver patches reliably and quickly Accurately report delivery status Business Demands A secure Windows environment through Collection of critical patch information Vulnerability assessment of existing environment Quick and easy deployment of patches Targeted delivery of patches Verification and reporting on patch deployment <none> SMS 2003 Delivers © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

10 Security Patch Management
4/6/ :37 AM Security Patch Management Awareness Leverages existing tools like MS Baseline Security Analyzer Collects MBSA results for storage in a central repository Rich reporting provides detailed vulnerability analysis and enables mitigation planning Response Enterprise proven integrated end-to-end solution for deploying all software, including patches, from small to large enterprises. Up to 99.9+% reliability in patch delivery Provides the control that administrators need to effectively deliver these patches from assessment and targeting through to deployment and verification Saves operational costs for repackaging by dynamically acquiring the desired patches from Microsoft and pre-assembling them into a ready-to-deliver package Integration with industry recognized processes for the greatest success <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

11 Mobility Support for roaming and infrequently connected mobile users
Delivery of critical business services and applications—reliably and timely Business Demands Capability to meet mobile workforce needs Provides critical IT business services Extends asset management to mobile devices Delivers relevant business applications to mobile devices <none> SMS 2003 Delivers © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

12 Mobility – Features Infrequently connected users Roaming users
Only transmit necessary data to remote devices Use proven standards and proven technologies HTTP bandwidth aware communications XML based schema Leverages the experience and technologies from Windows Update 200 million downloads/month to mobile users Roaming users Access data from the closest source Use proven installer technologies MSI Leverage existing infrastructure Active Directory <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

13 Customer Scorecard 20K+ customers
4/6/ :37 AM Customer Scorecard 20K+ customers 84% increase in usage in the last 3 yrs More customers using – 60%+ of enterprises Used on servers as frequently as desktops Used more broadly – 80+% of desktops In last 3 years of growth, PSS call volume has stayed flat! <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

14 Partner Ecosystem Management Partners WS-Management
4/6/ :37 AM Partner Ecosystem AD authentication and single-sign on Extends SMS to non-Windows platforms Manage all platforms from MOM console Strategic development partnership Extending SMS to update Dell servers Delivering comprehensive MOM management pack Shipping MOM Workgroup with next generation servers Management Partners WS-Management <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

15 Product Milestones June 2006 RTM Mid- 2007 RTM 4/6/2017 11:37 AM
<none> Mid RTM © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

16 SMS 2003 R2 Scan Tool for Vulnerability Assessment Over 100 VA Checks
4/6/ :37 AM SMS 2003 R2 Scan Tool for Vulnerability Assessment Over 100 VA Checks SMS “software update” like experience Based on MBSA v2.0 Inventory Tool for Custom Updates Extend your SMS Infrastructure to accomplish any custom scanning Deploy any 3rd party and LOB updates through SMS Microsoft Update and WSUS Schema <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

17 Scan Tool for Vulnerability Assessment
4/6/ :37 AM Scan Tool for Vulnerability Assessment Uses MBSA 2.0 for vulnerability assessment (VA) Prior to a VA scan, MBSA 2.0 is deployed to clients Provides VA reporting for common software mis-configurations defined by the MBSA 2.0 VA manifest Administered identically to existing SMS 2003 software update scan tools <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

18 4/6/ :37 AM Scan Tool For Vulnerability Assessment Reporting for nearly 100 critical software misconfigurations Critical vulnerabilities include Are unnecessary services installed and running? Do file shares have appropriate permissions? Is Windows Firewall enabled? Are strong passwords enforced? Are unsecured Guest accounts enabled? Are there too many local Administrators on a single machine? <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

19 SMS 2003 R2 Vulnerability Assessment
4/6/ :37 AM SMS 2003 R2 Vulnerability Assessment <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

20 Custom Updates Current Situation
4/6/ :37 AM Custom Updates Current Situation How does an SMS Admin deploy a non-Microsoft update? Difficult Determine which machines need the update Determine if the update was successful Not scalable Overhead of a new collection for every update Slow process if custom inventory is required Limited reporting on compliance © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

21 Custom Update Components
4/6/ :37 AM Custom Update Components Custom Update Publishing Tool Easy configuration of applicability through logic in the Publishing Tool Inventory Tool for Custom Updates (ITCU) Scan Tool Inventory Tool for Custom Updates determines which machines need an update Reporting uses the same interface as existing software update reports © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

22 Microsoft Update Catalog
ISV / OEM Catalogs Microsoft Update Catalog 4/6/ :37 AM Publishing Tool SMS Internal Application Catalogs © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

23 Custom Updates Corporate Publishing XML
4/6/ :37 AM Custom Updates Corporate Publishing XML Corporate Publishing XML is the schema behind Custom Updates Defines properties of updates Includes logical expressions that can be created with any combination of detection rules to determine applicability and installed status of an update Jointly developed by SCCM, WSUS, SCE Schema is human readable XML Can be authored with any XML editor or manually Scan engine uses the catalog of configured updates to perform a client scan © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

24 Custom Updates Deployment Ready Catalogs
4/6/ :37 AM Custom Updates Deployment Ready Catalogs Shift the expertise of creating an update to the software provider LOB applications Commercial software vendors Catalogs currently available Adobe Citrix 1E ISVs can on-board via © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

25 SMS 2003 R2 Custom Updates 4/6/2017 11:37 AM <none>
© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

26 ITCU Scan diagram Sync published catalog Distribute to DP
Pub tool syncs catalog… Sync published catalog Distribute to DP Client gets policy Run scan advertisement Inventory information is sent back to site database © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

27 ITCU Update deployment diagram
Admin approves a patch Download from Internet or import files… Update distributed to DP Client gets policy Run update advertisement Re-scan and inventory information is sent back to site database © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

28 Customer Comments about SMS 2003 R2
4/6/ :37 AM Customer Comments about SMS 2003 R2 “In the past our administrators could take weeks creating packages for third party and custom updates that we could confidently deploy in our production environment.   SMS 2003 R2’s Inventory Tool for Custom Updates has greatly simplified this process by decreasing the time spent to only a few days, and as more vendors publish their update catalogues with ITCU we anticipate this dropping to only a few hours.   Richard Baasch IT Operations Manager US Army, Ft. Lewis "By allowing us to utilize third-party catalogs and create custom catalogs for our internal line-of-business applications, we can precisely identify systems requiring non-Microsoft updates and apply those updates faster, easier and more effectively than before. SMS 2003 R2 enables us to move away from diverse custom solutions to a single highly configurable solution with an intuitive graphical user interface." <none> Jeff Snyder IT Administrator Boeing Corporation © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

29 SMS 2003 SP2 Enhancements SMS 2003 SP2 Enhancements SMS Setup Changes
4/6/ :37 AM SMS 2003 SP2 Enhancements SMS 2003 SP2 Enhancements SMS Setup Changes Update.exe Platform Changes Deprecating Advanced Clinet Support for: Windows 2000 SP3 systems Windows XP RTM Active Directory Security Group Discovery FQDN Support SQL Server Support (SQL 2005) Performance Improvements Integrated ITMU for patch management <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

30 SMS 2003 SP3 Comprehensive asset identification & categorization
<none> 4/6/ :37 AM SMS 2003 SP3 Comprehensive asset identification & categorization Windows Vista Compatibility AssetMetrix (AMx) integration Semi-annual updates available to SA customers Extends SMS inventory agent to collect additional artifact data New SMS reports that radically simplify software license mgmt Hardware data to help determine CPU age and USB detection Application and HW Intelligence Inference and Triangulation Reports SMS Inventory Architecture is extended thru WMU providers e.g. Installed Software, Primary Console User, etc. to harvest more artifacts (asset data) for the purpose of greater levels of Asset Intelligence + + SMS inventory AMx KB License Reporting SW Consolidation Upgrade Planning © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

31 AssetMetrix Acquisition
4/6/ :37 AM AssetMetrix Acquisition Asset Intelligence: AssetMetrix Research Labs Knowledge Base: 70,000,000 software instances 430,000 software titles Over 98% of commercial s/w apps categorized Analytics and Reports: 300+ customizable reports Instant queries Hardware & Software Asset Management <none> Strategic Asset Planning © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

32 SMS reports with categories from AssetMetrix DB
4/6/ :37 AM <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

33 Softricity Acquisition: SoftGrid Application Virtualization
4/6/ :37 AM Softricity Acquisition: SoftGrid Application Virtualization Transforms software into a centrally managed, policy based service Virtualized applications with a zero installation footprint Software available dynamically via streaming technology Provisioning tied to user identity - separating hardware from users & apps Support disconnected mobile users Fully integrates with Systems Management Server 2003 Instantly Available Remove barrier of installation and compatibility testing between applications Virtualization at the application layer with runtime isolation Simplified packaging No alteration of the operating system Elimination of application conflicts and associated regression testing Application Compatibility <none> Accelerated Responsiveness Make Windows more cost-effective and adaptable to application and operating system changes Virtualized applications and updates delivered based on real-time needs Safe self-provisioning with virtualized applications Ease OS migration by eliminating up front deployment and application compatibility challenges © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

34 4/6/ :37 AM Application Virtualization Strong Isolation with Controlled OS Interaction Applications are virtualized per instance: Files (incl System Files) Registry Fonts .ini COM objects Services Applications do not get installed or alter the operating system Yet tasks process locally on the host computer. <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

35 On-Demand Streaming of Virtual Apps
Permission Based User clicks on desktop shortcuts – authentication, authorization and licensing checked every time users launch a SoftGrid application Centrally Served The first time the Server streams “just enough” code (20-40%) to client or TS machine. As more code is needed, it is dynamically delivered. Locally Executed App executes on desktop, laptop and/or Terminal Server, not on SoftGrid Server Cached for Performance App code is cached for repeat use – even without a network Disconnected Use Support Entire set of applications are cached for limited time before expiring <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

36 SoftGrid Integration w/ SMS 2003
4/6/ :37 AM SoftGrid Integration w/ SMS 2003 Flexible application deployment: Pre-cached to clients with traditional updates Pre-cached with dynamic updates Pure dynamic delivery Integrated reports and metering Enterprise scale POR Configuration Manager 2007 Branch office replication SMS deals with core services and applications COM Objects can interact together in a suited fashion. Office as a dev platform versus productivity app – Use SMS DougBacc.com <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. <none>

37 SMS 2003 R2 OS Deployment Key Features
4/6/ :37 AM SMS 2003 R2 OS Deployment Key Features OS Deployment Feature Pack Integrated with SMS 2003 Inventory-based planning / targeting Uses SMS software distribution SMS replication of images across enterprises Centralized tracking and status Custom actions Advanced Windows Imaging Format (.WIM) File-based and non-destructive Eliminates duplicate files Smaller images / high compression (3:1) Advanced image installation task sequencing User Notification balloons State capture and restore USMT or custom Optional SMS advertisement Executed during State Restore phase as a custom action Ability to include and execute custom installation scripts SMS packages can be executed as part of installation sequence © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

38 Core Deployment Scenarios
<none> 4/6/ :37 AM Core Deployment Scenarios In-place Migration Central planning, targeting and distribution of Image Packages Computer and user state is saved Image is installed Other SMS advertised programs rapidly installed Computer and user state is restored Centralized status reporting Help Desk Recovery (break/fix) Administrator inserts image installation CD or distributes via SMS Machine is re-imaged (wipe/load) © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

39 SMS 2003 OSD Feature Pack Overview of operations
4/6/ :37 AM <none> SMS 2003 OSD Feature Pack Overview of operations Master Computer SMS 2003 Target Computers Image File Image Package “Plan” “Distribute” “Track” Status Reports “Capture” “Install” © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

40 OSD Feature Pack Update
<none> 4/6/ :37 AM OSD Feature Pack Update Required for Windows Vista image capture and deployment Requires SMS 2003 Service Pack 2 Will not install on any previous version Does not operate stand alone Supports Windows Vista image capture and deployment Also supports Windows 2000 and later Supports 64-bit client image capture and deployment The original OSD Feature Pack does NOT support deployment of Windows Vista © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

41 OSD Feature Pack Update Image Format Support
<none> 4/6/ :37 AM OSD Feature Pack Update Image Format Support Supports two WIM formats The original OSD Feature Pack uses pre-Windows Vista WIM (0.9) The OSD feature pack update also supports Windows Vista and Windows Server “Longhorn” WIM (1.0) There is no direct migration path from WIM 0.9 to WIM 1.0 Necessary to deploy the WIM 0.9 image and re-capture it as a WIM 1.0 image © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

42 Mid-2007 RTM 4/6/2017 11:37 AM <none>
© 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

43 Key Investments in System Center Configuration Manager 2007
4/6/ :37 AM Reduce Configuration Management Infrastructure Costs Simplified UI and Installation Branch office support Greater levels of control (Scheduling, WoL) Built on Windows Management Infrastructure Simplicity Unified delivery of Windows Operating System for Clients and Servers One worldwide image to manage with Vista Built on Windows Vista Deployment Technologies Vista and Office 2007 upgrade assessment and resolution planning Secure Online and Offline Provisioning Secure network storage of user state during Operating System deployment Deployment Enabling the Mobile Enterprise Network Access Protection Enterprise Vulnerability assessment Securely managing devices across the Internet Maintain client security through Software Update deployment Security Knowledge Driven Configuration Management IT policies for analyzing corporate and regulatory compliance Out of the box configuration policies for server workloads e.g. Exchange License and asset inventory Based on the Service Modeling Language (SML) Configuration © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

44 Simplicity Improved setup with confirmation of server completion
4/6/ :37 AM Simplicity Improved setup with confirmation of server completion New UI model built around common task scenarios Includes home page, sizable dialogs, drag’n’drop, task structure Simplified and more cost effective infrastructure Ability to use a workstation as a distribution point for branch offices Easier to mirror operational process Associate operational change windows with a collection WoL built-in Subnet Directed Broadcast Unicast (IPv6) Non-proxied approach Redundant Infrastructure Support for SQL clustering Native Support for Device Management Smart Phones Internet facing device management (e.g. over GPRS) Over-the-air management of devices <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

45 Configuration Manager 2007 Console
4/6/ :37 AM Configuration Manager 2007 Console <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

46 4/6/ :37 AM Deploying Windows Fully automate the deployment process in a secure and highly flexible manner “Hands-off deployment” End-to-end, secure and flexible processes Make upgrading to Vista/LH seamless Build on core Vista/Longhorn functionality Unified client and server deployment <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

47 4/6/ :37 AM Deploying Windows Vista and Office 2007 centralized upgrade assessment and resolution planning Application Compatibility Toolkit 5.0 Office 12 Migration Toolkit Deployments driven by customizable task sequences Wizards to generate standard task sequences GUI task sequence editor gives full control of the deployment process Drive toward single worldwide image Device driver catalog Localized at deployment Side-by-side computer replacement with secure user state migration Automation of build and capture reference machine Offline media (CD/DVD/USB) to deploy in locations with limited or no network connectivity Integration with Windows Deployment Services PXE server For bare-metal or failed system installs <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

48 Security Raising the bar on the security of the infrastructure
4/6/ :37 AM Security Raising the bar on the security of the infrastructure Full mutual authentication between client/server using https Location awareness for client machines moving between intranet and Internet Convergence with standards based technologies Ability to identify unmanaged clients Securing Windows Network Access Protection (NAP) integration Rebuilt Software Update Infrastructure Leverage WSUS Server Includes third-party update support © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

49 Securing Windows Software Updates Management
4/6/ :37 AM Securing Windows Software Updates Management All Microsoft Update content Templates reduce 18 dialogs to 6 clicks Support for both mandated and optional updates 3rd party and in house LOB application updates Service Windows Updates can be installed with OSD Task Sequence More efficient infrastructure State based for improved visibility of update installation lifecycle Update synch as a core site role Support for custom severity definitions Use Windows Update Agent for compliance scanning © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

50 Software Updates in Configuration Manager 2006
4/6/ :37 AM Software Updates in Configuration Manager 2006 <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

51 Network Access Protection Solution Overview
4/6/ :37 AM Network Access Protection Solution Overview Policy Validation Validates the health of client systems as defined by corporate security policy Quarantine Restricts access from protected network regions based on client health state. Network Remediation Provides access to resources allowing clients to correct security policy compliance deficiencies Ongoing Compliance Automatic enforcement of changes to defined corporate security policies ensuring sustained policy compliance © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

52 NAP Components ConfigMgr NAP Health Components
4/6/ :37 AM NAP Components ConfigMgr NAP Health Components System Health Agent (SHA) System Health Validator (SHV) System Health Server (ConfigMgr Site Server) Remediation Server (ConfigMgr DP) ConfigMgr DP ConfigMgr Site Server Updates Health policy Network Access Requests Client Health Statements NPS Policy Server (RADIUS) ConfigMgr Systems Health Agent Health Certificate ConfigMgr Systems Health Validator Quarantine Agent (QA) Enforcement Client (QEC) (DHCP, IPSEC, 802.1x, VPN) Network Access Device & Health Registration Authority Quarantine Server (QS) © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

53 NAP Data Flow X X Protected Network Boundary Network
4/6/ :37 AM NAP Data Flow Download Updates to Site Server MS Download Center Deploy Updates to DP CSS Publish Health State in Active Directory DP MP Download New Policy Install Required Updates Healthy Client Protected Network AD Retrieve Health State Policy X X HRA Boundary Network Send Statement of Health for Evaluation NPS : SHV Quarantine Restricted Network © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

54 Desired Configuration Management (DCM)
4/6/ :37 AM Desired Configuration Management (DCM) Manage the configuration of Windows environments and ensure system configuration compliance against defined corporate standards Detect server configuration “drift” Improve troubleshooting and “time-to-resolve” Regulatory compliance reporting Change verification Built on Service Modeling Language (SML) Structure of the system Relationships between system’s components Relationships between the system and its environment Configuration constraints and invariants <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

55 Configuration Manager Client
4/6/ :37 AM DCM in Action Configuration Items 1 Authored via Admin UI Created by Importing SML documents Configuration Item Library 2 SMS Database Windows Server 2003 CI SQL Server 2000 CI MW/AV Software CI Configuration Baseline defined using configuration items in the library 401(k) Application Server Baseline 5 Compliance report and discovered state reported to SMS Server SMS Server Managed Client <none> WMI Provider Configuration baseline targeted at managed client 3 XML Provider 4 Client evaluates discovered state for compliance with desired configuration Registry Provider IIS Provider Configuration Manager Client MSI Provider © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

56 4/6/ :37 AM <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

57 (Vista Dependent) SMS 2003 SP3
4/6/ :37 AM System Center Configuration Manager 2007 Helping IT Drive Business Value Jul 2006 Beta 1 Refresh (NAP/Vista OSD) Mar 2007 (Vista Dependent) SMS 2003 SP3 Q1 2007 Beta 2 DCM Mid-2007 Public Availability Get ready for Configuration Manager 2007, deploy SMS 2003 SP2 today Enterprise focus driven by feedback from customers, partners, and analysts Emphasizing operational simplicity, enterprise scale, security and corporate compliance Continued long-term commitments to investment in the following areas: Lowest cost and best solution for deploying Windows and Office Strong partner ecosystem Dynamic Systems Initiative w/ support for SML Download Systems Management Server v4 Open Beta 1 today Request entry into Rapid Deployment Program by early October © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

58 For more Information Related Sessions on the MMS 2006 DVD
4/6/ :37 AM For more Information Related Sessions on the MMS 2006 DVD SY01 SMS - State of the Union SY02 Sneak Peek - System Center Configuration Manager (SMSv4) SY03 Upgrading to SMS 2003 SP2 - Overview and Best Practices SY04 What's New in SMS 2003 R2 SY05 Deploying Vista Clients with SMS 2003 SY06 Designing an SMS hierarchy for High Availability and Fault Tolerance SY08 Drilldown into System Center Configuration Manager (SMSv4) Beta 1 and Beta 1 Refresh Features SY09 SMS 2003 for Asset and License management SY21 SMS Security Patch Management at Microsoft SY22 SMS Site Planning and Deployment and Management of Advanced Clients at Microsoft SY24 SMS 2003 in a Financial Institution: Real World Implementation SY25 SMS 2003 Files : Case Studies From Premier Support SI21 Enterprise Management and Architecture at Microsoft <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

59 On-line Resources SMS Home Page System Center Family of products
System Center Family of products Community Sites MyITForum.com SMS 2003 Scripting Center SMS Download Center Webcasts © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

60 © 2006 Microsoft Corporation. All rights reserved.
4/6/ :37 AM <none> © 2006 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary. © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.

61 4/6/ :37 AM <none> © 2005 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.


Download ppt "4/6/2017 11:37 AM SMS 2003 R2 and System Center Configuration Manager 2007 Technical Drilldown Martin Dey Director, Product Marketing Windows and."

Similar presentations


Ads by Google