System Center 2012 Configuration Manager Overview User Group June

SMS SMS 1.0 Evolution of Microsoft Client Management Client Management Infancy (NT Domain) Groups Model Comprehensive Management Laptops, Servers, Enterprise Scale Consumerization of IT Management from the Cloud

I want to connect to people and be productive anywhere, anytime Security and Access How can IT provide access to apps and data while maintaining security? How can IT support and manage all those devices? I want to use the device I prefer Challenges to Enabling Consumerization Management of diverse devices Secure, anywhere access to apps & data Application Experience Devices  User Corporate  Consumer Infrastructure Considerations

System Center 2012 Configuration Manager Empower Users Empower people to be more productive from almost anywhere on almost any device. Simplify Administration Improve IT effectiveness and efficiency. Unify Infrastructure Reduce costs by unifying IT management infrastructure.

Unify Infrastructure Reduce costs by unifying IT management infrastructure. Empower Users Empower people to be more productive from almost anywhere on almost any device. Simplify Administration Improve IT effectiveness and efficiency. Empower Users Empower people to be more productive from anywhere on any device. Application Delivery Mobile Device Management Unify Infrastructure Reduce costs by unifying IT management infrastructure. Simplify Administration Improve IT effectiveness and efficiency.

User-centric Application Delivery Administrator Empower Delivery Evaluation Criteria User Device type Network connection User/Device Relationships Primary Devices MSI App-V Non-primary Devices VDI Presentation Server Remote Desktop Deliver best user experience on each device Define application once Windows Embedded

Application “Package” User-centric Application Delivery New Application Model Keep your apps organized and managed App-V Windows Script CAB Windows Installer Empower General Information Administrator Properties End User Metadata The “friendly” information for your users (appears in Catalog) Is app installed? Deployment Type Detection Method Install Command Requirement Rules Dependencies Supersedence Command line and options Can/cannot install app Apps that must be present Application version control

User-centric Application Delivery End User Self-service IT Empower Administrators publish software titles to catalog, complete with meta data to enable search Deliver best user experience on each device Users can browse, select and install directly from Catalog Application model determines format and policies for delivery User

Unify Infrastructure Reduce costs by unifying IT management infrastructure. Reduced Infrastructure Requirements Unified Management of Virtual Clients Endpoint Protection Software Update Management Compliance & Settings Management Power Management Internet-based Client Management

Reduced Infrastructure Requirements Unify Central Administration Site Central primary site administration Reporting Primary Sites Client management and settings Delegated administration Secondary Sites Content routing Distributions points Central Administration Site Primary Site Secondary Site

CONNECTION BROKER Unified Management of Virtual Clients User-centric application delivery through App-V or Citrix XenApp. Single admin experience for managing physical and virtual desktops. Integrates with RDS and XenDesktop. Recognizes pooled and personal virtual desktops Randomizes tasks Unify HYPER-V CONFIGMGR DP/MP APP-V SEQUENCER

Security and Compliance Endpoint Protection Unified Infrastructure Simplified server and client deployment Streamlined updates Consolidated reporting Comprehensive Protection Stack Behavior monitoring Antimalware Dynamic Translation Windows and Firewall Management

Internet-based Client Management PR1 MPDP MP DP Non PKI enabled site system PKI enabled site system Unify IntranetInternet Reduced Complexity Single Primary site can manage both Intranet clients (over HTTP) and Internet clients (over HTTPS) Flexibility Primary sites can be configured to either support only HTTPS roles or both HTTP and HTTPS site roles Reliability Intelligent client behavior enables client to communicate using the most secure option available Tighter security enforcement by only allowing clients with Enterprise-issued certificates to communicate with the ConfigMgr roles

Role Based Administration FunctionalityConfigMgr 2007ConfigMgr 2012 What types of objects can I see and what can I do to them? Class rightsSecurity roles Which instances can I see and interact with? Object instance permissions Security scopes Which resources can I interact with? Site specific resource permissions Collection limiting Simplify Meg- WW Central System Administrator Louis-Software Update Manager for France Bob- US & France Security Admin Can see & update “France” desktops Cannot modify security settings on “France” desktops Cannot see “All Systems” or “U.S.” desktops Can see & modify security settings on “France” and “U.S.” desktops Cannot update “France” or “U.S.” desktops Cannot see “All Systems” Map the organizational roles of your administrators to defined security roles Security organization role Geography Reduces error, defines span of control for the organization

Summary 2007 R32012 Role-based Administration Internet-based Client Management Power Management Software Update Management Reduced Infrastructure Requirements Mobile Device Management Application Delivery Compliance & Settings Management Key Scenarios Endpoint Protection Unified Management of Virtual Clients Device Centric Operating System Deployment Asset Intelligence, Client Health, and Inventory MDM licensing User Centric Integrated New Integrated Auto Remediation Improved Empower Unify Simplify New

Single CAS replaced Central site 25k clients Per Management Point w/o NLB 25 Primaries under CAS 250 Secondary Sites under Primary Site 250 Distribution Points w/ PXE and throttling support – 5000 Max Per Hierarchy / Windows 7 w/ IIS supported Infrastructure Sizing

SCCM 2007 Summary Numbers as of May 2012 Bureau Friendly Name(s) Active Directory Domain Top LevelTier 2Tier 3 Number of Primary Sites Number of Secondary Sites Number of Distribution Points Clients Assigned Clients Installed Enabled Computer Accounts in AD ,5756,0377, ,44315,40017, ,1852,7823, ,3857,4518, ,1523,926 3,833 3, ,49322,72530, ? ? ? 1, , ,78612,50415, ,98415,63425, Total Hierarchies ,55987,009119,005 Total Sites 310 Total Primary Sites 124

TopicDetails Total Managed Clients 86,000 Separated Internal Departments 17 Distributed Locations3239 Primary Site Servers9 Child Primary Servers287 Secondary Site Servers 275 Distribution Points1258

TopicDetails Total Managed Clients 86,000 Separated Internal Departments 17 Distributed Locations3239 Central Administration Servers 1 Primary Servers15 Secondary Site Servers 100 Distribution Points3000

© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. Some information relates to pre-released product which may be substantially modified before it’s commercially released. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.