TechEd 2013 12/31/2018 12:47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered.

TechEd 2013 12/31/ :47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

How Microsoft IT Uses System Center 2012 Configuration Manager
12/31/ :47 PM WCA-B307 How Microsoft IT Uses System Center 2012 Configuration Manager Karthik Jayavel Dharmendra Thotakura © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Session Objectives and Takeaways
Tech Ready 15 12/31/2018 Session Objectives and Takeaways Session Objectives Share real world deployment experiences of System Center 2012 SP1 Configuration Manger Explain how Microsoft uses the new features in System Center 2012 SP1 Configuration Manager Key Takeaways Lessons learned from deploying System Center 2012 SP1 Configuration Manager Understand the value of new features in System Center 2012 SP1 Configuration Manager © 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Features and Solutions Used
TechReady 16 12/31/2018 Features and Solutions Used Orchestrator Runbooks Macintosh Client Management Modern Application Distribution Intune Connector Automatic Client Deployment User Centric Application Delivery © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Infrastructure Experiences Real World @ Microsoft IT

Unified Management Infrastructure @ Microsoft IT
MS Online Directory Services (MSODS) AD Active Directory Federation Server 2.0 Infrastructure 6 Primary Sites 13 Secondary Sites 250 Distribution Points User Discovery corp domains MS Online Directory Sync (DirSync) PCs & Devices ~300,000 clients ~125k mobile devices Intune Subscription Users ~98k FTEs ~82k Vendors Connector Site role Unified Device Mgmt Site ~98K devices * Redmond Site 1 75k Clients Redmond Site 2 75k Clients North & South America 35k Clients Europe, MidEast, Africa 40k Clients Australia & Asia 75k Clients *projected device count

SP1 Infrastructure Upgrade High level Overview
Used Orchestrator Runbooks Almost zero touch upgrade experience To kick off & monitor execution units (tasks) on target servers to be upgraded To leverage existing scripts & create new ones Task Configuration File Run (Task Location, Command, Parameter Variables), Expected Output, Run Order, Success Criteria One time creation of automation types / versions of product (CM12 SP1 Upgrade, New CM07 Infra w/WSUS 3.0 SP2, New CM12 SP1 Infra) Used Configuration Files as Input for Runbook < > Build Configuration File Where to run, Parameters, Start Task ID, Stop Task ID, Execute (Yes/No) Wednesday, June 27th, 2013 | 5:00 PM- 6:15 PM WCA-B327- Microsoft IT: How We Upgrade Microsoft System Center - Configuration Manager Hierarchy (Almost) Every Month Using Orchestrator Automation More In Depth Session: WCA-B327

Client Upgrade Experiences

Automatic Client Upgrade
Automatic Client Upgrades Key Benefits Both Client Push and Software Distribution based upgrades have Administrator overhead Provided a simple and automatic method for upgrading clients Ensured clients remained at a minimum baseline client version Ensured pre-reqs and language packs serviceability Publishing new client via WSUS may cause server overload Upgrades any clients less than hierarchy version to minimum client version Provide an automatic deployment mechanism to distribute client language packs Simple, Easy, and Automatic Automatic Client Upgrade

Automatic Client Upgrades Enabled
Status via Console Numbers of days allotted When: Modified Date Who: Modified By What: Client Version Baseline

Sequence of Events Detailed Steps Scheduled Task cv
Enable Client Automatic Upgrade All systems receive new policy All systems run required (hidden) deployment for upgrade package “Ccmsetup.exe /autoupgrade”, only this package is downloaded which is <1mb Ccmsetup create scheduled task to execute based on “days to upgrade” value specified in console Schedule task executes with callback to ccmsetup, if prereqs are needed it is at this time they are downloaded Ccmsetup executes performing upgrade using last executed command lines parameters Scheduled task deleted, ccmsetup.exe and ccmsetup.cab moved to cache folder 1 1 3 3 4 4 Scheduled Task

Demo: Client Upgrades Using Auto Deployments
Dharmendra Thotakura

Automatic Client Upgrades @ Microsoft IT
TechReady 16 12/31/2018 Automatic Client Microsoft IT Enabled for ~270,000 clients geographically distributed across five primary sites © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Auto Client Upgrades Note Worthy Items
If the scheduled task executes while device is disconnected then the task will fail The last successfully executed command line will run Client health remediation will not cause pending auto upgrade to cancel. Only another client deployment request will cause scheduled tasks to cancel Auto upgrade will not run if system is on a slow or unreliable network. It will show as waiting for content Client automatic upgrade can not be used to deploy Configuration Manager updates If days to upgrade are past the deadline then all clients past the days to upgrade will upgrade within 24 hours If an Embedded system goes into a servicing maintenance window the client will be upgraded for those systems that have write filters enabled

Application Management

Modern Application Delivery
Advanced Modern Device Management Native management of Windows RT, Windows Phone 8 and iOS through Windows Intune Unified Management Simplified Administration Experience Single pane of glass: Manage app deployments to modern devices through integration with the ConfigMgr SP1 admin console Administration Windows RT Windows Phone 8 iOS Available user targeted apps  DeepLink support In console deployment monitoring

Windows 8 Side-Loading Requirements
Enterprise Client SKU Machine must be domain joined OR requires special key to enable side-loading Enable policy (GP) for “Allow all trusted apps to install” Other Client SKUs (Windows 8 Pro & Windows RT) Requires special key to enable side-loading Domain join on the Pro SKU does nothing for side-loading All Server SKU’s Machine must be domain joined – no separate “activation” via special key supported currently

Building and Deploying Windows 8 LOB
TechReady 16 12/31/2018 Building and Deploying Windows 8 LOB Enterprise builds LOB app or gets app from ISV outside of the store Build 1 Certify Certify LOB app using Windows App Certification kit 2 Sign Sign with Enterprise trusted cert Publisher name in the certificate and package must match 3 Deploy Deploy using System Center 2012 Configuration Manager SP1 4 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Demo: Modern Apps Dharmendra Thotakura

Application Virtualization @ Microsoft IT
App-V in ConfigMgr SP1 Virtual Application Connection Next Generation DSC Packages can be deployed in multiple Virtual Application Connection Groups Configuration is separate from packages App-V 4.6 SP2 Support Needed for Windows 8 Same Feature Functionality App-V 5.0 New Deployment Type for App-V 5.0 Applications Integrated with App-V Connection group Integrated w/ App-V Mgmt. Server and ConfigMgr Create and configure via Server User Interface or PowerShell Know the dependencies Manage in Standalone Mode Can use PowerShell to create and manage Supported Configurations Applications + Plugins Applications + Middleware Applications + Applications App-V 4.6 SP2 and App-V 5.0 can coexist for easy migration!

Migration from App-V 4.6 and Configuration Manager SP1
Convert Packages to App-V 5.0 2 Deploy the App-V 5.0 client via Configuration Manager 3 Copy App-V apps, create App-V 5.0 DTs and supersede 4 Create Virtual Environments 5 Deploy App-V apps

MAC and Device Management

Mac Management @ Microsoft IT
TechReady 16 12/31/2018 Mac Microsoft IT Pilot Overview Collaborated with Microsoft IT certificate team to obtain appropriate user cert Leveraged user enrollment model for Mac agent installation Automated ConfigMgr SP1 agent installation using a custom script to reduce actions from user side New GUI is part the product to support user based Mac device enrollment Agent Installation 1 Certificate Enrollment 2 Machine Reboot 3 Deployed Skype and SCEP via Software Distribution deployments Deployed below Microsoft IT security policies to all enrolled Mac machines Policy Setting Screen Saver Idle Time 900 (Seconds) Require Password at Screen Saver Yes Password Strength Alphanumeric Required: Yes MinChars=8 MaxFailedLoginAttemps=8 MaxDaysUntilChangePassword=70 © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Mac Management Food For Thought
Key Benefits Provides Microsoft IT an on-prem native management solution for managing Mac’s across the Yammer, Skype and MacBU/Apex business groups Less complex network design as Device Management Point is not internet facing Met Corp Security requirements by driving the Product Team to leverage user cert based enrollment vs. machine cert based enrollment Note Worthy Items Mac’s in Microsoft IT are not domain joined Devices need to be corpnet connected Published Mac agent bits and script on boundary servers Changed client settings using Settings Management Deadline time for software distribution: 120 minutes Reboot delay: 60 minutes

Unified Device Management Scope @ MSIT
Windows Phone 8 Current: 5000 Planned: 24k Windows RT Current: 900 Planned: 19k Apps Published 9 WP8 LOB 1 Deep Linked 45 WinRT Apps 2 Deep Linked Device Enrollments and Modern Apps Android EAS Only

Unified Device Management
TechReady 16 12/31/2018 Unified Device Management Note Worthy Items Corporate Security EAS policies enforced via Settings Management Exchange connector used to consolidate inventory and merge device records Company portal and WIPE scenarios evaluated for Windows Phone 8 and Windows RT devices End user education provided via enrollment and Microsoft IT work smart guides Created FAQs and support guides for Help Desk and Microsoft Tier 2 support teams Microsoft IT broad device management communications/enrollments is ongoing Developed custom reports and Dashboards to provide a consolidated view of enrolled devices © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Custom Reports

Wake Up Proxy Implementation

Wake Up Proxy - Implementation
1 Enabled Wake Up Proxy agent installation using custom client agent setting 2 Identified DA gateway address and configured 3 Traced network performance after Wake Up Proxy agent installation during pilot 4 Targeted Wake Up Proxy agent on regions having high opt out: 16k machines 3 random machines will always be awake Ping should be enabled in the network Food For Thought

Food For Thought Additional Useful Information & Resources
TechReady 16 12/31/2018 Food For Thought Additional Useful Information & Resources ConfigMgr 2012 SP1 is now supported on SQL 2012 with a minimum cumulative update of CU2 and not supported in SQL 2012 SP1 Cumulative Update 1 for System Center 2012 Configuration Manager Service Pack 1 - Reports improvement in SP1 for using role based administration defined in console If you love automation, then don’t forget to check out 471 Configuration Manager SP1 PowerShell Cmdlet available here Explore Pull Distribution Point for Content Management and to save WAN traffic cost for sites saving large distribution points New updated toolkit for SP1 for additional add on such as content library transfer etc. download from here: © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources Additional Resources
TechReady 16 12/31/2018 Resources Additional Resources Microsoft IT Windows Phone 8, Windows RT and iOS enrollment guides: Makeappx and signtool article : © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

In Review Session Objective Key Take Away
Share real world deployment experiences of System Center 2012 SP1 Configuration Manger Explain how Microsoft uses the new features in System Center 2012 SP1 Configuration Manager Key Take Away Apply lessons learned from deploying System Center 2012 SP1 Configuration Manager Plan to implement new features in System Center 2012 SP1 Configuration Manager

TechReady 16 12/31/2018 Related Content WCA-B327 - How Microsoft IT Upgrades System Center Configuration Manager 2012 Hierarchy with System Center Orchestrator Automation WCA-B304 - Application Delivery with Microsoft System Center SP1 - Configuration Manager and Windows Intune WCA-B348 - What's New in Infrastructure: Microsoft System Center 2012 SP1 - Configuration Manager Infrastructure Improvements and Hierarchy Design © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

More Information System Center in Action Site
TechReady 16 12/31/2018 More Information System Center in Action Site Technical Case Study: How Microsoft IT Deployed System Center 2012 Configuration Manager Technical Case Study: User-Centric Client Management with System Center 2012 Configuration Manager in Microsoft IT Shitanshu Verma’s Blog © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Resources Learning TechNet msdn http://channel9.msdn.com/Events/TechEd
12/31/ :47 PM Resources Learning Sessions on Demand Microsoft Certification & Training Resources TechNet msdn Resources for IT Professionals Resources for Developers © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Evaluate this session Scan this QR code to evaluate this session.
12/31/ :47 PM Required Slide *delete this box when your slide is finalized Your MS Tag will be inserted here during the final scrub. Evaluate this session Scan this QR code to evaluate this session. © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12/31/ :47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION. © 2010 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

TechEd 2013 12/31/2018 12:47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered.

Similar presentations

Presentation on theme: "TechEd 2013 12/31/2018 12:47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered."— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

TechEd 2013 12/31/2018 12:47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered.

Similar presentations

Presentation on theme: "TechEd 2013 12/31/2018 12:47 PM © 2013 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered."— Presentation transcript:

Similar presentations

About project

Feedback