Embed Size (px)
Citation preview
Jeff Wettlaufer, Sr. Product Manager System Center Configuration Manager 2007
System Center Configuration Manager 2007: Overview
Session Objectives And Takeaways
Session Objectives This is not your Dad’s SMSTo show our range of new features, new services, new abilities, and improvements from SMS 2003
SCCM is THE way to deploy Vista and Office 2007SCCM is your Management Tool of choice for your offering developmentWe are Enterprise scaleWe are a platform for you and your customers
SCCM 2007 Releases
RTM – Summer 2007Beta 2 – Releases end of February, 2007
Beta 1 Refresh – Released in July, 2006Same features from Beta 1, plus added OS deployment of Vista Beta 2, added NAP integration with Longhorn Server, and SMS Administrator Console performance improvements
Beta 1 – Released in February, 2006Contained SMS 2003 functionality with a new SMS Administrator Console, branch distribution point support, ITMU, and the OSD and Device Management Feature Packs integrated
Pre-requisite checker in setup Auto-create rules from “last usage inventory” data
Internet-based client management SQL Server 2005 clustering & named instances
Native security mode OS deployment support for Vista RTM
Desired Configuration Management
Backup and Recovery based on VSS
Binary delta replication SMS sites and services are down for minutes instead of hours
Wake on LAN MOF changes automatically compiled on all clients
Last usage inventory Multiple MOFs to separate custom data from default data
AD System & User Discovery New SMS Remote Control protocol using Vista technology
ConfigMgr Key Investments
Configuration
Security
Simplicity
Deployment
SimplicityUp and running in minutesSimplified UIAdvanced Task SequencingReduced SCCM infrastructure costs with branch office supportImproved scheduling and greater control including Wake-on-LANCommon processes for Windows Mobile and embedded device
DeploymentUnified delivery of Windows operating system for clients and serversOne worldwide image to manage with VistaBuilt on Windows Vista technologies including Windows ImagingVista and Office 12 upgrade assessment and resolution planningOffline media support for full offline provisioning
SecurityIntegration with “Longhorn” Network Access ProtectionSimplified, comprehensive software updating w/ templates for common tasksEnterprise Vulnerability assessmentSecurely managing devices across the InternetSecure network storage of user state during Operating System deployment
ConfigurationKnowledge-driven desired configuration management based on the System Definition Model (SDM)IT policies for analyzing corporate and regulatory compliance Out of the box configuration policies for server workloads i.e. ExchangeLicense and asset management
ConfigMgr Server Roles
SQL Server
SQL Server
SCCM Primary Site Server
SCCM MP
SCCM SLP
SCCM RP
SCCM DP
SCCM SMP
SCCM PSP
SCCM SUP/WSU
S
SCCM FSP
SCCM SHV
Primary Site
Secondary Site
MP - Management Point
SLP - Server Locator Point
RP - Reporting Point
DP - Distribution Point
Branch DP
SMP - State Migration Point*
Branch DP - Branch Office DP*
SUP - Software Update Point*
FSP - Fallback Status Point*
SHV - System Health Validator*
PSP - PXE Service Point*
* Denotes new server role
Administrative UI - New & Improved
Feature SMS 2003 SCCM 2007
Drag-and-Drop No Yes
Multi-select No Yes
Actions Pane No Yes
Preview Pane No Yes
Wizards Not Many Pervasive
Homepages No Yes
Icons NT 3.51-style High Precision
Folders Only organizational, no replication Organizational and Search Folders; replication to child sites
• Managed code (C# / .NET 2.0)• Leverages MMC 3.0• Uses WMI/DCOM for communication with provider• Extensible via SDK
SCCM ‘07 Admin UI
Jeff Wettlaufer, Sr. Product Manager System Center Configuration Manager 2007
Demo
New FeaturesCopy Package WizardMaintenance WindowsBranch Support
ImprovementsImproved Package cache controlBinary delta replicationClient BrandingWake on LAN
What’s changed in Software Distribution?
Device Management - Core Scenarios
Device = CE, PPC, Windows Mobile (SmartPhone)
Basic Management Hardware/Software inventoryFile collectionSoftware distributionSettings management - Password policy management, Security policy management
Support for SmartphoneOver-the-air management of devicesConnection Management
Internet Based ManagementFallback Status Point
LOB Device ManagementCE on ARM at RTM
DeploymentAutomated client distribution via SMS Advanced Client desktopFull integration with SCCM 07Over-the-air client upgrade
ConfigMgr 2007 OS DeploymentThe way to deploy Vista/LH in an enterprise
Major upgrade to OS deployment functionality
Significant enhancements from SMS 2003 OS Deployment Feature PackBrings in server deployment from ADS
Integrated part of ConfigMgr 2007Simplify planning for Vista/LH upgradeUnified client and server deploymentUse Vista/LH toolsEnhanced security
What’s New in ConfigMgr OSD?
ScenarioSMS 2003 OSD
FP ConfigMgr OSD
End-to-end deployment Yes Yes
Fully automated Yes Yes
Wipe-and-load upgrade Yes Yes
Bare metal deployment w/PXE Loose integration w/RIS
Built-in integration w/WDS
Side-by-side BDD scripts Yes, w/built-in SMP
Fully offline deployment No Yes
Integrated Vista upgrade planning
No Yes
Full server deployment No Yes
Security Good Much stronger
Flexibility/customizability Good Excellent
Vista/LH compatibility Good Excellent
Device driver management No Yes
Internet Based Client Management
Manage clients without a VPNRoad Warriors (Sales force, Consultant)Point Of Sale (Restaurant, Retail store, Gas station)Employee’s home computersRoam in and out intelligently
Converge with standards based technology
PKI for certificate managementSSL/TLS for secure HTTP communicationFirewall for SSL termination
“Deliver a secure and reliable infrastructure to enable IT administrators in an enterprise to manage computers on the internet with the same level of control as computers on the intranet.”
SCCM Network Access Protection
`
Primary Site
Health Registration Authority
Network Policy Server : SHV
XX
DP
Quarantine Restricted Network
Boundary Network
Protected Network
Microsoft Update
MP
AD
Download Updates to Site Server
Publish Health State in Active Directory
Retrieve Health State Policy
Send Statement of Health for Evaluation
Download New Policy
Install Required Updates
Healthy Client
Deploy Updates to DP
Desired Configuration Management
VisionDefine configuration baselinesIdentify required and prohibited configurationsAudit compliance of Windows systems
Core ScenariosDetect configuration “drift”Improve Helpdesk troubleshooting and “time-to-resolve” Regulatory compliance reportingChange verification
Overview: DCM Terms And Concepts
Configuration Item (CI)Units of configuration that can be detected, applied, and removed from ConfigMgr managed machines
Application CIOperating System CIGeneral CISoftware Updates CI
Configuration BaselineA complex type of CI composed of other CIs which are:
RequiredOptionalProhibited
Can be assigned to collections for compliance monitoring
SCCM '07 Desired Configuration Management
Jeff Wettlaufer, Sr. Product Manager System Center Configuration Manager 2007
Demo
Software Update Management
Compliance assessmentSecurity updates / vulnerability assessmentApplication updates
Update deploymentFull Microsoft update contentZero-day and routine deploymentsSimplified admin experience
Also manage non-Microsoft software updatesOEMs and software vendors (ISVs)Internally-developed applications
Software Update Management
WSUS Integration
Software Updates use DCM channel
Custom Updates integrate into SCCM
Core Engine
Taking advantage of all Microsoft Update content
SCCM clients no longer using offline catalog (wsusscan.cab)
Software Distribution and Software Updates no longer compete
Update compliance through state messages alleviates pressure on hardware inventory
Allows for third party or LOB updates to be created outside of the Microsoft patch process and added to scan catalog
Authorization lists
Bundled updates
Custom severity categories
Simplified Wizard using template
Selective download of binaries
Software Update Integration into Management
Jeff Wettlaufer, Sr. Product Manager System Center Configuration Manager 2007
Demo
Remote Control: What’s New
Completely rewritten!Significantly faster performanceUsing Vista native “collaboration” technology
Back-ported to Windows XP and Windows Server 2003Underlying protocol: RDP
Same basic functionality as SMS 2003:No need for end-user acceptance of new session
NEW! 3 levels of accessFull controlView onlyNone
Still integrated with Remote Assistance
Miscellaneous
InventorySMS 2003 SP3 AssetMetrix features addedLast Usage InventoryAuto-created Metering Rules from this
DiscoveryDiscover “Extended AD Attributes”Pre-populated with default attributesAbility to add additional attributes to discover
Supports hosting SCCM 2007 Site DB on SQL 2005 Clustered ServerVSS-based backup
Services off-line for minutesSnapshot data moved to backup location
Summary
SCCM 2007 is a major upgrade of SMS functionality that provides features for
Network Access ProtectionOS DeploymentInternet-based client managementWSUS integration for software update managementDesired configuration managementService windows/collection variablesDevice management of Smartphones over the air
SCCM 2007 beta 2 is full featuredAvailability in Q1 of 2007
Join the open beta and evaluate the changes!Interested in RDP? Email
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.
The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the
date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.
