Microsoft System Center 2012 Endpoint Protection Cookbook

Hi,

I have done a book review on the Microsoft System Center 2012 Endpoint Protection Cookbook which I wanted to share with you.

The auther, Andrew Plue, has done a great job on explaining the latest and greatest anti-virus and anti-malware product of Microsoft, Endpoint Protection.

The book was published by Packt Publishing and can be found here!

Microsoft Forefront EndPoint Protection 2010 Cookbook

Microsoft Forefront EndPoint Protection 2010 Cookbook

Have fun with it, I did!

Using Application Catalog in SCCM 2012

Hi,

in the last post (here) we set up the Application Catalog Website. But it is still empty.

As stated before we can now provide software to users, and be able to approve requests.

Let’s deploy some applications.
– XML Notepad, free to use for users;
– Google Chrome, needs approval from a manager.

I have setup the 2 applications.

Application Catalog in SCCM2012

Application Catalog in SCCM2012

Now we need to deploy them.

Application Deployment - Request needed

Application Deployment - Request needed

Application Deployment - Request needed

Application Deployment - Request needed

That’s one:



Application Deployment - Request needed

Application Deployment - Request needed

Now the other. No need for administrator approval!

Application Deployment - No Request needed

Application Deployment - No Request needed

That’s two 😉

Application Deployment - No Request needed

Application Deployment - No Request needed

Oke so the Applications have been added, how does this look like from a user perspective?

The user goes to the Software Center.

SCCM2012 client start menu

SCCM2012 client start menu

Software Center

Software Center

Software Center

Software Center

All empty?! But wait there is an option ‘Track my application requests’ or ‘Find additional applications from the Application Catalog’.

Application Catalog Website

Application Catalog Website

Now i can request Google Chrome or install XML Notepad. Nice 🙂

 

 

 

Deploy Applications in SCCM 2012

Hi,

Let’s take a look at application deployment in ConfigMgr 2012.

First of all, things have changed. And for the better.
In SCCM 2007 an user would get his/her software mandatory (pushed) or published via RAP (Run Advertised Programs) or Add/Remove Programs, both found in the Control Panel. For most system administrators and users this was not so nice.

Now we still have the possibility of pushing out software, but the RAP is gone.
Actually it is not gone but replaced with something smarter, the Software Center.

So how dows this work?

  1. Create Application
    In order to deploy anything we first have to create an application.

    Create Application SCCM2012

    Create Application SCCM2012

    With the application wizard we have a few options:
    – Windows Installer (Native) –> MSI
    – Microsoft Application Virtualization — App-V
    – Windows Mobile Cabinet –> Windows Mobile
    – Nokia SIS/JAR –> Symbian sis/jar packages

    Application Wizard

    Application Wizard step 1

    The application is imported successfully.

    Application Wizard

    Application Wizard step 2

    Continue with the wizard. I have created an Administrative category “Tools”, will come in handy later 😉

    Application Wizard

    Application Wizard step 3

    And there it is, our application:

    Application Wizard

    Application Wizard step 4

  2. Deploy the application.
    Let’s deploy the application to a User Group. Nice because we set-up Active Directory with the needed Groups and now we want to use them.
    I have created a XMLNotepad collection which it filled with the Security Group XMLNotepad.

    SCCM2012 Deploy Application

    SCCM2012 Deploy Application

    Deploy Application

    Deploy Application Wizard

    This is where we set the Required or Available option, and whether to Install or Uninstall the application. Rather cool huh!

    Deploy Application Wizard

    Deploy Application Wizard

  3. See the action.
    Now log on to the client and see the Application delivery.

    So that’s pretty cool and easy!

     

     

     

     

 

 

Configuration Manager 2012 Beta 2 First Look

Hi,

Microsoft has released Beta 2 of System Center Configuration Manager 2012.
The anticipated release is Q4 of 2011, and this is a first look.

Let’s start with: I’m impressed!

Being a Beta means there are a couple of things that needs some attention:

  • The database can only be SQL 2008 SP1 with CU10 or higher (no support for SP2 or R2 yet!)
  • x64 OS (finally ConfigMgr is on the same platform as the rest of the System Center Family)
  • Ow and RAM, it needs a lot! The minimum is 2GB, but bear in mind ‘the minimum’. Running this one in a lab environment with SQL on the same machine, go for 4-6GB.

Then there are the Prerequisites:

  • .NET 3.5.1
  • .NET 4.0
  • RDC (Remote Differential Compression)
  • BITS (Background Intelligence Transfer Service)
  • IIS Role Service –> IIS 6 WMI Compability

And WSUS 3.0 SP1 if you want to manage Software Updates with SCCM 2012 (and you want that, don’t you?).
One thing that directly caught my attention, no more need for WebDAV, nice.

After the installation fire up the Console:

SCCM 2012 UI

SCCM 2012 UI

Wow!

SCCM 2012 Ribbon

SCCM 2012 Ribbon

First thing that is cool, the ribbon is fully integrated throughout the product. It takes some time to get used to it, but it saves a lot of ‘right-clicks’. Very handy.

So now what?

Clicking through the console you can see the shift towards User Centric Management. This means putting the User first then the Systems. And that’s eventually what it is all about.
We need to support Users in their jobs, providing them with the right tools to do their work.

Also there is Role-Based Security, no more full console with no rights. If you are assigned a role, you will just see what you need to see, uh cool and handy!

RBAC

Role-Based Access Control (RBAC)

Efficient Application Management.

Sounds cool, but what is it? It means that a single application can now be deployed with multiple deployment methods!
So let’s say you have an application XYZ. You want to deploy this application to your Baseline desktop PC’s as a native application,  stream it as an App-v program to your Laptops and make it available as an Remote Desktop Application when an user logs on to a server. All from 1 application, nice!

To uninstall applications SCCM 2012 now uses ‘retirement’, the application can also be ‘reinstated’.

Retired Application

Retired Application

Reporting.

Reporting is taken out of SCCM 2012 and is done by SQL 2008 by means of Reporting Services. This is how it should be. Of course in SCCM 2007 it was also possible, but in SCCM 2012 the Reporting Point does no longer exists.
And, of course, there are standard more reports 😉
(411 in SCCM 2012 B2 to 389 in SCCM2007R3)

Reports

This was the very first peek in SCCM 2012 B2, more to come!