Kerrie Meyler, Cloud and Datacenter Management MVP, is the lead author of numerous System Center books in the Unleashed series, including Microsoft Hybrid Cloud Unleashed (2018), System Center 2012 R2 Configuration Manager Unleashed Supplement (2014), System Center 2012 Configuration Manager Unleashed (2012), and System Center Configuration Manager 2007 Unleashed (2009). She also coauthored System Center Configuration Manager Reporting (2016). Kerrie is an independent consultant with more than 20 years of information technology experience. She was responsible for evangelizing Systems Management Server (SMS) while a Senior Technology Specialist at Microsoft and has presented on System Center technologies at TechEd and MMS.

Gerry Hampson, Enterprise Mobility MVP, is a senior consultant with Ergo Group, based in Dublin. He has 20 years of technology experience and specializes in deploying Microsoft solutions. Gerry has a bachelor of engineering degree and numerous Microsoft, HP, and Cisco certifications (MCSE, MCITP, ASE, CCNA). He previously coauthored Troubleshooting System Center Configuration Manager (Packt, 2016). Gerry has a popular blog where he shares device management tips and tricks (gerryhampsoncm.[...]). He is an active member of the Windows Management Users Group and regularly presents at user group meetings and conferences in Ireland and the UK. Gerry has worked with SMS and Configuration Manager since SMS 2003.

Saud Al-Mishari is a 15-year Microsoft veteran and a Program Manager with the Enterprise Mobility and Management (EMM) group, which owns Microsoft Intune and System Center Configuration Manager. He is part of EMM’s Customer Experience Team (CXP) organization and helps Microsoft’s largest customers deploy and adopt Microsoft Intune. Saud’s career has focused on systems and device management, along with enterprise operations across various roles in consulting and support. He has worked across Europe, the Middle East, and Africa; he has spent significant time working with industry-leading companies in the UK and Saudi Arabia.

Greg Ramsey, Enterprise Mobility MVP, is the Enterprise Tools Strategist at Dell, Inc. He has a B.S. in computer sciences and engineering from Ohio State University. Greg coauthored System Center Configuration Manager 2012 R2 Unleashed, System Center Configuration Manager 2012 Unleashed, Microsoft System Center 2012 Configuration Manager: Administration Cookbook (Packt, 2012), and System Center Configuration Manager 2007 Unleashed. Greg is a cofounder of the Ohio SMS Users Group and the Central Texas Systems Management User Group.

Kenneth van Surksum, MCT and former MVP, is a trainer and managing consultant at insight24, a company based in the Netherlands. With almost 20 years of experience, Kenneth has worked with SMS 1.2 and successive versions of the product and specializes in OS deployment. Kenneth was a contributing author for System Center 2012 R2 Configuration Manager Unleashed, System Center 2012 Configuration Manager Unleashed, System Center 2012 Service Manager Unleashed, and coauthored Mastering Windows 7 Deployment (Sybex, 2011).

Michael Wiles begin working with SMS 1.1 as a Microsoft support engineer in 1997 and was a Senior Premier Field Engineer (PFE) from 2005 to 2012. He now works for NTT Data, as a Configuration Specialist Advisor, leading the infrastructure team and working on transitions and transformations with new customers at NTT Data Services. Michael was a contributing author on System Center 2012 R2 Configuration Manager Unleashed Supplement (2014).

Introduction 1
Lab Environment 4
Disclaimers and Fine Print 4
PART I: CONFIGURATION MANAGER OVERVIEW AND CONCEPTS 5
Chapter 1 Configuration Management Basics 7
10 Reasons to Use Configuration Manager 8
The Evolution of Systems Management 9
Systems Management Defined 14
Microsoft’s Strategy for Systems Management 16
Bridging the Systems Management Gap 26
The Value Proposition of Configuration Manager 27
Chapter 2 Configuration Manager Overview 29
A Journey Through Time: SMS to ConfigMgr Current Branch 29
Configuration Manager Terminology 35
What’s New in Current Branch (Through the 1710 Release) 53
Deprecated Features, Software, and Operating Systems 67
Chapter 3 Looking Inside Configuration Manager 69
Understanding the ConfigMgr Architecture 70
A WMI Primer 76
Configuration Manager and WMI 89
Inside the ConfigMgr Database 101
Status and State Messages Overview 106
Site-to-Site Replication 107
Active Directory Integration with ConfigMgr 110
PART II: PLANNING AND INSTALLATION 115
Chapter 4 Architecture Design Planning 117
Developing the Solution Architecture 117
Planning for Infrastructure Dependencies 122
Hierarchy Planning in ConfigMgr 130
Site Planning for Configuration Manager 138
Planning for Client Deployment and Settings 147
Planning for External Device Management 159
Planning for Continuous Updates 164
Planning for Restorability and Recoverability 168
Chapter 5 Network Design 173
Configuration Manager and the Network 174
Understanding Data Flows 177
Designing Intrasite Communication 179
Using Intersite Communication 182
Designing Client Communication 190
Troubleshooting Network-Related Issues 209
Chapter 6 Installing and Updating System Center Configuration Manager 217
Performing Preinstallation Tasks 218
Performing Site Installation Tasks 225
Configuring Site Properties 238
Troubleshooting Site Installation 248
Updating Configuration Manager 249
Chapter 7 Upgrading and Migrating to ConfigMgr Current Branch 255
Deciding Whether to Upgrade or Migrate to Current Branch 256
Upgrading to ConfigMgr Current Branch 256
Migrating to ConfigMgr Current Branch 263
Migrating Reports and Clients 278
Troubleshooting Migration Issues 280
PART III: CONFIGURATION MANAGER OPERATIONS 283
Chapter 8 Using the Configuration Manager Console 285
Touring the Console 286
Configuration Manager Workspaces 289
Deploying the Console 294
Using Role-Based Administration 297
Connecting to a Site 298
Personalizing the Console 298
The In-Console Alert Experience 299
Configuration Manager Service Manager 303
Using PowerShell with ConfigMgr 306
Security Considerations 308
Troubleshooting Console Issues 311
Console Logging 311
Connectivity Issues 313
Common Problems 313
Chapter 9 Client Management 315
ConfigMgr Client Agent Requirements 316
Installing, Upgrading, and Uninstalling ConfigMgr Client Agents 317
Finding Potential ConfigMgr Clients in Your Network 332
What to Know About Client Agent Assignment 343
Monitoring Client Agent Health and Activity Status 345
Understanding Client Settings 347
Using the Resource Explorer 364
Using Wake on LAN and Power Management 365
Chapter 10 Managing Compliance 371
Configuring Compliance Settings 372
Understanding Compliance Settings 374
Creating Configuration Items 378
Developing a Compliance Strategy 402
Troubleshooting Settings Management 406
Chapter 11 Creating and Managing Applications 409
ConfigMgr Applications Overview 410
Creating and Modifying Applications 415
Creating Detection Methods 427
Creating Detection Methods for Windows Installer Applications 427
Managing and Creating Global Conditions 433
Managing Application Management, Application Configuration, and Volume License Purchases 440
More About Managing Applications 447
Deploying PowerShell Scripts 457
Chapter 12 Creating and Using Deployment Types 459
Creating and Using Windows Installer Deployment Types 460
Creating and Using Application Virtualization Deployment Types 464
Using Deployment Types for Mobile Devices 470
Creating and Using Other Deployment Types 486
Chapter 13 Creating and Managing Packages and Programs 493
Understanding Packages and Programs 494
Creating a Package from a Definition File 495
Configuring Package Properties 499
Defining Program Properties 503
Creating Packages Using the Package and Program Wizard and for UNIX and Linux Systems 515
Chapter 14 Distributing and Deploying Applications and Packages 523
Creating and Managing Collections 524
Using Distribution Points 531
Deploying Applications and Packages 548
Understanding the End-User Experience 555
Monitoring and Troubleshooting 565
Chapter 15 Managing Software Updates 567
What’s New with Software Updates in ConfigMgr Current Branch 567
Creating Your Update Design 569
Planning for Software Updates 571
Configuring Components 577
Creating and Deploying Updates 594
Understanding Windows 10 Servicing 612
Client Experience 623
Troubleshooting Software Updates 629
Using the System Center Update Publisher 633
Summary 650
Chapter 16 Integrating Intune Hybrid into Your Configuration Manager Environment 651
Introducing Microsoft Intune 651
User Identity Options 655
Preparing Your Environment for Intune 656
Integrating Intune with Configuration Manager 664
Troubleshooting Intune Hybrid 674
Summary 680
Chapter 17 Managing Mobile Devices 681
Enabling Devices for Management 682
Managing Company Devices 695
Protecting Mobile Devices 697
Configuring Mobile Devices 701
Inventorying Mobile Devices 707
Deploying Apps 709
Using the Company Resource Access Workspace 714
On-Premise Mobile Device Management 718
Chapter 18 Conditional Access in Configuration Manager 723
Understanding Modern Authentication 724
Implementing Configuration Manager Policies 725
Enabling Conditional Access for Exchange Online 731
Enabling Conditional Access for SharePoint Online 737
Enabling Conditional Access for Skype for Business Online 741
Enabling Conditional Access for Exchange On-Premises 744
Monitoring and Troubleshooting Conditional Access 750
Chapter 19 Endpoint Protection 755
Protection Capabilities of Microsoft’s Antimalware Platform 756
Prerequisites for Endpoint Protection 763
Planning and Considerations 764
Deploying and Configuring Endpoint Protection 767
Monitoring and Reporting in Endpoint Protection 788
Endpoint Protection Actions and Alerts 794
Windows Defender Advanced Threat Protection 801
Windows Defender ATP Capabilities 802
Chapter 20 Configuration Manager Queries 805
Introducing the Queries Node 806
Creating Queries 809
Using the ConfigMgr Query Builder 813
Understanding Criterion Types, Operators, and Values 816
Writing Advanced Queries 822
Understanding Relationships, Operations, and Joins 829
Using Query Results 834
Using Status Message Queries for In-Depth Analysis 837
Chapter 21 Configuration Manager Reporting 843
Overview of SSRS and Configuration Manager Reporting 844
Understanding Configuration Manager Data 846
Introducing Transact-SQL 850
Building a Report Design 853
Building a Basic Report 855
Advanced Reporting Concepts 869
Chapter 22 Operating System Deployment 871
What’s New with OSD in Current Branch 872
OSD Deployment Scenarios 873
Tools Used with OSD 874
Planning for OSD 876
Using the Console 878
Using Tasks and Variables in a Task Sequence 894
Site System Roles for OSD 897
Getting Ready for Deployment 905
Creating the TS Media 912
Troubleshooting OSD Deployments 919
PART IV: CONFIGURATION MANAGER ADMINISTRATION 929
Chapter 23 Security and Delegation in Configuration Manager 931
Planning for Security and Delegation 931
ConfigMgr Security Solutions 938
About Role-Based Administration in ConfigMgr 939
Securing Administrative Access to ConfigMgr 949
Securing the ConfigMgr Infrastructure 954
Chapter 24 Backup, Recovery, and Maintenance 969
Implementing Configuration Manager Backup 970
Recovering Configuration Manager Sites 982
Maintaining a Configuration Manager Site 986
Monitoring Configuration Manager 993
PART V: APPENDIXES 997
Appendix A Configuration Manager Log Files 999
Viewing Log Files 999
Configuring Logging 1000
Client Logs 1001
Server Logs 1005
Appendix B Co-Managing Microsoft Intune and ConfigMgr 1013
Modern Management in Windows 10 1013
Defining Co-Management 1015
Configuring Co-Management in ConfigMgr 1017
Appendix C Reference URLs 1023
General Resources 1023
Microsoft’s Configuration Manager Resources 1030
Other...