System Center Configuration Manager и как с ним бороться

Microsoft Endpoint Configuration Manager — видео:

• Deploy and manage updates for Windows 10 and Office;
• Enabling remote management: Cloud Management Gateway, Cloud Attach;
• Microsoft Endpoint Manager Configuration Manager Deep Dive.

Microsoft Endpoint Manager — видео:

• Endpoint analytics: putting the end-user experience front and center;
• Unify endpoint security with Microsoft Endpoint Manager and MDATP;
• Teams Deployment and Microsoft End Point Manager;
• What’s new in Microsoft Endpoint Manager. Part 1;
• What’s new in Microsoft Endpoint Manager. Part 2;
• Surface Security: Chip to Cloud Modern Endpoint Protection from Microsoft;
• Zero Touch Deployment with Surface & AutoPilot;
• Enable security and productivity using Microsoft Endpoint Manager;
• Microsoft management tools to secure and manage work from home;
• Managing Android devices with Microsoft Endpoint Manager;
• Managing Apple devices with Microsoft Endpoint Manager;
• Managing Windows devices with Microsoft Endpoint Manager;
• Setting up Windows Update for Business via Microsoft Intune;
• Securing Teams with Microsoft Endpoint Manager;
• Modern policy management for security and productivity;
• Microsoft Endpoint Manager Reporting Graph APIs and Log Analytics;
• What’s new in Microsoft Intune for Education;
• Deep dive into Role Based Access Control (RBAC) in Intune;
• Flexible paths to cloud management with Microsoft Endpoint Manager;
• Intune App Protection Policies with policy assurance;
• Eliminate on-premises print servers with Universal PrintDiscussion Options;
• Configuring zero trust with Microsoft Endpoint Manager;
• Get started with Microsoft Endpoint Manager.

Microsoft Endpoint Manager — интерактивные гайды:

• Manage and protect Mobile and Desktop Applications with Microsoft Endpoint Manager;
• Manage devices with Microsoft Endpoint Manager;

Разное:

• Enable a combined MFA and SSPR registration experience in Azure AD;
• Best practices for deploying Microsoft 365 Apps;
• Monthly Windows update delivery: remote work & business continuity;
• Plan to deploy and manage updates for Windows 10 and Office;
• Tips for managing Windows 10 and Office updates for remote devices;
• Prepare to deploy and manage updates for Windows 10 and Office;
• Windows updates and recovery: smooth + seamless = happy IT and happy users;
• On-premises Windows update management: what’s new, what’s changed.

Intune:

• macOS device management with Microsoft Intune (видео);
• Managing Surface UEFI BIOS settings with Microsoft Intune (слайды, видео);
• One browser for modern and legacy web apps: Deploying Microsoft Edge and Internet Explorer mode (слайды, видео);
• Protected, productive mobile browsing with Microsoft Edge mobile and Microsoft Intune (слайды, видео);
• Reaching for the cloud: Group Policy transformation to MDM with Microsoft Intune (слайды, видео);
• Run your own Windows Insider Program with Group Policy and Intune (видео);
• Supercharge PC and mobile device management: Attach Configuration Manager to Microsoft Intune and the Microsoft 365 cloud (видео);
• How Microsoft uses Intune internally to manage Windows devices (слайды, видео);
• Keep it simple: the unified administrative experience in Microsoft Endpoint Manager (слайды, видео);
• Deep dive: Group Policy transformation to MDM with Microsoft Intune (видео);
• Extend mobile threat protection to bring-your-own-device (BYOD) users (слайды, видео);
• Android device management with Microsoft Intune (слайды, видео).

Autopilot:

• Modern Windows 10 and Office 365 Deployment with Windows Autopilot, Desktop Analytics, and Microsoft Endpoint Manager (видео);
• Windows Autopilot: White glove pre-provisioning (слайды, видео);
• Windows Autopilot: What’s new, what’s coming, and tips for a smooth rollout (видео).

Configuration Manager:

• Run your own Windows Insider Program with WSUS and Configuration Manager (видео);
• Using Desktop Analytics and Configuration Manager to reduce Windows TCO through data-driven insights for management, servicing, and support (видео);
• What’s new in Microsoft Endpoint Manager, including Microsoft Intune and Configuration Manager (Part 1 of 2) (слайды, видео);
• What’s new in Microsoft Endpoint Manager, including Microsoft Intune and Configuration Manager (Part 2 of 2) (слайды, видео);
• Best practices for compatibility assessment and Microsoft Office 365 ProPlus upgrades using Office Readiness in Configuration Manager (видео).

Разное:

• Strategic and tactical considerations for ring-based Windows 10 deployments (видео);
• Streamline and stay current with Windows 10 and Office 365 ProPlus (видео);
• Surface and Microsoft 365 – Securing Today’s Modern Enterprise Endpoint (слайды, видео);
• Surface Autopilot: The easiest deployment for today’s mobile workforce (слайды, видео);
• Why Windows 10 Enterprise and Office 365 ProPlus? Security, privacy, and a great user experience (видео);
• How to capitalize on the best of Microsoft 365 with Microsoft Surface (видео);
• How to manage Windows 7 Extended Security Updates (ESUs) for on-premises and cloud environments (видео);
• EXAM PREP: MS-101 | Microsoft 365 Mobility and Security (слайды, видео);
• Best practices for deploying and managing Microsoft Office 365 ProPlus (слайды, видео).

Intune:

• Running the Intune Service: automation, auditing, reporting, and roles;
• Improve user experience and secure access to company resources with Microsoft Intune;
• What’s new in Windows 10 mobile device management (MDM);
• Understanding the platforms managed by Microsoft Intune to build mobility solutions;
• Simplify user adoption and increase data security with Microsoft Intune;
• Learn how to leverage Intune support for Microsoft Graph and PowerShell to enable powerful automation and IT security;
• Shared devices for kiosk and Firstline Workers with Windows 10 and Intune;
• Leveraging the Microsoft Store for Business private store with Intune;
• Prepare your organization for Android enterprise management with Microsoft Intune;
• Manage and secure iOS and MacOS devices and apps with Microsoft Intune;
• Managing devices with Microsoft Intune: What’s new and what’s next;
• Specialized device deployments for Windows 10 with Microsoft Intune;
• Deep dive into evolution of Windows app management with Intune;
• Lessons from the field: protecting corporate data on any device with Microsoft Intune;
• Intune for Education, how it works in a School;
• Get started with Intune application protection and conditional access in 20 minutes;
• Fast, easy, and secure provisioning for corporate devices using Microsoft Intune;
• Deep insights and custom reports with Microsoft Intune Data Warehouse.

SCCM:

• Attach the power of Microsoft 365 cloud management and security to Configuration Manager (SCCM);
• A day in the life of an OSD guru;
• What’s new in System Center Configuration Manager;
• Updating your existing Configuration Manager apps to MSIX;
• Expert-level Windows 10 deployment;
• Deep dive into Configuration Manager infrastructure simplification with the cloud;
• Configuration Manager Product Team Chalk Talk.

Autopilot:

• Modern deployment with Windows Autopilot and Microsoft 365 (Part 1 of 2);
• Modern deployment with Windows Autopilot and Microsoft 365 (Part 2 of 2);
• Embracing modern management with Microsoft 365.

Разно-полезное:

• Ask the experts: Successfully deploying, servicing, and managing Windows 10;
• What’s new in Windows Analytics: An introduction to Desktop Analytics;
• Transition to cloud-based management of Windows 10 and Microsoft Office 365 ProPlus with EMS;
• Modern desktop deployment and management with Microsoft 365;
• Managing your deployments with Desktop Analytics;
• Deploying Windows 10 in the enterprise using traditional and modern techniques;
• Deploying Windows 10: Making the update experience smooth and seamless;
• Delivery Optimization deep dive: How to reduce internet bandwidth impact on your network.

За последний год накопилась куча ссылок и наконец-то дошли руки опубликовать.

Книги:

• System Center Configuration Manager Current Branch Unleashed;
• Deploying Configuration Manager Current Branch with PKI — Step by Step;
• Deploying Microsoft System Center Configuration Manager;
• System Center Configuration Manager administration e-book.

Windows 10:

• Lynda — Windows 10: Plan and Implement Software Updates;
• Lynda — Windows 10: Provision and Manage Mobile Devices;
• Lynda — Windows 10: Deploy and Manage Virtual Applications;
• Lynda — Windows 10: Plan Desktop and Device Deployment;
• Lynda — Windows as a Service: Planning Deployment;
• ELEU17 — Windows 10 servicing — do’s and don’ts.

ConfigMgr:

• TrueSec — Manage ConfigMgr Internet clients with the Cloud Management Gateway;
• Lynda — Microsoft System Center Configuration Manager Essential Training;
• Packt — Implementing Configuration Manager Features;
• Packt — Managing Mobile Devices with Configuration Manager System Center Current Branch;
• ELEU17 — Are you Afraid of Configuration Managers Power;
• ELEU17 — OSD Front-Ends;
• ELEU17 — OMS and ConfigMgr;
• ELEU17 — ConfigMgr Client Health Strategies;
• ELEU17 — What’s new in the World of Enterprise Client Management.

Intune и Microsoft 365:

• Lynda — Microsoft Enterprise Mobility Suite: Management and Security;
• Lynda — Microsoft Cloud Services: Administering Office 365 and Intune;
• Lynda — Learning Microsoft Enterprise Mobility Suite;
• Lynda — Windows 10: Intune Device Management;
• TrueSec — Understanding, Configuring, and Troubleshooting Windows AutoPilot;
• ELEU17 — Conditional Access with Azure AD and Intune.

Разное:

• Lynda — Learning System Center 2016 Endpoint Protection;
• Lynda — Microsoft Cybersecurity Stack: Identity and Endpoint Protection Basics.

Windows Defender Advanced Threat Protection:

• Automated response with Windows Defender ATP;
• Windows Defender ATP now extends beyond Windows clients;
• Windows Defender ATP machine learning: Detecting new and unusual breach activity;
• Next-gen preventative protection with Windows Defender Advanced Threat Protection.

Windows 10:

• Windows Analytics: Proactively remediating end-user impacting issues with Device Health;
• Deploying Windows 10: An overview of what’s new and future direction;
• Servicing Windows 10: Understanding the Windows as a service process and improvements;
• How Microsoft deploys Windows 10 and implements Windows as a service internally;
• Enhance your security posture on Windows 10;
• Next-Gen AV: Windows Defender Antivirus unleashed;
• How to design and complete your successful move to Windows 10 and WaaS;
• Deploying and managing Windows Defender application control in the real world;
• Learn how to service Windows 10 using Windows Update for Business;
• Architect a modern and secure desktop for your organization;
• An overview of Windows Analytics: New tools to help improve Windows experiences;
• New modern management features for IT pros;
• Reducing the network impact of Windows 10 feature and quality updates;
• Make Windows devices more secure by taking them out of your existing infrastructure;
• Deploy & manage Windows Enterprise subscriptions just like O365 using the cloud;
• Deploying Windows 10: User-driven cloud deployment with Windows AutoPilot;
• Manage Windows devices in the complex hybrid cloud world of today.

Microsoft Intune:

• Mobile device and app management overview with Microsoft Intune;
• Use MDM Migration Analysis Tool to accelerate move from group policy to MDM.

ConfigMgr:

• How to achieve “stress-free OSD” with Windows 10 and Microsoft System Center;
• Deploying and updating Office 365 ProPlus using System Center Configuration Manager;
• System Center Configuration Manager overview and roadmap.

Azure Active Directory:

• Productivity and protection for your employees, partners, and customers with Azure Active Directory;
• Windows devices in Azure Active Directory: Why should I care?;
• Shut the door to cybercrime with Azure Active Directory risk-based identity protection;
• Surviving identity management in a hybrid world;
• Managing enterprise applications, permissions, and consent in Azure Active Directory;
• Azure Active Directory best practices from around the world.

Microsoft Cloud App Security:

• Microsoft Cloud App Security deep dive: Learn how to deploy and manage.

Microsoft Advanced Threat Analytics:

• Deploy and get started with Microsoft Advanced Threat Analytics;
• Protect, detect and respond to cyber-attacks with threat protection;
• Learn About Microsoft Advanced Threat Analytics Futures.

Azure Information Protection:

• Protecting complete data lifecycle using Microsoft information protection capabilities;
• Accelerate Azure information protection deployment and adoption;
• Deploying and managing Windows Information Protection (WIP) with Azure Information Protection;
• Discover what’s new in Azure Information Protection and learn about the roadmap and strategy.

Microsoft Enterprise Mobility + Security:

• Secure access to Office 365, SaaS and on-premises apps with Microsoft Enterprise Mobility + Security;
• Build applications to secure and manage your enterprise using Microsoft Graph;
• Overview: Modern Windows 10 and Office ProPlus management with Enterprise Mobility + Security;
• Modernize deployment & servicing of Windows 10 & Office ProPlus with Enterprise Mobility + Security;
• Manage mobile productivity with Microsoft Enterprise Mobility + Security (EMS).

На прошлой неделе я выступал с докладами на конференции AzureDay 2017 в Киеве. Спасибо всем пришедшим!

• Защита корпоративных ресурсов и информации при помощи Azure;
• Управление устройствами и мобильными приложениями при помощи Azure Intune.

Несколько раз звучал вопрос: «А можно ли это бесплатно попробовать?». Есть несколько вариантов потренироваться с Azure Intune перед реальным внедрением:

• 90-дневные пробные лицензии Microsoft Enterprise Mobility + Security;
• годовая подписка Microsoft Cloud Essentials, позволяющая учиться работе с облачными сервисами;
• лабораторная работа Getting Hands-on with Microsoft Enterprise Mobility + Security с живым инструктором.

Всё, что вам нужно для последнего варианта — это четыре часа свободного времени и браузер с интернетом. В августе я прошёл эти лабораторные работы и имею только положительные впечатления.

После теоретической части вы получаете логин/пароль для доступа к лабораторной среде и вместе с инструктором пошагово выполняете большое количество лабораторных работ, среди которых:

— управление enterprise applications, подключение их с разными типами аутентификации к своим облачным приложениям;
— Azure AD Conditional Access и MFA;
— конфигурирование self-service-доступа к приложениям;
— Azure AD join и MFA;
— сброс пароля через портал самообслуживания;
— конфигурирование динамической группы Azure AD;
— конфигурирование Azure AD Identity Protection MFA и пользовательских политик риска
— обзор возможностей Cloud App Security и Microsoft ATA;
— и многое другое.

Нам не хватило времени пройти лабораторные работы по Azure Intune и Azure Information Protection, но у вас остаются учётные данные доступа к лабораторной среде и вы можете поработать с этими сервисами в другое удобное для вас время. В общем, я всячески рекомендую тем, кому лень регистрировать свою временную подписку и читать много документации.

Для европейских часовых поясов ближайшие регистрации доступны на 18 сентября и 9 октября:

Коллеги, я прилечу на конференцию AzureDAY 2017, которая пройдёт в Киеве 9 сентября. Расскажу про управление мобильными устройствами и Windows 10, а также доступом к ресурсам через облако: Azure AD Conditional Access, Azure Intune и Azure Information Protection.

Присоединяйтесь!

• Upgrading to Windows 10;
• Top 5 Security Configuration Manager Best Practices;
• Microsoft InTune – An Overview;
• Understanding and Implementing Patch Management.

На прошлой неделе выдалась возможность потренировать свой пёрфект рашн прононсюэшын и поболтать про ConfigMgr, OpsMgr и Intune в Берне для Configuration Manager Community Switzerland и Experts Live Café! Отлично проведённое время и куча потраченных денег на шоколад.

• How to prepare your first Intune project;
• How to monitor SCCM with SCOM;
• What’s new in SCCM Current Branch.

• What’s New in System Center Configuration Manager, Current Branch and Intune;
• Now, lets implement/trial Windows Defender Advanced Threat Protection;
• What’s New with Windows 10 deployment?.