55348 – Administering Microsoft Configuration Manager

Module 01: Managing computers and mobile devices in the enterprise

Managing various devices and users on-premises as well as in the cloud demands some unique features. Microsoft Configuration Manager (Configuration Manager) provides all such features to the user. Organizations using Configuration Manager are able to provide more effective IT services compared to software deployment, asset management, or setting management.

This module takes you through the primary features and architecture of Configuration Manager. You will also get to know the management tools used with Configuration Manager. The module serves as a foundation relating to management tasks and many other features discussed in the upcoming modules in the series.

Lessons

• Overview of Systems Management by Using Enterprise Management Solutions
• Overview of the Configuration Manager Architecture
• Overview of the Configuration Manager Administrative Tools
• Tools for Monitoring and Troubleshooting a Configuration Manager Site

Module 02: Analyzing Data Using Queries, Reports, and CMPivot

The Microsoft Configuration Manager database stores a huge amount of data related to the resources in your environment. You might not always wish to perform all the management tasks on all resources simultaneously. Therefore, to help you locate user objects or devices in your environment which meet the specific criteria, you can create queries. You can then use these queries to create collections or to get additional information about certain resources. In this module, you will learn about queries and methods of creating and running them.

In addition to queries, you can run reports to access various types of information related to your Configuration Manager environment. To run a Configuration Manager report, you need to install and configure a reporting services point. You will know more as you progress through the module.

This module also covers CMPivot that allows you to collect and view real-time data on all devices connected within your environment. You will be able to make real-time decisions.

Lessons

• Introduction to Queries
• Configuring SQL Server Reporting Services
• Analyzing the real-time State of a Device by Using CMPivot

Module 03: Preparing the Configuration Manager Management Infrastructure

To be able to manage user and computer resources within a Microsoft Configuration Manager (Configuration Manager) environment, you need to have the Configuration Manager discover these resources and assign them to a site.

This module will give you knowledge about boundaries and boundary groups which help create logical network locations comprising computer devices which you need to manage within your Configuration Manager infrastructure. These boundary configurations can be used for automatic site assignment and also help clients to find content and services from associated site systems. You will know the discovery processes which can be used to identify users, computers, and the network infrastructure in your network environment.

You will also learn about collections which support logical groupings of resources. You can use these groupings for management tasks like managing application deployments, deploying compliance settings to resources, or targeting software updates.

Lessons

• Configuring Boundaries and Boundary Groups
• Configuring Resource Discovery
• Organizing Resources Using Device and User Collections

Module 04: Deploying and Managing the Configuration Manager Client

Microsoft Configuration Manager (Configuration Manager) client software can be installed on windows-based devices such as workstations, server and laptops. You can then manage these devices to carry out operations like reporting software and hardware inventory information, installing software and updating it, and configuring settings that are required for compliance.

Configuration Manager provides multiple options for installing of client software. In this module, you will learn about the supported devices and operating systems, software requirements, and different methods that you can use to install the client software. You will also know some default as well as custom client settings which you can configure. Once the client software is installed, you can configure client settings to control how different client components interact between the managed device and the Configuration Manager environment.

Lessons

• Overview of the Configuration Manager Client
• Deploying the Configuration Manager Client
• Configuring and Monitoring Client Status
• Managing Client Settings and Performing Management Operations

Module 06: Managing inventory for PCs and Applications

Inventory collection is the first feature that you will use most likely while implementing Microsoft Configuration Manager (Configuration Manager). It's used to collect inventory from the Configuration Manager client. After you have gathered details about software and hardware inventory, you can use this information with more advanced features, like application deployment. For instance, the inventory details like operating system, memory, installed applications, or IP address can be used to recognize clients that may need an upgrade. They can also serve as a base to create custom collections.

One of the ways to monitor and collect the software usage data from the Configuration Manager clients is by using software metering. The Configuration Manager Asset Intelligence feature helps improve the standard inventory results by providing additional data for reports along with the information about software titles that are installed on specific clients. You can determine the software usage scenarios by combining software metering, software inventory, and Asset Intelligence data, which in turn helps in planning software deployment and upgrades, licensing options, and software retirement.

In this module, you will learn about inventory collection, and how to manage the information collected. You will also know the process of collecting software and hardware inventory, initiating inventory collection and then securing it, initiating inventory cycle. The module explains how to use software metering to manage the program usage, along with the configuration and management of Asset Intelligence.

Lessons

• Overview of Inventory Collection
• Configuring Hardware and Software Inventory
• Managing Inventory Collection
• Configuring Software Metering
• Configuring and Managing Asset Intelligence (Optional)

Module 06: Distributing and Managing Content Used for Deployments

Microsoft Configuration Manager (Configuration Manager) clients obtain content from a content infrastructure comprising peer cache sources and distribution points. The content is typically in the form of packages, software updates, applications, or operating system images. This module gives an insight into the content distribution and management features. As you proceed, you will know how to configure distribution points, along with distribution and monitoring of content. Lastly you will be able to carry out content validation prestaging.

Lessons

• Preparing the Infrastructure for Content Management
• Distributing and Managing Content on Distribution Points

Module 07: Deploying and Managing Applications

Windows-based clients and mobile devices come with uniquely outlined conditions for application installations. Microsoft Configuration Manager, with its most updated version, provides varied installation options by generating a single deployment to suit both. For instance, an application can be installed on a principal device and a virtual version deployed on other devices of the same user. This is made possible via the requirements and dependencies features provided by Microsoft Configuration Manager. Furthermore, smart deployments can be generated using state-based reporting and detection methods, being a part of added features.

When there is a need for users to access certain application not installed on their working computer, Microsoft Application Virtualization (APP-V) makes the application available by allowing to install it in isolated, provisional environment on a Windows-based computer. Configuration Manager helps manage virtual applications just like other applications. Windows 10 and Windows 11 now come with the App-V client, which is needed for Windows 7 to support virtual applications.

A new applications type called Windows Store app is introduced by Windows 10, intently designed to work on devices using Windows 8 and newer Windows client operating systems. The Windows Store apps have a new .appx extension, which enables installation to diverse device types across the internet and within an enterprise. These Windows Store apps can be installed on devices with Windows 10 or Windows 11 using Configuration Manager which provides a link to the Windows Store apps or lets one directly install the appx files.

This module will help one understand the ways of creating, deploying and managing applications with Configuration Manager. You will additionally learn the applications installation process using the Software Center and the Application catalog. One will be able to manage deployments and unconventional applications. Furthermore, one will look at how Windows apps and virtualized applications are installed.

Lessons

• Overview of Application Management
• Creating Applications
• Deploying Applications
• Managing Applications
• Deploying Virtual Applications by using Endpoint Configuration Manager (Optional)
• Deploying and Managing Microsoft Store for Business and Education Apps

Module 08: Maintaining Software Updates for Managed PCs

One of the items on the administrators' network management tasks list, in many organizations, is maintaining software updates, which helps ensure maintaining operational efficiency, the stability of the network infrastructure on the computer devices.

The software updates feature in Microsoft Configuration Manager (Configuration Manager) helps to implement an end-to-end management process, thus simplifying the complex task of identifying, deploying and monitoring Microsoft and other third-party software updates to the Configuration Manager clients.

Lessons

• The Software Updates Process
• Preparing a Configuration Manager Site for Software Updates
• Managing Software Updates
• Configuring Automatic Deployment Rules
• Monitoring and Troubleshooting Software Updates
• Enabling Third-party Updates

Module 09: Implementing Endpoint Protection for Managed PCs

Given the increase in remote working over the past few years, the concern of security threats has increased rapidly. Microsoft Configuration Manager provides a number of security-related features that can be used in protecting client computers from malware threats and configuring specific Windows Defender Firewall settings for clients.

Based on System Center Endpoint Protection functionality, Endpoint Protection in Configuration Manager supports the deployment, management, and monitoring of antimalware policies, Windows Defender Firewall settings, Windows Defender Application Guard policies, Windows Defender Exploit Guard policies, and Windows Defender Application Control policies on client computers.

Lessons

• Overview of Endpoint Protection in Configuration Manager
• Configuring, Deploying, and Monitoring Endpoint Protection Policies
• Configuring and Deploying Advanced Threat Policies

Module 10: Managing Compliance and Secure Data Access

Many organizations require systems, such as servers, laptops, desktop computers, and mobile devices, to meet specific configuration and compliance requirements.

For example, you might need to assess whether the correct operation system (OS) or application version is installed, or ensure that a specific configuration setting is applied as per best practices or corporate specifications.

Compliance settings in Microsoft Configuration Manager play a key role in identifying existing configurations, discovering systems that have adverse configuration changes, and remediating these settings automatically when necessary.

Compliance settings help control how users manage and access data in the enterprise network environment.

For computers that run Windows 8 and newer operating systems, you can manage data using folder redirection, offline files, and roaming profiles. You also can control access to data using remote connection profiles, virtual private network (VPN) profiles, Wi-Fi profiles, and certificate profiles.

This module describes the compliance settings that you can manage using Configuration Manager. You will learn to use these settings to maintain configuration requirements and to provide secure data access to enterprise resources.

Lessons

• Overview of Compliance Settings
• Configuring Compliance Settings
• Viewing Compliance Results
• Managing Resource Settings and Data Access

Module 11: Managing Operating System Deployment

Microsoft Configuration Manager (Configuration Manager) has a feature for deploying operating system which can be used to create operating system images to be deployed to computers managed or not by Configuration Manager. Operating systems can be deployed in many instances by using Configuration Manager, whether working with new systems or upgrading existing ones. Configuration Manager as well as Windows components are used by operating system deployment to manage and deliver operating system images. Settings can be configured on a reference computer before capturing an image of its operating system or by using task sequences created by Configuration Manager after the image is deployed to a target system.

Lessons

• An Overview of Operating System Deployment
• Preparing a Site for Operating System Deployment
• Deploying an Operating System
• Managing Windows as a Service

Module 12: Managing and Maintaining a Configuration Manager Site

This module teaches how to implement role-based administration with the use of security roles, security scopes, and collections. The tasks that an administrative user can execute and the objects and sources on which the user can perform those tasks are described by role-based administration.

For effective management, implementing remote administration on client systems is also important. Several remote administration choices to help troubleshoot or support a managed client, including Remote Tools, Remote Desktop, and Remote Assistance are supported by Microsoft Configuration Manager (Configuration Manager).

Multiple components on the server, site server, and client devices are included in the Configuration Manager architecture. While solutions can be designed to be resistant to failures by implementing multiple site systems and using database clustering, to make sure that the Configuration Manager environment is functional and efficient, configuring and performing ongoing site maintenance tasks must also be considered.

In the Configuration Manager environment, carrying out regular backups is a crucial maintenance activity needed to be implemented, more so if there is a stand-alone primary site, so that the site configuration or the site database can be recovered in case of failure.

Role-based administration, Remote Tools, and site maintenance tasks that can be managed by using Configuration Manager are described in this module. Furthermore, backing up and recovering a Configuration Manager site system and using the recommendation(s) from Management Insights to make administration simpler is also explained in this module.

Lessons

• Configuring Role-based Administration
• Configuring Remote Tools
• Overview of Configuration Manager Site Maintenance and Management Insights
• Backing up and Recovering a Configuration Manager Site
• Updating the Configuration Manager Infrastructure