In this course you will learn how to optimize Endpoint Protection, manage compliance, and create management queries and reports.
Although this course and the associated labs are written for Microsoft Endpoint Configuration Manager and Windows 11, the skills taught will also be backwards compatible with previous editions of System Center Configuration Manager and Windows 10.

• Describe the features Configuration Manager and Intune include, and explain how you can use these features to manage PCs and mobile devices in an enterprise environment.
• Analyze data by using queries and reports.
• Prepare a management infrastructure, including configuring boundaries, boundary groups, and resource discovery, and integrating mobile-device management with Intune.
• Deploy and manage the Configuration Manager client.
• Configure, manage, and monitor hardware and software inventory, and use Asset Intelligence and software metering.
• Identify and configure the most appropriate method to distribute and manage content used for deployments.
• Distribute, deploy, and monitor applications for managed users and systems.
• Maintain software updates for PCs that Configuration Manager manages.
• Implement Endpoint Protection for managed PCs.
• Manage configuration items, baselines, and profiles to assess and configure compliance settings and data access for users and devices.
• Configure an operating-system deployment strategy by using Configuration Manager.
• Manage and maintain a Configuration Manager site.

Målgrupp

This course is for experienced information technology (IT) professionals, typically described as Enterprise Desktop Administrators (EDAs). These EDAs deploy, manage, and maintain PCs, devices, and applications across medium, large, and enterprise organizations. A significant portion of this audience uses, or intends to use, the latest release of Configuration Manager to manage and deploy PCs, devices, and applications.

Förkunskaper

• Networking fundamentals, including common networking protocols, topologies, hardware, media, routing, switching, and addressing.
• Active Directory Domain Services (AD DS) principles and fundamentals of AD DS management.
• Installation, configuration, and troubleshooting for Windows-based personal computers.
• Basic concepts of public key infrastructure (PKI) security.
• Basic understanding of scripting and Windows PowerShell syntax.
• Basic understanding of Windows Server roles and services.
• Basic understanding of the configuration options for iOS and Android Mobile device platforms.

Innehåll

Module 1: Managing computers and mobile devices in the enterprise

This module describes the features of Configuration Manager that you can use to perform complex management tasks, including the following tasks; Hardware and software inventory, Application management, Operating system deployment, Settings management, Software update management, Remote client troubleshooting, and Protection from malware. Microsoft System Center Configuration Manager (Configuration Manager) provides various features that can help you manage devices and users both on-premises and in the cloud. Organizations that use Configuration Manager find that they can provide more effective IT services in relation to software deployment, settings management, and asset management. This module introduces you to the primary features, architecture, and management tools used with Configuration Manager. This module also provides a foundation that relates to all other features and management tasks discussed in the modules that follow this one.

After completing module 1, students will be able to:

• Searching in the Configuration Manager console
• Using Windows PowerShell with Configuration Manager
• Using Configuration Manager Service Manager to manage components
• Monitoring site and component status
• Reviewing log files by using the Configuration Manager Trace tool

Module 2: Analyzing data using queries, reports, and CMPivot

The Microsoft Endpoint Configuration Manager database stores a large amount of data about the resources in your environment. You might not always want to perform all management tasks on all resources simultaneously. Therefore, to help you locate devices or user objects in your environment that meet specific criteria, you can create queries. You then can use these queries to create collections or to find additional information about specific resources. This module describes queries and methods of creating and running them. In addition to queries, you can run reports to view various types of information related to your Configuration Manager environment. To run Configuration Manager reports, you must install and configure a reporting services point, which this module details. This module also covers CMPivot, which allows you to collect and view real-time data on all the connected devices in your environment. It will enable you to make real-time decisions

After completing module 2, students will be able to:

• Analyze data using queries, reports, and CMPivot

Module 3: Preparing the Configuration Manager management infrastructure

You can manage computer and user resources within a Microsoft Endpoint Configuration Manager (Configuration Manager) environment only when Configuration Manager has discovered these resources and assigned them to a site. In this module, you will learn about boundaries and boundary groups that help create logical network locations containing computer devices that you need to manage in your Configuration Manager infrastructure. You can use these boundary configurations for automatic site assignment and to help clients find content and services from associated site systems. You will also learn about the discovery processes that you can use to identify computers, users, and the network infrastructure within your network environment. You will then learn about collections that support logical groupings of resources. You use these groupings for management tasks, such as targeting software updates, managing application deployments, or deploying compliance settings to resources.

After completing module 3, students will be able to:

• Prepare a Configuration Manager management infrastructure

Module 4: Deploying and managing the Configuration Manager client

You can install the Microsoft Endpoint Configuration Manager (Configuration Manager) client software on windows-based devices such as servers, workstations, and laptops. You then can manage these devices and perform operations such as reporting hardware and software inventory information, installing and updating software, and configuring settings required for compliance. Configuration Manager provides several options for installing the client software. This module explains the supported operating systems and devices, software requirements, and different methods for installing the client software. This module also describes some of the default and custom client settings that you can configure. After installing the client software, you can configure client settings and control how the various client components interact between the managed device and the Configuration Manager environment.

After completing module 4, students will be able to:

• Deploy and manage the Configuration Manager client.

Module 5: Managing inventory for PCs and applications

This module provides an overview of inventory collection, and explains how you can manage the information collected. You also will learn about the process of collecting hardware and software inventory, initiating inventory cycles, and initiating and securing inventory collection. This module also covers the use of software metering to monitor program usage, and the configuration and management of Asset Intelligence.

After completing module 5, students will be able to:

• Manage inventory for PCs and applications.

Module 6: Distributing and managing content used for deployments

Microsoft Endpoint Configuration Manager (Configuration Manager) clients obtain content, such as packages, applications, software updates, and even operating system images, from a content infrastructure made up of distribution points and peer cache sources. In this module, you will review the content distribution and management features, configure distribution points, and learn how to distribute and monitor content. You also will perform content validation and content prestaging.

After completing module 6, students will be able to:

• Describe containers in Windows Server.
• Explain how to deploy containers.
• Explain how to install, configure, and manage containers using Docker.

Module 7: Deploying and managing applications

In this module, you will learn about the methods for creating, deploying, and managing applications with Configuration Manager. You also will learn to use the Software Center and the Application Catalog to install available applications. You will learn about managing deployments on unconventional applications.

After completing module 7, students will be able to:

• Deploy and manage applications

Module 8: Maintaining software updates for managed PCs

This module explains how to use the software updates feature in Configuration Manager to implement an end-to-end management process for the complex task of identifying, deploying, and monitoring Microsoft and third-party software updates to your Configuration Manager clients.

Module 9: Implementing Defender Protection for managed PCs

This module explains how to use the security-related features provided by Configuration Manager to help protect client computers from malware threats, and to configure specific Windows Defender Firewall settings for clients. Based on Endpoint Protection functionality, Endpoint Protection in Configuration Manager supports the deployment, management, and monitoring of antimalware policies, Windows Defender Firewall settings, Windows Defender Application Guard policies, Windows Defender Exploit Guard policies, and Windows Defender Application Control policies on client computers.

After completing module 9, students will be able to:

• Implement Defender Protection for managed PCs

Module 10: Managing compliance and secure data access

Many enterprise organizations require systems, such as servers, laptops, desktop computers, and mobile devices, to meet specific configuration and compliance requirements. Compliance settings in Configuration Manager can play a key role in identifying existing configurations, discovering systems that have adverse configuration changes, and remediating these settings automatically when necessary. Compliance settings also can help control how users manage and access data in the enterprise network environment. For computers that run Windows 8 and newer operating systems, you can manage data using folder redirection, offline files, and roaming profiles. You also can control access to data using remote connection profiles, virtual private network (VPN) profiles, Wi-Fi profiles, and certificate profiles. This module describes the compliance settings that you can manage using Configuration Manager. You will learn to use these settings to maintain configuration requirements and to provide secure data access to enter rise resources.

After completing module 10, students will be able to:

• Manage compliance and secure data access

Module 11: Managing operating system deployment

This module explains how to use the operating system deployment feature in Configuration Manager to create operating system images that you can deploy to unmanaged computers and those managed by Configuration Manager. There are several scenarios in which you can deploy operating systems by using Configuration Manager, including when you are working with new systems or when you are upgrading existing ones. Operating system deployment uses both Configuration Manager and Windows components to manage and deliver operating system images. You can configure settings on a reference computer prior to capturing an image of its operating system or by using task sequences that Configuration Manager creates after you deploy the image to a target system. This module also explains how to use Configuration Manager to create a strategy for operating-system deployments . And also, it explains and how to manage Windows as a service. This module explains how to manage Windows as a service.

After completing module 11, students will be able to:

• Manage operating system deployments.

Module 12: Managing and maintaining a Configuration Manager site

This module describes role-based administration, Remote Tools, and the site maintenance tasks that you can manage by using Configuration Manager. This module also describes how to back up and recover a Configuration Manager site system and use the recommendation(s) from Management Insights to simplify administration.

After completing module 12, students will be able to:

• Manage and maintain a Configuration Manager site.

Module 13: What’s new in Microsoft Endpoint Configuration Manager

This modules describes the features that have been released since Configuration Manager 2012.

After completing module 13, students will be able to:

• Understand and leverage the new features available in each semi annual release.

 

Kursen levereras genom utbildningspartner: Global Knowledge