30

Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

Embed Size (px)

DESCRIPTION

Compliance settings, formerly known as DCM, remains one of the often unexplored features in Configuration Manager. During this session we will walk through the new capabilities and improvements of this feature in ConfigMgr 2012, discuss implementation details, and demonstrate how you can start using it to fulfill actual business requirements.

Citation preview

Page 1: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 2: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

Freelance Consultant

[email protected]

@Tim_DK

http://scug.be/tim/

http://be.linkedin.com/in/timdekeukelaere/

Page 3: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 4: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 5: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 6: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 7: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 8: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 9: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 10: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

Plan & Configure

• Standards

Definition

• Create CI’s

and define

baselines

Assessment

• Deploy

baselines to

collections

Report /

Remediate

• Monitor

configuration

drift

• Remediate

non-

compliance

issues

Page 11: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

Baseline

Group of CIs with presence

rules.

Configuration Item Configuration model defined for OS ,

Application (settings, rules,

applicability )

WMI

XML

Registry

IIS

MSI

Script

SQL

Software

Updates

File

Active

Directory

Agent discovers CIs,

validates data against

rules, remediates and

reports compliance

ConfigMgr

Agent

DeploymentMonitor/remediate

Collection

Page 12: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 13: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 14: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 15: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 16: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 17: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 18: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 19: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 20: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 21: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 22: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 23: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 24: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 25: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

Log Description

CIAgent.log Records details about the process of remediation and compliance for

compliance settings, software updates, and

CITaskManager.log Records information about configuration item task scheduling.

DCMAgent.log Records high-level information about the evaluation, conflict reporting,

and remediation of configuration items and applications.

DCMReporting.log Records information about reporting policy platform results into state

messages for configuration items

DcmWmiProvider.log Records information about reading configuration item synclets from

Windows Management Instrumentation (WMI).

Page 26: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 27: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere

http://www.microsoft.com/en-us/download/details.aspx?id=30710

http://www.microsoft.com/en-us/download/details.aspx?id=40913

Page 28: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 29: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere
Page 30: Configuration Manager 2012 – Compliance Settings 101 - Tim de Keukelaere