May 2014

System Center Suite: The Good, The Bad, The Automated

Quick Facts

About Us• 24th Year

• Grand Rapids & Detroit

• 25 Staff

Approach• Vendor

Independent

• Non-reseller

• Professional Services Only

Partnerships• Microsoft Gold

• VMware Enterprise

• Citrix Silver

• Cisco Premier

• Novell Gold

Microsoft Gold Partner

PinpointCompetencies Successes

Expertise

• Microsoft SharePoint

• Development

• User Interface & User Experience

• Business Intelligence

• Project Management

• IT and Project Planning

• Enterprise Project Management

• Project Management Office

• Microsoft System Center

• Virtualization

• Cloud Computing

• Security

Infrastructure

• Policy Development Infrastructure

• Mobile Device Management

• Application Development

Mobility

• Microsoft Lync

• Microsoft Exchange

• Enterprise Voice

• Communication Enabled Business Process

UnifiedCommunicatio

nsCollaborati

on

Project Manageme

nt

Collaboration and Feedback

Collaboration and Feedback

Get Social with C/D/H

@cdhtweetstech

/cdhtech

/company/cdh

cdhtalkstech.com

Your Presenter

Gil LaloEnterprise Architecture Director

GilL@cdh.com

Microsoft System Center 2012R2

The good, the bad and the automated

Agenda

• Introduction• Overview - System Center Suite capabilities• System Center components and what they do• Benefits of unified management, integration

& automation• System Center on-premise and in the Cloud

demonstration• How to get started or if you have System

Center where to go next

Introduction

• IT has to let go• What does systems management even

mean?• Business unit leaders call the shots• BYOD is here to stay• Cloud is the new reality• System Center does not stand alone –

– PowerShell, Azure, O365, SQL, mobile• What’s an IT guy to do?

Overview - System Center Suite Capabilities

• Virtual Machine Manager • Service Manager • Configuration Manager • Orchestrator • Operations Manager • Endpoint Protection • Data Protection Manager

V-SCOOPED

Data Center Automation

• Template based VM deployment

• Monitoring of critical servers

• Backup and disaster recovery

• Dynamic scaling of heavy use applications

Client Automation

• User driven incident management

• Self-service request portal

• Automated provisioning

• Web based knowledgebase

Service Desk Automation

• Automated incident remediation

• Change Management Workflows

• Runbook Driven Escalation

• ITIL / MOF aligned knowledge management

System CenterConfiguration Manager

• Client Application and Desktop DeploymentUpdates Management, Operating System Deployment

• Multi-Platform Device ManagementiOS, Android, Mac, Linux, Unix

• EndPoint Protection• Hardware and Software Inventory Reporting, Asset Intelligence

• New in SP1: Windows 8 and Mobile DeviceIntune Integration for On-Demand MDM, Robust Alerting

What’s New In Platform Support?

• Windows Server 2012 R2 and Windows 8.1– Full client and site system role support

• Windows Embedded– Support for Windows Embedded 8 Industry– Support for Unified Write Filters (UWF)

• Mac OS X– Enrollment UI

Upgrade/Interoperability Considerations

• Only supported upgrade path is from ConfigMgr 2012 SP1• Must upgrade Windows ADK first• Improved site to site interoperability

This hierarchy currently contains sites that have not been upgraded to System Center 2012 Configuration Manager SP1. Objects of this type cannot be created until all primary sites have been upgraded.

SQL Server Flexibility In Setup

• Specify file locations for database and transaction log

SQL Server Flexibility In Setup

• Specify file locations for database and transaction log• Restore to a different SQL Server instance

– Requires same SQL Server version

Reduced Need For Multiple Sites

• Why might you need multiple primary sites?– More than 100K clients– Organizational politics– Reporting from the CAS– Clients reside in multiple untrusted forests

Reduced Need For Multiple Sites

Easy Client Mobility

• Scenario: I installed a new primary site in my hierarchy and would like to move some or all of the clients from an existing site to the new site (e.g. load-balancing, server replacement).

• Solution: Client reassignment– Supports single or multi-select client reassignment– Enforces proper client/site versioning– Uses standard client policy channel (no client

notification)• Note: This will not work for disaster recovery

scenarios.

PowerShell Improvements• New: Remove-CMContentDistribution

– To remove a content from distribution points • Modified: Add-CMDistributionPoint and Set-

CMDistributionPoint– New parameters:

• IsPullDP• SourceDPs• SourceDPRanks

System Center Orchestrator• Graphical IT Workflow Engine

Activities Managed through Custom Workflows• Automation for System Center Suite

OpsManager, ConfigMgr, ServiceMgr, DPM, VMM, Self-Service

• Extends to entire Microsoft stackWindows Server, SQL, Exchange, SharePoint, FTP

• Extensive Third Party Integration VMware, HP, IBM• New in R2: Server 2012 and SQL 2012

Orchestrator Concepts

Create IncidentCreate Incident Create CheckpointCreate Checkpoint Start Maint ModeStart Maint Mode Shut Down VMShut Down VM

E-mail on errorE-mail on error Update on successUpdate on success

Invoke Web Invoke Web ServicesServices

Compare ValuesCompare Values

Send e-mailSend e-mail

Query DatabaseQuery Database

Run .NetRun .NetScriptScript

Clone Linux VMClone Linux VM

Return DataReturn Data

Check ScheduleCheck Schedule

Activities Runbooks DatabusExecutes a task Collection of Activities Published Data from Activities

Get Data SourceGet Data Source Create Recovery PointCreate Recovery Point UpdateUpdateService RequestService Request

Integration Packs

Example - Deploy Web site

Create Folder

Copy Content

Create Web Site

Test Web Site

When to Automate Activities ?

Easy to Automate Occurs Often

Visible to Customers High Risk Breaches SLA

Often

Time Consuming

Identify the best processes

Scenario 1 – Basic Task

Scenario 1 – Basic Task

Scenario 2 – Incident Remediation

Scenario 2 – Incident Remediation

Summary

System Center Operations Manager• Server and Application Monitoring

Extensible through Management Packs• Alerts and Incident Generation

Integrates with Exchange and/or ServiceMgr• Agentless Monitoring

Unix, Linux, Network Devices, Web Applications

• Synthetic Transactions Simulate Client Activities

• New in R2: Improved Application Monitor

360 .NET Dashboards, TFS Integration

MONITORINGOPERATIONS MANAGER | ADVISOR | APP INSIGHTS

Enterprise grade monitoring, scalability and reliability

Simplified upgrades fromprevious 2012 based versions

New and enhanced management packs including Azure & Office365

Enhanced Open Source Software monitoring

MONITORINGOPERATIONS MANAGER | ADVISOR | APP INSIGHTS

Enterprise grade monitoring, scalability and reliability

Simplified upgrades fromprevious 2012 based versions

New and enhanced management packs including Azure & Office365

Enhanced Open Source Software monitoring

Continuing investment in System Center Advisor services attached to Operations Manager

Application Insights integration driving enhanced application monitoring & devops scenarios

Operational Investigation

Ready Made Intelligence Modern/Fast

Easily collect & search massive amount of machine data from multiple sources

Capacity Planning Update Assessment Malware Protection Status

Configuration Assessment …and more!

Fast & responsive exploration of your operational data

Modern experience that runs on any device

System Center Virtual Machine Manager

• Heterogeneous Hypervisor ManagementMicrosoft, VMware, Citrix (Public and Private Cloud)

• Enterprise Toolset for Hyper-VLibraries, Templates, Live-Migration, Backup, Dynamic Optimization

• Service and Application ManagementIntegrates with App Controller, App-V, and Azure

• Optimization and Standardization Power, Compute Resources, Bare Metal Hypervisor Deployment• New in R2: Highly Available VMM MS

SMB 3.0, Cluster-Free Live Migration, Virtual Networking

ServicesCloud

Infrastructure

Enhancements

HA VMM Server

Upgrade

Custom properties

Powershell

Deployment Fabric

Hyper-V Bare Metal

Provisioning

Hyper-V, VMware, Citrix

XenServer

Network Management

Storage Management

Update Management

Dynamic Optimization

Power Management

Monitoring Integration

Fabric Management

System Center Virtual Machine Manager 2012

Service Lifecycle Management

System Center Endpoint Protection• Enterprise Malware and

Security PlatformAntivirus, Firewall

• Integrates with ConfigMgr• Seamless Updates

Software Update Point, Automatic Deployment Rules

• New in SP1: ADR Template

System Center Data Protection Manager

• Volume Shadow Copy Based Backup

• Disk-to-Disk: Archive to Tape• SQL, Exchange, Hyper-V,

SharePoint• New in R2: Live Migration

SupportAzure Online Backup, “Phase 13”

System Center Service Manager

• ITIL / MOF Aligned IT ProcessesIncident, Problem, Change, Knowledge Management -

CMDB• Integrations with SC2012 Suite

OpsManager, ConfigMgr, Orchestrator, VMM• Integration with Microsoft Infrastructure

Exchange, Active Directory, SharePoint, Project, Azure• User Self Service Catalog

Driven by Workflows and Orchestrator Runbooks• New in R2: Cost Center Chargeback

SQL 2012 & OLAP, Windows 8 SSP Support

How to get started/where to go next

Looking back…

Q4 Roadmap

Managed Corporate-Owned Devices

MOWANative E-mail

Browser

LoB

Managed Mobile Productivity

LoB

Protected Corporate Email and Collaboration

Getting to unified device management

????

From Configuration Manager 2007

Maintain your existing ConfigMgr 2007 deployment

Stand up newConfigMgr 2012 R2+ Windows Intune

Add new devices for management

Migrate

From Configuration Manager 2012

Add new devices for management

Connect with Intune

From Windows Intune

Add new devices for management

Intune upgrades are available automatically

Mobile Device Management

Enable users

Access to company resources consistently across devices

Simplified registration and enrollment of devices

Synchronized corporate data

Unify your environment

On-premises and cloud-based management of devices within a single console.

Simplified, user-centric application management across devices

Comprehensive settings management across platforms, including certificates, VPNs, and wireless network profiles

Protect your data

Protect corporate information by selectively wiping apps and data from retired/lost devices

A common identity for accessing resources on-premises and in the cloud

Identify which mobile devices have been compromised

√

Hybrid Identity Management

Mobile Device Management

Data Protection

• Group management & Self Service Password Reset• Security audit reports & MultiFactor Authentication• Connection between AD / Azure AD

• Information protection• Connection to on-premises assets

• Mobile device settings management• Mobile app management• Selective wipe

Enterprise Mobility Suite

Enterprise Agreement Prices starting at $4 per user per month*

* Limited time EA Level A promo pricing. Requires 250 seat minimum purchase and underlying CAL Suite license (CoreCAL/ECAL/BridgeCAL)

EMS will enable customers with:

Thank You

cdh.com