Course Outline
Module 1: Managing Computers and Mobile Devices in the Enterprise for Government
This module describes the features of Configuration Manager that can be used to perform complex management tasks, including:
- Hardware and software inventory.
- Application management.
- Operating system deployment.
- Settings management.
- Software update management.
- Remote client troubleshooting.
- Protection from malware.
Lessons for Module 1
- Overview of systems management using enterprise management solutions.
- Overview of the Configuration Manager architecture.
- Overview of the Configuration Manager administrative tools.
- Tools for monitoring and troubleshooting a Configuration Manager site.
Lab: Exploring the Configuration Manager Tools
- Searching in the Configuration Manager console.
- Using Windows PowerShell with Configuration Manager.
- Using Configuration Manager Service Manager to manage components.
- Monitoring site and component status.
- Reviewing log files using the Configuration Manager Trace tool.
- Explain how to use Configuration Manager to address the challenges of managing systems and users in today’s enterprise for government.
- Describe the Configuration Manager architecture.
- Describe the management tools used to perform administrative functions for Configuration Manager for government.
- Describe the tools used to monitor and troubleshoot a Configuration Manager site for government.
Module 2: Analyzing Data Using Queries and Reports for Government
The Microsoft System Center Configuration Manager database stores a large amount of data about the resources in your environment. To help locate devices or user objects that meet specific criteria, you can create queries. These queries can be used to create collections or find additional information about specific resources. This module describes queries and methods for creating and running them. Additionally, it covers how to run reports by configuring a reporting services point.
Lessons for Module 2
- Introduction to queries.
- Configuring Microsoft SQL Server Reporting Services (SSRS).
Lab: Creating and Running Queries and Configuring Boundaries and Resource Discovery
- Creating data queries.
- Creating subselect queries.
- Creating status message queries.
Lab: Configuring SSRS
- Configuring a reporting services point.
- Creating a report using Report Builder.
- Create and configure data and status message queries for government.
- Configure and manage SSRS and the reporting services point for government.
Module 3: Preparing the Management Infrastructure to Support PCs and Mobile Devices for Government
This module explains how to prepare the management infrastructure, including configuring boundaries, boundary groups, and resource discovery. It also describes how Configuration Manager interacts with the Microsoft Exchange Server environment to discover and manage mobile devices.
Lessons for Module 3
- Configuring site boundaries and boundary groups.
- Configuring resource discovery.
- Configuring the Exchange Server Connector for mobile device management.
- Configuring user and device collections.
Lab: Configuring Boundaries and Resource Discovery
- Configuring boundaries, boundary groups, and fallback relationships.
- Configuring Active Directory discovery methods.
Lab: Configuring User and Device Collections
- Creating a device collection.
- Creating a user collection.
- Configuring a maintenance window.
- Configure boundaries and boundary groups for government.
- Configure resource discovery for government.
- Configure the Exchange Server connector for mobile device management for government.
- Organize resources using device and user collections for government.
Module 4: Deploying and Managing Clients for Government
This module explains the supported operating systems and devices, software requirements, and different methods for installing the Configuration Manager client. It also describes default and custom client settings that can be configured. After installing the client software, you can configure client settings to perform routine management tasks.
Lessons for Module 4
- Overview of the Configuration Manager client.
- Deploying the Configuration Manager client.
- Configuring and monitoring client status.
- Managing client settings in Configuration Manager.
Lab: Deploying the Microsoft System Center Configuration Manager Client Software for Government
- Preparing the site for client installation.
- Deploying the Configuration Manager client software using client push installation.
Lab: Configuring and Monitoring Client Status
- Configuring and monitoring client health status.
Lab: Managing Client Settings
- Configuring client settings.
- Describe the requirements and considerations for installing the Configuration Manager client software for government.
- Deploy the Configuration Manager client software for government.
- Configure and monitor client status for government.
- Manage Configuration Manager client settings for government.
Module 5: Managing Inventory for PCs and Applications for Government
This module provides an overview of inventory collection and explains how to manage the information collected. It covers collecting hardware and software inventory, initiating inventory cycles, and securing inventory collection. The module also discusses using software metering to monitor program usage and configuring and managing Asset Intelligence.
Lessons for Module 5
- Overview of inventory collection.
- Configuring hardware and software inventory.
- Managing inventory collection.
- Configuring software metering.
- Configuring and managing Asset Intelligence.
Lab: Configuring and Managing Inventory Collection for Government
- Configuring and managing hardware inventory.
Lab: Configuring Software Metering for Government
- Configuring software metering.
Lab: Configuring and Managing Asset Intelligence for Government
- Preparing the site for Asset Intelligence.
- Configuring Asset Intelligence.
- Monitoring license agreements using Asset Intelligence.
- Viewing Asset Intelligence reports.
- Describe inventory collection for government.
- Configure and collect hardware and software inventory for government.
- Manage inventory collection for government.
- Configure software metering for government.
- Configure Asset Intelligence for government.
Module 6: Distributing and Managing Content Used for Deployments for Government
Configuration Manager clients obtain content, such as packages, applications, software updates, and operating system images, from distribution points. This module reviews the content management features, configures distribution points, and covers distributing and monitoring content. It also includes content validation and content prestaging.
Lessons for Module 6
- Preparing the infrastructure for content management.
- Distributing and managing content on distribution points.
Lab: Distributing and Managing Content for Deployments for Government
- Installing a new distribution point.
- Managing content distribution.
- Prepare the infrastructure for content management for government.
- Distribute and manage content on distribution points for government.
Module 7: Deploying and Managing Applications for Government
In this module, you will learn about methods for creating, deploying, and managing applications with Configuration Manager. You will also learn to use the Software Center and Application Catalog to install available applications and manage deployments of unconventional applications, Windows 10 apps, and virtualized applications.
Lessons for Module 7
- Overview of application management.
- Creating applications.
- Deploying applications.
- Managing applications.
- Deploying virtual applications using System Center Configuration Manager (Optional).
- Deploying and managing Windows Store apps.
Lab: Creating and Deploying Applications for Government
- Installing and configuring the Application Catalog roles.
- Creating applications with requirements.
- Deploying applications.
Lab: Managing Application Supersedence and Removal for Government
- Managing application supersedence.
- Uninstalling the Excel Viewer application.
Lab: Deploying Virtual Applications Using Configuration Manager (Optional) for Government
- Configuring support for App-V.
- Deploying virtual applications.
Lab: Using Configuration Manager to Deploy Windows Store Apps for Government
- Configuring support for sideloading Windows Store apps.
- Configuring a Windows Store app.
- Deploying Windows 10 apps to users.
- Describe the application management features of Configuration Manager for government.
- Create applications for government.
- Deploy applications for government.
- Manage applications for government.
- Configure and deploy virtual applications for government.
- Configure and deploy Windows Store apps for government.
Module 8: Maintaining Software Updates for Managed PCs for Government
This module explains how to use the software updates feature in Configuration Manager to implement an end-to-end management process for identifying, deploying, and monitoring software updates to your Configuration Manager clients.
Lessons for Module 8
- The software updates process.
- Preparing a Configuration Manager site for software updates.
- Managing software updates.
- Configuring automatic deployment rules.
- Monitoring and troubleshooting software updates.
Lab: Configuring the Site for Software Updates for Government
- Configuring and synchronizing the software update point.
Lab: Deploying and Managing Software Updates for Government
- Determining software update compliance.
- Deploying software updates to clients.
- Configuring automatic deployment rules.
- Describe how the software updates feature integrates with Configuration Manager for government.
- Prepare the Configuration Manager site for software updates for government.
- Manage the evaluation and deployment of software updates for government.
- Configure automatic deployment rules for government.
- Monitor and troubleshoot software updates for government.
Module 9: Implementing Endpoint Protection for Managed PCs for Government
Configuration Manager provides several security-related features to protect client computers from malware threats and configure specific Windows Firewall settings. Based on System Center Endpoint Protection functionality, it supports deploying, managing, and monitoring antimalware policies and Windows Firewall settings on client computers. This module explains how to configure and deploy Endpoint Protection policies using Configuration Manager.
Lessons for Module 9
- Overview of Endpoint Protection in Configuration Manager.
- Configuring, deploying, and monitoring Endpoint Protection policies.
Lab: Implementing Microsoft System Center Endpoint Protection for Government
- Configuring the System Center Endpoint Protection point and client settings.
- Configuring and deploying Endpoint Protection policies.
- Monitoring Endpoint Protection.
- Configure Endpoint Protection to detect and remediate malware and security vulnerabilities for government.
- Configure, deploy, and manage Endpoint Protection policies for government.
Module 10: Managing Compliance and Secure Data Access for Government
Many enterprise organizations require systems to meet specific configuration and compliance requirements. Compliance settings in Configuration Manager can help identify existing configurations, discover adverse changes, and remediate these settings automatically when necessary. They also control how users manage and access data in the enterprise network environment. For Windows 8 and newer operating systems, you can manage data using folder redirection, offline files, and roaming profiles. You can also control access to data using remote connection profiles, virtual private network (VPN) profiles, Wi-Fi profiles, and certificate profiles. This module describes the compliance settings that can be managed using Configuration Manager and how to use them to maintain configuration requirements and provide secure data access to enterprise resources.
Lessons for Module 10
- Overview of Compliance Settings.
- Configuring compliance settings.
- Viewing compliance results.
- Managing resource and data access.
Lab: Managing Compliance Settings for Government
- Managing configuration items and baselines.
- Viewing compliance settings and reports.
- Configuring remediation in compliance settings.
- Using compliance information to create collections.
- Describe compliance settings features for government.
- Configure compliance settings for government.
- View compliance results for government.
- Manage resource and data access for government.
Module 11: Managing Operating System Deployment for Government
You can use the operating system deployment feature in Configuration Manager to create and deploy operating system images to unmanaged and managed computers. This module explains how to use Configuration Manager to create a strategy for operating system deployments, including new systems and upgrades. It also covers managing Windows as a service.
Lessons for Module 11
- An overview of operating system deployment.
- Preparing a site for operating system deployment.
- Deploying an operating system.
- Managing Windows as a service.
Lab: Preparing the Site for Operating System Deployment for Government
- Managing the site system roles used to support operating system deployment.
- Managing packages to support operating system deployment.
Lab: Deploying Operating System Images for Bare-Metal Installations for Government
- Preparing the operating system image.
- Creating a task sequence to deploy an image.
- Deploying an image.
- Describe the terminology, components, and scenarios used to deploy operating systems using Configuration Manager for government.
- Describe how to prepare a site for operating system deployment for government.
- Describe the process used to deploy an operating system image for government.
Module 12: Managing and Maintaining a Configuration Manager Site for Government
This module explains how to manage and maintain a Configuration Manager site. It covers role-based administration, Remote Tools, and the site maintenance tasks that can be managed using Configuration Manager. Additionally, it explains how to back up and recover a Configuration Manager site system.
Lessons for Module 12
- Configuring role-based administration.
- Configuring Remote Tools.
- Overview of Configuration Manager site maintenance.
- Backing up and recovering a Configuration Manager site.
Lab: Configuring Role-Based Administration for Government
- Configuring a new scope for Toronto administrators.
- Configuring a new administrative user.
Lab: Configuring Remote Tools for Government
- Configuring the Remote Tools client settings and permissions.
- Managing desktops using Remote Control.
Lab: Maintaining a Configuration Manager Site for Government
- Configuring maintenance tasks in Configuration Manager.
- Configuring the Backup Site Server task.
- Recovering a site from a backup.
- Configure role-based administration for government.
- Configure Remote Tools to support client activity for government.
- Identify Configuration Manager site maintenance tasks for government.
- Back up and recover a Configuration Manager site for government.
Requirements
- Fundamentals of networking, including common protocols, topologies, hardware, media, routing, switching, and addressing for government environments.
- Principles and management fundamentals of Active Directory Domain Services (AD DS) for government operations.
- Installation, configuration, and troubleshooting procedures for Windows-based personal computers in a public sector setting.
- Basic concepts of public key infrastructure (PKI) security relevant to government systems.
- Understanding of scripting fundamentals and Windows PowerShell syntax as applied to government IT tasks.
- Basic knowledge of Windows Server roles and services for government applications.
- Configuration options for iOS, Android, and Windows Mobile device platforms in a government context.
Participants who attend this training can meet the prerequisites by completing the following courses or by acquiring equivalent knowledge and skills through practical experience:
- Course 20697-1: Installing and Configuring Windows 10 for government use.
- Course 20697-2: Deploying and Managing Windows 10 Using Enterprise Services in a government setting.
- Course 20411: Administering Windows Server 2012 for government operations.
