What’s New in Configuration Manager

In the Sites and Hierarchies section, added a new section for Language Pack Support. This information is also clarified in the Client Deployment and Operations section, which contains the information that you no longer install International Client Packs (ICPs) when you want to support different languages on the client.

Supported Configurations for Configuration Manager

Updated for the latest support statements.

Frequently Asked Questions for Configuration Manager

Updated for new questions that include the following:

• Where are the supported scenarios and network diagrams for Internet-based client management that you had for Configuration Manager 2007?
  
  
• Can I migrate maintenance windows?
  
  
• Which antimalware solutions can Endpoint Protection uninstall?
  
  

Information and Support for Configuration Manager

Updated the Search the Configuration Manager Documentation Library section to explain how to use the scoped search link, with examples and search tips.

Planning for Site Systems in Configuration Manager

Updated the site system role placement for secondary sites.

Planning for Sites and Hierarchies in Configuration Manager

Updated for additional information about planning for language packs at Configuration Manager sites, clients, and the Configuration Manager console.

Planning for Discovery in Configuration Manager

Updated for the new section, Best Practices for Discovery.

Planning for Communications in Configuration Manager

Updated for the information that the Application Catalog web service point, like the out of band service point, must reside in the same Active Directory forest as the site server. Other site system roles can be installed in other forests.

This topic is also updated for a procedure how to manually publish management points to DNS on Windows Server.

Install Sites and Create a Hierarchy for Configuration Manager

Updated for a new section, Decommission Sites and Hierarchies, for information about how to uninstall Configuration Manager.

In addition, the /TESTDBUPGRADE option is updated in the Using Command-Line Options with Setup section to clarify that this switch is not supported on a production database.

Manage Site and Hierarchy Configurations

Updated the Modify the Site Database Configuration section to clarify that Configuration Manager does not support changing the port for SQL Server after the site is installed.

Added new sections, Manage Language Packs at Configuration Manager Sites and Configure Custom Locations for the Site Database Files.

Security and Privacy for Site Administration in Configuration Manager

Updated the entry about the Security Configuration Wizard with the link to download the toolkit for System Center 2012 Configuration Manager: System Center 2012 – Configuration Manager Component Add-ons and Extensions. This information is also updated in the Security and Privacy for System Center 2012 Configuration Manager guide.

Technical Reference for Ports Used in Configuration Manager

Updated for the ports used by the new site system roles: the Application Catalog website point and Application Catalog web service point; the enrollment point and enrollment proxy point; and the Endpoint Protection point. Also clarified that Configuration Manager does not support dynamic ports for SQL Server.

Technical Reference for Language Packs in Configuration Manager

New topic that provides technical details about language support in System Center 2012 Configuration Manager.

Planning for Migration to System Center 2012 Configuration Manager

Updated for additional information about planning for overlapping boundaries if you will install new Configuration Manager 2007 client during the migration period.

Planning a Migration Job Strategy in System Center 2012 Configuration Manager

Updated to clarify that when a collection migrates, Configuration Manager also migrates collection settings that include maintenance windows and collection variables, but cannot migrate collection settings for AMT provisioning.

Planning a Content Deployment Migration Strategy in System Center 2012 Configuration Manager

Updated the Distribution Point Upgrade section to clarify the package migration behavior during a distribution point upgrade.

Prerequisites for Windows Client Deployment in Configuration Manager

Updated to clarify that although most operating systems now include BITS, some operating systems, such as Windows Server 2003 R2 SP2, do not. If you install the client on an operating system that does not already have BITS installed, you must first install it.

Best Practices for Client Deployment in Configuration Manager

Updated for the new best practice to install additional client languages on the site before you deploy clients on computers and mobile devices.

How to Assign Clients to a Site in Configuration Manager

Updated to clarify the assignment behavior for a System Center 2012 Configuration Manager client when it is assigned to a Configuration Manager 2007 site.

About Client Installation Properties in Configuration Manager

Updated for information about file locations for the /config: and CCMENABLELOGGING installation properties.

Example Scenario for Using Configuration Manager to Deploy and Monitor the Security Software Updates Released Monthly by Microsoft

New topic that provides an example scenario for how you might deploy software updates in your environment.

How to Manage Applications and Deployment Types in Configuration Manager

Updated to clarify that the Retire management task does not remove any installed copies of the application from client computers.

Planning a Task Sequences Strategy in Configuration Manager

Updated for information about running task sequences in a maintenance window.

How to Manage the User State in Configuration Manager

Updated for how to create a USMT package and how to restore the user state if the operating system deployment fails.

Task Sequence Steps in Configuration Manager

Updated the Updated Install Software Updates step for the information that the step cannot suppress restarts if the software update requires a restart.

Example Scenario for PXE-Initiated Operating System Deployment by Using Configuration Manager

New topic that provides an example scenario for how you might deploy an operating system by using PXE in your environment.

How to Create Queries in Configuration Manager

Updated to clarify that a query that contains no criteria will return all devices in the All Systems collection.

How to Extend Hardware Inventory in Configuration Manager

Updated for the information that you must create a hardware inventory class for any MIF files you want to add to inventory.

How to Configure Software Inventory in Configuration Manager

Updated for an example of how to specify a file type that you want to inventory.

Introduction to Software Metering in Configuration Manager

Updated to include the reference to Example Scenario for Software Metering in Configuration Manager.

How to Manage AMT-based Computers Out of Band in Configuration Manager

Updated to clarify that the out of band management power control commands are always available for a collection, even if the collection contains resources that are not provisioned for AMT.

How to Configure Endpoint Protection in Configuration Manager

Updated for information about using software updates automatic deployment rules to deploy definition updates for Endpoint Protection.

Introduction to Configuration Manager

Updated for Configuration Manager SP1.

What’s New in Configuration Manager SP1

New topic that lists the changes in Configuration Manager SP1, with links to additional information.

Fundamentals of Configuration Manager

Updated for Configuration Manager SP1. For example, how you can use site expansion if you install a stand-alone primary site and later decide that you require additional primary sites.

This topic also has diagrams added to illustrate example site designs, site system roles, and client settings.

Supported Configurations for Configuration Manager

Updated support statements for Configuration Manager with no service pack, and new support statements for Configuration Manager SP1.

Frequently Asked Questions for Configuration Manager

Updated for new questions that include the following:

• To support computers in an untrusted forest, do I have to create a new primary site and configure a two-way forest trust?
  
  
• Do I have to configure my site for Internet-based client management before I can use cloud-based distribution points in Configuration Manager SP1?
  
  
• How can I create a collection that contains only Mac computers, or only Linux servers?
  
  
• Why might there be differences between a client’s assigned, installed, and resident site values when I look at the client properties in the Configuration Manager console?
  
  
• Can I install the Configuration Manager client on my Windows Embedded devices that have very small disks?
  
  
• Where is the documentation for the Configuration Manager client for Mac Computers?
  
  
• Where is the documentation for the Configuration Manager client for Linux and UNIX?
  
  
• If the same application is deployed to a user and a device, which one takes priority?
  
  
• Why do I see an error message about insufficient permissions from a Windows Embedded device when I try to install software from Software Center?
  
  
• What’s the minimum permission an administrative user requires for the Client Push Installation Wizard?
  
  
• Why don’t clients run scheduled activities such as inventory, software updates, and application evaluation and installations at the time I schedule them?
  
  
• How can I create a collection of Windows 8 computers that are Always On Always Connected capable?
  
  

Accessibility Features of Configuration Manager

New topic that outlines accessibility features for Configuration Manager and provides links to more information.

Interoperability between Different Versions of Configuration Manager

New topic that contains information about interoperability between System Center 2012 Configuration Manager and Configuration Manager 2007 and about interoperability between sites with different service pack versions in System Center 2012 Configuration Manager.

PKI Certificate Requirements for Configuration Manager

Updated for the new certificates in Configuration Manager  SP1, which includes certificates for Mac computers, cloud-based distribution points, and the Windows Intune connector and mobile devices that are enrolled by Windows Intune. This topic also includes a new entry for the specific certificate requirements when you use a SQL Server cluster for the Configuration Manager site database.

Planning to Upgrade System Center 2012 Configuration Manager

New topic to help you plan to upgrade System Center 2012 Configuration Manager to Configuration Manager SP1.

Determine Whether to Extend the Active Directory Schema for Configuration Manager

Updated for the information that there are no new schema changes in Configuration Manager SP1. The topic also lists the clients that do not use the Configuration Manager schema extensions.

Planning for Sites and Hierarchies in Configuration Manager

Updated for the new Planning to Expand a Stand-Alone Primary Site section for Configuration Manager SP1 information about how to expand a stand-alone primary site into a new hierarchy with a central administration site.

Planning for Discovery in Configuration Manager

Updated for the new best practice to not run Active Directory Forest Discovery at multiple sites when you plan to automatically create boundaries from the discovery data, because this can create duplicate boundary objects.

Also updated to clarify that when Active Directory Forest Discovery discovers a supernet that is assigned to an Active Directory site, Configuration Manager translates the supernet into a boundary as an IP address range. This information is also added to Planning for Boundaries and Boundary Groups in Configuration Manager.

Planning for Site Systems in Configuration Manager

Updated for the new Configuration Manager SP1 site system roles, proxy server configuration, cloud-based distribution points, and the Windows Intune connector.

Manage Cloud Services for Configuration Manager

New topic that contains planning information for cloud-based distribution points in Windows Azure.

Planning for Communications in Configuration Manager

Updated for how to use database replication controls and distributed views in Configuration Manager SP1.

The Planning How to Wake Up Clients section is also updated for the new wake-up proxy functionality in Configuration Manager SP1.

Configuring Settings for Client Management in Configuration Manager

Updated the Configure Wake on LAN section for the new wake-up proxy functionality in Configuration Manager SP1.

Install Sites and Create a Hierarchy for Configuration Manager

The topic that contains information about how to run Setup has the following updates:

• The required permissions to run Setup for the site installation procedures.
  
  
• In Configuration Manager SP1, you must disable distributed views for all primary sites before you uninstall from the hierarchy a primary site that uses distributed views
  
  
• In Configuration Manager SP1, you can configure the SQL Server service port to be a non-default TCP port number.
  
  

In addition, the following information is updated for unattended installations:

• The script file details.
  
  
• Updated information about the automatic creation of an unattended installation script when you run Setup.
  
  
• Updated the command line details for /MANGAELANGS, which is used to manage languages at a previously installed site.
  
  
• New sections for an unattended recovery of a primary site or central administration site.
  
  

Expand a Stand-Alone Primary Site into a Hierarchy with a Central Administration Site

New topic that provides information about the new site expansion functionality in Configuration Manager SP1.

Upgrade Configuration Manager to a New Service Pack

New topic that contains information about how to upgrade to the latest service pack, such as Configuration Manager SP1.

Configuring Alerts in Configuration Manager

Updated with the new information that for Configuration Manager SP1, you can configure email subscriptions for all alerts whereas in Configuration Manager with no service pack, email subscriptions were restricted to Endpoint Protection.

Install and Configure Site System Roles for Configuration Manager

Updated for the new site system roles in Configuration Manager SP1 and the information that when you install a site system on a domain controller that does not host the site server, the new site system role does not complete the installation until the Kerberos ticket refreshes.

Configure Database Replicas for Management Points

Updated for a new section to uninstall a database replica. The “Configuring the Database Replica Server” section is also updated for the information that the SQL Server service on the replica database server must run as the System account.

This topic is also updated for the required configurations to use a database replica; you must configure databases to support a Max Text Repl Size of 2 GB.

Manage Cloud Services for Configuration Manager

New topic to help you manage cloud-based distribution points in Configuration Manager SP1.

Backup and Recovery in Configuration Manager

Updated to add the new Using Data Protection Manager to Back up Your Site Database section and updated the Recover a Secondary Site section.

Update System Center 2012 Configuration Manager

New topic that explains how to install update bundles if you require hotfixes to System Center 2012 Configuration Manager.

Prerequisites for Reporting in Configuration Manager

Updated to add the section “Supported SQL Server Versions for the Reporting Services Point”.

Configuring Reporting in Configuration Manager

Updated to add the new section Reporting Services Security Roles for Configuration Manager.

Technical Reference for Ports Used in Configuration Manager

Updated for the new ports used by Configuration Manager SP1, which includes the client notification, cloud-based distribution point, and the Windows Intune connector. Also added the ports used by the Exchange Server connector.

Technical Reference for Log Files in Configuration Manager

Updated to include the AppDiscovery.log and AppEnforce.log log files, which are used with application management. Also updated for the new log files in Configuration Manager SP1, which includes log files for Mac computers, Linux and UNIX servers, and cloud-based distribution points.

Technical Reference for Cryptographic Controls Used in Configuration Manager

Updated for the new security controls in Configuration Manager SP1, which includes content hashing support for the new devices that Configuration Manager SP1 supports, the encryption algorithm used by client notification, and certificates used by cloud-based distribution points and for Windows Intune.

Technical Reference for Language Packs in Configuration Manager

Updated for the new languages supported by Configuration Manager SP1.

Technical Reference for the Prerequisite Checker in Configuration Manager

Updated the information about prerequisite checks for Configuration Manager, which includes the prerequisite checks for Configuration Manager with no service pack, new prerequisite checks for Configuration Manager SP1, and prerequisite checks for upgrading to Configuration Manager SP1.

Step-by-Step Example Deployment of the PKI Certificates for Configuration Manager: Windows Server 2008 Certification Authority

Updated for new procedures for deploying the client certificate for Mac computers and the service certificate for cloud-based distribution points in Configuration Manager SP1.

Introduction to Client Deployment in Configuration Manager

Updated for information for Configuration Manager SP1 information about Windows Embedded, Mac computers, and Linux and UNIX servers.

This topic is also updated to include a list of client checks that Windows-based clients make when Configuration Manager monitor clients and remediates any issues.

Prerequisites for Windows Client Deployment in Configuration Manager

Updated for Configuration Manager SP1, which includes the following:

• You no longer have to configure Internet Explorer to exclude the ActiveX control Microsoft.ConfigurationManager.SoftwareCatalog.Website.ClientBridgeControl.dll from ActiveX filtering and allow it to run in the browser.
  
  
• Silverlight 5 is automatically downloaded and installed during client installation.
  
  

This topic is also updated to clarify that BITS is not automatically downloaded during client installation.

Best Practices for Client Deployment in Configuration Manager

Updated for the following best practices:

• Plan and prepare any required PKI certificates in advance –for Internet-based client management, enrolled mobile devices, and Mac computers.
  
  
• Before you install clients, configure any required client settings and maintenance windows.
  
  
• For Mac computers and mobile devices that are enrolled by Configuration Manager, plan your user enrollment experience.
  
  
• When you manage Windows Embedded devices on the Configuration Manager SP1 client, use File-Based Write Filters (FBWF) rather than Enhanced Write Filters (EWF) for higher scalability.
  
  

Planning for Client Deployment for Linux and UNIX Servers

New topic that provides planning information to help you install the client on Linux and UNIX server in Configuration Manager SP1.

Determine the Site System Roles for Client Deployment in Configuration Manager

Updated for the information that you require an enrollment point and enrollment proxy point to manage Mac computers in Configuration Manager SP1.

How to Configure Client Communication Port Numbers in Configuration Manager

Updated for information about ports for client notification in Configuration Manager SP1.

How to Install Clients on Windows-Based Computers in Configuration Manager

This topic was previously named “How to Install Clients on Computers in Configuration Manager” and renamed because Configuration Manager SP1 supports the installation of clients on other operating systems, such as Mac OS X, and Linux and UNIX. Other updates to this topic include the following:

• Configuration Manager SP1 does not support client push installation for Windows Embedded devices that have write filters that are enabled.
  
  
• Configuration Manager SP1 client push installation now supports some CCMSetup properties in the Installation Properties tab.
  
  
• Configuration Manager SP1 updates for How to Automatically Upgrade the Configuration Manager Client for the Hierarchy.
  
  
• Examples are added to How to Install Configuration Manager Clients Manually, How to Install Configuration Manager Clients on Workgroup Computers, and How to Install Configuration Manager Clients for Internet-based Client Management.
  
  

How to Install Clients on Mac Computers in Configuration Manager

New topic that explains how to install and enroll Mac computers that so that you manage these computers similarly to how you manage other clients in the Configuration Manager hierarchy.

How to Install Clients on Linux and UNIX Computers in Configuration Manager

New topic that explains how to install the Configuration Manager client on Linux and UNIX servers that so that you manage these computers similarly to how you manage other clients in the Configuration Manager hierarchy.

How to Manage Mobile Devices by Using the Windows Intune Connector in Configuration Manager

New topic for Configuration Manager SP1 that explains how to manage mobile devices that run Windows Phone 8, Windows RTM, iOS, and Android. This mobile devices management solution requires a subscription to Windows Intune and uses the Windows Intune connector site system role.

How to Manage Clients in Configuration Manager

Updated to include information about how to notify computers to download policy as soon as possible when they run the Configuration Manager SP1 client.

How to Manage Linux and UNIX Clients in Configuration Manager

New topic that explains how to manage the Configuration Manager SP1 client on Linux and UNIX servers.

How to Monitor Linux and UNIX Clients in Configuration Manager

New topic that explains how to monitor the Configuration Manager SP1 client on Linux and UNIX servers.

Security and Privacy for Clients in Configuration Manager

Updated for the following security best practices:

• Do not use automatic site assignment if the client will download the trusted root key from the first management point it contacts.
  
  
• For Windows embedded devices that have write filters, take additional security precautions to reduce the attack surface if Configuration Manager disables the write filters to persist software installations and changes.
  
  
• For mobile devices: Do not deploy applications to users who have mobile devices enrolled by Configuration Manager or Windows Intune when the mobile device is used by more than one person, the device is enrolled by an administrator on behalf of a user, or the device is transferred to another person without retiring and then re-enrolling the device.
  
  
• For mobile devices: Make sure that users enroll their own mobile devices for Windows Intune.
  
  
• For Mac computers: Independently from Configuration Manager, monitor and track the validity period of the certificate that enrolled to users.
  
  

This topic also has the following new security issues listed:

• In Configuration Manager SP1, the connection from a client to the management point is not dropped if you block a client and the blocked client could continue to send client notification packets to the management point, as keep-alive messages.
  
  
• In Configuration Manager SP1, when you use automatic client upgrade and the client is directed to a management point to download the client source files, the management point is not verified as a trusted source.
  
  
• In Configuration Manager SP1, if you use the options to commit changes on Windows Embedded devices, accounts might be locked out sooner than expected.
  
  

About Client Settings in Configuration Manager

Updated throughout to incorporate the change in Configuration Manager SP1 where the True and False values in Configuration Manager with no service pack are now Yes and No. Other updates include the following:

• Background Intelligent Transfer – Added information for these settings.
  
  
• Client Policy: Client policy polling interval – Updated for Configuration Manager SP1 because the client policy interval in Service Pack 1 now applies to mobile devices that are enrolled by Configuration Manager, to Mac computers, and to computers that run Linux or UNIX.
  
  
• Computer Agent: Additional software manages the deployment of applications and software updates - This setting in Configuration Manager with no service pack was named Agent extensions manage the deployment of applications and software updates and has been renamed for clarity. There is no change in behavior. Typically, you select this option if you have installed a vendor add-on for Configuration Manager or use the SDK to install applications and software updates.
  
  
• Computer Agent: Allow Silverlight applications to run in elevated trust mode - This is a new setting to support Silverlight 5 in Service Pack 1.
  
  
• Computer Agent: PowerShell execution policy – Added the value of All Signed, which is new in Configuration Manager SP1 and the new default value.
  
  
• Computer Agent: Disable deadline randomization – Added for Configuration Manager SP1 and determines whether the client uses an activation delay of up to two hours to install required software updates and required applications when the deadline is reached.
  
  
• Endpoint Protection: Install Endpoint Protection client on client computers – Updated to clarify that False or No does not uninstall the Endpoint Protection client. To uninstall the Endpoint Protection client, you must set the Manage Endpoint Protection client on client computers client setting to False or No, and then deploy a package and program to uninstall the Endpoint Protection client.
  
  
• Client Policy: Enable user policy polling on clients – Updated for the new restriction in Configuration Manager SP1 that if this setting is not enabled, users cannot install applications from the Application Catalog.
  
  
• Metered Internet Connections – New group settings that lets you specify how Configuration Manager SP1 clients that run Windows 8 communicate on metered network connections.
  
  
• Power Management – New settings that let you configure wake-up proxy for Configuration Manager SP1 clients.
  
  
• Enrollment: - Added for Configuration Manager SP1, which replaces the Mobile Devices group settings in Configuration Manager with no service pack.
  
  
• Endpoint Protection: For Windows Embedded devices with write filters, commit Endpoint Protection client installation (requires restart) – Added for Windows Embedded clients in Configuration Manager SP1.
  
  

About Client Installation Properties in Configuration Manager

Updated for the following:

• Updated to add the new CCMSetup property of /forceinstall, which lets you specify that any existing Configuration Manager client will be uninstalled before installing the new client.
  
  
• Updated to correct the information that /NotifyOnly is a Client.msi property and not a CCMSetup property.
  
  
• Updated to correct the information about the minimum cache size that you can specify, which is 1 MB for a new client. For a reinstalled client, you cannot specify a value lower than the previously configured cache size.
  
  

Administrator Checklist: Deploying Clients in Configuration Manager

Updated for references to the new devices that are supported in Configuration Manager SP1.

Windows Firewall and Port Settings for Client Computers in Configuration Manager

Updated for the new wake-up proxy and client notification communication in Configuration Manager SP1.

Example Scenario for Deploying and Managing Configuration Manager Clients on Windows Embedded Devices

New topic that provides an example scenario of how to manage write filters on Windows Embedded devices when you manage these clients in Configuration Manager SP1.

Technical Reference for the Configuration Manager Client for Linux and UNIX

New topic that contains technical reference information that you might require if you install the Configuration Manager SP1 client on Linux or UNIX servers.

Introduction to Content Management in Configuration Manager

Updated for information about the Configuration Manager content library, which includes a new section, “About the Content Library on the Central Administration Site” to help you plan for content storage on a central administration site.

More information about this requirement appears in the Planning for Content Management in Configuration Manager.

This topic, and the Planning for Content Management in Configuration Manager topic is also updated for information about how to move the content library.

Planning for Content Management in Configuration Manager

Updated for planning information for cloud-based distribution points and pull distribution points in Configuration Manager SP1.

Configuring Content Management in Configuration Manager

Updated the Install and Configure the Distribution Point section for additional information about the Allow clients to connect anonymously setting.

Security and Privacy for Content Management in Configuration Manager

Updated for security best practices and security issues for cloud-based distribution points in Configuration Manager SP1.

Introduction to Application Management in Configuration Manager

Updated for the following new functionality in Configuration Manager SP1:

• App-V virtual environments
  
  
• App-V 5 deployment type
  
  
• New deployment types to support client computers that run Windows 8, and new deployment types for mobile devices that are managed by the Windows Intune connector.
  
  

This topic also has a new section to explain how mobile devices that are managed by the Windows Intune connector use the company portal so that users can download apps that you make available.

Planning to Deploy Windows 8 Apps in Configuration Manager

New topic to help you plan for deploying Windows 8 apps in Configuration Manager SP1.

Planning for App-V Integration with Configuration Manager

New topic that contains planning information to help you deploy virtual applications by using Configuration Manager.

Configuring the Application Catalog and Software Center in Configuration Manager

Updated for the following:

• Updated Step 4 instructions that for Configuration Manager with no service pack, you must include setting permissions explicitly on the CMApplicationCatalog\Content\Images\AppIcons folder for users in other domains, because this folder does not inherit permissions from the parent folder, CMApplicationCatalog. In Configuration Manager SP1, users from other domains can automatically access the Application Catalog without manual configuration for the security permissions.
  
  
• Updated Step 6 with the tip that missing prerequisites are one of the most typical reasons for the Application Catalog to not operate correctly after installation. Check and confirm the site system role prerequisites for the Application Catalog site system roles by using the Site System Requirements section of the Supported Configurations for Configuration Manager topic. The footnotes for the table include important information about configuring WCF activation and the requirement to explicitly enable ASP.NET.
  
  

How to Create Applications in Configuration Manager

Updated to include information about the new application types in Configuration Manager SP1.

How to Create and Deploy Applications for Mac Computers in Configuration Manager

New topic that contains information about how to deploy applications to Mac computers in Configuration Manager SP1.

How to Deploy Applications in Configuration Manager

Updated for information about the new Configuration Manager SP1 option Allow clients on a metered Internet connection to download content after the installation deadline, which might occur additional costs.

How to Create Deployment Types in Configuration Manager

Updated to include information about the new deployment types in Configuration Manager SP1.

This topic is also updated for information about how to create a script to detect if an application is already installed.

How to Create App-V Virtual Environments in Configuration Manager

New topic that contains information about how to create and manage App-V virtual environments in Configuration Manager SP1.

Deploying Software to Linux and UNIX Servers in Configuration Manager

New topic that contains information about how to deploy applications to Linux and UNIX servers in Configuration Manager SP1.

Introduction to Software Updates in Configuration Manager

Updated to add information about the new software update point functionality in Configuration Manager SP1.

Planning for Software Updates in Configuration Manager

Updated to include changes to software update point functionality that is introduced in Configuration Manager SP1, such as the ability to install more than one software update point at a site.

Configuring Software Updates in Configuration Manager

Updated for the new and changed configuration options in Configuration Manager SP1.

Prerequisites For Deploying Operating Systems in Configuration Manager

Updated the “Dependencies External to Configuration Manager” section to include new dependencies for Configuration Manager SP1. This includes details about the Automated Installation Kit (Windows AIK) for Configuration Manager with no service pack, and its replacement by the Windows Assessment and Deployment Kit (Windows ADK) for Configuration Manager SP1.

How to Manage Boot Images in Configuration Manager

Updated for information about a new setting that lets you configure the Windows PE scratch space in Configuration Manager SP1.

Planning for Operating System Deployment Interoperability

New topic that provides information about deploying operating systems when sites in your hierarchy have different versions of Configuration Manager.

Security and Privacy for Deploying Operating Systems in Configuration Manager

Updated for the following security improvement in Configuration Manager SP1:

• When you use bootable media with Configuration Manager SP1, the content is hashed and must be used with the original policy. This help prevents a client from installing content or client policy that has been tampered with.
  
  
• Configuration Manager SP1 uses client authentication to the state migration point by using a Configuration Manager token that is issued by the management point.
  
  

Task Sequence Built-in Variables in Configuration Manager

Updated to add the following variables:

• _SMSTSWTG
  
  
• OSDPreserveDriveLetter
  
  
• SMSTSAssignmentsDownloadInterval
  
  
• SMSTSAssignmentsDownloadRetry
  
  
• SMSTSBootUEFI
  
  
• SMSTSDownloadProgram
  
  
• SMSTSLanguageFolder
  
  
• SMSTSPersistContent
  
  
• SMSTSPostAction
  
  

How to Provision Windows To Go in Configuration Manager

New topic that provides information and procedures about how to use Configuration Manager SP1 so that users can boot to Windows 8 from a USB drive.

Prestart Commands for Task Sequence Media in Configuration Manager

New topic that provides information and procedures about how to use a script or executable as a prestart command that runs before a task sequence is selected and can interact with the user in Windows PE.

How to Create Queries in Configuration Manager

Updated for some example WQL queries that you can easily import and modify for your own use. For example, you could create your own collections by using these queries.

Hardware Inventory for Linux and UNIX in Configuration Manager

New topic that explain how to inventory computers in Configuration Manager SP1 that run Linux or UNIX.

Introduction to Compliance Settings in Configuration Manager

Updated for information about the new user data and profiles configuration items in Configuration Manager SP1.

Prerequisites for Compliance Settings in Configuration Manager

Updated for the required permissions to manage user data and profiles configuration items in Configuration Manager SP1.

How to Create Windows Configuration Items for Compliance Settings in Configuration Manager

Updated to include more information about how to create Active Directory settings.

How to Create User Data and Profiles Configuration Items in Configuration Manager

New topic about how to create user data and profiles configuration items in Configuration Manager SP1.

How to Create Mac Computer Configuration Items in Configuration Manager

New topic that provides information about how to create and deploy configuration items for Mac computers in Configuration Manager SP1.

How to Import Configuration Data in Configuration Manager

Updated to add a link to the System Center 2012 Configuration Manager Configuration Pack.

Security and Privacy for Compliance Settings in Configuration Manager

Updated for the following security best practices:

• Do not configure compliance rules that use data that can be modified by end users.
  
  
• Secure the communication channel when you browse to a reference computer.
  
  

Introduction to Endpoint Protection in Configuration Manager

Updated for a new workflow diagram that shows the steps and processes required to configure Endpoint Protection in Configuration Manager.

How to Configure Definition Updates for Endpoint Protection in Configuration Manager

New topic that contains information about how to configure update sources for Endpoint Protection definitions.

How to Create and Deploy Antimalware Policies for Endpoint Protection in Configuration Manager

Updated for new information about exclusion settings that you can use to prevent folders from being scanned by Endpoint Protection.

How to Manage Antimalware Policies and Firewall Settings for Endpoint Protection in Configuration Manager

Updated for new information about the available management tasks to remediate detected malware.

How to Monitor Endpoint Protection in Configuration Manager

Updated to add a new section named Malware Alert Levels, which contains a description of the various malware alert levels that you might see in the console and reports.

Example Scenario for Protecting Computers From Malware by Configuring Endpoint Protection in Configuration Manager

New topic that provides an example scenario for how you can implement Endpoint Protection in Configuration Manager to protect computers in an organization from malware attacks.

Security and Privacy for System Center 2012 Configuration Manager

Updated the information about the Security Configuration Wizard (SCW) so that it includes the toolkit for Configuration Manager SP1.

Microsoft System Center 2012 Configuration Manager Privacy Statement

Updated for Configuration Manager SP1. There are no updates for Microsoft System Center 2012 Configuration Manager Privacy Statement - Mobile Device Addendum.