System Center Mobile Device Manager 2008 (MDM) Administrator
Help Home
System Center Mobile Device Manager 2008
Getting Started
MDM Overview
MDM Tools and Resources
System Requirements for MDM Servers and Managed Devices
MDM Release Notes
MDM Frequently Asked Questions
MDM Planning FAQ
MDM Deployment FAQ
MDM Gateway Server FAQ
MDM Enrollment Server FAQ
MDM Device Management Server FAQ
MDM Client Devices FAQ
Architecture
MDM System Overview
MDM Gateway Server Architecture
MDM Device Management Server Architecture
MDM Enrollment Server Architecture
MDM Client Architecture
Device Access Connection Method
MDM Server Configuration Overview
MDM Administrator Tools
MDM Management Console Architecture
Group Policy Extensions Overview
Software Distribution Management Console Overview
How MDM Works
Device Enrollment with MDM
Mobile VPN with MDM
Device Management with MDM
LOB Access with MDM
Group Policy Application on MDM
Software Distribution on MDM
Application Authentication on MDM
Planning
MDM System Topologies
MDM Perimeter Network Configuration
Implementing WSUS in a Scaled-Out Configuration
MDM Server Topologies
MDM Distributed Configuration Topology
MDM Scaled-Out Distributed Configuration Topology
Configuring Infrastructure for MDM Deployment
Configure Certification Authority for MDM
Enable Managed Devices to Access Exchange ActiveSync
Install WSUS 3.0 SP1 on MDM Servers
Configure Internal and External Network Access for Devices
Install and Configure SQL Server for MDM
Install and Configure IIS for MDM
Enforce Group Policy Settings on Managed Devices
Modify MDM Active Directory Service Connection Points
MDM Server Deployment Guidelines
Gateway Server Deployment Guidelines
Device Management Server Deployment Guidelines
Enrollment Server Deployment Guidelines
MDM Planning and Deployment Checklists
MDM Implementation Planning Checklist
MDM Deployment Checklists
MDM Deployment Worksheets
MDM Infrastructure Information Worksheet
MDM Firewall Settings Worksheet
MDM Ports Information for Reference Only
Deployment
MDM Deployment Overview
Step 1: Configuring Active Directory for MDM
Step 1a: Configuring the Active Directory Domain for MDM
Step 1b: Granting Permissions for Administrators to Install MDM
Step 1c: Granting Certification Authority Permission to Revoke a Device Enrollment (Optional)
Step 1d: Creating Mobile Device Organizational Units (Optional)
Step 2: Installing MDM Enrollment Server
Step 3: Installing MDM Device Management Server
Step 4: Installing MDM Administrator Tools
Step 5: Installing MDM Gateway Server
Step 5a: Creating the MDM Gateway Certificate Request and Certificate
Step 5b: Exporting the Certification Authority Certificates
Step 5c: Create and Import Certification Authority Certificate(s) onto the MDM Gateway Server
Step 5d: Running MDM Gateway Server Setup
Step 5e: Validating the Gateway Certificate
Step 5f: Setting the Gateway URI for MDM Managed Devices
Step 5g: Running the Add MDM Gateway Wizard
Operations
Managing MDM Devices
Overview of MDM Management Console
Enrolling Devices
Creating an Enrollment Request
Enrolling a New Device
Viewing Pending Enrollments
Canceling a Pending Enrollment
Wiping Managed Devices
Creating a Wipe Request
Viewing Recent Wipe Requests
Canceling a Wipe Request
Blocking Managed Devices
Blocking a Managed Device
Unblocking a Managed Device
Getting Information from Managed Devices
Getting Updated Device Information
Viewing All Managed Devices
Collecting Managed Device Inventory Data
Configuring Managed Devices with Group Policy
Applying Group Policies to Devices by Linking to an Organizational Unit
Applying Group Policies to Devices Through Security Filtering
Applying Group Policies to Devices through WMI Filtering
Creating a Group Policy Report for a Device
Creating a New Group Policy Object for Devices
Configuring Device Group Policy Settings
Configuring a Dial-up (CSD) Connection
Configuring a WAN Connection
Configuring a WLAN Connection
Importing a Certificate
Installing a Certificate
Removing a Certificate from the List of Known Certificates
Revoking a Certificate
Adding Internet and Work Domains
Removing Internet and Work Domains
Allowing an Unsigned Application to Run As Privileged
Allowing an Unsigned Application to Run As Normal
Adding Files to the Encryption List
Excluding Files from the Encryption List
Allowing Bluetooth Profiles
Distributing Software to Managed Devices
Overview of MDM Software Distribution
Using MDM Software Distribution Console
Overview of MDM Software Distribution Console
Opening the MDM Software Distribution Console
Adding a Server to the MDM Software Distribution Console
Creating and Managing Packages
Package Overview
Signing CAB Files in Packages
Importing Certification Authority (CA) Certificates
Creating the Personal Information Exchange (PFX) Certificate
Scripted Signing of .Cab files using the CabSignTool Utility
Publishing .Cab Files
Creating a New Package
Modifying an Existing Package
Deleting an Existing Package
Searching for a Package
Viewing Packages
Creating a Package View
Viewing Properties for a Package
Viewing File Information for a Package
Viewing Revision History for a Package
Approving Packages
Declining Packages
Managing Devices and Groups
Devices and Groups Overview
Specifying the Method for Assigning Devices to Groups
Enabling Client-Side Targeting Through Group Policy
Creating a Device Group
Removing a Device Group
Assigning a Device to One or More Groups
Removing a Device from a Group
Removing a Device from the Server
Viewing Properties for a Device
Running Software Distribution Reports
Reports Overview
Creating Package or Device Reports
Managing MDM Servers
Managing MDM Enrollment Server Operations
Overview of MDM Enrollment Server
Stopping and Restarting MDM Enrollment Server
Configuring MDM Enrollment Server
Repairing MDM Enrollment Server
Removing MDM Enrollment Server
Managing MDM Device Management Server Operations
Overview of MDM Device Management Server
Stopping and Restarting MDM Device Management Server
Configuring MDM Device Management Server
Repairing MDM Device Management Server
Removing MDM Device Management Server
Managing MDM Gateway Server Operations
Overview of MDM Gateway Server
Overview of IPsec Tunneling
Adding MDM Gateway Server
Creating an IP Address Pool
Removing a Certificate
Configuring MDM Gateway Server
Repairing MDM Gateway Server
Removing MDM Gateway Server
Configuring MDM Services
Configuring MDM Enrollment Service
Configuring MDM Wipe Service
Configuring the MDM Device Inventory Process
Configuring MDM Software Distribution
MDM Backup and Recovery
Security and Protection
Security Considerations
Security Risks in the Mobile Enterprise with MDM
Protecting Against Threats or Risks with MDM
MDM Security Architecture
Server Roles and MDM
Security Features in MDM Client
Security Best Practices in MDM
MDM and Microsoft Certification Authorities
Server Administrator Roles in MDM
Server Infrastructure Roles in MDM
Recommended Group Policy Settings in MDM
Minimum Policy Settings
Restricted Connection Policy Settings
Single Purpose Policy Settings
Technical Reference
Technical Reference for MDM Deployment
ADConfig Tool
Creating Manual Certificates
Command-Line Options
Best Practices in MDM Deployment
Technical Reference for MDM Operations Guide
MDM Shell
Overview of MDM Shell
Overview of MDM Shell Cmdlet Help
MDM Shell Cmdlet Reference
Enrollment Cmdlets
Set-EnrollmentPermissions
New-EnrollmentRequest
Get-EnrollmentRequest
Remove-EnrollmentRequest
Get-EnrollmentConfig
Set-EnrollmentConfig
Get-EnrollmentServiceLog
Remove-EnrollmentServiceLog
Device Management Cmdlets
Get-MDMDevice
Get-MDMDeviceStatus
Get-DeviceManagementConfig
Set-DeviceManagementConfig
Device Wipe Cmdlets
New-WipeRequest
Get-WipeRequest
Remove-WipeRequest
Get-WipeConfig
Set-WipeConfig
Blocked Device Cmdlets
Add-BlockedDevice
Get-BlockedDevice
Remove-BlockedDevice
Device Inventory Cmdlets
Enable-MDMInventory
Disable-MDMInventory
Restore-MDMInventoryDefaults
Get-MDMDeviceHistory
Get-MDMDeviceInventory
New-MDMInventoryItem
Get-MDMInventoryItem
Set-MDMInventoryItem
Remove-MDMInventoryItem
Software Distribution Cmdlets
Get-SoftwareDistributionConfig
Set-SoftwareDistributionConfig
Group Policy Cmdlets
Get-MobilePolicyServiceConfig
Set-MobilePolicyServiceConfig
Update-MobilePolicyCalculation
Service Manager Cmdlets
Get-MDMServer
Enable-MDMTrace
Disable-MDMTrace
Get-MDMTrace
Gateway Cmdlets
Add-MDMGatewayServer
Get-MDMGatewayServer
Set-MDMGatewayServer
Remove-MDMGatewayServer
Get-MDMGlobalGatewayConfig
Set-MDMGlobalGatewayConfig
Start-MDMVPNService
Stop-MDMVPNService
Security Policies in MDM
Messaging Policies in MDM
MDM Error and Event Messages
Troubleshooting
Overview of MDM Troubleshooting
Troubleshooting MDM Setup Issues
Troubleshooting MDM Gateway Server Issues
Troubleshooting MDM Enrollment Issues
Troubleshooting MDM Device Management Issues
Troubleshooting MDM Software Distribution Issues
Troubleshooting MDM Group Policy Issues
Technical Articles
Configuring External and Internal Firewalls in MDM
Deploying MDM in a Global Enterprise Environment
Integrating MDM with Existing Web Sites or SharePoint Server
Integrating MDM with Microsoft Exchange Server
Integrating MDM with Office Communications Server
Using WM 6.1 Images on the Device Emulator with MDM
Install the Device Emulator Software
Establish Network Connectivity on the Emulator
Validate Device Emulator Connectivity
Enroll the Simulated Device with MDM
Enable Logging on the Simulated Device
Using Wi-Fi with MDM
MDM Wireless Deployment Topologies
External MDM Gateway for Wi-Fi
Internal MDM Gateway for Wi-Fi
Public Wi-Fi for MDM
No VPN Gateway for Wi-Fi
Windows Mobile Device Enrollment using Wi-Fi
Procedures for MDM Wireless Deployment
Windows Mobile Device Wi-Fi Configuration
Enabling or Disabling the Mobile Device VPN Client
Help Home