Security and Privacy for Configuration Manager 2007

• Security and Privacy for Configuration Manager 2007
  • Overview of Configuration Manager Security and Privacy
    • Overview of Configuration Manager Security
    • Overview of Configuration Manager Privacy
    • Overview of Configuration Manager Cryptographic Controls
      • About the Trusted Root Key
    • Overview of Configuration Manager Object Security and WMI
  • Configuration Manager Security and Privacy Planning
  • Security Best Practices for Configuration Manager
    • Best Practices for Security Fundamentals
    • Best Practices for Hierarchy Security
    • Best Practices for Service Continuity
    • Best Practices for Securing Communications
    • Best Practices for Securing Site Systems
    • Best Practices for Securing Clients
    • Best Practices for Securing Internet-Based Clients
    • Best Practices for Securing Name Resolution
    • Best Practices for Certificate Management
    • Best Practices for Maintaining Configuration Manager Security
  • Security Best Practices and Privacy Information for Configuration Manager Features
    • Configuration Manager Console Security Best Practices and Privacy Information
    • Software Distribution Security Best Practices and Privacy Information
    • Software Updates Security Best Practices and Privacy Information
    • Operating System Deployment Security Best Practices and Privacy Information
    • Asset Intelligence Security Best Practices and Privacy Information
    • Software Metering Privacy Information
    • Reporting Security Best Practices
    • Desired Configuration Management Security Best Practices and Privacy Information
    • Mobile Device Clients Security Best Practices and Privacy Information
    • Network Access Protection Security Best Practices
    • Discovery Privacy Information
    • Inventory Security Best Practices and Privacy Information
    • Remote Tools Security Best Practices and Privacy Information
    • Wake On LAN Security Best Practices
    • Application Compatibility Toolkit Connector Privacy Information
    • Out of Band Management Security Best Practices and Privacy Information
  • Accounts and Groups in Configuration Manager
    • Accounts Configured in the Configuration Manager Console
      • About the AMT Provisioning and Discovery Account
      • About the AMT Remote Admin Account
      • About the AMT User Accounts
      • About the Capture Operating System Image Account
      • About the Client Push Installation Account
      • About the Health State Reference Publishing Account
      • About the Health State Reference Querying Account
      • About the Management Point Database Connection Account
      • About the MEBx Account
      • About the Multicast Service Point Connection Account
      • About the Network Access Account
      • About the Package Access Account
      • About the PXE Service Point Database Connection Account
      • About the RAS Sender Phone Book Account
      • About the Remote Tools Permitted Viewer Accounts
      • About the Server Locator Point Database Connection Account
      • About the Site Address Account
      • About the Site System Installation Account
      • About the Software Update Point Connection Account
      • About the Software Update Point Proxy Server Account
      • About the Task Sequence Editor Domain Joining Account
      • About the Task Sequence Editor Network Folder Connection Account
      • About the Task Sequence Run As Account
    • About the Client Status Reporting Service Account
    • About the Database Roles for Configuration Manager
    • About the Proxy Account for Internet-Based Clients
    • Configuration Manager Groups
      • About the ConfigMgr Remote Control Users Group
      • About the IIS Worker Process Group in Configuration Manager
      • About the Reporting Users Group
      • About the Site System to Site Server Connection Group
      • About the Site to Site Connection Group
      • About the SMS Admins Group
    • Windows Accounts Used by Configuration Manager
      • About the Account Used To Install Configuration Manager
      • About the Accounts Used to Run the Configuration Manager Console
      • About the Internet Guest Account in Configuration Manager
      • About the Local System Account/Computer$ in Configuration Manager
      • About the Local Service Account in Configuration Manager
      • About the Network Service Account in Configuration Manager
  • Security Checklists for Configuration Manager
    • Checklist for Security Best Practices
    • Checklist for Configuration Manager Feature Security Best Practices
    • Checklist for Configuration Manager Account Security
  • Tasks for Configuration Manager Security
    • Security Planning Tasks
      • Choose between Native Mode and Mixed Mode
      • Choose Which Method to Use to Install a Secondary Site
      • Decide How to Deploy the Site Server Signing Certificate to Clients (Native Mode)
      • Decide If You Need to Configure HTTP Communication for Roaming and Site Assignment (Native Mode)
      • Decide If You Should Extend the Active Directory Schema
      • Determine If You Need to Configure a Certificate Trust List (CTL) with IIS (Native Mode)
      • Determine Whether You Need to Enable Certificate Revocation Checking (CRL) On Clients (Native Mode)
      • Determine If You Will Use FQDN Server Names
      • Determine If You Need to Block Configuration Manager Clients
      • Renewing or Changing the Site Server Signing Certificate
    • How to Assign Rights for Objects to Users and Groups
    • How to Delete a Security Right
    • How to Change the Filtering on the Security Node
    • How to Require Secure Key Exchange Between Sites
    • How to Manually Exchange Public Keys Between Sites
    • How to Configure Windows SCW for Configuration Manager
    • How to Manage the Trusted Root Key in Configuration Manager
      • How to Pre-provision the Trusted Root Key on Clients
      • How to Verify the Trusted Root Key
      • How to Remove the Trusted Root Key
    • How to Enable CRL Checking for Software Updates
    • How to Encrypt Client Inventory Reports
    • How to Configure Request Ports for the Configuration Manager Client
    • How to Configure an SPN for SQL Server Site Database Servers
    • How to Configure Internet-Based Site Systems to Allow Only Site Server Initiated Data Transfers
    • How to Approve Configuration Manager Clients
    • How to Configure a Distribution Point to Transfer Content Using BITS, HTTP, and HTTPS
    • How to Block Configuration Manager Clients
    • How to Configure Configuration Manager 2007 Accounts
      • How to Add a Computer Account to a Group
      • How to Manage Accounts from the Command-Line
      • How to Configure the Configuration Manager Client Push Installation Account
      • How to Configure the Health State Reference Publishing Account
      • How to Configure the Health State Reference Querying Account
      • How to Configure the Management Point Database Connection Account
      • How to Configure the Network Access Account
      • How to Specify a Package Access Account
      • How to Configure the PXE Service Point Database Connection Account
      • How to Configure the RAS Sender Phone Book Account
      • How to Configure the Server Locator Point Database Connection Account
      • How to Configure the Site Address Account
      • How to Configure the Site System Installation Account
      • How to Configure the Software Update Point Connection Account
      • How to Configure the Software Update Point Proxy Server Account
      • How to Modify the Remote Tools Permitted Viewer Accounts
  • Technical Reference for Configuration Manager Security
    • Classes and Instances for Object Security in Configuration Manager
    • Implementing IPsec in Configuration Manager 2007
    • Ports Used by Configuration Manager
    • Accounts to Delete after Upgrading from SMS 2003

• English-to-Russian translation