Consolidate and Protect IT Systems
Over the years, client management and endpoint security have traditionally been separate disciplines within IT organizations, each with their own teams and tools. As each discipline matured to address increasingly sophisticated threats to user productivity, system complexity increased, functionality and processes began to overlap, and ownership costs crept steadily upward. Despite recognizing inefficiencies, many organizations have been forced to maintain the status quo because of limited options. Security and management solutions continue to be sold separately, forcing IT to purchase, deploy, and manage two entirely separate infrastructures despite each playing a critical role in reducing risk inherent in desktop environments.
Microsoft has fundamentally changed this approach with the following products:
System Center Configuration Manager 2007 R3
This product enables you to comprehensively assess, deploy, and update your servers, clients and devices – across physical, virtual, and mobile environments. It also helps you to ensure that your IT systems comply with desired configuration states to improve availability, security and performance of your systems.
Configuration Manager 2007 R3 is an important tool in eliminating risk in desktop environments. Configuration Manager 2007 R3 Software Update Management simplifies the complex task of delivering and managing updates to IT systems across the enterprise. With Configuration Manager 2007 R3 you can deliver updates of Microsoft products, third-party applications, custom in-house line-of-business applications, hardware drivers, and system BIOS to a variety of devices, including desktops, laptops, servers, and mobile devices. Configuration Manager 2007 R3 settings enforcement then ensures that IT systems comply with the established baseline to improve availability, security, and performance network-wide.
Most importantly, Configuration Manager 2007 R3 serves as the management foundation for Forefront Endpoint Protection 2010, allowing you to manage and protect your client infrastructure all within single interface.
Forefront Endpoint Protection 2010
This product protects desktop, laptop, and server operating systems against viruses, spyware, rootkits and other threats. It is deployed, configured, managed, updated, and reported on through Configuration Manager 2007 R3. This single infrastructure for security and management gives IT administrators:
- Consolidated tools, processes, and infrastructure to create new efficiencies and lower desktop ownership costs.
- A unified view of device configuration and security information to identify and remediate vulnerabilities more easily.
Windows Intune
This is a cloud-based service that allows you to manage and secure PCs from an easy-to-use Web-based console. The Windows cloud service works with Windows 7 to provide Control of PC management and security from virtually anywhere – all that is required is an Internet connection.