MDM Server Tools includes a set of tools to help administrators configure, deploy, and manage System Center Mobile Device Manager (MDM) 2008 and its components.
The following are tools included in this download:
• MDM Certificate Tool
• MDM Bulk Pre-Enrollment Tool
• MDM Cleanup Tool
• MDM Device Enrollment Cleanup Tool
• MDM Application Hash Code Tool
• MDM CAB Signing Tool
• MDM Active Directory Validation Tool
• MDM System Configuration Cmdlets
• MDM Device Records Synchronization Tool
• MDM Additional Group Policies
• MDM Group Policy Models
• MDM Blocked Device Cleanup Tool
• MDM Security Configuration Wizard Templates
MDM Certificate Tool helps administrators to request certificates for MDM components. Administrators can also set Access Control Lists (ACLs) on certificates, place requested certificates in a specific folder, and invalidate Global Certification Manager (GCM) certificates.
MDM Bulk Pre-Enrollment Tool enables administrators to pre-enroll groups of Windows Mobile 6.1 devices into MDM. Bulk pre-enrollment can be simpler and more efficient than pre-enrolling a large number of devices individually.
MDM Cleanup Tool enables administrators to completely uninstall MDM from servers when other removal options have not fully removed MDM components and settings.
MDM Device Enrollment Cleanup Tool is a PowerShell script–based tool that helps administrators remove from Active Directory and the MDM databases older or no-longer-needed managed devices.
MDM Applications Hash Code Tool allows administrators to create an XML file for use with a Group Policy Object (GPO) to allow or prevent an application from running on managed devices.
MDM CAB Signing Tool enables administrators to sign a .cab file together with all .exe and .dll files contained in the .cab file, or to sign individual .exe and .dll files.
MDM Active Directory Validation Tool can help administrators make sure that they have configured Active Directory correctly for MDM before and after they install an MDM system.
MDM System Configuration Cmdlets help administrators modify MDM Active Directory Service Connection Points (SCPs). By using the cmdlets, administrators can view and modify endpoint-related information stored in the Device Management and Enrollment SCPs, as well as database and certificate authority information stored in the Dependencies SCP.
MDM Device Records Synchronization Tool synchronizes device records maintained in the MDM AdminServices database with managed device information in Active Directory.
MDM Additional Group Policies includes ADM templates for the following Group Policy settings:
• Synchronize Sent Items folder during Exchange Active Sync.
• Do not automatically run auto-run applications when a storage card is inserted.
• Wireless WAN (WWAN) connection profile used for Mobile VPN.
• Allow failover to the default WWAN connection configured for Mobile VPN.
MDM Group Policy Models provides Group Policy settings configured to appropriately set up managed devices for three common roles. The models provided are the following: single purpose model, restricted connection model, and minimum recommended model.
MDM Blocked Device Cleanup Tool removes wiped managed devices from the list of blocked managed devices maintained by MDM Gateway Server.
MDM Security Configuration Wizard (SCW) Templates includes three SCW templates that you can apply to MDM servers to help enhance security by disabling functionality that is not required for the servers.
To learn about additional MDM tools, see MDM Resource Kit Tools
MDM Server Tools Release History
4/1/2008 – Initial release, Version 1.0
5/1/2008 – Minor release, Version 1.01
5/14/2008 – Updated, Version 1.1