Enable employees to work anywhere on the devices that they choose

Deploying and managing Windows is easier than ever before with new improvements including the support of the latest Windows 10 features, Windows in-place upgrade, more frequent and easier updates, unified end-user portal, and on-premises mobile device management (MDM).

Through integration with Microsoft Intune, you can extend your System Center Configuration Manager to manage PCs, Macs, and Unix/Linux servers along with cloud-based mobile devices running Windows, iOS, and Android, all from a single management console.

Business case

Technical overview

Benefits

Empower user productivity

Enable employees to access the corporate applications that they need to be productive from anywhere, on whatever device they choose, while helping protect corporate information.

Unify your IT management infrastructure

Streamline operations with a unified infrastructure that integrates device management and protection across mobile, physical, and virtual environments.

Simplify administration

Administer client systems and offer improved visibility and enforcement options for maintaining system compliance.

Built to work with Windows 10

Choose the deployment, upgrade, update, and management capabilities of Windows 10 in Configuration Manager and Microsoft Intune that work best for your business.

System Center Configuration Manager team blog

See all

<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" > <channel> <title>System Center Configuration Manager – Enterprise Mobility and Security Blog</title> <atom:link href="https://blogs.technet.microsoft.com/enterprisemobility/feed/?product=system-center-configuration-manager" rel="self" type="application/rss+xml" /> <link>https://blogs.technet.microsoft.com/enterprisemobility</link> <description>The most recent news and updates about Microsoft’s Enterprise Mobility offerings and events for enterprise technology professionals and developers.</description> <lastBuildDate>Fri, 29 Sep 2017 20:25:19 +0000</lastBuildDate> <language>en-US</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <item> <title>What’s new with Microsoft Intune and System Center Configuration Manager @ Ignite 2017</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-with-microsoft-intune-and-system-center-configuration-manager-ignite-2017/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-with-microsoft-intune-and-system-center-configuration-manager-ignite-2017/#respond</comments> <pubDate>Wed, 27 Sep 2017 15:00:24 +0000</pubDate> <dc:creator><![CDATA[Microsoft Intune Team]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[Android]]></category> <category><![CDATA[BYOD]]></category> <category><![CDATA[Conditional Access]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[Consumerization of IT]]></category> <category><![CDATA[iOS]]></category> <category><![CDATA[Mac OS]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <category><![CDATA[Windows]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=55805</guid> <description><![CDATA[Organizations are continuing to experience an increasing number of devices and cloud services that are being used by their employees. While this allows people to achieve more at work, it also requires IT to enable and support new and more complex scenarios with the same budget and resources. Organizations are looking for a solution that <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-with-microsoft-intune-and-system-center-configuration-manager-ignite-2017/">Continue reading</a>]]></description> <content:encoded><![CDATA[Organizations are continuing to experience an increasing number of devices and cloud services that are being used by their employees. While this allows people to achieve more at work, it also requires IT to enable and support new and more complex scenarios with the same budget and resources. Organizations are looking for a solution that allows them to manage their users, various device platforms, and different types of apps using an integrated, modern platform. We are excited to announce new features in Microsoft Intune to expand its unified endpoint management (UEM) capabilities. These improvements include conditional access enhancements across all platforms, integration with Jamf for macOS device compliance, a new and unique co-management capability with System Center Configuration Manager (ConfigMgr) for modern Windows 10 management, and more.
<h2>Microsoft 365</h2>
<a href="https://www.microsoft.com/en-us/microsoft-365/default.aspx">Microsoft 365</a> is designed to enable a modern workplace for employees and a new approach for IT to simplify management, improve security, and lower costs. You can read more about this new approach in Brad Andersons <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/25/maximizing-its-impact-with-microsoft-365-powered-devices/">Microsoft 365 powered device blog post</a> and our <a href="https://youtu.be/JA7eH8SnDtk">latest Mechanics video</a>.
<img width="1024" height="576" class="size-large wp-image-56035 aligncenter" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/09/160-1024x576.png" />
<a href="https://gallery.technet.microsoft.com/Infographic-Simplify-37e77674">You can download this infographic here</a>.
One of the key elements of Microsoft 365 powered device is the ability to modernize the deployment and management of Windows 10 and Office 365 ProPlus. We have been regularly adding new modern management features in Intune since the release of Windows 10. Some of recent improvements include the ability to <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/08/10/deploying-office-365-proplus-with-microsoft-intune/">deploy Office 365 ProPlus</a>, BitLocker management, integration with Windows Update for Business, and more. We are also working on new features including the ability to run PowerShell scripts on Windows 10 devices using Intune Management Extension, new Windows 10 MDM settings, and enhanced support for Windows AutoPilot, Windows Defender ATP, Windows Store for Business, and Surface Hub.
While there are many benefits of modern management, most organizations are still using an on-premises Windows Server Active Directory (AD) and System Center Configuration Manager (ConfigMgr) to manage their Windows devices. Based on conversations with our customers, we heard that until now, it wasnt always easy to move to modern management. Some customer scenarios require the ConfigMgr agent, and there are also Windows 7 devices that need to be managed. Customers also use deeply integrated partner or homegrown solutions for ConfigMgr, and not to mention the complexity of planning and switching from traditional to modern management with existing IT systems, organizational structures, and processes. Many organizations were looking for a more simplified and manageable way to transition from ConfigMgr and AD to a modern management approach with Intune and Azure AD. We are excited to make this possible with a new and unique feature of ConfigMgr and Intune called co-management.
<img width="1024" height="576" class="size-large wp-image-56055 aligncenter" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/09/219-1024x576.png" />
Co-management delivers a bridge that simplifies planning and reduces the risks as organizations transition the management of Windows 10 devices to cloud-based Intune and Azure AD. Co-management helps to streamline the journey to modern management in a controlled and iterative way. This allows IT to modernize some workloads of Windows 10 management (e.g. device compliance assessment for conditional access) while maintaining ConfigMgr for other workloads (e.g. Win32 app distribution) based on your needs and at your own pace with the end goal to fully transition to modern management.
<img width="1024" height="550" class="size-large wp-image-56046 aligncenter" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/09/311-1024x550.png" />
With the Fall Creators Update, a Windows 10 device can be joined to on-premises Active Directory (AD) and cloud-based Azure AD at the same time. Co-management takes advantage of this improvement and enables the device to be managed by both ConfigMgr agent and Intune MDM. This allows organizations to move parts or workloads of their management to the cloud making the move in manageable chunks. For example, customers can transition device compliance check, resource access profile deployment, or Windows 10 update management from ConfigMgr to Intune while continuing to use ConfigMgr for other workloads such as software distribution and deep device security configuration. Overtime, it will be possible to transition more workloads through co-management.
<img width="1024" height="543" class="size-large wp-image-56085 aligncenter" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/09/Picture5Intune-1024x543.png" />Another common use case is the ability to modernize OS deployment where a traditional imaging process can be replaced with Windows AutoPilot integrated with Intune and Azure AD while the rest of provisioning and management is done through ConfigMgr.
You will be able to learn more about these improvements in the recordings of our Ignite sessions (search for BRK3057, BRK3075, BRK3076, and BRK2079 on <a href="https://myignite.microsoft.com/videos">https://myignite.microsoft.com/videos</a> after Ignite ends) as well as test it out in your lab in the upcoming ConfigMgr Technical Preview Branch release (version 1709). We are planning to make co-management generally available with the 1710 release of ConfigMgr Current Branch later this year.
<h2>Integration with Jamf for macOS device compliance</h2>
As a unified endpoint management (UEM) solution, we are always looking for ways to extend our platform through our partners to satisfy the unique needs of our customers. Today, we are excited to announce our integration with <a href="https://www.jamf.com/">Jamf</a>, a well-known solution for managing the Apple ecosystem. Jamf will integrate with Intunes device compliance engine to provide an automated compliance management solution for macOS devices accessing applications connected with Azure AD authentication.
<img width="1024" height="575" class="size-large wp-image-56045 aligncenter" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/09/410-1024x575.png" />
Jamf will send macOS device state information to Intune which will then evaluate it for compliance with the policies defined in the Intune console. Based on the device compliance state as well as other conditions (such as location, user risk, etc), Conditional Access will allow, block, or enforce MFA for macOS devices accessing cloud and on-premises applications connected with Azure AD, including Office 365.
This integrated solution will be available in late 2017. For more information tune into the Jamf Nation User Conference Keynote livestream on Wednesday, October 25: <a href="https://www.jamf.com/events/jamf-nation-user-conference/2017/">https://www.jamf.com/events/jamf-nation-user-conference/2017/</a>.
<h2>The next wave of conditional access</h2>
In June, we announced the <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/06/08/the-new-intune-and-conditional-access-admin-consoles-are-ga/">general availability of the new conditional access admin experience</a> in the Azure portal. This powerful, simplified new experience makes it easy to manage policies that bring together services across EMS, including Azure AD Premium, Microsoft Intune, and combines it with the insight from the <a href="https://www.microsoft.com/en-us/security/intelligence">Microsoft Intelligent Security Graph</a>, which scans billions of signals to determine user risk levels.
Today, Microsoft announced a whole new wave of scenarios that expand our conditional access capabilities, including integration across EMS Azure Information Protection and Microsoft Cloud App Security services, as well as additional scenarios that leverage Intunes core MAM and MDM capabilities.
You can read about this next wave of conditional access capabilities in <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-with-azure-active-directory-ignite-2017/">this post from Alex Simons</a> that was published earlier today.
<h2>In case you missed it</h2>
As always, the last couple of months have been busy with the release of several product updates and new features. Here is a recap of some of these releases that were getting a positive customer feedback on.
<ul>
<li>iOS 11 and Android O support: In recent weeks, both Google and Apple announced updates to their operating systems. As you plan for both updates within your organizations, you can have the confidence that all existing Intune capabilities will continue to work as expected when users upgrade.</li>
<li>Enhanced macOS support: Over the last month, we added several improvements to our macOS management capabilities, including <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/08/23/azure-ad-and-intune-now-support-macos-in-conditional-access/">conditional access support</a> and a new <a href="https://www.microsoft.com/en-us/download/details.aspx?id=55770">Company Portal</a> for end users.</li>
<li>Intune Data Warehouse: The <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/08/08/the-intune-data-warehouse-enabling-deeper-reporting-capabilities-now-in-public-preview/">new Intune Data Warehouse</a> takes our reporting capabilities a step further, giving you more powerful custom reporting around your environment over time. With a dataset spanning up to 90 days of historical data, you can connect the Intune Data Warehouse to Power BI, Excel or another analytics tool that supports OData feeds to view historical trends, get daily snapshots, and create other custom reports across multiple tables.</li>
<li>Mobile Threat Defense ecosystem: This past year, weve introduced integration with several leading Mobile Threat Defense (MTD) solutions, including Lookout, Skycure, and Check Point. This month, were excited to <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/19/ems-and-zimperium-integration-ensures-risk-free-devices-before-accessing-corporate-resources/">introduce our latest integration with Zimperium</a>. This integration helps organizations defend against both known and unknown mobile threats and ensure that devices are risk-free and secure before users access corporate resources.</li>
</ul>
We are excited for you to try these new improvements! Please keep sending us your feedback.
<h2>Additional resources:</h2>
<ul>
<li><a href="https://microsoftintune.uservoice.com/?WT.mc_id=Blog_Intune_Announce_PCIT">Submit feedback and suggestions to the Intune engineering team</a></li>
<li><a href="https://docs.microsoft.com/intune">Find technical resources on the Intune docs site</a></li>
<li><a href="https://blogs.technet.microsoft.com/enterprisemobility/feed/?product=microsoft-intune">Subscribe to the Intune blog RSS feed</a></li>
<li>Follow us on <a href="https://twitter.com/MSIntune">Twitter</a></li>
</ul>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/27/whats-new-with-microsoft-intune-and-system-center-configuration-manager-ignite-2017/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item> <title>System Center Updates Publisher September 2017 Preview is now available</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/26/system-center-updates-publisher-september-2017-preview-is-now-available/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/26/system-center-updates-publisher-september-2017-preview-is-now-available/#respond</comments> <pubDate>Tue, 26 Sep 2017 19:00:14 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[Software Updates]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <category><![CDATA[WSUS]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=55285</guid> <description><![CDATA[System Center Updates Publisher (SCUP) Preview 2 is now available. If this is your first time looking at the SCUP Preview check out the announcement for Preview 1 here. In SCUP Preview 2, the update catalog format has been enhanced to provide a better experience for users when consuming large update catalogs. Improvement include: Indexing <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/26/system-center-updates-publisher-september-2017-preview-is-now-available/">Continue reading</a>]]></description> <content:encoded><![CDATA[System Center Updates Publisher (SCUP) Preview 2 is now available. If this is your first time looking at the SCUP Preview check out the announcement for Preview 1 <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/07/03/system-center-updates-publisher-june-2017-preview-is-now-available/">here</a>.
In SCUP Preview 2, the update catalog format has been enhanced to provide a better experience for users when consuming large update catalogs. Improvement include:
<ul>
<li>Indexing for quicker imports of previously imported catalogs – Catalog producers can now index their catalogs. This will allow users to import large catalogs containing few new updates more quickly.</li>
<li>Inclusion of signing certificates within updates catalogs – Catalog producers can now include signing certificates with their updates catalogs. This enables users to add the certificates to the trusted publishers list during import so that approval prompts will not block publish operations.</li>
</ul>
Note: While old catalog formats are still supported, catalog producers will need to add information to their existing catalogs to take advantage of these improvements.
<ul>
<li>Signature Timestamp – Updates published to a WSUS server will by default have the signature time-stamped. Note, this functionality requires internet access. If you have upgraded from preview 1 this will not be automatically enabled. To enable or disable the signature timestamp or configure the timestamp server that is used see the Advanced page under Options.</li>
</ul>
Preview 2 also includes fixes for issues based on feedback submitted during the first preview.
<h2>Joining the preview</h2>
We are excited to have you join our preview! To get started:
<ol>
<li>Download the SCUP Preview <a href="https://www.microsoft.com/en-us/download/details.aspx?id=55543">here</a>.</li>
<li>Run UpdatesPublisher.msi on a computer that meets the prerequisites.</li>
<li>Configure the options for SCUP.</li>
<li>Start using the features of SCUP.</li>
</ol>
For a walkthrough of these steps please read our <a href="https://docs.microsoft.com/en-us/sccm/sum/tools/updates-publisher">System Center Updates Publisher documentation</a>.
We would love to hear your feedback. If you have a feature request, share your ideas with us on the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>. You can report issues with SCUP on <a href="https://connect.microsoft.com/ConfigurationManagervnext">Connect</a> or reach out to us directly at <a href="mailto:Scupfeedback@microsoft.com">Scupfeedback@microsoft.com</a>.
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/26/system-center-updates-publisher-september-2017-preview-is-now-available/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> <item> <title>Now Available: Cumulative Update 6 for Configuration Manager UNIX and Linux clients</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/09/01/now-available-cumulative-update-6-for-configuration-manager-unix-and-linux-clients/</link> <pubDate>Fri, 01 Sep 2017 18:15:12 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[LINUX]]></category> <category><![CDATA[On-Prem]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=54946</guid> <description><![CDATA[Cumulative Update 6 (Build 5.0.7958.2432) is now available at this Download Center link. This update contains new full versions of the UNIX and Linux clients with numerous bug fixes, as well as support for new Linux distro versions, such as Ubuntu 16.04. Additionally, support for certain very old UNIX and Linux versions that are no <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/09/01/now-available-cumulative-update-6-for-configuration-manager-unix-and-linux-clients/">Continue reading</a>]]></description> <content:encoded><![CDATA[Cumulative Update 6 (Build 5.0.7958.2432) is now available at this <a href="https://www.microsoft.com/en-us/download/details.aspx?id=47719">Download Center link</a>. This update contains new full versions of the UNIX and Linux clients with numerous bug fixes, as well as support for new Linux distro versions, such as Ubuntu 16.04. Additionally, support for certain very old UNIX and Linux versions that are no longer supported by their vendors has been removed, including IBM AIX version 5.3, Oracle Solaris version 9, HP-UX on PA-RISC hardware, HP-UX version 11iv2, and SUSE Linux Enterprise Server version 9. Customers who are using Configuration Manager with these unsupported UNIX and Linux versions can continue to run the existing Cumulative Update 5 (Build 5.0.7958.1254) clients.
The CU6 version can be installed as an upgrade to existing clients using the -keepdb option as documented <a href="https://technet.microsoft.com/en-us/library/jj573939.aspx">here</a> (System Center 2012 and 2012 R2 Configuration Manager) and <a href="https://docs.microsoft.com/en-us/sccm/core/clients/deploy/deploy-clients-to-unix-and-linux-servers">here</a> (System Center Configuration Manager current branch).
CU6 is for use with the following versions of Configuration Manager:
<ul>
<li>System Center 2012 Configuration Manager Service Pack 2</li>
<li>System Center 2012 R2 Configuration Manager Service Pack 1</li>
<li>System Center Configuration Manger (current branch and LTSB) – all supported versions</li>
</ul>
]]></content:encoded> </item> <item> <title>Update 1708 for Configuration Manager Technical Preview Branch – Available Now!</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/08/26/update-1708-for-configuration-manager-technical-preview-branch-available-now/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/08/26/update-1708-for-configuration-manager-technical-preview-branch-available-now/#comments</comments> <pubDate>Sat, 26 Aug 2017 17:46:48 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[Public Preview]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=54776</guid> <description><![CDATA[Hello everyone! We are happy to let you know that update 1708 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/08/26/update-1708-for-configuration-manager-technical-preview-branch-available-now/">Continue reading</a>]]></description> <content:encoded><![CDATA[Hello everyone! We are happy to let you know that update 1708 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features include:
<ul>
<li>Restart computers from the admin console – You can now restart a computer with a client notification action for devices.</li>
<li>Create and run scripts with optional parameters – You can now create and run scripts with optional parameters to devices and collections.</li>
<li>Software Center Customization – You can add enterprise branding elements and specify the visibility of tabs in Software Center. You can add a Software Center specific company name, set a color theme, set a company logo, and set the visibility of tabs for client devices.</li>
<li>Management Insights – You can gain valuable insights into the current state of your environment based on analysis of data in the site database.</li>
</ul>
Update 1708 for Technical Preview Branch is available in the Configuration Manager console. For new installations please use the 1703 baseline version of Configuration Manager Technical Preview Branch <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">available on TechNet Evaluation Center</a>.
We would love to hear your thoughts about the latest Technical Preview! To provide feedback or report any issues with the functionality included in this Technical Preview, please use <a href="https://connect.microsoft.com/ConfigurationManagervnext/Feedback">Connect</a>. If there’s a new feature or enhancement you want us to consider for future updates, please use the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>.
Thanks,
The System Center Configuration Manager team
Configuration Manager Resources:
<a href="https://docs.microsoft.com/sccm/core/get-started/technical-preview">Documentation for System Center Configuration Manager Technical Previews </a>
<a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">Try the System Center Configuration Manager Technical Preview Branch</a>
<a href="https://docs.microsoft.com/sccm/">Documentation for System Center Configuration Manager </a>
<a href="https://social.technet.microsoft.com/Forums/en-US/home?category=ConfigMgrCB">System Center Configuration Manager Forums </a>
<a href="https://aka.ms/cmcbsupport">System Center Configuration Manager Support</a>
<a href="https://www.microsoft.com/en-us/download/details.aspx?id=42645">Download the Configuration Manager Support Center</a>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/08/26/update-1708-for-configuration-manager-technical-preview-branch-available-now/feed/</wfw:commentRss> <slash:comments>1</slash:comments> </item> <item> <title>Role Based Access Control: A Configuration Manager favorite, now in Intune</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/08/15/role-based-access-control-a-configuration-manager-favorite-now-in-intune/</link> <pubDate>Tue, 15 Aug 2017 18:45:57 +0000</pubDate> <dc:creator><![CDATA[Microsoft Intune Team]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=54596</guid> <description><![CDATA[Role Based Access Control (RBAC) has been a favorite feature of the System Center Configuration Manager community since its introduction, and now its available in Intune. RBAC in Intune enables you to easily define who can perform various Intune tasks within your organization, and who those tasks apply to. RBAC gives you greater flexibility and <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/08/15/role-based-access-control-a-configuration-manager-favorite-now-in-intune/">Continue reading</a>]]></description> <content:encoded><![CDATA[Role Based Access Control (RBAC) has been a favorite feature of the System Center Configuration Manager community since its introduction, and now its available in Intune. RBAC in Intune enables you to easily define who can perform various Intune tasks within your organization, and who those tasks apply to. RBAC gives you greater flexibility and control while ensuring your IT administrators have the necessarypermissions to perform their job.
<h2>Integration with Azure AD Directory Roles for high level access control</h2>
The new <a href="https://blogs.technet.microsoft.com/enterprisemobility/2017/06/08/the-new-intune-and-conditional-access-admin-consoles-are-ga/">Intune admin experience</a> on Azure delivers deeper levels of integration with Azure Active Directory, which includes Azure AD Groups as well as integration with Azure AD Directory Roles. This integration provides the underpinnings of Intunes RBAC capabilities and our overall permissions management story. RBAC for Intune starts by leveraging four Azure AD Directory Roles that define high level administrative access to Intune workstreams and tasks:
<ul>
<li>Global Administrator / Company Administrator: users in this role have access to all administrative features in Azure AD, including conditional access. They can also manage all of Intune.</li>
<li>User Administrator: users in this role can manage users and groups but cannot manage all of Intune.</li>
<li>Intune Service Administrator: users in this role can manage all of Intune, including management of users and devices, as well group creation and management. This role does not allow for management of Azure ADs Conditional Access settings.</li>
<li>Conditional Access Administrator: users in this role can manage Azure ADs Conditional Access policies, but not all of Intune.</li>
</ul>
<h2>Intune Roles for finer-grained control based on job function</h2>
From there you can define finer-grained controls by leveraging built-in Intune roles, which are designed to mirror your IT Departments job functions. There are five pre-defined roles built into Intune:
<ul>
<li>Policy and Profile Manager: users in this role have rights to manage configuration and compliance policies.</li>
<li>Application Manager: users in this role have rights to manage mobile and Intune managed app protection policies.</li>
<li>Helpdesk Operator: users in this role have rights to manage tasks appropriate for end-user service desk support personnel.</li>
<li>Read Only Operator: users in this role have rights to view Intune information without the ability to change configurations and policies.</li>
<li>Intune Role Administrator: uses in this role have rights to manage of Intune Roles.</li>
</ul>
<a href="https://msdnshared.blob.core.windows.net/media/2017/08/RBAC-screenshot.png"><img title="RBAC screenshot" style="float: none;padding-top: 0px;padding-left: 0px;margin-left: auto;padding-right: 0px;margin-right: auto;border: 0px" border="0" alt="RBAC screenshot" src="https://msdnshared.blob.core.windows.net/media/2017/08/RBAC-screenshot_thumb.png" width="1024" height="489" /></a>

 
You can also create custom roles with any permissions required for a specific function. For example, if an IT department group manages applications, policies and configuration profiles, you can add all of those permissions together in one custom role.
And if youre into automation you can automate any RBAC task such as creating custom roles, or adding/modifying role assignments using the <a href="https://developer.microsoft.com/en-us/graph/docs/api-reference/beta/resources/intune_graph_overview">Microsoft Graph API</a>. We also have a set of <a href="https://github.com/microsoftgraph/powershell-intune-samples">PowerShell scripts</a> that can help you get started.
<h2>Get started using RBAC in Intune today</h2>
For more detail on our RBAC story and how to get started using it in your Intune admin experience on Azure, <a href="https://blogs.technet.microsoft.com/intunesupport/2017/08/07/using-the-new-role-based-access-controls-in-intune/">check out this blog post from Dave Randall</a>, the Program Manager responsible for RBAC in Intune. Daves post includes step by step screenshots that walk you through the capabilities, and shows you how granular you can get with defining access for roles.
RBAC gives IT administrators a simple way to enable powerful control over who can perform various administrative tasks within their organization and they are available to use today in our <a href="http://portal.azure.com/">new admin experience on Azure</a>.
]]></content:encoded> </item> <item> <title>Now Available: Update 1706 for System Center Configuration Manager</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/now-available-update-1706-for-system-center-configuration-manager/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/now-available-update-1706-for-system-center-configuration-manager/#comments</comments> <pubDate>Fri, 28 Jul 2017 21:03:41 +0000</pubDate> <dc:creator><![CDATA[The Configuration Manager Team]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=53995</guid> <description><![CDATA[Happy Friday! We are delighted to announce that we have released version 1706 for the Current Branch (CB) of System Center Configuration Manager that includes new features and product enhancements! Many of these enhancements are designed for organizations that are going through the digital transformation and want to modernize their IT infrastructure, policies, and processes. <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/now-available-update-1706-for-system-center-configuration-manager/">Continue reading</a>]]></description> <content:encoded><![CDATA[Happy Friday! We are delighted to announce that we have released version 1706 for the Current Branch (CB) of System Center Configuration Manager that includes new features and product enhancements!
Many of these enhancements are designed for organizations that are going through the digital transformation and want to modernize their IT infrastructure, policies, and processes. With each release of Configuration Manager, we are focusing on the following themes:
<ol>
<li>Configuration Manager makes it easier to adopt and deploy Windows 10 and Office 365.</li>
<li>Configuration Manager enables the management of Windows 10 security settings to protect users and company data.</li>
<li>Configuration Manager helps customers build the bridge to <a href="https://gallery.technet.microsoft.com/Infographic-Simplify-37e77674">modern management</a> of Windows to simplify management.</li>
<li>Configuration Manager infrastructure is streamlined for simpler and easier use, reducing your total cost of ownership.</li>
<li>Microsoft continues to provide iterative value to customers using Configuration Manager connected with <a href="https://www.microsoft.com/en-us/cloud-platform/microsoft-intune">Microsoft Intune</a>.</li>
<li>Microsoft is committed to delighting our customers by continuing to invest and iterate on Configuration Manager based on customer feedback.</li>
</ol>
We are continuing to see strong adoption by our customers. As of today, we have more than 40,000 organizations managing more than 84 million devices using the Current Branch of Configuration Manager. And thanks to our active <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">Technical Preview Branch</a> community, the 1706 update includes feedback and usage data we have gathered from customers who have installed and road tested our monthly technical previews over the last few months. As always, 1706 has also been tested at scale – by real customers, in real production environments.
Here are just few of the enhancements that are available in this update:
<h2>Windows 10 and Office 365</h2>
<ul>
<li>Manage Microsoft Surface driver updates – You can now use Configuration Manager to manage Microsoft Surface driver updates.</li>
<li>Windows Analytics Commercial ID and Windows telemetry levels – You can now specify the Windows Analytics Commercial ID and configure telemetry, commercial data, and Internet Explorer data collection settings in Client Settings for use with Upgrade Readiness.</li>
<li>Improvement for Express Update support – Express file download time has been significantly improved.</li>
<li>Improved user experience for Office 365 updates – Improvements have been made to leverage the Office Click-to-Run user experience when a client installs an Office 365 update. This includes pop-up and in-app notifications, and a countdown experience.</li>
</ul>
<h2>Windows 10 Security</h2>
<ul>
<li>SecureBoot and TPM inventory data – Hardware inventory can now determine whether the device has SecureBoot enabled and various properties of the TPM (enabled by default).</li>
<li>Windows Defender Device Guard – You can now include trust for specific files and folder paths in Device Guard policies.</li>
</ul>
<h2>Modern Management</h2>
<ul>
<li>Azure AD-enabled Cloud Management – You can now onboard the site to Azure AD via Cloud Services. Additionally, you can install the client on the Internet.</li>
<li>Windows Update for Business enhancements – There is a new dedicated experience to configure and deploy deferral settings for easy discoverability.</li>
</ul>
<h2>Streamlined Infrastructure</h2>
<ul>
<li>Cloud services consolidation – There is now common experience for OMS Connector, Upgrade Readiness, Windows Store for Business, and Cloud Management.</li>
<li>Reload boot images with latest WinPE version – During the “Update Distribution Points” wizard on a boot image, you can now reload the version of Windows PE in the selected boot image.</li>
<li>Boundary Group improvements – Boundary groups now support configuring the time for fallback for software update points.</li>
<li>Configuration Manager Update Reset Tool – We have added new tool to reset and restart in-console updates when they have problems downloading or replicating.</li>
<li>Accessibility – Screen reader improvements and improved keyboard navigation in and out of the ribbon in the Configuration Manager console.</li>
</ul>
<h2>Configuration Manager connected with Microsoft Intune</h2>
<ul>
<li>Entrust as certificate authority for PFX Certificates – Entrust can now be used as the certificate authority for PFX certificates.</li>
<li>Additional Android for Work features – You can now configure app configuration policies for Android for Work.</li>
<li>Additional Compliance Policy settings – We added additional compliance policy settings that were previously available only in Intune standalone.</li>
<li>Enrollment restriction conditions – Admin can now prevent enrollment for iOS or Android devices marked as personal.</li>
<li>Cisco IPSec VPN support for iOS – Cisco IPsec will be a new connection type option for VPN profiles for iOS.</li>
<li>Windows Edition Upgrade policy – This policy allows admins to set a policy to upgrade Windows 10 to Enterprise editions.</li>
<li>Additional MAM settings – We added new settings such as block screen capture (Android only), disable contact sync, and disable printing.</li>
<li>Windows configuration settings – We added new Windows configuration item settings that were previously only available in Intune standalone.</li>
</ul>
<h2>Customer Feedback</h2>
<ul>
<li>Create and run PowerShell scripts – You can now create and run scripts with parameters to devices and collections.</li>
<li>Task Sequence improvements – You can now easily toggle when the task sequence progress is or is not displayed to the end user, on a granular step-by-step basis. Additionally, groups in the task sequence editor can be collapsed or expanded.</li>
<li>Share an application from Software Center – You can copy a direct link to an application in Software Center using the new Share button in the Application Details view.</li>
</ul>
For more details and to view the full list of new features in this update check out our <a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/whats-new-in-version-1706">What’s new in version 1706 of System Center Configuration Manager</a> documentation.
Updated 8/31/2017 Note: The update is now globally available to all customers. The script to enable the first wave is no longer necessary.
For assistance with the upgrade process please post your questions in the <a href="https://social.technet.microsoft.com/Forums/en-US/home?forum=ConfigMgrDeployment">Site and Client Deployment forum</a>. To provide feedback or report any issues with the functionality included in this release, please use <a href="https://connect.microsoft.com/ConfigurationManagervnext/Feedback">Connect</a>.If there’s a new feature or enhancement you want us to consider including in future updates, please use the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>.
Thank you,
The System Center Configuration Manager team
 
Additional resources:
<ul>
<li><a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/changes/what-has-changed-from-configuration-manager-2012">What’s New in System Center Configuration Manager</a></li>
<li><a href="https://docs.microsoft.com/en-us/sccm/core/plan-design/get-ready">Get Ready for System Center Configuration Manager</a></li>
<li><a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/start-using">Start Using System Center Configuration Manager</a></li>
<li><a href="https://docs.microsoft.com/en-us/sccm/core/servers/deploy/install/upgrade-to-configuration-manager">Upgrade to System Center Configuration Manager</a></li>
<li><a href="https://aka.ms/cmcbdocs">Documentation for System Center Configuration Manager</a></li>
<li><a href="https://aka.ms/cmcbforums">System Center Configuration Manager Forums</a></li>
<li><a href="https://aka.ms/cmcbsupport">System Center Configuration Manager Support</a></li>
<li><a href="https://aka.ms/configmgrfeedback">Report an issue</a></li>
<li><a href="https://aka.ms/configmgridea">Provide suggestions</a></li>
</ul>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/now-available-update-1706-for-system-center-configuration-manager/feed/</wfw:commentRss> <slash:comments>28</slash:comments> </item> <item> <title>Update 1707 for Configuration Manager Technical Preview Branch – Available Now!</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/update-1707-for-configuration-manager-technical-preview-branch-available-now/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/update-1707-for-configuration-manager-technical-preview-branch-available-now/#comments</comments> <pubDate>Fri, 28 Jul 2017 16:00:02 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[On-Prem]]></category> <category><![CDATA[Public Preview]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=53987</guid> <description><![CDATA[Hello everyone! We are happy to let you know that update 1707 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/update-1707-for-configuration-manager-technical-preview-branch-available-now/">Continue reading</a>]]></description> <content:encoded><![CDATA[Hello everyone! We are happy to let you know that update 1707 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features include:
<ul>
<li>Client Peer Cache support for express installation files for Windows 10 and Office 365 – Beginning with this release, Peer Cache supports distribution of content express installation files for Windows 10 and of update files for Office 365. No additional configuration or changes are required.</li>
<li>Create and run scripts with parameters – You can now create and run scripts with parameters to devices and collections.</li>
<li>Configure network definitions using Windows Defender Application Guard policies – You can now configure network definitions using Windows Defender Application Guard policies. These include domain names, IP ranges, cloud resources, and proxy servers.</li>
<li>Surface Device Dashboard – You can now use the Surface Device Dashboard to view information about the model and operating system version of your Surface devices.</li>
</ul>
Update 1707 for Technical Preview Branch is available in the Configuration Manager console. For new installations please use the 1703 baseline version of Configuration Manager Technical Preview Branch <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">available on TechNet Evaluation Center</a>.
We would love to hear your thoughts about the latest Technical Preview! To provide feedback or report any issues with the functionality included in this Technical Preview, please use <a href="https://connect.microsoft.com/ConfigurationManagervnext/Feedback">Connect</a>. If there’s a new feature or enhancement you want us to consider for future updates, please use the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>.
Thanks,
The System Center Configuration Manager team
Configuration Manager Resources:
<a href="https://docs.microsoft.com/sccm/core/get-started/technical-preview">Documentation for System Center Configuration Manager Technical Previews </a>
<a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">Try the System Center Configuration Manager Technical Preview Branch</a>
<a href="https://docs.microsoft.com/sccm/">Documentation for System Center Configuration Manager </a>
<a href="https://social.technet.microsoft.com/Forums/en-US/home?category=ConfigMgrCB">System Center Configuration Manager Forums </a>
<a href="https://aka.ms/cmcbsupport">System Center Configuration Manager Support</a>
<a href="https://www.microsoft.com/en-us/download/details.aspx?id=42645">Download the Configuration Manager Support Center</a>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/28/update-1707-for-configuration-manager-technical-preview-branch-available-now/feed/</wfw:commentRss> <slash:comments>2</slash:comments> </item> <item> <title>System Center Updates Publisher June 2017 Preview is now available</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/03/system-center-updates-publisher-june-2017-preview-is-now-available/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/03/system-center-updates-publisher-june-2017-preview-is-now-available/#comments</comments> <pubDate>Mon, 03 Jul 2017 14:00:34 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[Software Updates]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <category><![CDATA[WSUS]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=53335</guid> <description><![CDATA[Today we are announcing availability of System Center Updates Publisher (SCUP) Preview. Many of you are using SCUP 2011 now to: Import updates from external catalogs (non-Microsoft update catalogs). Modify update definitions including applicability, and deployment metadata. Export updates to external catalogs. Publish updates to an update server. This SCUP preview adds support for Windows <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/07/03/system-center-updates-publisher-june-2017-preview-is-now-available/">Continue reading</a>]]></description> <content:encoded><![CDATA[Today we are announcing availability of System Center Updates Publisher (SCUP) Preview. Many of you are using SCUP 2011 now to:
<ul>
<li>Import updates from external catalogs (non-Microsoft update catalogs).</li>
<li>Modify update definitions including applicability, and deployment metadata.</li>
<li>Export updates to external catalogs.</li>
<li>Publish updates to an update server.</li>
</ul>
This SCUP preview adds support for Windows 10 and Windows Server 2016. Users who are familiar with SCUP 2011 will be able to easily use the preview on Windows 10 and Windows Server 2016 systems as there are no major changes to the way the SCUP works.
<h3>Joining the preview</h3>
We are excited to have you join our preview! To get started:
<ol>
<li>Download the SCUP Preview <a href="https://www.microsoft.com/en-us/download/details.aspx?id=55543">here</a>.</li>
<li>Run UpdatesPublisher.msi on a computer that meets the prerequisites.</li>
<li>Configure the options for SCUP.</li>
<li>Start using the features of SCUP.</li>
</ol>
For a walkthrough of these steps please read our <a href="https://docs.microsoft.com/en-us/sccm/sum/tools/updates-publisher">System Center Updates Publisher documentation</a>.
We would love to hear your feedback. If you have a feature request, share your ideas with us on the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>. You can report issues with SCUP on <a href="https://connect.microsoft.com/ConfigurationManagervnext">Connect</a> or reach out to us directly at <a href="mailto:Scupfeedback@microsoft.com">Scupfeedback@microsoft.com</a>.
<h3>Frequently Asked Questions</h3>
Q. Does this release include SCUP integration with the Configuration Manager Console?
A. This preview is to enable SCUP 2011 features on our newest OSes and is not directly related to work that is planned for Configuration Manager Console Integration. For the latest news about that, please see the UserVoice item <a href="https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/8803711-3rd-party-patching-scup-integration-with-sccm-co">here</a>.
 
Q. Can I use this preview release with Windows 7 or WSUS 3.x?
A. Windows 7 and WSUS 3.x are not supported with this release. Please continue to use SCUP 2011.
 
Q. Does this preview release support upgrade from SCUP 2011?
A. For Windows 8.1 and Server 2012 R2 systems that have SCUP 2011 installed, installation of the preview will not uninstall or interfere with the existing SCUP 2011 installation. On these systems, you may continue to use SCUP 2011 or use the preview version, however the two installations will not share data.
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/07/03/system-center-updates-publisher-june-2017-preview-is-now-available/feed/</wfw:commentRss> <slash:comments>4</slash:comments> </item> <item> <title>Update 1706 for Configuration Manager Technical Preview Branch – Available Now!</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/23/update-1706-for-configuration-manager-technical-preview-branch-available-now/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/23/update-1706-for-configuration-manager-technical-preview-branch-available-now/#comments</comments> <pubDate>Sat, 24 Jun 2017 01:30:15 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[Conditional Access]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[Hybrid]]></category> <category><![CDATA[MAM]]></category> <category><![CDATA[Office 365]]></category> <category><![CDATA[On-Prem]]></category> <category><![CDATA[Public Preview]]></category> <category><![CDATA[Software Updates]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=52916</guid> <description><![CDATA[Hello everyone! We are happy to let you know that update 1706 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/06/23/update-1706-for-configuration-manager-technical-preview-branch-available-now/">Continue reading</a>]]></description> <content:encoded><![CDATA[Hello everyone! We are happy to let you know that update 1706 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features include:
<h3>Client</h3>
<ul>
<li>Include trust for specific file paths in Device Guard policies – Optionally, include trust for a specific local file or folder path on clients running a Device Guard policy. Any binaries at the locations specified in the policy can run on targeted clients when enforcement is enabled in the policy.</li>
<li>Register Windows 10 devices with Azure Active Directory – A new client setting (in Cloud Services group) is enabled by default to automatically register new Windows 10 domain joined devices with Azure AD.</li>
</ul>
<h3>Application Lifecycle and Content</h3>
<ul>
<li>Specify a different install content location and uninstall content location for a deployment type – You can now specify a different install content location and uninstall content location for a deployment type. Additionally, you can also leave the uninstall content location empty.</li>
<li>Improvements for Software Update Points in Boundary Groups – Boundary groups now support configuring the time for fallback for software update points.</li>
</ul>
<h3>Operating System Deployment</h3>
<ul>
<li>PXE network boot support for IPv6 – In an IPv6-only network, boot a device via PXE to start a task sequence OS deployment.</li>
<li> Hide task sequence progress – Easily toggle when the task sequence progress is or is not displayed to the end user, on a granular step-by-step basis.</li>
</ul>
<h3>Conditional Access</h3>
<ul>
<li>Device Health Attestation assessment for compliance policies for conditional access – Use Device Health Attestation status as a compliance policy rule for conditional access to company resources.</li>
</ul>
<h3>Software Updates</h3>
<ul>
<li>Manage Microsoft Surface driver updates – You can now use Configuration Manager to manage Microsoft Surface driver updates.</li>
<li>Windows Update for Business policy setting configuration – Use configuration items to configure deferral settings for Windows Update for Business.</li>
</ul>
<h3>Core Infrastructure</h3>
<ul>
<li>Site Server Role High Availability – You can now add a primary site server in ‘passive mode’ to your standalone site to increase availability.</li>
<li>Create and run scripts – Create and run scripts from Configuration Manager.</li>
<li>Upgrade Readiness added to Azure Services Wizard – You can now use Azure Services Wizard to connect ConfigMgr to Upgrade Readiness in Windows Analytics to synchronize data to assess device compatibility with Windows 10.</li>
<li>Accessibility improvements in the Configuration Manager console – This preview introduces several improvements to the accessibility features in the Configuration Manager console.</li>
</ul>
This release also includes the following improvement for customers using System Center Configuration Manager connected with Microsoft Intune to manage mobile devices:
<ul>
<li>Android and iOS Enrollment Restrictions – Admins can now specify that users cannot enroll personal Android or iOS devices in their hybrid environment, limiting enrollment to predeclared company-owned devices or DEP-enrolled devices only.</li>
<li>New options for compliance policies – You can now configure new options for compliance policies that were previously only available in Intune standalone.</li>
<li>New settings for Windows configuration items – You can now configure new Windows configuration item settings that were previously only available in Intune standalone.</li>
<li>Cisco (IPsec) support for iOS VPN Profiles – Admins can now use Cisco (IPsec) as a connection type for VPN profiles for iOS.</li>
<li>App Protection settings to block printing and contact sync – Additional settings have been added to block printing and contact sync on Intune-enlightened applications.</li>
<li>PFX certificate creation and distribution and S/MIME support – Admins can create and deploy PFX certificates to users utilizing an Entrust certification authority. These certificates can then be used for S/MIME encryption, decryption, and authentication by devices that the user has enrolled.</li>
</ul>
Update 1706 for Technical Preview Branch is available in the Configuration Manager console. For new installations please use the 1703 baseline version of Configuration Manager Technical Preview Branch <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">available on TechNet Evaluation Center</a>.
We would love to hear your thoughts about the latest Technical Preview! To provide feedback or report any issues with the functionality included in this Technical Preview, please use <a href="https://connect.microsoft.com/ConfigurationManagervnext/Feedback">Connect</a>. If there’s a new feature or enhancement you want us to consider for future updates, please use the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>.
Thanks,
The System Center Configuration Manager team
Configuration Manager Resources:
<a href="https://docs.microsoft.com/sccm/core/get-started/technical-preview">Documentation for System Center Configuration Manager Technical Previews </a>
<a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">Try the System Center Configuration Manager Technical Preview Branch</a>
<a href="https://docs.microsoft.com/sccm/">Documentation for System Center Configuration Manager </a>
<a href="https://social.technet.microsoft.com/Forums/en-US/home?category=ConfigMgrCB">System Center Configuration Manager Forums </a>
<a href="https://aka.ms/cmcbsupport">System Center Configuration Manager Support</a>
<a href="https://www.microsoft.com/en-us/download/details.aspx?id=42645">Download the Configuration Manager Support Center</a>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/23/update-1706-for-configuration-manager-technical-preview-branch-available-now/feed/</wfw:commentRss> <slash:comments>7</slash:comments> </item> <item> <title>Update 1705 for Configuration Manager Technical Preview Branch – Available Now!</title> <link>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/02/update-1705-for-configuration-manager-technical-preview-branch-available-now/</link> <comments>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/02/update-1705-for-configuration-manager-technical-preview-branch-available-now/#comments</comments> <pubDate>Sat, 03 Jun 2017 00:01:42 +0000</pubDate> <dc:creator><![CDATA[Yvette OMeally]]></dc:creator> <category><![CDATA[Uncategorized]]></category> <category><![CDATA[ConfigMgr]]></category> <category><![CDATA[On-Prem]]></category> <category><![CDATA[Public Preview]]></category> <category><![CDATA[Software Updates]]></category> <category><![CDATA[System Center Configuration Manager]]></category> <guid isPermaLink="false">https://blogs.technet.microsoft.com/enterprisemobility/?p=52335</guid> <description><![CDATA[Hello everyone! We are happy to let you know that update 1705 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features <a class="read-more" href="https://blogs.technet.microsoft.com/enterprisemobility/2017/06/02/update-1705-for-configuration-manager-technical-preview-branch-available-now/">Continue reading</a>]]></description> <content:encoded><![CDATA[Hello everyone! We are happy to let you know that update 1705 for the Technical Preview Branch of System Center Configuration Manager has been released. Technical Preview Branch releases give you an opportunity to try out new Configuration Manager features in a test environment before they are made generally available. This month’s new preview features include:
<h2>Configuration Manager Console</h2>
<ul>
<li>High DPI console support – With this release, issues with how the Configuration Manager console scales and displays different parts of the UI when viewed on high DPI devices (like a Surface Book) should be fixed.</li>
</ul>
<h2>Application Lifecycle and Content</h2>
<ul>
<li>Removing Network Access Account (NAA) requirement for Client Peer Cache – In this release, we are removing the NAA requirement, so that peer cache source computers no longer use the NAA to authenticate download requests from peers.</li>
</ul>
<h2>Clients and User Discovery</h2>
<ul>
<li>Azure Active Directory (AD) Onboarding – Create a connection between Configuration Manager and Azure AD. Install and register Configuration Manager clients with Azure AD identity. Enable Configuration Manager on-premises services like Management Point or cloud services like Cloud Management Gateway to have the capability to authenticate with devices and user identities in Azure Active Directory. By using Azure AD, devices will not need client authentication certificates for HTTPS.</li>
<li>Azure Active Directory (AD) User Discovery – Now you can enable user object discovery from Azure AD.</li>
</ul>
<h2>Software Updates and Compliance</h2>
<ul>
<li>Configure and deploy Windows Defender Application Guard policies – You can now create and deploy Windows Defender Application Guard policies to Windows 10 clients that help protect your users by opening untrusted web sites in a secure container.</li>
<li>Improved end user experience for Office Updates – Improvements have been made to the end user experience for Office updates which includes improved toast notifications, business bar notifications, and an enhanced countdown experience.</li>
</ul>
<h2>Core Infrastructure</h2>
<ul>
<li>Configuration Manager Update Reset Tool – We are adding a new tool to reset and restart in-console updates when they have problems downloading or replicating.</li>
<li>SQL Always On asynchronous-commit mode replica support – Configuration Manager now supports SQL Always On secondary replicas that run under asynchronous-commit mode for disaster recovery scenarios.</li>
<li>Operations Management Suite (OMS) added to Azure Services Wizard – You can now use Azure Services Wizard to connect Configuration Manager to Log Analytics in OMS to sync device collection data.</li>
</ul>
Update 1705 for Technical Preview Branch is available in the Configuration Manager console. For new installations please use the 1703 baseline version of Configuration Manager Technical Preview Branch <a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">available on TechNet Evaluation Center</a>.
We would love to hear your thoughts about the latest Technical Preview! To provide feedback or report any issues with the functionality included in this Technical Preview, please use <a href="https://connect.microsoft.com/ConfigurationManagervnext/Feedback">Connect</a>. If there’s a new feature or enhancement you want us to consider for future updates, please use the <a href="http://configurationmanager.uservoice.com/">Configuration Manager UserVoice site</a>.
Thanks,
The System Center Configuration Manager team
Configuration Manager Resources:
<a href="https://docs.microsoft.com/sccm/core/get-started/technical-preview">Documentation for System Center Configuration Manager Technical Previews </a>
<a href="https://www.microsoft.com/en-us/evalcenter/evaluate-system-center-configuration-manager-and-endpoint-protection-technical-preview">Try the System Center Configuration Manager Technical Preview Branch</a>
<a href="https://docs.microsoft.com/sccm/">Documentation for System Center Configuration Manager </a>
<a href="https://social.technet.microsoft.com/Forums/en-US/home?category=ConfigMgrCB">System Center Configuration Manager Forums </a>
<a href="https://aka.ms/cmcbsupport">System Center Configuration Manager Support</a>
<a href="https://www.microsoft.com/en-us/download/details.aspx?id=42645">Download the Configuration Manager Support Center</a>
]]></content:encoded> <wfw:commentRss>https://blogs.technet.microsoft.com/enterprisemobility/2017/06/02/update-1705-for-configuration-manager-technical-preview-branch-available-now/feed/</wfw:commentRss> <slash:comments>2</slash:comments> </item> </channel> </rss>