31 ene 2013

SCCM by Davis: “Demystifying AppContainers in Windows 8” plus 19 more

SCCM by Davis: “Demystifying AppContainers in Windows 8” plus 19 more

Link to SCCM by Davis

Demystifying AppContainers in Windows 8

Posted: 30 Jan 2013 11:04 PM PST

The introduction of Modern UI apps in Windows 8 has added a whole new layer of security in the operating system. Modern UI apps can be installed by standard users. In order to keep the system secure with all this added functionality, Microsoft created a sandbox architecture that is primarily used for Modern UI apps. Modern UI Apps live in an AppContainer. The AppContainer defines the sandbox and the identity of the App.

Microsoft published very little information about AppContainers. One of the most detailed articles on the Microsoft site is a blog on Enhanced Protected Mode in Internet Explorer by Eric Law [ex-MSFT]. The article was written in the Windows 8 Release Preview time frame and partly contains outdated information about IE10.

Continue reading: Demystifying AppContainers in Windows 8 (Part I)

Google extends EAS support for GMail until July 31, 2013

Posted: 30 Jan 2013 10:42 PM PST

In a blog post Microsoft revealed some good new for Windows Phone users with a GMail account. Google is extending the support for Exchange Active Sync (EAS) on GMail until July 31, giving Microsoft some more time to build CalDAV and CardDAV support in Windows Phone.

Source: Windows Phone Blog

Windows Phone 7.5 is officially updating to 7.8

Posted: 30 Jan 2013 10:32 PM PST

According to various sources, Microsoft started the official rollout of Windows Phone 7.8 through Zune. The  update will be available in 4 waves over the next 3 weeks. Windows Phone 7.8 is available for all phones running on Mango (Windows Phone 7.5).

SCCM DCM What is it?

Posted: 07 Dec 2012 05:47 AM PST

What is Desired Configuration Management (DCM)?

DCM is a feature in SCCM that will provide a framework for assisting organizations in both defining and enforcing corporate policies and standards for system configurations, whether related to the operating system or an application installed on the system.

Feature include authoring and scheduling, model-based design leveraging Service Modeling Language (SML) (a component of Microsoft's Dynamic Systems Initiative) which makes the features we're about to discuss possible.

Some of the key scenarios that drove the features Microsoft delivered in the final release of DCM include:

Regulatory Compliance - demonstrating regulatory compliance in system configurations. Not only deploying a compliant standard system configuration, but being able to periodically prove adherence to these policies.

Pre and post change configuration – Verify that no unplanned changes took place during the implementation of a planned change.

Monitoring for "drift" – Verify that new systems are built in accordance to the planned role in your infrastructure, and monitoring for human error and misconfiguration in day-to-day administration. Ensuring corporate policies are implemented in base machine builds and maintained over time.

Streamline Support – Incorporating DCM reporting into the troubleshooting process to drive down time to resolution and overall support costs.

The bottom line – DCM monitors your systems actual configuration against a "desired configuration" model and identifies policies that have drifted outside this policy.

DCM Components

3 key concepts: Configuration Items, Configuration Baselines, and Configuration Packs.

The smallest unit of measure in the DCM model is the Configuration Item (CI). Configuration Items represent a desired object or setting or value on a client or within an application. Configuration items can include registry values, objects on the file system (files, folders) and attributes (firewall settings, NTFS permissions), as well data retrieved via scripts. The Configuration Items fall into one of the following categories:

Application CI – Settings within an application like MS Word, Exchange, or SQL Server.

OS CI – Representing a specific operating system object or setting.

General CI – General settings related to corporate policies like corporate security policy, Sarbanes-Oxley, etc.

These configuration items are reusable, and can be grouped into multiple, logical collections of settings known as a Configuration Baselines, which represent your base unit of management in DCM. Within the configuration baseline, you can define mandatory, optional and prohibited configuration items.?

Configuration Baselines will generally be constructed to map to machine roles (a type or class of system), such as Domain Controller, Exchange 2003 Server, SQL Database Server. Creating all the configuration items for configuration baseline for something like Exchange is time consuming and the use of Configuration Packs comes in. Configuration Packs are pre-defined configuration baselines (templates so to speak) created by Microsoft and 3rd parties representing best practice configuration for common OS and server applications. Configuration packs are designed to be used as a starting point for your own corporate baseline, and then modified to meet your organizations requirements.

Configuration packs templates are best served using the Solution Accelerator Microsoft Security Compliance Manager

Apendix: systemcentercentral.com

PXE Cache Issues

Posted: 06 Dec 2012 07:44 AM PST

I search massive amount of forums when I am looking for solutions for complex issues. This was an article I found (and referenced it at the bottom) that will a PXE cache issue. I was on a project where the SCCM server was setup but there was no documentation on the state of the server.

<<< >>>

Config Mgr OS deployments when using PXE boot , you've probably had machines that did not want to boot the task sequence as it stated "No task sequence found, booting onto the hard drive".

This is most likely due to a previous task sequence being advertised to that machine. By default ConfigMgr will cache the PXE advertisement for 60 minutes (Default setting) and then it will expire. Most of the time you can speed up things when restarting the WDS services. Restarting the WDS services ( clearing the cache) isn't the best solution. In ConfigMgr SP2 the cache expiry can be set in the registry.

  • On an x86 machine the located under:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\PXE
  • On an x64 machine the registry key is under:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\SMS\PXE

Create a new DWORD value CacheExpire, and set the desired value in seconds. For example, if you prefer the cache expired in 2 minutes, set the value to 120. If the value is set to 0, then the default 60 minutes value is used.

Note: Setting the value in CacheExpire is only supported in ConfigMgr 2007 SP2.

Be careful if you have R2 installed and unknown computer support enabled because if you set the cache expire value too low and you are using a mandatory task sequence your machine will continuously start the same task sequence every time it reboots.

Reference: http://scug.be/blogs/sccm/archive/2010/11/16/configmgr-2007-pxe-cache-behavior.aspx

Erik Dixon became a registered member

Posted: 30 Jan 2013 04:52 PM PST

Comments: 0

SonicWALL SRA 4600 Delivers Secure Network Access for Remote Workers

Posted: 30 Jan 2013 01:45 PM PST

REVIEW: Dell's SonicWALL SRA 4600 combines remote access, SSL VPN, application firewall and desktop support in a svelte 1U rack mount appliance that can handle up to 500 remote users.

Jignesh Solanki commented on the post, ConfigMgr 2012 Right Click Tools

Posted: 30 Jan 2013 02:53 PM PST

Does this one work with SCCM 2007? I have 1 problem when advertisement has subcollection checked, ReRun advertisement on collection does not show the advertisement in the Subcollection.

Comments: 0

Jignesh Solanki became a registered member

Posted: 30 Jan 2013 02:47 PM PST

Comments: 0

Marcel Hager joined the group System Center Service Manager

Posted: 30 Jan 2013 01:13 PM PST

Comments: 0

Jerry Potter became a registered member

Posted: 30 Jan 2013 11:21 AM PST

Comments: 0

Cisco Unifies Wired, Wireless Networks With Switch, WLAN Controller

Posted: 30 Jan 2013 09:40 AM PST

Cisco unveils key additions to its Unified Access initiative, including a new Catalyst switch and WLAN controller that is based on a new ASIC.

Enhansoft wrote a new post, Wanted: More Monitor Information Reporting – MIR Version 4 Beta Testers

Posted: 30 Jan 2013 09:24 AM PST

ThumbnailWe are rolling out a new version of Monitor Information Reporting – MIR and we're looking for beta testers.

Curious about how MIR works? Visit our website to read MORE about MIR Version 4 and how to download it […]

Comments: 0

Chris Nackers wrote a new post, Deployment Image Servicing Management (DISM) – Removing An Injected Update From The Image

Posted: 30 Jan 2013 08:04 AM PST

ThumbnailPosted in GeneralWAIK!-- Start Shareaholic LikeButtonSetTop Automatic --!-- End Shareaholic LikeButtonSetTop Automatic --The following commands are used to identify and remove an update that has been injected into […]

Comments: 0

Chris Nackers wrote a new post, Deployment Image Servicing Management (DISM) – Removing An Injected Update From The Image

Posted: 30 Jan 2013 08:04 AM PST

ThumbnailPosted in GeneralWAIK!-- Start Shareaholic LikeButtonSetTop Automatic --!-- End Shareaholic LikeButtonSetTop Automatic --The following commands are used to identify and remove an update that has been injected into […]

Comments: 0

Jesse Garcia commented on the post, Lessons Learned with Configuration Manager 2012 Cross-Forest, Internet-Based Client Management Configuration

Posted: 30 Jan 2013 07:45 AM PST

Nice work!

Comments: 0

Polycom Expands UC Capabilities With Sentri Acquisition

Posted: 30 Jan 2013 08:00 AM PST

In addition to Microsoft unified communications expertise, Sentri has expertise in other areas, including networking, VOIP and security.

bharath became a registered member

Posted: 30 Jan 2013 07:15 AM PST

Comments: 0

Rosen D became a registered member

Posted: 30 Jan 2013 07:10 AM PST

Comments: 0

Dana Daugherty wrote a new post, Software Licensing: Tips for Avoiding Noncompliance with Microsoft Products

Posted: 30 Jan 2013 06:46 AM PST

I believe the vast majority of organizations honestly try to avoid over using software license. Even so, the nature of software licensing actually facilitates mistakes causing noncompliance. This post lists some […]

Comments: 0

No hay comentarios:

Publicar un comentario

SCCM by Davis