The Documentation Library for System Center 2012 Configuration Manager and the Configuration Manager 2007 Documentation Library have been updated on the web and the latest content has Updated: August 1, 2013 at the top of the topic.
This month sees additional prerelease information for System Center 2012 R2 Configuration Manager, as well as updates to release versions. One update of particular interest, is the new section, Planning to Upgrade to System Center 2012 R2 Configuration Manager in the Planning to Upgrade System Center 2012 Configuration Manager topic. Although upgrading to System Center 2012 R2 Configuration Manager is not supported until the product is released, you can use this information to help you plan your upgrade strategy and identify upgrade tasks.
In addition, although these didn’t come from the writing team (we have Wally and others to thank here), we’re excited to also let you know that there are now 20 hands-on labs for Configuration Manager 2012 SP1, hosted on TechNet. These are the same labs that you might have tried at MMS or TechEd. Go to http://technet.microsoft.com/en-us/virtuallabs and clear the “Hot Labs” section, and then search for “Configuration Manager 2012 SP1”. Please do fill in the evaluation at the end of the lab, because this feedback is used to determine how useful people find these labs. We know how popular they are and why, but we’re not the people to tell!
We value customer feedback and try to incorporate it when possible. Although we can’t promise to make the docs perfect for everybody, we are committed to continual improvement. So, keep that feedback coming, and feel free to contact us about anything related to the documentation by using our usual address of SMSDocs@Microsoft.com.
What’s New in the Documentation Library for System Center 2012 Configuration Manager, August 2013
The following information lists the topics that contain significant changes since the July 2013 update.
– Updated to correct the references for .NET 4.0 to be .NET 4.5 for the prerequisites for site system roles that run on Windows Server 2012.
This topic also has a new section, Client Support Numbers for Sites and Hierarchies, which details how many clients and devices of each type are supported by the different versions of Configuration Manager, across the different core hierarchy designs, and at each site type. Additionally, this section contains new details about the number of management points you should plan to use to support the different types of clients in your environment.
– Based on customer feedback, updated to clarify which Active Directory Forest versions replicate the full global catalog, verses only replicating changes when the Active Directory Schema is modified.
– Updated to add a new section, Limitations when Upgrading to System Center 2012 R2 Configuration Manager, which lets you know about limitations that exist while your hierarchy is in the process of upgrading to System Center 2012 R2 Configuration Manager.
– Updated to clarify that you must close an open Configuration Manager console before that console can upgrade. This includes a console that runs on a site server that you upgrade as well as consoles that run on remote computers and that are upgraded to a new version independent of a site upgrade.
In addition, this topic has a new section, Planning to Upgrade to System Center 2012 R2 Configuration Manager, which contains what’s new in Setup (such as the option to specify custom locations for the SQL Server database files), an upgrade planning checklist, and a list of issues worth consideration when you upgrade a site to System Center 2012 R2 Configuration Manager.
– Updated to align a statement about distribution point requiring BITS to enable a client to download content. (Distribution points do not require BITS for this purpose.) This aligns the guidance in this topic with updates published in May 2013 to the topic Supported Configurations for Configuration Manager.
– Updated the reference to the Virtual IP Address (VIP) for cloud-based distribution points to reflect the recent changes in the Windows Azure web portal. This topic was also updated to clarify that site expansion was not available prior to Configuration Manager with Service Pack 1.
– Based on customer feedback, provided more information about the dynamic port numbers, with a link to a Knowledge Base article that defines the different ranges for dynamic ports, which can be different, depending on the version of the operating system.
– Updated for the permissions that are required by the Source Site Database Account, which is used during migration. Also updated the information about the use of ports, to account for non-default TCP ports that might be in use.
– Updated to add information about the hardware inventory that is collected from Mac computers, and also clarified that client notification does not support role-based administration.
– Updated to add information about how to use the new Mac Computer Enrollment Wizard in System Center 2012 R2 Configuration Manager. Also added a script that can be used to configure the System Center 2012 R2 Configuration Manager client to use an existing certificate.
– Updated to add information about the new Change Ownership option for clients.
– Updated for the What’s New in System Center 2012 R2 Configuration Manager section, with information about the new Resultant Settings option that displays calculated resultant settings for devices, users, and user groups.
– Updated to add the mobile device security issue that a wipe acknowledgment does not verify that the device has been successfully wiped. The following security best practices and security issues are also added for Mac computers:
- Store and access the client source files from a secured location.
- Consider configuring the trusted root CA certificate such that it is trusted for the SSL protocol only, to help protect against elevation of privileges.
- When users first enroll Mac computers, they are at risk from DNS spoofing.
- Mac enrollment does not limit certificate requests.
– Updated for the CCMSetup.exe property of /ExcludeFeatures, which is new for System Center 2012 R2 Configuration Manager, and lets you prevent a feature from being installed during client installation. Currently, the only parameter supported for this property is ClientUI.
– Updated to include the latest information about device support for application management.
– Updated to add the following security best practices and security issues for application management:
- If you deploy applications for Mac computers, make sure that the source files are from a trustworthy source.
- If you configure a web application deployment type, use HTTPS rather than HTTP to secure the connection.
- You cannot restrict install permissions for the company portal.
– New topic with information about how to manage virtual hard disks (VHDs) from the Configuration Manager console and integrate the VHDs that you create into your datacenter.
– Updated to add What’s New for maintenance windows in System Center 2012 R2 Configuration Manager.
– Updated with the information that key names are case sensitive and will not be evaluated if they differ from the key name on the Mac computer, that you cannot edit the key name after you have specified it, and added a note that Configuration Manager does not support using the Boolean data type for Mac configuration item script settings.
– Updated to add information about the Remote PC Connect security group that is used by remote connection profiles, and also clarified that Windows Group policy can override remote connection settings
– Updated to add the permissions required to manage remote connection profiles.
– Updated to add information about supported formats for the Remote Desktop Gateway Server name.
– Updated with the information that if a device leaves a collection to which a remote connection profile has been deployed, the remote connection profile settings are disabled on the device. However, for this to occur correctly, you must have already deployed at least one configuration item or configuration baseline containing a configuration item from your site.
– New topic that lists the security best practices and privacy information for remote connection profiles.
– Updated to add the permissions required to manage certificate profiles.
– Updated to add information about the new option that allows certificate enrollment only on the users’ primary device, or on any device. Also added information about how iOS devices support limited subject name formats and subject alternate names.
– New topic, which lists the security best practices and privacy information for certificate profiles.
– Updated and clarified that iOS 7 is supported for VPN profiles.
– Updated to add the permissions required to manage VPN profiles.
– Updated with the information that you cannot use the characters /:*?<>| in the VPN profile name, as these are not supported by Windows Server VPN. Also updated to add the latest information about supported connection types on each platform.
– Updated with the information when a VPN profile deployment is removed, the Wi-Fi profile is not removed from client devices. If you want to remove the profile from devices, you must manually remove it.
– New topic that lists the security best practices and privacy information for VPN profiles.
– Updated with the information that iOS 7 is supported for Wi-Fi profiles.
– Updated to add the permissions required to manage Wi-Fi profiles.
– Updated with the information that wireless network name and SSID can be a maximum of 32 characters, and added information about the certificates that might be required to authenticate Wi-Fi profiles.
– Updated with the information that when a Wi-Fi profile deployment is removed, the Wi-Fi profile is not removed from client devices. If you want to remove the profile from devices, you must manually remove it.
– New topic that lists the security best practices and privacy information for Wi-Fi profiles.
What’s New in the Configuration Manager 2007 Documentation Library for August 2013
The following information lists the topic that contains significant changes since the July 2013 update.
– Based on customer feedback, updated four links for hardware requirements to point to the correct topic, Configuration Manager 2007 General Supported Configurations.
– Based on customer feedback, the introductory sentence of the topic was rewritten to remove an inconsistency and clarify the intent of the topic.
– Based on customer feedback, updated to clarify account transfers via the Transfer Site Settings wizard. You can’t transfer information about accounts that run a site, but you can use the command line tool to set these accounts. The text previously suggested that you could not transfer an account, while the client push installation account is an account that you can transfer to another site, as a site setting.
This posting is provided “AS IS” with no warranties and confers no rights.