Search results matching tags 'Cloud' and 'Book'

Microsoft Windows Intune V2: Quickstart Administration book released

doverton — Wed, 25 Jan 2012 08:00:00 GMT

Well, nearly 12 months after I started the project my book is now available to buy. This book is relevant to the latest shipping version of Windows Intune 2.0.

Chapters

Overview of Cloud Computing
Introduction to PC management concepts
Overview of Windows Intune features
Signing up for Windows Intune and installing the client software
Configuring Windows Intune
Configuring Management Policy
Software Deployment
Tracking and reporting
Monitoring and responding to Windows Intune alerts
Resolve problems using Microsoft DaRT
Deploying Windows 7 Enterprise Edition
Integration with existing Microsoft Products

Purchasing the book

Book and / or e-Book from publisher – Packt Publishing

Book from Amazon –

Chapters in detail

Chapter 1, Overview of Cloud Computing explores the new cloud computing and cloud-based services world that we are moving rapidly towards and includes Windows Intune. Before we can embark on this journey it is important that we understand the benefits and pitfalls that cloud services bring with them and how they apply to us. One mechanism to help protect us against the uncertainties is the use of Service Level Agreements, which are explained for Windows Intune.

Chapter 2, Introduction to PC Management Concepts introduces the important concepts behind PC management, with a focus on ensuring that the needs of the business are the fundamental driver of the IT policy we implement with Windows Intune. We then explore how the IT policy decisions are taken to reflect these needs and are then able to demonstrate that they are delivering on them.

Chapter 3, Overview of Windows Intune Features describes the features within Windows Intune, ensuring that we can take advantage of all of the benefits it has to offer, including anti-malware software, update management for both the Windows Operating System, and Windows applications, software distribution, system alerts and reporting.

Chapter 4, Signing Up for Windows Intune and Installing the Client Software walks through the Microsoft Online Services Portal, configuring the service administrators, and if desired, assigning a partner to assist us. We also download and install the Windows Intune client software and ensure it is up and running on each computer.

Chapter 5, Configuring Windows Intune runs through the configuration steps for Windows Intune. This starts by adding additional administrators to the system to allow multiple system’s managers. We then configure the computer groups
for the management process. We enable the alerts that Windows Intune will raise and configure who they are sent to. Finally, we configure the Microsoft and non-Microsoft software license purchases so Windows Intune can report on compliance to this.

Chapter 6, Configuring Management Policy. enables us to construct the policies that Windows Intune uses to configure each computer. This covers firewall, anti-malware, and operating system and software updates. The Windows updates section includes configuring which update categories are checked on each computer to see if they are required and the deployment policy options, either manual or automatic approval.

Chapter 7, Software Deployment using Windows Intune can be a complex process as all software must be installed silently and with all the files in one location. We explore
the process, setting up the command switches and including the right files for a number of common applications as working examples.

Chapter 8, Tracking and Reporting is a key activity to demonstrate that we are delivering a useful service. We explore the activities required to track the hardware and software managed by Windows Intune and then the reporting options for software use, alerts, and hardware tracking. Since custom reports are often desired, we also look at how these could be delivered into a spreadsheet and then enable greater insight if desired.

Chapter 9, Monitoring and Responding to Windows Intune Alerts requires different responses depending on the alert and the level. We will examine how to monitor the computers and deal with the special case of remote assistance alerts that a user can request and require an almost immediate response due to the fact that someone is waiting for us.

Chapter 10, Resolve Problems Using Microsoft DaRT is an optional purchase with Windows Intune that is delivered as part of the Microsoft Desktop Optimization Pack. It can be used to resolve deep technical issues that stop a computer booting or being accessed by a user. We will understand how we can repair a system, change passwords, and edit the devices configured on a computer. This is a critical for all IT desktop managers.

Chapter 11, Deploying Windows 7 Enterprise Edition is something many of us will have to do and is made easier as Windows Intune includes the license required to update to the latest version of Windows. We will cover the process of migrating from Windows XP to Windows 7 Enterprise Edition. This includes moving the user settings from one system to another and then updating Windows Intune.

Chapter 12, Integration with existing Microsoft Products is an area we explore as many of us will use Windows Intune with other Microsoft technologies. We examine how Window Intune interacts with other Microsoft products and whether they are a natural fit for use with Windows Intune.

Feedback

I always welcome feedback, please feel free to let me know if you have any.

ttfn

David

How to wake a computer to perform a antimalware scan, particularly useful for Windows Intune

doverton — Thu, 15 Dec 2011 10:09:00 GMT

While having the book reviewed one feature that was asked for, but is not possible with Windows Intune, was the ability to make Windows Intune wake a computer at night and carry out an anti-virus scan. This blog post is referred to in the book when setting the Anti-Malware policy.

To solve this, there are two issues to tackle:

Wake up the computer
Start a scan

The answer appears to be that to wake the computer we need to use a task in Task Scheduler and then we need to start a scan. One very important thought here is that we need to ensure the power settings on the computer will put it back to sleep though! The command line required is “%ProgramFiles%\Microsoft Security Client\Antimalware>MpCmdRun.exe -scan -scantype 0”

While working on this, I also wanted something that could be deployed by Windows Intune. In the end I have written a small piece of software that can create a task that wakes the computer and will start a scan. If you do not want a scan to start, change the program to execute to “cmd.exe” and the command arguments to be “/c”. This will start the computer and then open and close a command windows. Any other scheduled tasks can then run while the computer is idle, including the Windows Intune scan.

So, download

Windows Intune Wake Task.zip

and extract to a folder. There are 3 files. The DLL is from http://taskscheduler.codeplex.com/ and I am grateful to David Hall for this code. The other two files are the main program and a settings.xml file to enable changing the settings and running as a quiet install for Windows Intune.

The program looks like this:

I would like to think I don’t have to explain to much, however, here are the basics:

The task can run either daily, on a set day each week, or a specific day number of each month (including the last day). It runs at a specific time.
The command has 3 parts, the path, the command to run and the command line arguments. The defaults here are those to run a default scan.

So now the buttons:

Set Task creates a task in the Task Scheduler to run the command. If this is run silently by the Windows Intune installer, this will be owned by the SYSTEM user, otherwise it will be the current user. If the Save Settings.xml box it ticked then a new Settings.xml file will be created from the settings in the console as well as a task created.
The Load button will load settings from the settings.xml file, so you can check your file can be parsed this way.
Finally you can read the disclaimer (This is free software with no warranties expressed or implied, plus the statement from David Hall on his software too) if you click on the © notice in the bottom right.

Hopefully we now have a settings.xml file. The sections in the file are as follows:

<?xml version="1.0" encoding="utf-8"?>
<WakeSettings xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
    
<wake_type>0</wake_type>
    
<Wake_Hour>2</Wake_Hour>
    
<Wake_Min>05</Wake_Min>
    
<Day_of_Week>0</Day_of_Week>
    
<Day_of_Month>1</Day_of_Month>
    
<Command_Path>%programfiles%\Microsoft Security Client\Antimalware\</Command_Path>
    
<Command>MpCmdRun.exe</Command>
    
<Command_Args>-scan -scantype 0</Command_Args>
</WakeSettings>

This means that by editing the settings.xml file we can now pass the task creation information to the programme without user interaction – use /quiet /1 as the command line parameters to make this all work. So now we get to Windows Intune and uploading our solution. You will need to have all 3 files in one folder by themselves to make this work.

Finally, the Windows Intune “software load” process:

Start Windows Intune Management console by going to https://manage.microsoft.com. Log in and navigate to the Software Workspace and in the overview, Select Step 1 – Upload Software

One the tool has loaded, choose the file from the folder with the 3 files required. Remember to check the box to upload associated files

The software description should automatically be populated, but you can change it to anything you want

There should not be a requirement to limit the architecture, although I have not tested this on anything except Windows 7

Select Use the default detection rules

Add a command line. I would recommend “/quiet /1” – this provides a small amount of logging into the event log. It is important that the /quiet is present otherwise Windows Intune will fail to install the application and a 2nd argument should always be present.

Accept the default return codes

You should now be ready to deploy the software.

Go back to the Software Workspace and go to the Managed Software section. Click the software we have just uploaded and then click Deploy.

We are asked which computer groups to apply this too and when. Select these and press OK and the solution will be deployed.

Points to note:

1) This can’t be “Uninstalled” as far as Windows Intune is aware it is an EXE installer. If this becomes a pressing issue, I will work on a /delete switch and entry into the programme to remove the task

To check the program has deployed, either look in Task Scheduler or in "%Program Files%\Microsoft Security Client\Antimalware\ and you should see the settings.xml file that was applied.

OK, so we have our programme installed and we want to change the timings, so how do we do this?

Well, if you add the tool as an update (Through the updates workspace in the Non-Microsoft Updates section), it will be re-applied. The one important piece of information when applying as an update is to set the Prerequisites to check for a file existing as the check if this update is requires. The file should be "%Program Files%\Microsoft Security Client\Antimalware\Settings.xml”

I hope this works for you. Feel free to add comments and suggestions

Thanks

David

Microsoft Windows Intune, Quickstart Administration Book moving to Intune V2

doverton — Sun, 02 Oct 2011 20:27:00 GMT

Hi,

Given the closeness of Windows Intune V2, I have decided with the publisher to update the book with the Version 2 updates and images. This will mean a slight delay in the book as I can’t finalise it until V2 is released to market. Today I’ve been going through the beta for Windows Intune V2, updating the images, reports and adding content on the new features. The ones I’ve spent some time on or plan to spend time on are:

Installation – Done
Image based deployment – Done
Administrator management – Done
License Management – Done
Policy Setting – Not started
Software distribution – Captured screen shots, need to insert into book
Non-Microsoft update distribution – Captured screen shots, need to insert into book
Reporting – Not started
Alerts – Not started
Right Click menus – updated in sections above that are completed

My goal is to get the book completed again before October 17th and then to print ASAP for V2.

BTW, for great Windows Intune information, look at the official blog at http://blogs.technet.com/b/windowsintune/

ttfn

David

Technorati Tags: Windows Intune

Windows Intune Links worth having

doverton — Sun, 28 Aug 2011 08:00:00 GMT

Since I’ve been working on the Windows Intune book I’ve found a few sources of information that I trust regarding the product. I thought I would share them:

Windows Intune V1 (current production environment)

Service Status Dashboard - http://status.manage.microsoft.com/Statuspage/servicedashboard.aspx
Facebook Page - https://www.facebook.com/WindowsIntune?sk=wall
Mike Resseler’s blog from the Belgium System Center User Group - http://scug.be/blogs/intune/default.aspx
Windows Intune Team Blog - http://blogs.technet.com/b/windowsintune/

Windows Intune V2 (beta)

Beta fact sheet, documenting the changes between the current V1 product and the V2 beta - http://www.microsoft.com/download/en/details.aspx?id=26704

Finally, if you want to read my book as it is written - https://www.packtpub.com/microsoft-windows-intune-quickstart-administration-enterprise-through-cloud/book

ttfn

David

Technorati Tags: Windows Intune

Windows Intune book update

doverton — Sat, 27 Aug 2011 11:45:00 GMT

Well, I’ve finally finished the drafts for all chapters of the soon to be published book called Microsoft Windows Intune, Quickstart Administration. It would have been sooner if my lovely mother had not fallen ill and passed away. I don’t regret the delay in finishing the book, but that we had so little time in the end and that she was not here to see it finish. The book is now awaiting review and editorial updates before it is finally published.

Update - 2/10/2010 - Since the launch of Windows Intune V2 is so close, I'm updating to V2 now. This means that you can no longer access the work in progress chapters. I hope to resolve this in a few weeks time.

The book has undergone some structural changes while I was writing it. The chapters are now:

1. Overview of Cloud Computing 2. Introduction to PC Management Concepts
3. Overview of Windows Intune Features
4. Signing up for Intune and installing the client software
5. Configuring Windows Intune
6. Configuring management policy
7. Tracking and reporting
8. Monitoring and dealing with alerts, including remote assistance
9. Resolving problems using Microsoft DaRT
10.Using and deploying Windows 7 Enterprise with Windows Intune
11.Integration with existing Microsoft Products

You can access the book “in progress” and buy it from here.

Once this is solidly out the way and the V2 beta has stabilised I will look to work on a V2 book too.

ttfn

David

Technorati Tags: Windows Intune

Windows Intune book chapters

doverton — Sat, 07 May 2011 00:32:00 GMT

I'm now about 1/2 way through the Microsoft WIndows Intune book, which is great. Please feel free to ask any questions as I can always incorporate the answers into the book. I thought I would share the chapters for everyone which are:

0. Preface

1. Overview of Cloud Computing

2. Introduction to PC Management Concepts

3. Overview of Windows Intune Features

4. Signing up for Windows Intune and installing the client software

5. Configuring Windows Intune

6. Pro-active Management

7. Monitoring and dealing with alerts, including remote assistance

8. Using and deploying Windows 7 Enterprise with Windows Intune

9. Integration with existing Microsoft Products

The book will walk through with a large number of images each of the above as I understand them. I can honestly say that it has been a pleasure exploring Windows Intune and now sharing this will be great fun. As they say, Bring it on!!

I'm hoping to have finished all drafts in the next couple of months and I now have four people signed up to review the book, to which I'm very grateful for their time.

David

Windows Intune - the book and me

doverton — Fri, 15 Apr 2011 22:33:00 GMT

It is time for me to admit my next project, now that I've finally submitted the first chapter, and that is that I'm writing about Windows Intune. Those who have worked with me in the past will know that I'm not much of a "koolaid" person, but I do believe that Cloud Services will be the way of the future and I think that Windows Intune will be a key pillar of the Microsoft story for our existing customers.

To this end I wanted to annoucne that I'm in the writing process of writing a book on configuring and deploying Windows Intune.

I remember all the discussions about MOM on SPLA and centralised management with the SBSC partners and the number of conversations I've had with customers and it seems inevitable that Windows Intune will be a huge success. It will also be, in my personal opinion, quite disruptive to the current management offerings of the Microsoft partners in this segment as all cloud services by every company has proven to be so far, including to the SBS customer set.

Over the weekend I will finish the 2nd and 3rd chapters and I will then share the plan I've agreed with Packt Publishing for the book.

As always, please feel free to let me know what you think about all this.

Thanks

David