Microsoft Manageability

Microsoft System Center Configuration Manager SP2 Wireless Support Overview

daniel.w.brunton@intel.com — Tue, 17 Nov 2009 17:38:11 GMT

One of the new additions to Config Manager SP2 is native support of wireless access for managing clients with AMT. Microsoft has built in support for configuring enterprise level wireless profiles such as WPA2-Enterprise. These are wireless profiles that support RADIUS authentication using an authentication server to decide whether or not a given client is allowed to access the network. Config Manager SP2 does not support wireless profiles that use pre-shared keys (PSK). If you use security standards like WPA2-PSK/WPA2-Personal in your environment you will need to use the scripting framework tool to generate a script that can configure this option outside of Config Manager.

Mohan Veeramachaneni has put together several guides that explain how to configure the back-end RADIUS authentication components and access point configuration.

Cisco ACS

Configure Cisco ACS Server for Navigating Secure Networks with AMT/vPro

Microsoft NPS

Simple Configuration of Microsoft NPS as Radius for 802.1X - Part 1

Simple Configuration of Microsoft NPS as Radius for 802.1X - Part 2

Microsoft IAS

Step-by-step Guide for Navigating Secure Networks (802.1x) with Intel® AMT™ using Microsoft® SCCM SP1 & Microsoft® Radius (IAS)

Matt Royer has a blog entry that covers wireless profile management in Config Manager SP2. The process he outlines is still the same in the release version of SP2.

http://communities.intel.com/community/openportit/vproexpert/microsoft-vpro/blog/2009/06/05/a-closer-look-at-sccm-sp2-beta-oob-wireless-management-wireless-profile-management

Key things to remember about wireless management with Config Manager

Config Manager will not update a wireless profile that is currently in use.
Config Manager now uses DNS entries to resolve client names. You may run into a case where a client has switched between a wired or wireless connection and AMT is temporarily inaccessible due to delays in DNS update propagation. DNS caching on your Config Manager server can also cause this to occur. You can try running the “ipconfig /flushdns” command from a command prompt to clear the local DNS cache on your Config Manager server.
Launching a Serial-over-LAN session over a wireless connection while the client’s OS is using that same connection will cause the wireless network to be cut off to the OS.

Microsoft SCCM 2007 SP1 Intel vPro Training Videos Now Available

jeremy.s.nicholes@intel.com — Fri, 24 Oct 2008 21:13:01 GMT

Microsoft SCCM 2007 SP1 Intel vPro Training Videos

We’re pleased to announce the availability of Microsoft SCCM 2007 SP1 Intel vPro Training videos. During a recent training event in Redmond, Washington, we had the cameras rolling for this detailed and robust training experience and it is now available for you to experience and utilize.

Below is an overview and link for each training section.

		Introduction Technical overview of Microsoft System Center Configuration Manager 2007 SP1 support of Intel vPro technology with specific focus on supported use cases, provisioning process and infrastructure prerequisites for Intel vPro Out of Band Management.

		Lab Module One Configuration steps of Active Directory and PKI infrastructure to support Intel vPro Out of Band Management within Microsoft System Center Configuration Manager 2007 SP1.

		Lab Module Two Steps for Microsoft System Center Configuration Manager 2007 SP1 OOB Service Point installation, OOB Component Configuration and Network Discovery for Management Controllers.

		Lab Module Three Steps for creating a collection for housing Intel vPro clients and configuring that collection for automatic provisioning of the Out of Band Management Controllers.

		Lab Module Four Installation overview for the Microsoft System Center Configuration Manager 2007 SP1 client agent and initiation of Intel vPro client provisioning.

		Lab Module Five Technical overview of the Out of Band Management Console, Intel vPro Management Engine Interface and Intel AMT power control via Advertisements.

		Lab Module Six Configuration steps of the Intel WS-MAN Translator to support legacy Intel vPro clients (Intel AMT firmware versions less than 3.2.1).

		Lab Module Seven Provisioning legacy Intel vPro clients (Intel AMT firmware versions less than 3.2.1) through the Intel WS-MAN Translator using PSK provisioning.

		Lab Module Eight Overview of the Intel vPro migration process from the Intel SCS / Microsoft SMS 2003 Add-on to Microsoft System Center Configuration Manager 2007 SP1.

Please let us know if you have questions or comments regarding this material.

This resource along with other resources on the Intel vPro Expert Center can assist you in answering questions when deploying Intel vPro clients in conjunction with Microsoft System Center Configuration Manager 2007 SP1.

System Integrators talk about System Center 2007 with Intel vPro technology

justin.van.buren@intel.com — Fri, 16 May 2008 20:58:20 GMT

While at MMS, we talked to two Service Integrators about Intel vPro technology with System Center 2007 - including the combination of Intel® vPro™ technology with System Center Configuration Manager 2007 for medium to large businesses and the combination of Intel® vPro™ Technology with System Center Essentials 2007 for small businesses.

]]>

To see more videos from MMS, go to http://www.intel.com/go/mms/

Demonstration of Intel vPro technology with Microsoft System Center Configuration Manager 2007 SP1

justin.van.buren@intel.com — Mon, 12 May 2008 18:47:18 GMT

While at MMS, Microsoft System Center Configuration Manager Program Manager Dave Randall demonstrated how Intel vPro Technology enhances Microsoft System Center Configuration Manager 2007 SP1. The videos below include demonstrations around secure remote power control, remote diagnosis and repair of troubled PCs, discovery of PC assets, and remote configuration.

1) Video demonstration of hardware-assisted Secure Remote Power Control:

]]>

2) Video demonstration of hardware-assisted Remote Diagnosis and Repair:

]]>

3) Video demonstration of hardware-assisted Discovery of PC Assets:

]]>

4) Video demonstration of Remote Configuration of Intel vPro technology:

]]>

Click here to learn more about the combination of Microsoft System Center 2007 products with Intel vPro technology: http://communities.intel.com/community/vproexpert/microsoft-vpro

EDS talks about Intel vPro technology experience

justin.van.buren@intel.com — Fri, 09 May 2008 01:46:29 GMT

While at MMS, we had the opportunity to talk with D.C. Tardy, System Architect at EDS. He talked about the Return On Investment of Intel vPro technology, including a Canadian Call Center case study that returned a savings of almost $750,000 across 3 years. He also talked about the combination of System Center Configuration Manager with Intel vPro technology.

]]>

To see more videos from MMS 2008, go to http://www.intel.com/go/mms/

Microsoft and Intel executives talk about native Intel vPro technology support with System Center Configuration Manager 2007

justin.van.buren@intel.com — Fri, 09 May 2008 01:39:06 GMT

At MMS, we had Brad Anderson, General Manager of Microsoft Management and Services Division, and Gregory Bryant, Intel VP and General Manager of the Digital Office Platform Division, answer some questions about the new capabilities in System Center Configuration Manager 2007 SP1 with Intel vPro technology. See their responses below.

1) How does Intel vPro Technology fit into System Center Configuration Manager 2007 SP1?

]]>

2) What can IT expect in terms of the level of integration of Intel vPro Technology into System Center Configuration Manager 2007 SP1?

]]>

3) Why should IT now take advantage of Intel vPro Technology and System Center Configuration Manager 2007 SP1?

]]>

4) When should enterprises activate Intel vPro Technology with System Center Configuration Manager 2007 SP1 in their PC infrastructure?

]]>

5) Last, we asked a series of questions about System Center Configuration Manager 2007 SP1 Support for the Current Generation of Intel vPro Technology with WS-MAN Support, as well as with Legacy Generations of Intel vPro technology.

]]>

To see more videos, demonstrations, interviews and more from MMS 2008, go to http://www.intel.com/go/mms/

ConfigMgr and WMI integration for vPro

davidra@microsoft.com — Mon, 05 May 2008 14:16:16 GMT

In Josh's blog post about "Stump the PRO" - he mentions WMI & ConfigMgr. I wanted to post a bit more context for everyone interested in that integration point.

Overview: ConfigMgr client agent uses WMI to query AMT via the HECI driver.

The Configuration Manager client agent ships with a new WMI provider for the AMT HECI driver. Additionally, we have extended the SMS_DEF.MOF file with new classes that support the WMI provider. This is used by the hardware inventory agent when returning information about the client computer. You'll find the data easily for your AMT computers using the resource explorer for an AMT computer. The information is categorized under a new resource called "AMT Agent"

The inventory from that agent make a great basis for building queries to use the in-band agent based provisioning method.

Dave

Welcome to Microsoft System Center Configuration Manager integration with Intel AMT Blog

davidra@microsoft.com — Sat, 03 May 2008 05:46:09 GMT

Hello to the vPro community!

I'm David Randall, and have been working in the Configuration Manager team over the last year to develop our integration with Intel's AMT hardware.

I recently attended MMS 2008, and was very happy to hear all the enthusiasm around the Configuration Manager integration, and your plans to use vPro in conjunction with ConfigMgr.

I plan to post here weekly with new information that we've learned about ConfigMgr / AMT integration, help you with some walk throughs, list interesting new uses for vPro and where possible, help you streamline your Configuration Manager deployment with vPro.

Thanks, and here's to out of band management!

David Randall

Program Manager, Microsoft