March 2015 Meeting - Notes

Thanks again to Parallels for sponsoring, presenting and for the surprise iPad 2 give away!  For those who were not able to get a card from Carlos or want to know more information, here is his contact info.

• Macintosh management requires PKI authority and HTTPS enabled management and distribution points.
• You can have HTTP and HTTPS mode DPs and MPs work side by side with ConfigMgr 2012 R2.
• These steps will get you closer to internet client management. (that's nice) The hard work is done.
• If you have the MAC client, do you need the enrollment point?
• Technically, no. But it really helps with certificate enrollment.
• The certificate delivery is done via the enrollment point.
• To Install the client on a MAC you have options.

1. 1. Terminal      Based
   2. Manual Cert      Enrollment
   3. GUI driven on the      MAC client.

(the client side installation can be scripted)

• HTTPS DP and MP, enrollment point and enrollment proxy point -> these are needed for automated certificate delivery and client enrollment.
• How often a mac checks in is handled by mobile settings, not standard client settings (default to 60 minutes).
• You must create a certificate template - this is done via a process that is documented on technet.
• There are MAC tools you can use to deploy a script remotely.
• What you can do with a MAC client -
  • Inventory
  • The "classes" are not available with. Everything is predefined.
  • Software Deployment

Compliance Settings

• There are no custom client policies for Macs, it only uses the default client policy.
• Application Management -
• You must use MS Cmwrapper tool to convert maps apps to something that is deployable.
• Device only deployment, nothing user centric.
• Available is not an options (required only)
• Bits not supported.
• All system settings for MACS are handled via Compliance Settings.

Quick poll of users -

2 people are managing macs.  Everyone else has macs they wish to manage.

Troubleshooting clients on a MAC -

• "I have never been actually been able to find any useful stuff in these logs"  -Nackers

No additional features for MAC support have been introduced since 2012 SP1.

Vmware will run a MAC VM on Windows. However, this isn't legal. And Nackers definitely does not do it. Seriously.

• No pre-reqs required for the MAC client to be installed.
• You can use the resource explorer on a MAC device from the ConfigMgr console.

<strong">Parallels Software

Presenter: Carlos Capo - Parallels Slide Deck

Some features of Parralels -

• OSD
• app management
• client deployment (automatically)

Network discovery can be refined as granular as you need. Discovered Macs can automatically be enrolled. (client installed)

SSH must be enabled on the MAC for this to work.

HTTP and HTTPs deployment are supported. PKI is not required.

OSD -

• Must use mac imaging process to create your first image. (.NBI)
• Parallels will convert this file to a WIM file that ConfigMgr can use to deploy to clients.
• Can be deployed via task sequence.
• This is done via net boot service.
• The net boot service can be installed on each DP. Net boot is required for Parallels OSD.

Parallels creates a MAC OSX collection by default.

Parallels provides 9 or 10 payloads that can be deployed to end points. These become configuration items in ConfigMgr.

You can create configuration profiles/etc from mac server and then take that configuration and deploy it via ConfigMgr baselines / cis.

File Vault can be managed by Parallels. (key management too).  Parallels has its own separate database it stores File Vault keys in. (it is important to back up that database)

Applications - must be converted for use with parallels

Packages - can use PKG files directly, or scripts.

The AppPortal comes with the Parallels client when you install their agent. This is machine based deployment. User is not required to be admin to install application from portal.

Version Releases - Early July release will have operational task sequence for MAC OSD.

Parallels has a licensing portal now for managed workstation licenses for their enterprise desktop edition. (the virtualization product)

Applications can be managed via parallels from CI items. (this device collections needs 4GB of ram , for example). This for managing Macintosh VMs.

When a new OS X version comes out, parallels supports within 30 days.

EMS Presentation

Presenter: Chris Nackers

This was a presentation showing new features of InTune with Microsoft Enterprise Mobility Suite. It was a good presentation showing some examples of data management across mobile device and mobile applications.

There was some really nice demos showing some powerful stuff. InTune has come a long way. If you missed it, sorry.

Parallels Slide Deck