System Center Configuration Manager

System Center Configuration Manager with Endpoint Protection is the most recent release of Microsoft’s comprehensive management tool for Windows systems (physical and virtual) and Windows-based mobile devices. When used in combination with Microsoft Intune, it provides a unified management environment that supports both company-owned and personal (BYOD) devices.

Configuration Manager is a user-centric tool designed to work with your organization’s Active Directory infrastructure. This means that it associates hardware assets with specific users, allowing fine-tuned management of exactly which software and features are available to users. Configuration Manager also provides IT pros with a comprehensive reporting platform and deployment options.

Using Configuration Manager, you can perform the following functions:
■ Operating-system deployment/upgrades The latest Configuration Manager release supports a wide range of deployment scenarios, including in-place upgrades to move systems directly from Windows 7 and Windows 8.1 to Windows 10.

■ Application management Configuration Manager includes a set of tools and resources you can use to package, manage, deploy, and monitor applications in the enterprise.

■ Endpoint protection Security, antimalware, and Windows Firewall management features are included.

■ Compliance settings Use built-in tools to assess and, if necessary, adjust the configuration of client devices to meet compliance requirements.

■ Company-resource access Grant remote access to resources by setting up Wi-Fi profiles, virtual private network (VPN) profiles, and certificate profiles. For example, you can install trusted root CA certificates for your enterprise to authenticate Windows 10 devices on corporate Wi-Fi hotspots and VPNs.

■ Remote-connection profiles Create and deploy remote-connection settings to devices, and thus make it easier for users to connect to their computer on the corporate network.

■ Inventory As an administrator, you can collect detailed information about hardware, software, data files, and license usage on managed devices.

Configuration Manager also includes remote control tools for help desks and capabilities for deploying software updates.

One of the most important changes in recent releases of System Center Configuration Manager is the ability to configure enrolled devices as company owned or personal owned. Personal devices are not domain joined and do not have the Configuration Manager client installed. These mobile devices report software inventory only on company content. Wipe and retire functions also provide the option to remove only company content from devices, preserving personal content and apps.

You can use Microsoft Intune (described in the next section) to manage Windows 10 devices that are not joined to the domain and do not have the Configuration Manager client installed.

Source of Information : Microsoft Introducing Windows 10 For IT Professionals