SCCM 2006.
Microsoft Endpoint Manager tenant attach
Install applications from the admin center
You can initiate an application install in real time for a tenant attached device from the Microsoft Endpoint Manager admin center. Starting with Configuration Manager version 2006, the list of applications available for the device also includes applications deployed to the device’s currently logged on user.
Import previously created Azure AD application during tenant attach onboarding
During a new onboarding, an administrator can specify a previously created application during onboarding to tenant attach.
Endpoint analytics
Endpoint analytics data collection enabled by default
这 Enable Endpoint analytics data collection client setting is now enabled by default. This setting allows your managed endpoints to send data, such as startup performance insights, to your Configuration Manager site server. This change affects local data collection only. Endpoint analytics data isn’t uploaded to the Microsoft Endpoint Manager admin center until you enable data upload in Configuration Manager. The new default value applies to the default client settings and any custom client settings created after upgrading to version 2006.
- If you’re upgrading from version 2002 to version 2006, existing custom client settings values are retained. The default value for Enable Endpoint analytics data collection in Configuration Manager version 2002 是 No.
- If you’re upgrading to version 2006 from Configuration Manager version 1910 or prior, any pre-existing custom client settings that contain the 计算机代理 group of settings inherits the new default of 是的 为了 Enable Endpoint analytics data collection.
Site infrastructure
VPN边界类型
简化远程客户端的管理, 您现在可以为 VPN 创建新的边界类型. Previously, 您必须根据 IP 地址或子网为 VPN 客户端创建边界. 由于子网配置或 VPN 设计，此配置可能具有挑战性或不可能.
现在当客户端发送位置请求时, 它包含有关其网络配置的附加信息. Based on this information, 服务器确定客户端是否在 VPN 上.
Management insights to optimize for remote workers
This release adds a new group of management insights, Optimize for remote workers. These insights help you create better experiences for remote workers and reduce load on your infrastructure. The insights in this release primarily focus on VPN:
- Define VPN boundary groups
- Configure VPN connected clients to prefer cloud based content sources
- Disable peer to peer content sharing for VPN connected clients
Improved support for Windows Virtual Desktop
这 视窗 10 Enterprise multi-session platform is available in the list of supported OS versions on objects with requirement rules or applicability lists.
For more information on Configuration Manager’s support for Windows Virtual Desktop, see Supported OS versions for clients and devices.
Intranet clients can use a CMG software update point
Intranet clients can now access a CMG software update point when it’s assigned to a boundary group.
Cloud-attached management
Use Microsoft Azure China 21Vianet for co-management
You can now select the Azure China Cloud as your Azure environment when enabling co-management.
Azure AD 应用程序密钥过期通知
If you configure Azure services to cloud-attach your site, the Configuration Manager console now displays notifications for the following circumstances:
- One or more Azure AD app secret keys will expire soon
- One or more Azure AD app secret keys have expired
For more information, see Renew secret key.
Desktop Analytics
Change to diagnostic data labels
To better align with the Desktop Analytics requirements for Windows diagnostic data, these settings have new labels:
| Version 2006 稍后 | Version 2002 and earlier |
|---|---|
| Required | Basic |
| Optional (limited) | Enhanced (Limited) |
| N/A | Enhanced |
| Optional | Full |
If you previously configured any devices at the Enhanced level, when you upgrade to version 2006, they’ll revert to Optional (limited). They will then send less data to Microsoft. This change shouldn’t impact what you see in Desktop Analytics.
Real-time management
Improvements to CMPivot
The following improvements have been made in CMPivot:
- CMPivot from the console and CMPivot standalone have been converged
- Run CMPivot from an individual device or multiple devices without having to select or create a collection
- From CMPivot query results, you can select an individual device or multiple devices then launch a separate CMPivot instance scoped to your selection.
Client management
在按流量计费的连接上安装和升级客户端
Previously, 如果设备已连接到按流量计费的网络, 新客户端无法安装. 仅当您允许所有客户端通信时，现有客户端才会升级. 对于经常在按流量计费的网络上漫游的设备, 它们将不受管理或使用较旧的客户端版本. 从此版本开始, you can install and upgrade the client when you set the client setting 按流量计费的互联网连接上的客户端通信 to 允许 或者 Limit. With this setting, you can allow the client to stay current, but still manage the client communication on a metered network.
定义新客户端安装的行为, 有一个新的 ccmsetup 参数 /允许计量. 当您允许 ccmsetup 在计量网络上进行客户端通信时, 它下载内容, 在网站上注册, 并下载初始策略. 任何进一步的客户端通信都遵循该策略中客户端设置的配置.
For more information, see the following articles:
- About client settings
- About client installation parameters and properties
Improvements to managing device restarts
Configuration Manager provides many options to manage device restarts and restart notifications. You can now configure a client setting to prevent devices from automatically restarting when a deployment requires it. This setting gives you more control in unique situations. By default, the client setting Configuration Manager can force a device to restart is enabled, so Configuration Manager can still force devices to restart. This setting only applies to application, software update, and package deployments that require a restart.
Application management
Improvements to available apps via CMG
This release fixes an issue with Software Center and Azure Active Directory (Azure AD) authentication. 对于检测为在内网但通过云管理网关通信的客户端 (CMG), previously Software Center would use Windows authentication. When it tried to get the list of user-available apps, 它会失败. It now uses Azure Active Directory (Azure AD) identity for devices joined to Azure AD. 这些设备可以通过云连接或混合连接.
微软 365 企业应用程序
办公室 365 ProPlus 更名为 Microsoft 365 4 月企业应用 21, 2020. Starting in version 2006, 进行了以下更改:
- The Configuration Manager console has been updated to use the new name.
- 此更改还包括 Microsoft 的更新频道名称 365 Apps.
- 控制台中添加了横幅通知，如果一个或多个自动部署规则引用了过时的通道名称，则会通知您 标题 微软的标准 365 应用程序更新.
OS deployment
对基于云的内容的任务序列媒体支持
Task sequence media can now download cloud-based content. For example, you send a USB key to a user at a remote office to reimage their device. Or an office that has a local PXE server, but you want devices to prioritize cloud services as much as possible. Instead of further taxing the WAN to download large OS deployment content, boot media and PXE deployments can now get content from cloud-based sources. For example, 云管理网关 (CMG) 您可以共享内容.
The device still needs an intranet connection to the management point.
Improvements to task sequences via CMG
This release includes the following improvements to deploy task sequences to devices that communicate via a cloud management gateway (CMG):
- Support for OS deployment: With a task sequence that uses a boot image to deploy an OS, you can deploy it to a device that communicates via CMG. The user needs to start the task sequence from Software Center. For more information, see Plan for CMG – Specifications.
- This release fixes the two known issues from Configuration Manager current branch version 2002. You can now run a task sequence on a device that communicates via CMG in the following circumstances:
- A workgroup device that you register with a bulk registration token
- You configure the site for Enhanced HTTP and the management point is HTTP
BitLocker 任务序列步骤的改进
You can now specify the disk encryption mode on the 启用 BitLocker 和 Pre-provision BitLocker task sequence steps. By default, the steps continue to use the default encryption method for the OS version.
这 启用 BitLocker step also now includes a setting to 对于没有 TPM 或未启用 TPM 的计算机，请跳过此步骤. When you enable this setting, the step logs an error on a device without a TPM or a TPM that doesn’t initialize, and the task sequence continues. This setting makes it easier to manage the task sequence behavior on devices that can’t fully support BitLocker.
Management insight rules for OS deployment
When the size of the task sequence policy exceeds 32 MB, the client fails to process the large policy. The client then fails to run the task sequence deployment. To help you manage the policy size of task sequences, this release includes the following management insights:
- Large task sequences may contribute to exceeding maximum policy size
- Total policy size for task sequences exceeds policy limit
These rules are in a new group for 操作系统部署. The existing rule for Unused boot images is now in this group too.
Improvements to OS deployment
This release includes the following additional improvements to OS deployment:
- Use a task sequence variable to specify the target of the Format and Partition Disk step. This new variable option supports more complex task sequences with dynamic behaviors. For example, a custom script can detect the disk and set the variable based on the hardware type. Then you can use multiple instances of this step to configure different hardware types and partitions.
- The Check Readiness step now includes a check to determine if the device uses UEFI. It also includes a new read-only task sequence variable, _TS_CRUEFI.
- If you enable the task sequence progress window to show more detailed progress information, it now doesn’t count enabled steps in a disabled group. This change helps make the progress estimate more precise.
- Previously, during a task sequence to upgrade a device to Windows 10, a command prompt window opened during one of the final Windows configuration phases. The window was on top of the Windows out-of-box experience (OBE), and users could interact with it to disrupt the upgrade process. Now the SetupCompleteTemplate.cmd and SetupRollbackTemplate.cmd scripts from Configuration Manager include a change to hide this command prompt window.
- Some customers build custom task sequence interfaces using the IProgressUI::ShowMessage method, but it doesn’t return a value for the user’s response. This release adds the IProgressUI::ShowMessageEx method. This new method is similar to the existing method, but also includes a new integer result variable, pResult.
Protection
CMG support for endpoint protection policies
While the cloud management gateway (CMG) has supported endpoint protection policies, devices required access to on-premises domain controllers. 从此版本开始, clients that communicate via a CMG can immediately apply endpoint protection policies without an active connection to Active Directory.
BitLocker management support for hierarchies
You can now install the BitLocker self-service portal and the administration and monitoring website at the central administration site.
Configuration Manager console
社区中心和 GitHub
(First introduced in June 2020)
The IT admin community has developed a wealth of knowledge over the years. Rather than reinventing items like scripts and reports from scratch, we’ve built a Configuration Manager 社区中心 where you can share with each other. 通过利用他人的工作, 您可以节省工作时间. 社区中心通过以他人的工作为基础并让其他人以您的工作为基础来培养创造力. GitHub 已经拥有用于共享的全行业流程和工具. Now, the Community hub will leverage those tools directly in the Configuration Manager console as foundational pieces for driving this new community. 对于初始版本, 社区中心提供的内容将仅由 Microsoft 上传.
Direct links to Community hub items
You can easily navigate to and reference items in the Configuration Manager console Community hub node with a direct link.
Notifications from Microsoft
You can now choose to receive notifications from Microsoft in the Configuration Manager console. These notifications help you stay informed about new or updated features, changes to Configuration Manager and attached services, and issues that require action to remediate.
Power BI sample reports
(First introduced in June 2020)
When you integrate Power BI Report Server with Configuration Manager reporting, there are now sample Power BI reports available. Download and install the following sample reports:
- Software Update Compliance Status
- Software Update Deployment Status
Deprecated operating systems
Learn about support changes before they’re implemented in removed and deprecated items.
As first announced in version 1906, version 2006 drops support for the following client OS versions:
- Windows CE 7.0
- 视窗 10 移动的
- 视窗 10 Mobile Enterprise
