SCCM 2012 with SCM - support for only Windows?

Hello all,
As part of compliance configuration, i came across the Microsoft's Security Compliance Manager 3.0 (latest version) mainly for compliance and remediation. But after going through their docs, I feel SCM is used only on Windows OS (clients or servers). 
a] Does SCM support contact with non-Microsoft vendors to import security baselines?
b] Does SCM support audit, compliance and remediation on non-windows OS devices? (clients/servers)
Any help is greatly appreciated.
thanks  

This is the wrong forum to ask Security Compliance Manager based questions, it doesn't have any straight relationship with ConfigMgr. Correct forum is here: http://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement

Similar Messages

  • SCCM 2012 with SCM - support for non-Windows?

    Hello all,
    As part of compliance configuration, i came across the Microsoft's Security Compliance Manager 3.0 (latest version) mainly for compliance and remediation. But after going through their docs, I feel SCM is used only on Windows OS (clients or servers). 
    a] Does SCM support contact with non-Microsoft vendors to import security baselines?
    b] Does SCM support audit, compliance and remediation on non-windows OS devices? (clients/servers)
    Any help is greatly appreciated.
    thanks 

    This is the wrong forum to ask Security Compliance Manager based questions, it doesn't have any straight relationship with ConfigMgr. Correct forum is here: http://social.technet.microsoft.com/Forums/en-US/home?forum=compliancemanagement

  • Can Macbook pro 2012 with GT650M support 3d vision via bootcamp

    can Macbook pro 2012 with GT650M support 3dvision via bootcamp
    For sure GT650 is 3d vision supported, but anyone ever made test that you
    can watch 3d movie via windows under bootcamp on new macbook pro
    Thanks..

    After updating NVidia driver newer than 267.76,
    I got black screen after Windows Logo shown during reboot.
    After countless annoying tests,
    I installed the newest NVidia 285.79 driver without problem finally.
    My original prefered display configuration:
    link the primary monitor with HDMI port
    I already followed the GeForce Driver Installation Guide, step by step,
    http://forums.nvidia.com/index.php?showtopic=169555
    but there's still black screen after reboot.
    THEN, I TRIED TO USE mini-DISPLAY PORT INSTEAD AND REBOOT AGAIN,
    video signal was connected to my DELL 2707W(only DVI port)
    by MiniDP to HDMI adapter/HDMI-DVI cable.
    The display is NORMAL NOW !!
    Root Cause assumption:
    Maybe the driver newer than 267.76 always regard miniDP as primary signal output port,
    even if you set the HDMI port as primary.
    I think this is a serious bug, but no solution after mote than 30 driver updating.
    The following configuration worked on my Mac mini 2010 system:
    mini─miniDP to HDMI adapter─
    HDMI cable to HDMI splitter─┬HDMI-DVI cable─Dell 2707
                                                  └HDMI cable─ 3D projector
    but I found that the configuration can't play 3D video...
    So I changed the configuration to:
    Mac─miniDP to HDMI adapter─HDMI-DVI cable─Dell 2707
          └HDMI cable─ 3D projector 
    For your reference.   

  • Manage SCCM 2012 clients in DMZ (OS Deploy, Windows updates) via DP/MP

    Hi,
    We ’d like to manage (=OS Deploy, Packages,Windows updates) Windows clients (Windows 2008/2012 R2 servers for now, about 20 of them) in a DMZ (= different domain).
    There is this article
    https://nikifoster.wordpress.com/2011/01/31/installing-configmgr-clients-on-servers-in-a-dmz/ which explains what to do … in 2011. Since then lots of things are changed I guess
    Before I dive in, I’d need to have an overview + do some administrative tasks (like asking for firewall accesses).
    Current setup DMZ:
    Our SCCM 2012 R2 server is on a Windows 2008 R2 OS
    Client communication is done via HTTP (not HTTPS)
    An extra physical Distribution point is setup (only DP, nothing more) in our current domain
    A new Windows 2012 server is setup in the DMZ which should host the DP and probably management point (since it should manage the clients over there)
    There are clients in DMZ that are currenlty managed by SCCM 2007 but 
    this server will be phased out, these client have:
    Correct sccm functionality
    Correct DNS resolution
    My steps/questions, please comment:
    Add the DMZ ip range to SCCM 2012 boundary as “DMZ”
    Add the network access account to be able to deploy as well clients as distribution point in DMZ
    In the DMZ accesses on firewall for server VLAN have to be asked
    When we have a distribution point and communication is “HTTP only” then http (port 80) from DMZ to sccm server should suffice, correct? Or are
     extra firewall openings needed for management point access/packages and windows updates sync?
    Now the sccm clients will be deployed to the servers in DMZ: deploy SCCM clients to hosts in DMZ, how this should be done: we connect a console to the SCCM-server in the DMZ then deploy the discovered clients?
    OS Deploy should be made available, but no dhcp is available in DMZ and it is not an option either, therefore we would boot from an ISO then enter an ip (or pre-enter it so there is already filled in an ip?). So tasksequences/deployments
    for servers in DMZ, where are they configured/deployed then? Via console access on DMZ management point or can we deploy on our domain SCCM management point (not in DMZ) and it will be synced to the DMZ management point? Not clear
    Selective sync of software to this distribution point (howto? not sure), we don’t need any Windows 8 software/drivers to be synced.
    Thanks for your input!
    J.
    Jan Hoedt

    No comment;
    I think you mean the client push installation account and the site system installation account;
    More ports are required, see site server > distribution point and distribution point > management point from the provided link;
    The console will always be connected to your primary site server. The client will be pushed from the primary site server and it will provide the initial files. The other files will be downloaded from the local distribution point;
    The task sequence deployment will be just like a normal taks sequence deployment. The only difference is the location of the server;
    Only the content that's distributed to the distribution point in the DMZ will be available on that distribution point.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • SCCM 2012 with MDT intergration OSD

    Does anyone have some links or suggested study material with regards to SCCM 2012 with MDT integration. I am specifically looking for the OS deployment.
    Most of the stuff I found only cover OSD with SCCM task sequences. Any assistance would be greatly appreciated.

    If you download the MDT 2013 documentation from this link:
    http://www.microsoft.com/en-us/download/details.aspx?id=40796
    You will find two Word documents about integrating MDT 2013 with ConfigMgr 2012. They are called:
    Quick Start Guide for System Center 2012 R2 Configuration Manager
    Quick Start Guide for User Driven Installation
    You could also have a look at this book:
    http://www.amazon.com/Deployment-Fundamentals-Vol-Deploying-Configuration/dp/9197939021/ref=sr_1_4?s=books&ie=UTF8&qid=1400523728&sr=1-4&keywords=arwidmark
    It is written for ConfigMgr 2007 and MDT 2010 but most of the steps in the book would be the same on ConfigMgr 2012 and MDT 2013.

  • MSN Messenger with WebCAm support for OS 10.4

    Hi,
    Does anyone know if there is a MSN messenger with WebCAM support for OS 10.4.8
    Any suggestions?
    Thanks
    Mitch

    Two options :
    Mercury Messenger (http://www.mercury.to/). Could work, but people report this is not very stable.
    Windows Live Messenger on Windows on MacIntel using virtualization solutions like Parallels (http://www.mercury.to/)
    Please reward points if you find this answer usefull, or it solved your issue.

  • Can you please put me in touch with the support  for the trial copy of adobe acrobat XI pro which I had tried out on March 15 for 30 days. I have  been trying to cancel since the cost is too much and Acrobat Reader is OK for me. I can't find uninstaller.

    Can you please put me in touch with the support  for the trial copy of adobe acrobat XI pro which I had tried out on March 15 for 30 days. I have  been trying to cancel since the cost is too much and Acrobat Reader is OK for me. I can't find uninstaller.
    I have had to erase my disk since then with trouble with Apple Store not recognising my machine and the reload from Time Machine has given complications . Can you please cancel my trial and return my Trial money.

    If you paid for what you used then it was not a trial.
    Look thru the following links and use the chat option if required for your situation:
    Cancel your membership or subscription | Creative Cloud
    https://helpx.adobe.com/x-productkb/policy-pricing/cancel-membership-subscription.html
    https://forums.adobe.com/thread/1703848
    Chat support - For the link below click the Still Need Help? option in the blue area at the bottom and choose the chat option...
    Creative Cloud support (all Creative Cloud customer service issues)
    http://helpx.adobe.com/x-productkb/global/service-ccm.html ( http://adobe.ly/19llvMN )
    Phone support | Orders, returns exchanges
    http://helpx.adobe.com/x-productkb/global/phone-support-orders.html

  • Apple changed my Apple ID to the email address associated with my iTunes account. I now can no longer access my account because the old user name is no longer valid and has no password. I have been on the phone with tech support for hours trying to fix.

    Apple changed my Apple ID to the email address associated with my iTunes account. I now can no longer access my account because the old user name is no longer valid and has no password. I have been on the phone with tech support for hours trying to fix this. I can not update any of the apps associated with that user name.

    Is this itunes on the iPad or on my computer? Thank you for the reply.

  • OpenSSH 4.4p1 packages with PAM support for Solaris 9, 10

    As mentioned in a previous post* , I've compiled OpenSSH packages with PAM support for Solaris 9 and 10. They've since been updated to version 4.4p1, and are compiled against a static zlib (1.2.3) and OpenSSL (0.9.8c). You can find them here:
    http://firewallworks.com/downloads/unsupported/Solaris-sparc/
    Regards,
    Greg
    * http://forum.sun.com/jive/thread.jspa?threadID=103378&tstart=105

    Yes, zlib 1.2.3 is a requirement. In facts, zlib mentions a 2005 vulnerability fix but I found no matching patch in sunsolve. See
    http://www.kb.cert.org/vuls/id/JGEI-6E7RC3
    I have been wandering whether to replace the official zlib. Linking statically is probably a better idea. Thanks

  • Which Stereo Bluetooth headset with remote supports for Iphone3Gs??

    please anybody can tell me which is the best Stereo Bluetooth headset with remote support for Iphone3Gs??
    thanks in advance

    Hello thomulusmax,
    Welcome to the BlackBerry Support Community Forums
    As long as your device is running software version 4.2.2 or higher it supports A2DP. (You can verify this under Options >> About)
    Keep in mind that not all Bluetooth headsets are A2DP enabled. As long as your headset supports A2DP and it pairs and connects with your Pearl you should be able to listen to any supported audio format.
    Cheers!
    Message Edited by FozzyBear on 08-21-2009 02:32 PM
    -FB
    Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
    Be sure to click Kudos! for those who have helped you.
    Click "Accept as a Solution" for posts that have solved your issue(s)!

  • SCCM 2012 Sp1 CU3 support Windows 2012 R2 deployment?

    Hi,
    Sorry for so basic question, but I have read few docuemnts, blogs and official materials and I'm a bit confused. 
    In our organization we have SCCM Sp1 CU3. We are planning create and next deploy Windows 2012R2 Server images. On some documentations there is CU3 supports only application managment, inventory and so on. but there is nothing about image deployment. 
    So, my question is - I have to upgrade SCCM 2012 Sp1 CU3 to SCCM2012R2 to capture, build and deploy Windows 2012R2 system?
    Thank you.

    Yes, you do. See what's new with ConfigMgr 2012 R2
    http://technet.microsoft.com/en-us/library/dn236351.aspx
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

    Hi,
    We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
    Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
    can read reg value as exempel.
    IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
    I found this
    http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
    /SaiTech

    You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
    http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • SCCM 2012 - 802.1x authentication for zero touch installation

    Hi guys,
    I'm setting up a demo environment for sccm 2012. Our customer has the requirement to enforce 802.1x authentication (username & password without certificates) on the network. So I need a 802.1x integration into the WinPE image, that clients can access
    the install vlan instead of the guest vlan during the zero touch Windows 7 OS install process.
    What I did before:
     - mount the SCCM modified WinPE image (boot.XXX99999.wim)
     - integration of the KB972831 hotfix into the WinPE
     - creation of a lan profile and eap profile file
     - copy both files into the mounted image
     - creation of new wim file
    I've booted the boot wim via a usb stick to test the 802.1x integration with the following commands:
      net start dot3svc
      => The Wired AutoConfig service was started successfully
      netsh lan add profile filename="X:\8021x\Local Area Connection.xml " interface="Local Area Connection"
      => The profile was added successfully on the interface Local Area connection
     netsh lan set eapuserdata filename=x:\8021x\Wired-WinPE-UserData-PEAP-MSChapv2.xml allusers=yes interface="Local Area Connection"
      => Error setting user data for interface Local Area Connection. The operation is not supported.
    Actually I can't post web links here. If the files are needed I can send them per mail.
    What can I do to solve this problem?
    Thanks!
    Regards
    Bastian

    Hi!
    Did you gave a look at this website: http://myitforum.com/cs2/blogs/lakey81/archive/2011/07/06/configuring-802-1x-network-authentication-for-winpe-3-0-and-configmgr-deployments.aspx
    I've followed those steps and it worked as a charm, even for WinPE 4.0.
    If you have questions let me know.
    Cheers.

  • SCCM 2012 Software Updates not installing (bothh Windows patches & 3rd party updates)

    Using SCCM 2012 R2, I am having a problem getting Windows updates to install.  Applications published to people work, and basic software installations published to machines for a straight install work.  However, both Windows patches and Adobe patches
    fail to install on clients. I have imported the Adobe catalog into SCUP, and publish through WSUS. I can see the Adobe patches and Windows patches in SCCM, and can publish them. However, in deployment status out of 4 machines in my test group the Windows patches
    installed on 1 and the other 3 are still in Unknown status with category of "Client check passed/Active". However, none of them are installing the patch - they don't even seem to try.  All of those are Windows 7 PCs, incidentally. On Adobe patches,
    one PC fails and the other 3 machines still sit in Unknown status.  Certificates are distributed,
    Any ideas what might cause the deployment to not push some targets, even when it's past the deadline?
    Thanks,
    Andy Maslin

    An unknown status means that the clients are not reporting back to ConfigMgr correctly. This is often due to the WUA not pointing at the correct WSUS instance. You can verify this by examining the WUAHandler.log on one of those clients and it will clearly
    indicate an issue with this which in turn is often due to a group policy overriding the ConfigMgr behavior.
    Jason | http://blog.configmgrftw.com

  • SCCM 2012 NO SP - Reporting for application deployments not up to date

    Hello, 
    We have a problem when deploying applications with our SCCM 2012 NO SP.
    The reports for the application deployments and sup deployment are not up to date.
    The applications have been deployed on the clients but the information is not in sccm servers. 
    The reporting for the package deployment are working correctly.
    Do you have an idea ?
    Thanks

    Hi,
    How are things going? Please let us know if there is any progress.
    Regards.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

Maybe you are looking for