Microsoft Endpoint Configuration Manager

Microsoft Endpoint Configuration Manager. It is a Microsoft systems management product for managing large groups of Windows-based computers. The software provides remote control, patch management, software distribution, operating system deployment, and hardware and software inventory. It is a core component of the Microsoft Endpoint Manager suite, integrating with cloud-based services like Microsoft Intune.

Overview

Originally launched as Systems Management Server, the product was later rebranded to System Center Configuration Manager before receiving its current name. It is widely used by enterprise IT departments to maintain control over thousands of client devices across corporate networks. The tool enables administrators to ensure compliance with organizational policies and security standards, functioning as an on-premises counterpart to cloud-centric management solutions. Its deep integration with the Windows ecosystem, including Active Directory and Windows Update, makes it a staple in many corporate IT infrastructure environments.

Features

Key capabilities include software deployment for applications like the Microsoft Office suite, and operating system deployment for installing Windows 10 or Windows 11. It provides comprehensive patch management using updates from Windows Server Update Services. The asset intelligence feature collects detailed hardware inventory and software inventory data. Additional functionalities are remote control for technical support, power management to reduce energy costs, and endpoint protection through integration with Microsoft Defender Antivirus. These features help enforce IT compliance and security baselines across an organization.

Architecture

The architecture is built around a central site server, typically installed on Windows Server with a supported version of Microsoft SQL Server for its database. Distribution points are used to cache and deliver content like software packages to clients on local networks. Management points facilitate communication between clients and the site server, while software update points integrate with Windows Server Update Services. For internet-based management, a cloud management gateway can be deployed, allowing communication with devices outside the corporate firewall through Microsoft Azure.

Deployment

A typical deployment begins with installing the site server role on a server running a supported version of Windows Server. Prerequisites include configuring Internet Information Services and installing a compatible version of Microsoft SQL Server. Administrators then set up boundary groups to define network locations and assign distribution points. Client agents are deployed to target machines, often via Group Policy or a manual installer. For hybrid environments, connecting to Microsoft Intune enables co-management, allowing workloads to be shifted between the on-premises infrastructure and the Microsoft cloud.

Management and Administration

Day-to-day administration is performed through the Configuration Manager console, a snap-in for the Microsoft Management Console. Administrators create collections to group devices or users for targeted actions, such as deploying an application like Adobe Acrobat. They define configuration items and configuration baselines to check for compliance with desired settings. Reporting is handled by SQL Server Reporting Services, providing insights into software usage, update compliance, and hardware health. Integration with Windows Admin Center offers a modern, web-based management interface for certain tasks.

History and Development

The product originated in 1994 with the release of Systems Management Server 1.0, focused on software distribution and inventory. A major revision, Systems Management Server 2.0, introduced more robust features in 1999. With the launch of the System Center suite, it was rebranded as System Center Configuration Manager 2007. Subsequent versions added support for macOS and Linux, and deeper integration with Microsoft Azure. The 2019 rebranding to its current name emphasized its role within the unified Microsoft Endpoint Manager platform, alongside Microsoft Intune, under the leadership of executives like Brad Anderson.