What does Endpoint Management do?

Tags Intune mecm
Endpoint management allows your departmental IT staff to centrally manage and distribute operating system updates and software/application updates. It also provides a single administrative console for managing device security policies, asset inventory, and compliance reporting for supported devices.

The Technology Solutions offers Microsoft Endpoint Configuration Manager (MECM), Intune, and Jamf to help departmental IT staff ensure that the devices that they support are current with operating system and software/application (including anti-virus) updates. These centrally managed systems help lessen downtime to your machine caused by viruses/malware or requests to your IT staff to have software/application updates performed in person. 

NOTE:  For more information about your department’s endpoint management implementation, contact your departmental IT staff (REACH).  If you do not have the contact info for your departmental IT staff (REACH) you can search for their info by visiting this page:  https://www.uic.edu/apps/iam/liaison.  

You can use MECM/Intune/JAMF to help with:

Endpoint OS Management:  With the increasing speed of updates in Windows, iOS, and Android, your management solution needs to be able to keep up as well. Updates and servicing node in the Configuration Manager console provides more frequent and easier-to-apply updates for new features, cumulative updates, extensions for Microsoft Intune, and individual fixes.

Application Delivery:  MECM/Intune/Jamf takes a user-centric approach to application delivery that allows administrators to create one application that can be delivered to all of a user’s devices. It evaluates device and network capabilities and optimizes delivery, whether through a local installation, streaming through App-V, or via a presentation server such as the Remote Desktop Services RemoteApp capability or Citrix XenApp.

Device Management:  Integration with Microsoft Intune provides a single administrative console for managing policies and comprehensive asset and compliance reporting across PCs as well as mobile devices, including Windows, iOS, and Android. With new on-premises mobile device management (MDM) capabilities, Windows 10 devices can now be also managed via MDM.

Virtual Desktop Management:  Configuration Manager, Intune, and Jamf reduce the complexity and cost of implementing virtual environments by providing a single, unified tool to manage all your client desktops, thin clients, mobile devices, and virtual desktops.

Endpoint Protection:  Configuration Manager and Intune serve as the infrastructure for System Center Endpoint Protection and can help ease your deployment and configuration of Microsoft Defender for Endpoint. It delivers a single solution for malware protection, identification, and remediation of vulnerabilities, while giving visibility into non-compliant systems. Jamf offers similar abilities.

Compliance and Settings Management:  With Configuration Manager, Intune, and Jamf, you can create a baseline for “desired configuration state” and ensure that all devices comply through auto remediation or alerts. Configuration Manager also integrates with System Center Service Manager to automatically create incidents on baseline drift.

Software Update Management:  Endpoint Management simplifies the complex task of delivering and managing updates to IT systems across the enterprise. IT administrators can deliver updates of Microsoft products, third-party applications, hardware drivers, and system BIOS to a variety of devices, including desktops, laptops, servers, and mobile devices.

Power Management:  Get more out of your energy-saving hardware with a comprehensive set of centralized client power management tools. Configuration Manager and Intune work with the capabilities built into your Windows operating system to help you optimize power settings at a granular level.

Operating System Deployment: Configuration Manager distributes operating systems to physical desktops, servers, laptops, and mobile devices across enterprise networks and eliminates the inefficiencies and errors associated with manually installing applications. With Windows 10, Configuration Manager and Intune can also manage in-place upgrades which significantly reduce the time and complexity of deploying Windows.

Client and Health Monitoring:  Our endpoint management solutions display client health evaluation results and client activities directly in the console, providing alerting and remediation capabilities if health statistics fall below established thresholds.  

Asset Intelligence:  Administrators can have continuous visibility into hardware and software assets and usage. Asset Intelligence translates inventory data into information, providing rich reports that help administrators with software purchasing decisions, upgrade plans, and license reporting.

Inventory:  Configuration Manager, Intune, and Jamf can inventory hardware and software in your organization to help give you a view into what resources you have. With Configuration Manager, you can enable custom hardware inventory more easily and extend the inventory schema.

Reporting:  Reporting in Configuration Manager helps you gather, organize, and present information about users, hardware and software inventory, software updates, applications, site status, and other Configuration Manager operations in your organization.  Jamf offers similar reporting capabilities.

Zero-Touch Deployment: Intune introduces this capability to windows, called Autopilot, that Jamf already had been providing Apple devices for years. With zero-touch deployments, you can order devices and send them directly to your clients, which helps save your team time and helps ease your ordering and deployment processes.


Article ID: 703
Fri 1/15/21 6:02 PM
Mon 6/27/22 10:57 AM