Peter van der Woude

There is a lot of information about a CAS.... :http://lmgtfy.com/?q=Technet+SCCM+About+Central+Administration+Site

In ConfigMGr 2012 a lot can be done from the console. See for example this post (it's based on a BETA, but the idea is the same): http://blogs.microsoft.co.il/blogs/doli/archive/2011/08/08/sccm-2012-beta-2-changes-overview-part-5-inventory.aspx

Have you seen this: http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/20d90cd2-d940-412b-a02c-4bcc83b032d8/

Have you seen this: http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/20d90cd2-d940-412b-a02c-4bcc83b032d8/

The updates are the same for all the machines, so I don't really see why you want to split that... But if you really want that you can create a query collection and then use Endpoint Protection Deployment State - Deployment State as criteria and add an extra criteria for the OS and your done.

Indeed, then you can configure SCCM to deploy the Endpoint Protection client to all systems (even the ones, that are connected via DirectAccess/ UAG).

At the point that it will install the application, does the ip address fall within the boundary (group) of a DP?

Then you are probably looking at Forefront TMG or UAG.

That's a good way of doing it. Just make sure that only the correct version of .NET will be installed.

(Sorry about the layout) 1. Endpoint Protection is building 2. All yes and it uses WDS for PXE deployments 3. Nope 4. I don't know your whole situation, but I almost never go for a CAS anymore. One primary can be centrally managed and uses multiple MPs/ DPs etc. for some sort of HACODE] 2

Did you see this article about the different certificates?:http://technet.microsoft.com/en-us/library/bb680733.aspx

I can't imaging that it's not possible, it was always possible with 2007. I will try it with 2012 this weekend... The only thing I can imagine is that the machine isn't within the boundary/ boundary group which makes it unable to find a DP...

I'm wondering why you would need/ want this collection.. because EP is now builtin including client deployment and monitoring.

Depends on what you are going to use for patch management.

Check if the Inventories are running correctly.

When the Workgroup client falls within those IP subnets, they should be fine. Did you als check other logs, like the CAS.log to see if it finds download locations?

At least it explains why it doesn't show up in the Software Center... Did you look at the other App*.log files?

Is the Deployment Available or Required? An Available Deployment to Users will only show in the Software Portal and a Required Deployment to Users will only show in the Software Center.

Two things to think about, your boundaries and assigning the clients to a MP (like you in ConfigMgr 2007 with a SLP).

Also I'm not totally sure about the RTM possibilities of the policies SCEP, but I know that with SP1 (which is still in pre-beta) policies can also merge.

Did you look at Niall's examples: http://www.windows-noob.com/forums/index.php?/forum/78-usmt/

Does this Task Sequence even work? The steps that should really do something are all disabled (grayed out)...

Yeah, that's a possibility... You could also right-click the Boot Images -node and then select Create Boot Image using MDT.

Did you look if the policies are good applied to the client?

Which version of ConfigMgr are you using? With ConfigMgr 2012 optional Application will only show in the web-portal...