Q: What is MECM?
Microsoft Endpoint Configuration Manager is a management platform for Windows endpoints providing inventory, software distribution, operating system imaging, settings and security management.
MECM allows IT administrators to proactively manage equipment life-cycles, efficiently deploy software and policies in a consistent manner, and provide data for troubleshooting computer issues.
More information regrading MECM can be found here.
- Hardware specifications
- Applications installed
- Services running
- List of local user account
Note: Microsoft MECM is NOT configured to collect Application Usage, user login/logout timestamps, or any browsing history.
SCCM consists of a primary site server and a client installed on each managed computer.
The SCCM client checks with the server at three different intervals:
- Every 60 minutes - check for new policies
- Once a day - upload software inventory
- Once a week - upload hardware inventory
Currently, the MECM server is only accessible from the MIT network (on-campus and through the VPN).
The client is installed on all computers on the WIN domain under the Machines/Endpoints OU. Additionally it can be optionally enabled for any other OU by GPO.
- A new entry for Configuration Manager will appear in the Control Panel (under System and Security if viewing by category).
- Three folders are created under C:\Windows - ccm (logs), ccmcache (downloaded apps), ccmsetup (setup files).
- Software Center entry will appear in the start menu. The exe is located at C:\Windows\ccm\SCClient.exe
Since MECM is a tool to assist in managing Windows clients, certain policies and software can be centrally deployed.
Clients will be informed in conjunction with their IT Consultant before any changes are applied.
A self service application simply called "Software Center" will be present on any computer with the MECM client installed. This is a portal that provides access for end users to install applications and printers. Items from the Software Center can be installed by the end user, even if they are not a local administrator of that particular computer.