Integrates with Windows systemsīeing a Microsoft product, SCCM integrates very well with Windows systems and other Microsoft products. SCCM provides a suite of endpoint protection tools and with the correct configuration can be a full lifecycle management system for IT departments with a high percentage of Windows systems. SCCM includes a wide range of functions that provide flexibility over how patches are applied, generate system-wide reports, and allow for control over any Windows machine in the network from one central console. Pros of SCCM Part of a full lifecycle management system for Windows However, Microsoft SCCM presents several challenges for organizations looking for one solution to provide patch management across all devices, operating systems, and third-party applications, so it’s important to evaluate the pros and cons of patching with SCCM. While SCCM uses Microsoft’s WSUS patching system to check for and install updates, it gives users additional patch management control over when and how patches are applied and includes many more features that make it an attractive option for large enterprise networks. macOS Mojave, Catalina, and Big Sur – Deprecated in January 2022 in favor of migrating management to Intune.Windows embedded devices (IoT), think point of sales and other types of lightweight devices.Windows devices in Azure Virtual Desktop.Windows Server 2012-2022 (including core).Which operation systems are covered under SCCM? If you want to learn more about WSUS, review our first blog in the tooling series. Also, an SQL database is needed to store information for SCCM.

Underneath SCCM, WSUS helps cache and distribute patches to managed devices. And typically devices outside the corporate network need to connect back via VPN to receive patches, configuration updates, software, and more (unless the organization has also set up cloud management gateway (CMG) servers to help reduce VPN dependence with SCCM).

Sccm configuration manager