MICROSOFT
ENDPOINT MANAGER

Microsoft Endpoint Manager can manage two large groups of devices:

• Clients are devices such as workstations, laptops, servers and mobile devices on which the Configuration Manager client software is installed. Some management functions, such as hardware inventory, software installations, etc. require this client software.
• Managed devices may include clients, but usually a mobile device that does not have the Configuration Manager client software installed. This type of device is managed using the local mobile device management built into Configuration Manager.

You can also group and identify devices not only by client type, but also by user.

This feature helps you create, manage, deploy and monitor applications on multiple different devices. Use the Configuration Manager console to deploy, update and manage your applications. Configuration Manager is also integrated with Microsoft Store for Enterprise and Education to deliver cloud-based applications.

Software updates and other apps are provided to protect the environment. However, these deployments only reach error-free clients. Faulty Configuration Manager clients affect overall compliance. Depending on the denominator - the total number of devices to be managed - determining client integrity can be challenging. The denominator is all the greater if you determine all systems from Active Directory, even if some of these records belong to decommissioned computers.

You can view a dashboard with information about the integrity of Configuration Manager clients in your environment. View client integrity, scenario integrity, and general errors. Filter the view by various attributes to display all potential problems by operating system and client version.

This function includes security management, anti-malware and Windows Firewall management functions for computers in your organisation.

This area includes management and integration with the following listed Windows Defender features: