An update 1706 have been released for the Current Branch (CB) of Microsoft System Center Configuration Manager on Friday, includes new features and product enhancements!
Since, the update is begin rolling out today, it will be globally available in the coming weeks for automatically download. Once it's ready to install for you, a notification will appear so you can get it from "Updates and Servicing" node in Configuration Manager console.
However, those, who want to get the features earlier, can use this PowerShell script, that make the update available in your console right away.
Microsoft has released following features based on customer feedback, like: users are now able to create and run PowerShell scripts with parameters to devices and collections.
Task sequence now provide an ability to toggle on a granular step-by-step basis, when the task sequence progress is or is not displayed to the end user. Additionally, in the task sequence editor, groups can now be collapsed or expanded.
It's also now possible to share an application from Software Center using the new Share button in the Application Details view.
In addition, an update 1707 for Configuration Manager Technical Preview Branch, is also available as on today. The Technical Preview Branch releases helps try out new Configuration Manager features in a test environment before they are made generally available.
Those looking for new installations, should use the 1703 baseline version of Configuration Manager Technical Preview Branch, available from the TechNet Evaluation Center.
New preview features of Update 1707 include:
- Client Peer Cache support for express installation files for Windows 10 and Office 365 – Beginning with this release, Peer Cache supports distribution of content express installation files for Windows 10 and of update files for Office 365. No additional configuration or changes are required.
- Create and run scripts with parameters – You can now create and run scripts with parameters to devices and collections.
- Configure network definitions using Windows Defender Application Guard policies – You can now configure network definitions using Windows Defender Application Guard policies. These include domain names, IP ranges, cloud resources, and proxy servers.
- Surface Device Dashboard – You can now use the Surface Device Dashboard to view information about the model and operating system version of your Surface devices.
Here's a quick rundown of the new enhancements made way into Update 1706:
Windows 10 and Office 365
- You can now use Configuration Manager to manage Microsoft Surface driver updates.
- You can now specify the Windows Analytics Commercial ID and configure telemetry, commercial data, and Internet Explorer data collection settings in Client Settings for use with Upgrade Readiness.
- Improvements have been made to leverage the Office Click-to-Run user experience when a client installs an Office 365 update. This includes pop-up and in-app notifications, and a countdown experience.
Windows 10 Security
- Hardware inventory can now determine whether the device has SecureBoot enabled and various properties of the TPM (enabled by default).
- You can now include trust for specific files and folder paths in Windows Defender Device Guard policies.
- You can now onboard the site to Azure AD via Cloud Services. Additionally, you can install the client on the Internet.
- There is a new dedicated experience to configure and deploy deferral settings for easy discoverability of Windows Update for Business.
- Cloud services consolidation introduces a common experience for OMS Connector, Upgrade Readiness, Windows Store for Business, and Cloud Management.
- During the "Update Distribution Points" wizard on a boot image, you can now reload the version of Windows PE in the selected boot image.
- Boundary groups now support configuring the time for fallback for software update points.
- A new Configuration Manager Update Reset tool is added to reset and restart in-console updates when they have problems downloading or replicating.
- Screen reader improvements and improved keyboard navigation in and out of the ribbon in the Configuration Manager console.
Configuration Manager connected with Microsoft Intune
- Entrust can now be used as the certificate authority for PFX certificates.
- You can now configure app configuration policies for Android for Work and support for available apps.
- Additional compliance policy settings that were previously available only in Intune standalone are added as well.
- Admin can now prevent enrollment for iOS or Android devices marked as personal.
- Cisco IPsec will be a new connection type option for VPN profiles for iOS.
- Windows Edition Upgrade policy allows admins to set a policy to upgrade Windows 10 to Enterprise editions.
- Additional MAM settings such as block screen capture (Android only), disable contact sync, and disable printing.
- New Windows configuration item settings that were previously only available in Intune standalone.