Endpoint Services, MECM, group policy interaction in MECM
What is the recommended use of MECM versus group policy objects (GPOs)?
Microsoft Endpoint Configuration Manager (MECM), formerly SCCM
University of Illinois IT Pros leveraging MECM, hosted by Technology Services' Endpoint Services team
Group Policy Objects (GPOs) remain unchanged by MECM; IT Pros can continue to apply configuration settings or restrictions for software via GPOs. Endpoint Services recommends that you deploy applications via MECM instead of GPOs, as MECM has many more features.
MECM can also manage compliance via Configuration Items and Configuration Baselines:
- Configuration Items are often scripts that evaluate whether an endpoint is set up properly for a particular purpose. For example: Is the endpoint configured to use a device-based subscription for Office 365? Does the endpoint have a valid certificate from Active Directory Certificate Services?
- Configuration Baselines are collections of Configuration Items. Configuration Baselines are useful for summarizing compliance with a set of more detailed requirements, such as determining if a set of applications used in a unit or college are installed on the endpoint.
Microsoft has published a step-by-step guide to writing configuration items and creating configuration items.