Endpoint Services, MECM, group policy interaction in MECM

What is the recommended use of MECM versus group policy objects (GPOs)?


Microsoft Endpoint Configuration Manager (MECM), formerly SCCM

Intended Audience

University of Illinois IT Pros leveraging MECM, hosted by Technology Services' Endpoint Services team

General Information

Group Policy Objects (GPOs) remain unchanged by MECM; IT Pros can continue to apply configuration settings or restrictions for software via GPOs. Endpoint Services recommends that you deploy applications via MECM instead of GPOs, as MECM has many more features.

MECM can also manage compliance via Configuration Items and Configuration Baselines:

  • Configuration Items are often scripts that evaluate whether an endpoint is set up properly for a particular purpose. For example: Is the endpoint configured to use a device-based subscription for Office 365? Does the endpoint have a valid certificate from Active Directory Certificate Services?
  • Configuration Baselines are collections of Configuration Items. Configuration Baselines are useful for summarizing compliance with a set of more detailed requirements, such as determining if a set of applications used in a unit or college are installed on the endpoint.

Microsoft has published a step-by-step guide to writing configuration items and creating configuration items.

Contact the EPS team

Keywords:compliance GPO policy "configuration item" "configuration baseline" EPS SCCM windows endpoint TechS-EPS-SCCM MECM   Doc ID:75315
Owner:EPS Distribution List .Group:University of Illinois Technology Services
Created:2017-08-04 15:38 CDTUpdated:2020-07-13 16:15 CDT
Sites:University of Illinois Technology Services
Feedback:  0   0