Configurations have to made within ConfigMgr to support compliance. These configurations must include both Configuration Items and Configuration Baselines. These are defined as follows:

Configuration Items:

This is where the settings are made. The settings will contain values and criteria that defines what is compared, checked, or evaluated on a target system.

Configuration Baselines:

This is a grouping of multiple configuration items. It is is the configuraiton baseline that is deployed to a collection of users or devices. This deployment can be deployed as "monitor only," or can be enabled with remediation. When remediation is enabled, the non-compliant clients will be remediated automatically and thus become compliant.

Establish Evaluation Criteria for Viamonstra:

• Create a Device Configuration Item and Baseline (Pages 468 thru 472)

ViaMonstra's configuration item for device evaluation will consist of the checks necessary to determine whether or not the registery setting to enable notification only for client health on all servers. This setting is identified by the HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/CCM/CcmEval setting, which must be TRUE. This configuraiton item will then become part of a device baseline and will be deployed to the VM All Servers collection.

• Create a User Configuration Item and Baseline (Pages 472 thru 477)

For this evaluation check you will ensure that a user's Internet Explorer registry setting controlling the ProxyEnable flag is set to zero. Also, you will ensure that the user has NotePad.exe as a shortcut on his/her desktop. This last check will be done via a PowerShell script and will be remediated if the user is not compliant. These two configuration items will then become part of a baseline which will be deployed to both VM All Workstations and the All Users collections.

Test Evaluation Criteria:

• Using the procedures outlined in the book, generate a noncompliant scenario and verify the baselines. See pages 478 through 482.
• Create a collection with Noncompliant objects. See pages 482 thru 483.
• Perform remediation for an existing deployment and for a noncompliant user. See pages 484 thru 486.