SCCM 2012 – Query based collection to collect Hyper-V Hosts to deploy specific Endpoint Protection settings with (#1)

Hyper-V Hosts have also the requirement to be protected against viruses. There are needed special Endpoint Protection scan exclusions and we just want to assign them to Hyper-V hosts. For that reason we will create a query based collection and then deploy a specific Endpoint Protection policy to this collection.

In #1 will create the query based collection to collect all hyper-v hosts.

In the SCCM 2012 Console go to the wunderbar “Assets and Compliance”

clip_image001

 

Right click on “Device Collections” and choose “Create Device Collection”

clip_image002

 

Name the collection (in this example “Hyper-V Hosts) and click “Browse” to limit the collection based on another collection (new in SCCM2012) –> it’s not possible to create SUB-Collections!

clip_image004

Limit it to “All Desktop and Server Clients” and click OK

clip_image005

Click Next

clip_image007

Define now the membership of this collection. Click on “Add Rule” and choose “Query Rule”

clip_image009

Name the Query (Hyper-V Hosts) and click on “Edit Query Statement”

clip_image010

Choose the tab “Criteria” and click on the “sun” symbol

clip_image011

Choose “Select…”

clip_image012

 

We create the query based on a service which is running just on Hyper-V Hosts.

 

Attribute class: Services

Alias as: <No Alias>

Attribute: Display Name

 

Then click OK

clip_image013

Operator: is equal to

Value: Hyper-V Virtual Machine Management

 

click OK

clip_image014

Click OK

clip_image015

Click OK

clip_image016

We like to update the collection “incremental” so enable the checkbox “Use incremental updates for this collection”

 

Then click “Next”

clip_image018

Click “Next”

clip_image020

Click “Close”

clip_image022

 

Now we have a collection whit all your Hyper-V host in your environment (if they are in your SCCM Boundary!).

In the following blog #2 we will create a specific Endpoint Protection policy (Hyper-V file exclusions) and deploy it to this collection…

 

Kind regards

Chris

Advertisements

3 comments

  1. MG

    Small but important correction:
    Use the service name since the display name is often localized but the service name is usually not.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s