What is Microsoft Configuration Manager? #
Microsoft Configuration Manager (formerly Microsoft SCCM and Microsoft Endpoint Configuration Manager) is a systems management software product for managing large groups of computers running Windows NT, Windows Embedded, macOS (OS X), Linux or UNIX, as well as Windows Phone, Symbian, iOS, and Android mobile operating systems.
Why Should You Use the Microsoft Configuration Manager? #
The Microsoft Configuration Manager connector provides visibility into the assets and users managed by Configuration Manager. You can use this visibility to:
-
ensure assets are managed per your security policies
-
monitor each endpoint and its status
How Does This Connector Work? #
Lucidum executes read-only requests to the Microsoft Configuration Manager REST API and ingests only meta-data about Configuration Manager users and asset. Lucidum does not retrieve any data stored on your assets.
Configuring the Connector in Lucidum #
Field |
Description |
Example |
---|---|---|
Host |
The hostname or IP address of the SQL Server for the Configuration Manager instance. To specify a named instance of SQL Server, use the format <server host>/<instance name> If no instances is specified, Lucidum uses the default instance. |
VM-SCCM.lucidum.io or VM-SCCM/instance11
|
Port |
Optional field. Port on the SQL Server for communication from Luciudum. If no port is specified, Lucidum uses default port 1433. |
1434 |
Domain |
The name of the SQL Server domain. If the Lucidum connector uses a local SQL Server login, leave this field blank. |
lucidum |
Database |
Name of the database for Microsoft Configuration Manager. You can find this name in the Registry Editor, under HKLM:\SOFTWARE\Microsoft\SMS\Identification Usually starts with “CM_” |
CM_acme |
User Name |
User Name that has read access to the SQL Server for Configuration Manager. The user must have db_datareader permissions. Lucidum recommends you create a local SQL User account to use with the Lucidum connector. Note that to use SQL Server Authentication, the Database Engine must use mixed mode authentication. If you choose to use domain authentication instead, specify the user name and supply a value in the Domain field. |
justynmutts
|
Password |
The password for the SQL Server account. |
************ |
Source Documentation #
Creating Credentials #
For details on creating an account that is authenticated on the SQL Server, see:
Required Permissions #
-
Log in to SQL Server Management Studio (SSMS).
-
In the Object Explorer pane, go to Security > Logins.
-
Right click the Configuration Manager database. Select Properties.
-
Select Permissions.
-
Select the account that the Lucidum connector uses.
-
In Permissions for, select:
-
public
-
db_datareader.
-
-
Click OK
API Documentation #
https://learn.microsoft.com/en-us/mem/configmgr/develop/reference/configuration-manager-reference