如何部署 Configuration Manager 中的設定基準How to deploy configuration baselines in Configuration Manager

適用於: Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

Configuration Manager 中的設定基準必須先部署至一或多個使用者或裝置集合,那些集合中的用戶端裝置才能使用設定基準來評估其合規性。Configuration baselines in Configuration Manager must be deployed to one or more collections of users or devices before client devices in those collections can assess their compliance with the configuration baseline.

使用 [部署組態基準] 對話方塊來定義組態基準部署,其中包含指定評估排程,以及透過部署來新增或移除組態基準。Use the Deploy Configuration Baselines dialog box to define configuration baseline deployments, which includes adding or removing configuration baselines from deployments in addition to specifying the evaluation schedule.

部署組態基準Deploy a configuration baseline

  1. 在 Configuration Manager 主控台中,按一下 [資產與相容性] > [相容性設定] > [設定基準] 。In the Configuration Manager console, click Assets and Compliance > Compliance Settings > Configuration Baselines.

  2. 在 [組態基準] 清單中,選取您想要部署的組態基準,然後在 [首頁] 索引標籤的 [部署] 群組中,按一下 [部署] 。In the Configuration Baselines list, select the configuration baseline that you want to deploy, and then in the Home tab, in the Deployment group, click Deploy.

  3. 在 [部署組態基準] 對話方塊的 [可用的組態基準] 清單中,選取您想要部署的組態基準。In the Deploy Configuration Baselines dialog box, select the configuration baselines that you want to deploy in the Available configuration baselines list. 按一下 [新增] ,將這些新增至 [選取的組態基準] 清單。Click Add to add these to the Selected configuration baselines list.

    重要

    如果您變更已加入至已部署之組態基準的組態項目,則到下一個排程的評估時間之前,都不會評估修改過組態項目的相容性。If you change a configuration item that has been added to a deployed configuration baseline, the revised configuration item is not evaluated for compliance until its next scheduled evaluation time.

  4. 指定下列其他資訊:Specify the following additional information:

    • 支援時補救不相容的規則 – 自動補救 Windows Management Instrumentation (WMI)、登錄、指令碼以及 Configuration Manager 所註冊之行動裝置所有設定的任何不相容規則。Remediate noncompliant rules when supported – Automatically remediates any rules that are noncompliant for Windows Management Instrumentation (WMI), the registry, scripts, and all settings for mobile devices that are enrolled by Configuration Manager.

    • 允許在維護期間以外補救 - 如果已針對您部署組態基準的集合設定維護期間,請啟用這個選項讓相容性設定補救維護期間以外的值。Allow remediation outside the maintenance window – If a maintenance window has been configured for the collection to which you are deploying the configuration baseline, enable this option to let compliance settings remediate the value outside of the maintenance window. 如需維護期間的詳細資訊,請參閱如何在 Configuration Manager 中使用維護期間For more information about maintenance windows, see How to use maintenance windows.

  5. 產生警示 – 設定警示,在設定基準相容性低於指定日期和時間的指定百分比時產生。Generate an alert – Configures an alert that is generated if the configuration baseline compliance is less than a specified percentage by a specified date and time. 您也可以指定是否要將警示傳送至 System Center Operations Manager。You can also specify whether you want an alert to be sent to System Center Operations Manager.

  6. 集合 - 按一下 [瀏覽] 以選取您想要部署組態基準的集合。Collection - Click Browse to select the collection where you want to deploy the configuration baseline.

  7. 指定此設定基準的相容性評估排程 – 指定在用戶端電腦上評估已部署之設定基準的排程。Specify the compliance evaluation schedule for this configuration baseline Specifies the schedule by which the deployed configuration baseline is evaluated on client computers. 這可以是簡易或自訂排程。This can be either a simple or a custom schedule.

    注意

    如果組態基準部署至電腦,則會評估所排程之開始時間的兩個小時內的相容性。If the configuration baseline is deployed to a computer, it is evaluated for compliance within two hours of the start time that you schedule. 如果部署給使用者,則會在使用者登入時評估相容性。If it is deployed to a user, it is evaluated for compliance when the user logs on.

  8. 按一下 [確定] 關閉 [部署組態基準] 對話方塊並建立部署。Click OK to close the Deploy Configuration Baselines dialog box and to create the deployment. 如需如何監視部署的詳細資訊,請參閱監視相容性設定For more information about how to monitor the deployment, see Monitor compliance settings.