Configuration Manager 的功能Features and capabilities of Configuration Manager

適用於: Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

本文摘要說明 Configuration Manager 的主要管理功能。This article summarizes the primary management features of Configuration Manager. 每一項功能都有自己的必要條件,且您使用每一項功能的方式可能會影響 Configuration Manager 階層的設計和實作。Each feature has its own prerequisites, and how you use each might influence the design and implementation of your Configuration Manager hierarchy. 例如,如果想要將軟體更新部署到階層中的裝置,則需要軟體更新點站台系統角色。For example, if you want to deploy software updates to devices in your hierarchy, you need a software update point site system role.

如需如何規劃和安裝 Configuration Manager 以便在環境中支援這些管理功能的詳細資訊,請參閱準備開始使用 Configuration ManagerFor more information about how to plan and install Configuration Manager to support these management capabilities in your environment, see Get ready for Configuration Manager.


共同管理是將您現有的 Configuration Manager 部署附加至 Microsoft 365 雲端其中一種主要方式。Co-management is one of the primary ways to attach your existing Configuration Manager deployment to the Microsoft 365 cloud. 它可讓您使用 Configuration Manager 和 Microsoft Intune 同時管理多部 Windows 10 裝置。It enables you to concurrently manage Windows 10 devices by using both Configuration Manager and Microsoft Intune. 共同管理可讓您透過新增功能 (例如條件式存取),在雲端附加您在 Configuration Manager 方面現有的投資。Co-management lets you cloud-attach your existing investment in Configuration Manager by adding new functionality like conditional access. 如需詳細資訊,請參閱什麼是共同管理For more information, see What is co-management?

電腦分析Desktop Analytics

電腦分析是與 Configuration Manager 整合的雲端式服務。Desktop Analytics is a cloud-based service that integrates with Configuration Manager. 這項服務可提供您見解與智慧,有助您針對自己的 Windows 用戶端更新整備做出更旁徵博引的決定。The service provides insight and intelligence for you to make more informed decisions about the update readiness of your Windows clients. 其結合了您組織的資料,以及從連線到 Microsoft 雲端服務之數百萬部裝置彙總而成的資料。It combines data from your organization with data aggregated from millions of devices connected to Microsoft cloud services. 如需詳細資訊,請參閱什麼是電腦分析For more information, see What is Desktop Analytics?

雲端連結管理Cloud-attached management

使用雲端管理閘道、雲端式發佈點與 Azure Active Directory 等功能來管理以網際網路為基礎的用戶端。Use features like the cloud management gateway, cloud-based distribution points, and Azure Active Directory to manage internet-based clients.

如需詳細資訊,請參閱下列文章:For more information, see the following articles:

即時管理Real-time management

使用 CMPivot 來立即查詢線上裝置,然後篩選並分組資料以取得更深入的見解。Use CMPivot to immediately query online devices, then filter and group the data for deeper insights. 此外,使用 Configuration Manager 主控台來管理 Windows PowerShell 指令碼並將其部署到用戶端。Also use the Configuration Manager console to manage and deploy Windows PowerShell scripts to clients. 如需詳細資訊,請參閱 CMPivot建立並執行 PowerShell 指令碼For more information, see CMPivot and Create and run PowerShell scripts.

應用程式管理Application management

協助建立、管理、部署及監視您所管理一系列不同裝置中的應用程式。Helps you create, manage, deploy, and monitor applications to a range of different devices that you manage. 從 Configuration Manager 主控台部署、更新及管理 Microsoft 365 Apps。Deploy, update, and manage Microsoft 365 Apps from the Configuration Manager console. 此外,Configuration Manager 會與商務與教育用 Microsoft Store 整合,以提供雲端式應用程式。Additionally, Configuration Manager integrates with the Microsoft Store for Business and Education to deliver cloud-based apps. 如需詳細資訊,請參閱應用程式管理簡介For more information, see Introduction to application management.

OS 部署OS deployment

部署 Windows 10 的就地升級,或是擷取並部署 OS 映像。Deploy an in-place upgrade of Windows 10, or capture and deploy OS images. 映像部署可以使用 PXE、多點傳送或可開機媒體。Image deployment can use PXE, multicast, or bootable media. 也可協助使用 Windows AutoPilot 重新部署現有的裝置。It can also help redeploy existing devices using Windows AutoPilot. 如需詳細資訊,請參閱 OS 部署簡介For more information, see Introduction to OS deployment.

軟體更新Software updates

管理、部署及監視組織中的軟體更新。Manage, deploy, and monitor software updates in the organization. 與 Windows 傳遞最佳化和其他對等快取技術整合,以協助控制網路使用量。Integrate with Windows Delivery Optimization and other peer caching technologies to help control network usage. 如需詳細資訊,請參閱軟體更新簡介For more information, see Introduction to software updates.

公司資源存取Company resource access

讓您授權組織中的使用者從遠端位置存取資料和應用程式。Lets you give users in your organization access to data and applications from remote locations. 這項功能包括 Wi-Fi、VPN、電子郵件和憑證設定檔。This feature includes Wi-Fi, VPN, email, and certificate profiles. 如需詳細資訊,請參閱保護資料和站台基礎結構For more information, see Protect data and site infrastructure.

相容性設定Compliance settings

協助您評定、追蹤及補救組織中用戶端裝置的設定合規性。Helps you to assess, track, and remediate the configuration compliance of client devices in the organization. 此外,您可以使用合規性設定來設定一系列您所管理裝置上的功能和安全性設定。Additionally, you can use compliance settings to configure a range of features and security settings on devices you manage. 如需詳細資訊,請參閱確保裝置合規性For more information, see Ensure device compliance.

Endpoint ProtectionEndpoint Protection

為組織中的電腦提供安全性、反惡意程式碼及 Windows 防火牆管理。Provides security, antimalware, and Windows Firewall management for computers in your organization. 此區域包括使用下列 Windows Defender 套件功能進行管理及整合:This area includes management and integration with the following Windows Defender suite features:

  • Windows Defender 防毒軟體Windows Defender Antivirus
  • Microsoft Defender 進階威脅防護Microsoft Defender Advanced Threat Protection
  • Windows Defender 惡意探索防護Windows Defender Exploit Guard
  • Windows Defender 應用程式防護Windows Defender Application Guard
  • Windows Defender 應用程式控制Windows Defender Application Control
  • Windows Defender 防火牆Windows Defender Firewall

如需詳細資訊,請參閱 Endpoint ProtectionFor more information, see Endpoint Protection.


協助識別及監視資產。Helps you identify and monitor assets.

硬體清查Hardware inventory

收集組織中裝置硬體的詳細資訊。Collects detailed information about the hardware of devices in your organization. 如需詳細資訊,請參閱硬體清查簡介For more information, see Introduction to hardware inventory.

軟體清查Software inventory

收集和報告組織中用戶端電腦上所儲存檔案的資訊。Collects and reports information about the files that are stored on client computers in your organization. 如需詳細資訊,請參閱軟體清查簡介For more information, see Introduction to software inventory.

Asset IntelligenceAsset Intelligence

提供收集組織中清查資料及監視軟體授權使用情形的工具。Provides tools to collect inventory data and monitor software license usage in your organization. 如需詳細資訊,請參閱 Asset Intelligence 簡介For more information, see Introduction to Asset Intelligence.

內部部署行動裝置管理On-premises mobile device management

使用內部部署 Configuration Manager 基礎結構和裝置平台內建的管理功能來註冊及管理裝置。Enrolls and manages devices by using the on-premises Configuration Manager infrastructure with the management functionality built into the device platforms. (一般管理會使用個別安裝的 Configuration Manager 用戶端)。這項功能目前支援管理 Windows 10 企業版和 Windows 10 行動裝置版裝置。(Typical management uses a separately installed Configuration Manager client.) This feature currently supports managing Windows 10 Enterprise and Windows 10 Mobile devices. 如需詳細資訊,請參閱使用內部部署基礎結構來管理行動裝置For more information, see Manage mobile devices with on-premises infrastructure.

電源管理Power management

管理及監視組織中用戶端電腦的耗電量。Manage and monitor the power consumption of client computers in the organization. 設定電源計劃,並使用網路喚醒功能在上班時間以外進行維護。Configure power plans, and use Wake-on-LAN to do maintenance outside of business hours. 如需詳細資訊,請參閱電源管理簡介For more information, see Introduction to power management.

遠端控制Remote control

提供從 Configuration Manager 主控台遠端管理用戶端電腦的工具。Provides tools to remotely administer client computers from the Configuration Manager console. 如需詳細資訊,請參閱遠端控制簡介For more information, see Introduction to remote control.


從 Configuration Manager 主控台使用 SQL Server Reporting Services 的進階報告功能。Use the advanced reporting capabilities of SQL Server Reporting Services from the Configuration Manager console. 這項功能提供數百種預設報告。This feature provides hundreds of default reports. 如需詳細資訊,請參閱報告簡介For more information, see Introduction to reporting.

軟體計量Software metering

從 Configuration Manager 用戶端監視及收集軟體使用方式資料。Monitor and collect software usage data from Configuration Manager clients. 您可以使用此資料來判斷是否要在安裝軟體之後使用該軟體。You can use this data to determine whether software is used after it's installed. 如需詳細資訊,請參閱使用軟體計量監視應用程式使用量For more information, see Monitor app usage with software metering.