What is Microsoft Configuration Manager?

Microsoft Configuration Manager first appeared in 1994 as Microsoft Systems Management Server (SMS), offering tools to centrally manage software distribution and inventory across Windows networks. But is it still the same product today?

What is Microsoft Configuration Manager?

At its core, Configuration Manager helps organizations deploy applications and apply configuration and security updates to both laptops, desktops and servers. Whilst mobile devices, such as iOS and Android, are supported in a limited fashion, Microsoft Intune is more suited to this type of device management. 

Key features

Configuration Manager is one of the most feature-packed products Microsoft offers. Each feature area includes prerequisites that may affect how you design and implement your management hierarchy.

Co-management

Co-management bridges your existing on-premises deployment with Microsoft Intune. This setup allows you to concurrently manage Windows devices through both Configuration Manager and Intune. It unlocks cloud-based features (like Conditional Access) while preserving your current on-premises infrastructure.

If you’re not ready to fully migrate, co-management is a practical way to start leveraging Intune’s cloud benefits alongside Configuration Manager.

Cloud-attached management

Features like the Cloud Management Gateway and Microsoft Entra ID integration let you manage Internet-based clients without complex on-premises network configurations that extend your site servers to the internet. Devices remain under your watch whether they’re on the corporate network or working remotely, ensuring consistent policy enforcement and compliance.

Application management

Configuration Manager supports a broad range of application deployment scenarios. Administrators can deliver and update everything from Microsoft 365 Apps to line-of-business apps.

Operating system deployment (OSD)

Organizations can leverage OSD to deploy both new (bare-metal) devices, or refresh existing ones. This capability is significantly more flexible than Microsoft Intune’s Windows Autopilot capability, and allows administrators to build complex Task Sequences that cover everything from Windows security hardening, through to application installation.

Software updates

Microsoft’s patch management is built on technologies like Windows Server Update Services (WSUS) and Delivery Optimization. Configuration Manager ties these services together, letting admins schedule, distribute, and monitor updates enterprise-wide.

Company resource access

By configuring Wi-Fi, VPN, and certificate profiles, Configuration Manager helps users securely access corporate data from virtually anywhere. These profiles ensure consistent settings across devices, increasing security, and improving user productivity.

Compliance settings

Configuration Manager’s compliance engine assesses and remediates device configurations. Organizations use it to enforce security baselines, such as password complexity, encryption, or antivirus standards. Non-compliant devices can be flagged for administrative follow-up.

Endpoint protection

Within the Microsoft Defender ecosystem, Configuration Manager provides antimalware, firewall, and exploit protection settings. This single platform enables you to standardize security policies across devices without juggling multiple tools.

Integration with Microsoft Defender for Endpoint offers advanced threat detection and mitigation capabilities, however newer features are being increasingly reliant on management via Microsoft Intune, or Microsoft Defender for Endpoint itself!

Inventory and asset management

Configuration Manager tracks both hardware and software inventory, giving admins a clear picture of what’s installed and where. Asset Intelligence extends this functionality to help monitor software licenses. This end-to-end insight supports better budgeting, compliance, and strategic planning, something which is notably lacking within the Microsoft Intune solution.

Power management

Organizations can reduce energy costs and carbon footprints by managing power settings through Configuration Manager. Configure power plans, enable Wake-on-LAN for maintenance tasks, and monitor power consumption across the fleet.

Remote control

From the Configuration Manager console, administrators can remotely view or control client devices. This feature makes troubleshooting easier, especially for distributed teams or remote employees.

Reporting

Thanks to SQL Server Reporting Services (SSRS) integration, admins get hundreds of out-of-the-box reports covering compliance, deployment status, and usage analytics. Custom dashboards can also be built to visualize key metrics in real time.

Software metering

If you’re wondering whether certain applications get used after deployment, software metering can provide the answers. This data helps organizations optimize their licensing costs and can guide decisions about which apps are truly essential to users, and which simply aren’t being used.

Configuration Manager user interfaces

Configuration Manager console

The Configuration Manager console is the command center for everything from deploying patches to configuring device compliance. Admins can install the console on multiple machines and control visibility or permissions with role-based administration. This approach reduces the risk of human error by limiting which parts of the hierarchy each admin can access.

Software Center

On Windows devices, the Software Center app provides end users with a self-service portal to install applications and updates administrators deploy. This is most similar to the Intune Company Portal, if you’re familiar with Microsoft Intune. This helps reduce tickets to IT for routine requests, and gives users visibility on their device compliance and status.

The history of Microsoft Configuration Manager

Microsoft Configuration Manager first appeared way back in 1994 as Microsoft Systems Management Server (SMS), offering tools to centrally manage software distribution and inventory across Windows networks. Since then, SMS has evolved through multiple releases, adding features such as patch management and OS deployment.

In 2007, Microsoft rebranded SMS as System Center Configuration Manager (SCCM), bringing it into the wider Microsoft System Center suite of products. At the same time, new features were added to expand its capabilities even further for enterprise-level device and application management.

At some point, Microsoft Marketing got involved and decided that both Configuration Manager and Microsoft Intune deserved to be rebranded as Microsoft Endpoint Manager, and whilst this foray into the “MEM” moniker was short-lived, it left administrators struggling to decide if the product was called “Microsoft Endpoint Manager Configuration Manager” (MEMCM), or just “Microsoft Endpoint Configuration Manager” (MECM).

Configuration Manager is now part of the Microsoft Intune family of products. It remains a robust, on-premises solution for managing devices and applications across your organization’s environment. By unifying Configuration Manager with the rest of the Intune suite, Microsoft simplifies licensing and eases the transition to cloud-powered management, allowing organizations to gradually adopt modern capabilities without losing existing Configuration Manager investments.

Configuration Manager is here to stay

Configuration Manager remains a cornerstone for on-premises device and application management, even as more organizations embrace cloud-based services. Whilst Microsoft is heavily investing in Microsoft Intune, Microsoft Entra, and Copilot, development and support for Configuration Manager has continued.

By integrating with Microsoft Intune and other Microsoft 365 solutions, organizations can unlock co-management, extend administrative reach beyond the traditional network, and take advantage of the latest features. From application deployment to power management and robust reporting, Configuration Manager continues to offer a comprehensive solution that helps organizations streamline IT operations and empower their workforce.