Microsoft Endpoint Configuration Manager (MECM)

View as Markdown

Community Platform

runZero integrates with Microsoft Endpoint Configuration Manager (MECM), formerly System Center Configuration Manager (SCCM), by importing data from the MECM MSSQL database. Syncing your MECM device data makes unmanaged devices on your network easier to find.

Getting started with MECM

To set up an integration with MECM:

  1. Identify or create a database user with read access to the MECM database.
  2. Configure the MECM credential in runZero.
  3. Choose whether to run the integration as a scan probe or connector task.
  4. Activate the integration to pull your data into runZero.

Step 1: Identify or create a database user for access to MECM

  1. Identify an existing database user with read access to the database.
  2. Alternatively, create a dedicated read-only database user for this integration. Microsoft’s documentation covers the details: Create a database user.

Step 2: Add the MECM database connection string to runZero

  1. Go to the Credentials page in runZero.
  2. Choose MECM Database Connection String from the list of credential types.
  3. Provide a name for the credential, like MECM.
  4. Provide the database connection string in one of these formats:
    • Server=host,port;Database=database-name;User Id=user-id;Password=password;
      With this format, the values should not contain a semicolon (;). You can use single or double quotes to escape special characters.
    • sqlserver://username:password@host/instance?database=value&param=value
  5. To let other organizations use this credential, select the Make this a global credential option. Otherwise, you can configure access per organization.
  6. Save the credential.

Step 3: Choose how to configure the MECM integration

You can run the MECM integration as either a scan probe or a connector task. A scan probe gathers integration data during a scan task. A connector task runs on its own, from the cloud or from one of your Explorers, and performs only the integration sync.

Step 4: Set up and activate the integration to sync data

With your MECM credential saved, set up the sync from MECM.

Step 4a: Configure the MECM integration as a connector task

A connection needs a schedule and a site. The schedule sets when the sync runs, and the site is where runZero creates any new assets.

  1. Activate a connection to MECM. You can reach every third-party connection from the integrations page, your inventory, or the tasks page.
  2. Choose the credential you added earlier. If it isn’t listed, make sure it has access to the organization you’re currently in.
  3. Enter a name for the task, like MECM Sync (optional).
  4. Choose the Explorer that runs this connector task (optional).
  5. Choose the site to add your assets to. runZero stores all newly discovered assets in this site.
  6. Enter a description for the task (optional).
  7. To leave out assets that runZero has not scanned, switch the Exclude unknown assets toggle to Yes. By default, the integration includes them.
  8. Schedule the sync to run once or on a recurring schedule. The schedule starts on the date and time you set.
  9. Activate the connection. The sync runs on the schedule you defined, and the Scheduled tasks page shows when the next sync will occur.

Step 4b: Configure the MECM integration as a scan probe

When you run the MECM integration as a scan probe, the runZero Explorer pulls your MECM devices into the runZero Console.

In a new or existing scan configuration:

  • Set the MECM option to Yes in the Probes and SNMP tab and change any default options as needed.
  • Set the correct MECM credential to Yes in the Credentials tab.

Step 5: View MECM assets

After a successful sync, go to your inventory to view your MECM assets. They show a Microsoft icon in the Source column.

To filter for MECM assets, try this query:

Click into an asset to see the attributes runZero gathered from MECM. To write your own queries, start with the search query syntax.

Updated