ConfigMgr Optimization Options for Remote Workers | SCCM | VPN

Let’s learn more about ConfigMgr Optimization Options for Remote Workers. Microsoft introduced a new set of ConfigMgr Management Insights called Optimize for Remote Workers. The new set of management insights is only available with the SCCM production version 2006.

SCCM Patch Software Update Deployment Process Guide ->Starting in version SCCM 1806, deploy software updates to devices without downloading and distributing content to distribution points. This setting is beneficial when dealing with extensively updated content.

Management Insights

ConfigMgr Management Insights helps to gain valuable insights into the current state of the ConfigMgr environment. The Management insights are based on data analysis in the site database (SQL). 

• \Administration\Overview\Management Insights\All Insights

Click on Optimize for remote workers option

• \Administration\Overview\Management Insights\All Insights\Optimize for remote workers

Define VPN Boundary Groups

The management insights rule confirms whether you have created a VPN boundary. In my scenario (as you can see in the above screenshot), I already made a VPN boundary group and, hence, have a green tick mark with the Define VPN boundary rule.

The following post explains more details about the VPN boundary creation: ConfigMgr VPN Boundary Setup Process Explained | SCCM.

Configure VPN-connected clients to prefer cloud-based content sources

The management insights rule confirms whether you have optimized the remote worker solution. When you have a remote branch office with a faster internet link, the following option, “Prefer cloud-based sources over on-premise sources”, is for you.

This should help you prioritize cloud content and reduce VPN bandwidth issues. You can run the following management insights rule to confirm whether the boundary group configurations are optimized for VPN/remote work scenarios.

• Configure VPN-connected clients to prefer cloud-based content sources
• Click on the Review Actions button.

Enable the following option from Boundary Groups.

• Prefer cloud-based sources over on-premise sources
• Click OK

Progress status is changed to Completed for the ConfigMgr Management Insights rule.

Disable peer to peer content sharing for VPN connected clients

The SCCM management insights rule “Disable peer-to-peer content sharing for VPN connected clients” checks and confirm whether you have optimized the remote worker solution or not.

The following configuration helps to prevent unnecessary peer-to-peer traffic via VPN channels that don’t benefit the remote clients to have faster downloads. So it’s wise to disable peer-to-peer content transfer in remote worker/VPN scenarios.

• Check the option – Disable peer to peer content sharing for VPN connected clients

Remove Allow peer downloads in this boundary group option from

Progress status is changed to Completed for the ConfigMgr Management Insights rule.

Resources

• ConfigMgr Management Insights – https://docs.microsoft.com/en-us/sccm/core/servers/manage/management-insights
• Configuration Manager production version 2006
• VPN Bandwidth Control via BITs Throttling for SCCM DP | Client

Author