Windows Client Management

[revolutn]

Hi.

First, forgive me if this isn't strictly Networking, but everything necessary to make it work runs over the LAN or WAN MPLS link,so seemed better suited here than say Software for Windows where the best MP3 player might be being hotly debated & the type of people posting in here seem more Enterprise oriented discussion wise.

Background:
We are an all Windows Server (2008r2 w/ some 2003r2 lingering) all Windows client, XP or 7, all 32bit org.

Globally we utilize very old SMS 2003 for major system pushes.
But there's just 1 global admin who manages this process/system and he is not readily willing to push things that might be limited to a single AD OU.

My role is basically the proto-typical "Systems Administrator" for 4 sites (all remote to my office)
On avg I have about 100 client PC @ each site.
I have Full Desktop Administrative rights
I have full local back office, which is to say servers within my sites administrative access.
I have full #config level access for all the LAN related Cisco switches at my sites, but my access stops at the WAN routers / firewalls.

I do not have GLOBAL AD Domain Administrative level access, but again Administrative access for my Regions OU's. (Add delete modify join user & machine objects etc)

My background is decidedly more Front Office / Desktop support than Backoffice / Server support, but I know enough to be dangerous.

We use MDT 2012 for wim based lite touch deployment of the OS + standard apps.

Objective:
Find (ideally a fee / open source) Client management software (preferably agent-less but can use an agent if necessary, reliable & unobtrusive to the end user) that I can use to better support the client pc's within my AD OU scope.

Tasks I'd like to achieve: (Both at the granular & grouped or entire OU's level)
Ability to remotely UN install (unapproved) software
Ability to remotely INstall software
Ability to Update version of installed software
Better reporting options on Software & Hardware than our aged SMS2003 reporting gives me today.

I'm open to Linux usage for the Management Console Server if the project is well documented. (been reading some on opsi just not sure about it to be honest at the moment)
I've used Debian, Gentoo & Ubuntu for other personal projects that required Linux.

I have very little 'spare' time to spin up, configure and play with an overly complex system.

I'm not the greatest scripter in the world, a better CLI type; but can usually fake my way through it with enough Google searches to achieve the end result of what I want.

Anyone got a recommendation for this Quadracorn of a wish list?

TIA

Rev

 

[drebo]

Software install and update is built in to Group Policy. Just use that. Keeping users from installing unapproved software is easy: take away local admin rights on the computers (can be done via group policy.)

As for reporting, Spiceworks is "OK" but not great. It's clientless, as it uses WMI to monitor. Or you could use System Center Console, which is probably what I'd recommend. We use GFI MAX for remote monitoring of our managed clients. It works great.

 

[revolutn]

Software install and update is built in to Group Policy. Just use that. Keeping users from installing unapproved software is easy: take away local admin rights on the computers (can be done via group policy.)

As for reporting, Spiceworks is "OK" but not great. It's clientless, as it uses WMI to monitor. Or you could use System Center Console, which is probably what I'd recommend. We use GFI MAX for remote monitoring of our managed clients. It works great.

So.....all responses are appreciated, therefore I'm not being ungrateful, but:

I don't really have Global AD rights, which I tried to outline, but I know it was a bit wordy.

So anyways, I can't edit existing or create new Policies within AD, even for my OU's.

Thanks,
Rev

 

[revolutn]

No one uses Desktop Management software that is not SCCM?

 

[Udgnim]

Tasks I'd like to achieve: (Both at the granular & grouped or entire OU's level)

1) Ability to remotely UN install (unapproved) software
2) Ability to remotely INstall software
3) Ability to Update version of installed software
4) Better reporting options on Software & Hardware than our aged SMS2003 reporting gives me today.

SCCM, but that costs money

can try googling alternatives to SCCM

you could also perform 1-3 if you had Group Policy rights at the OU level

you can use Microsoft Assessment and Planning Toolkit for 4, but I'm sure there are better available tools

http://www.microsoft.com/en-us/download/details.aspx?id=7826

you can try throwing your question to sysadmin reddit if you haven't already

http://www.reddit.com/r/sysadmin/

 

[revolutn]

SCCM, but that costs money

can try googling alternatives to SCCM

you could also perform 1-3 if you had Group Policy rights at the OU level

you can use Microsoft Assessment and Planning Toolkit for 4, but I'm sure there are better available tools

http://www.microsoft.com/en-us/download/details.aspx?id=7826

you can try throwing your question to sysadmin reddit if you haven't already

http://www.reddit.com/r/sysadmin/

Thanks for the suggestions.

I had Googled that exact phrase even before posting, and the most I came up with was PUPPET, but it seemed decidedly Server oriented.
I haven't posted to Reddit, but I may have to.

Thanks
Rev