Overview of Microsoft Endpoint Configuration Manager (MECM)

In this article

Microsoft Endpoint Configuration Manager (MECM) is a comprehensive management solution for computer systems utilizing Microsoft Windows operating systems. MECM also provides some management capabilities for Linux, Mac OS and mobile devices.

Benefits to the campus community

With MECM, IT technicians proactively manage the entire lifecycle of all Windows-powered devices. This includes deploying and maintaining systems and software, responding to security threats, distributing settings, and analyzing inventory data.

Other benefits of MECM include:


Services available through MECM

The following services will be available to Windows-based machines joined to the campus Active Directory (ad.umd.edu):

Endpoint Protection

MECM Endpoint Protection is a centrally managed enterprise solution for providing antivirus, antimalware and security protection to managed Windows computers. Endpoint Protection provides real-time protection, automatic remediation, and notification for viruses, malware, spyware and rootkits. Antivirus definition files are updated by Microsoft up to three times a day and then delivered to clients via MECM.

Software Updates

MECM's Software Updates feature provides a set of tools and resources that can help with the complex tasks of managing, deploying, tracking, and monitoring Microsoft Windows updates to client computers in the enterprise. DIT will utilize MECM Software Updates to deploy monthly security and critical Windows Updates, and zero-day hotfixes, to managed Windows computers.

Hardware Inventory

MECM can detect detailed information about the hardware of managed devices, providing in-console inspection as well as emailed reports. Hardware inventory can query Windows for WMI class information about the physical hardware, operating system configuration and user accounts. Some software information can be returned from the Control Panel's Programs and Features menu and applications installed by Windows Installer.

Remote Assistance/Remote Control

MECM provides tools to remotely administer client computers from the Configuration Manager console. Remote Assistance leverages the Windows feature, requests a session with the currently logged-on user and allows for in-session chat. Remote Control is an MECM console feature allowing you to take control of a managed computer. Remote Control allows administrators providing assistance to see what the user sees and perform actions using the logged-on user's credentials.


MECM provides a set of tools and resources that help you use the advanced reporting capabilities of SQL Server Reporting Services from the Configuration Manager console. MECM provides more than 450 reports out of the box that can be viewed in the console or emailed in various documentation formats.

Operating System Deployment (OSD)

MECM provides administrators with the capability of deploying images and configurations to computers under their management. In other words, OSD allows administrators a mechanism to redo the software configuration for machines managed by MECM.

Application Deployment

MECM provides administrators with the capability of deploying applications to computers that are managed in MECM. Whether it's a new application or update, Application Deployment provides the mechanism to install software.

If you have any questions about MECM, please contact winmac-request@umd.edu.