共用方式為

How to Block Configuration Manager Clients

  • 發行項

適用於: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

If a client computer is no longer trusted, the Configuration Manager administrator can block the client in the Configuration Manager 2007 console. Blocking applies to both native mode and mixed mode sites.

Blocked clients are ignored by the Configuration Manager 2007 hierarchy. This is especially useful for laptop computers or mobile devices that are lost or stolen, to help prevent attackers from using a trusted client to attack the site or the network.

When the client belongs to a native mode site, you can also use certificate revocation to help prevent communication from a computer or device that is no longer trusted.

For more information about blocking, see Determine If You Need to Block Configuration Manager Clients.

注意

   Clients accessing the site using the ISV Proxy certificate cannot be blocked. For more information about the ISV Proxy certificate, see the System Center Configuration Manager 2007 Software Development Kit (SDK).

Use the following procedure to block Configuration Manager 2007 clients.

To block Configuration Manager clients

  1. Open the Configuration Manager console in the primary site in which the client is assigned, and navigate to System Center Configuration Manager / Site Database / Computer Management / Collections.

    重要

    You must perform this procedure from the client's assigned site. This action cannot be performed from sites higher in the hierarchy.

  2. Locate the Configuration Manager 用戶端 to be blocked, right-click the client, and then click Block.

  3. In the Confirm Block dialog box, click Yes to block the client.

    注意

    To unblock a blocked client, right-click the client, and then click Unblock.

另請參閱

工作

How to Approve Configuration Manager Clients

概念

Determine If You Need to Block Configuration Manager Clients
Determine Whether You Need to Enable Certificate Revocation Checking (CRL) On Clients (Native Mode)
Configuration Manager Site Modes
About Client Approval in Configuration Manager
Overview of Configuration Manager Client Deployment

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email SMSdocs@microsoft.com.