Deploying Applications To Users Using SCCM 2012 R2

62403

In this post we will look at the steps for deploying applications to users using SCCM 2012 R2. In SCCM 2012 R2, an application basically contains the files and information that are required to deploy software to a device. In one of my post that I had posted when I was deploying SCCM 2012 we had seen the steps for deploying applications to devices using SCCM 2012. Applications in Configuration Manager support user-centric management so that you can associate specific users with specific devices. Instead of having to remember the name of a user’s device, you can now deploy software to the user and to the device. This functionality can help you make sure that the most important software is always available on each device that a specific user accesses. If a user acquires a new computer, you can automatically install the user’s applications on the device before the user logs on.

If an application is deployed by SCCM 2012 R2 and has been installed on a device, the Configuration Manager always checks whether the application is present on the device or not. Let’s say if the application was uninstalled by the user then at the next evaluation cycle, Configuration Manager detects that the application is not present and re-installs it. This is one of the good feature I liked about Configuration Manager.

The re-evaluation interval for application deployments can be configured by using the Schedule re-evaluation for deployments client setting. The default value is every 7 days. You can also initiate this action from a Configuration Manager client computer by selecting the action Application Deployment Evaluation Cycle from the Actions tab of Configuration Manager in Control Panel.

In this post we will be deploying a simple application to the user and this application won’t install unless the SCCM administrator/approver approves it. In the below example I am creating a application for Adobe Reader and this will be deployed to the user group. You can take any application of your choice and follow the below screenshots. Enter the information about the application and choose the Install behavior as Install for User and click Next and complete the App creation wizard.

Deploying Applications To Users In SCCM 2012 R2

Since we will be deploying the application to the users, we will first create a group in active directory and add the user to that group. I have skipped the screenshots as it’s fairly simple to create a group and add user to it. Once you have done that, right click the User Collections and click Create User Collection.

Deploying Applications To Users In SCCM 2012 R2

Specify a name to the user collection and set the Limiting collection to All Users and User Groups. Click Next.

Deploying Applications To Users In SCCM 2012 R2

Now let’s create a query which will add the user group to the collection. Click Add Rule and select Query Rule. Specify a name for the query and Click Edit Query Statement.

Deploying Applications To Users In SCCM 2012 R2

On the Query Statement Properties window click on tab named Criteria and click on yellow icon. On the Criterion Properties window, set Attribute Class to User Resource, set Attribute to User Group Name. Set the Value as the name of the group that you created in your active directory. In this example BPO Users is the group that is created in active directory that contains user named Eric. Click OK and then click Next and complete the User Collection wizard.

Deploying Applications To Users In SCCM 2012 R2

In the Configuration Manager console, when we click User Collections, we see that the user collection BPO Users has been created.

Deploying Applications To Users In SCCM 2012 R2

Next we will deploy the application to the user collection. Right click the Adobe application and click Deploy.

Deploying Applications To Users In SCCM 2012 R2

Click Browse and choose the collection as BPO Users. Click Next.

Deploying Applications To Users In SCCM 2012 R2

Specify the Deployment Settings, choose Action as Install and Purpose as Available. Check box “Require administrator approval if users request this application“. When you check this option, the application will be available to the user but it cannot be installed without SCCM administrator/approver approving it. Click Next and complete the wizard.

Deploying Applications To Users In SCCM 2012 R2

We have deployed the application to the user. Click Close.

Deploying Applications To Users In SCCM 2012 R2 Snap10

The software has been deployed to the user group. Let’s login with the user account that is member of BPO Users group. Launch the Software Center and click on Find additional applications from the Application Catalog. When you click the link you will be prompted for user authentication, provide the username and password of logged in user account.

Deploying Applications To Users In SCCM 2012 R2

When you click Application Catalog, we see the Adobe application over there. There is no Install option seen because during our application deployment we have defined that the user must first request the SCCM administrator/approver for installing the software. So click on REQUEST.

Deploying Applications To Users In SCCM 2012 R2

You can send the reason for application request so that administrator/approver can know why exactly you need the software. Click on SUBMIT.

Deploying Applications To Users In SCCM 2012 R2

The approval request has now been sent to the administrator/approver. Let’s go back to Configuration Manager console and check it.

Deploying Applications To Users In SCCM 2012 R2

In the Configuration Manager console, under Application Management, click Approval Requests. We see that there is one request from the user Eric. To approve the application, right click the application and click Approve.

Deploying Applications To Users In SCCM 2012 R2

On the Application Request window the administrator/approver can see user comments and even add the comments. Click on OK.

Deploying Applications To Users In SCCM 2012 R2

On the client machine refresh the link once and we see the INSTALL option. Also under REQUIRES APPROVAL we see its No, that means the application has been approved for installation.Click on Install to install the application.

Deploying Applications To Users In SCCM 2012 R2

The application installation has started and it will be installed.

Deploying Applications To Users In SCCM 2012 R2

You can always check you application requests by clicking on My Application Requests.

Deploying Applications To Users In SCCM 2012 R2

  • Codi Campbell

    Prajwal,

    How’s come it is necessary to search for ‘find additional applications from the application catalog’ rather than reader being within the ‘available software’ category? Is this due to the need for administrator approval? Is deployment to a device collection require any additional steps other than choosing device collection rather than user collection?

    • Hi Codi,
      When you deploy the applications to the device collection you would see the application in the Software Center. And you will not find the option “Require administrator approval if users request this application” when you are deploying apps to device collection.

      When it comes to user collection you can specify the application to be approved by administrator first before the user installs it. The application deployed to user collection will be found in the Application Catalog > Application Requests. So once the user installs the application from there, it can now be seen under Software Center.

      I didn’t get the last part of you question -“Is deployment to a device collection require any additional steps other than choosing device collection rather than user collection? ”

  • Naveen Punj

    Hi prajval / codi

    No codi, it dont need any additional efforts to deploy an application to device collection other than selecting system resources or directly adding machines to the collection.
    The idea behind this post is to show end result I.e. deploying to user resource will target application to go to application catalag while deploying to system resource will target it to software centre, previously known as RAP In sccm 2007.
    Again our motive is not to make user request the s/w ALWAYS before installing it coz there is option available while creating an application which can help user to directly install application from application calalog. But some licensed based applications need approval.

    Nice post prajval.. really nice to read it.

  • Sion Nghoshi

    Hi Prajwal,

    i am successfully deploying my applications to my devices but i see it takes about 30 minutes before the client starts installing. whether its a small app like vlc or firefox or winzip. is there somewhere i can check so it starts quickly? or thats how its suppose to ?

    Thanks

    • @Sion – Have you configured BITS in your client device setttings ? If it is not configured then there should not be any issue related to BITS, if you have configured BITS then let me know what are the settings..

      The next thing you need to check is client policy polling interval (client device settings), it is set to 60 minutes by default, set it to 5 minutes.

      Also, open the execmgr.log file on the client machine to see if the application is taking time to download from DP.

      • Sion Nghoshi

        Hi Prajwal,

        no i did not configure BITS. and yes the client policy polling interval is set to 5 mins. but still the same.
        i some how dont really understand the execmgr.log on the client machine. there’s little data.

        like i said it is installing its just that it takes more than 35 mins before you see anything on the client, even before coping the files to the client device.

    • Attached Screenshot should help you..

  • Vikram

    Hello Prajwal,

    I cannot get my clients to populate in the new user collection I have made.
    The user account is definitely a part of the AD group I typed in when creating the colleciton.

    Any hints to troubleshoot please?

    • Are you using a query to group the clients to a collection ?.

  • Davood

    Hello

    in software center i have a trouble.
    application catalog “Cannot Connect to the application server”
    ?

    • @Davood – Do you see any errors in SMSAWEBSVCSetup.log file ?

      • Davood

        Yes, Error Code: 125

        ====================================================================
         SMSAWEBSVC Setup Started….
         Parameters: C:Program FilesMicrosoft Configuration Managerbinx64rolesetup.exe /install /siteserver:CLOUD-PC SMSAWEBSVC 0
         Installing Pre Reqs for SMSAWEBSVC
         ======== Installing Pre Reqs for Role SMSAWEBSVC ========
         Found 1 Pre Reqs for Role SMSAWEBSVC
         Pre Req SqlNativeClient found.
         SqlNativeClient already installed (Product Code: {8F2916BE-1821-487F-8139-22906D4837DF}). Would not install again.
         Pre Req SqlNativeClient is already installed. Skipping it.
         ======== Completed Installation of Pre Reqs for Role SMSAWEBSVC ========
         Installing the SMSAWEBSVC
         Passed OS version check.
         IIS Service is installed.
         Checking whether IIS ASP.NET component is installed
         IIS component ASP.NET is not installed. Please install it.
         Installation Failed. Error Code: 125
         ~RoleSetup().
         ====================================================================

        • Checking whether IIS ASP.NET component is installed
           IIS component ASP.NET is not installed. Please install it.

          You have not installed ASP.NET. Refer this post and install the component.
          http://prajwaldesai.com/installing-prerequisites-for-configuration-manager-2012-r2/

          • Davood

            Error still exists.
            This is my last log in SMSAWEBSVCSetup.log file:

            SMSAWEBSVC Setup Started….
             Parameters: C:Program FilesMicrosoft Configuration Managerbinx64rolesetup.exe /deinstall /siteserver:CLOUD-PC SMSAWEBSVC 0
             Deinstalling the SMSAWEBSVC
             CWmi::Initialize(): CoCreateInstance(WbemLocator) failed. – 0x800401f0
             Enabling MSI logging. awebsvc.msi will log to C:Program FilesMicrosoft Configuration ManagerlogsawebsvcMSI.log
             Deinstalling SMSAWEBSVC, with product code {288EF826-5D73-4301-B5FE-5EAF0873AD69}
             AWEBSVCNAME=”CMApplicationCatalogSvc” SMSSSLSTATE=0 AWEBSVCPATH=”C:Program FilesSMS_CCMCMApplicationCatalogSvc” AWEBSVCLOGMAXSIZE=8000000
             SMSAWEBSVC deinstall exited with return code: 0
             Deinstallation was successful.
             Removing AWebSvc Registry.
             ~RoleSetup().

          • Davood

            Error still exists

            this is my last log in SMSAWEBSVCSetup.log :

             SMSAWEBSVC Setup Started….
             Parameters: C:Program FilesMicrosoft Configuration Managerbinx64rolesetup.exe /deinstall /siteserver:CLOUD-PC SMSAWEBSVC 0
             Deinstalling the SMSAWEBSVC
             CWmi::Initialize(): CoCreateInstance(WbemLocator) failed. – 0x800401f0
             Enabling MSI logging. awebsvc.msi will log to C:Program FilesMicrosoft Configuration ManagerlogsawebsvcMSI.log
             Deinstalling SMSAWEBSVC, with product code {288EF826-5D73-4301-B5FE-5EAF0873AD69}
             AWEBSVCNAME=”CMApplicationCatalogSvc” SMSSSLSTATE=0 AWEBSVCPATH=”C:Program FilesSMS_CCMCMApplicationCatalogSvc” AWEBSVCLOGMAXSIZE=8000000
             SMSAWEBSVC deinstall exited with return code: 0
             Deinstallation was successful.
             Removing AWebSvc Registry.
             ~RoleSetup().

            • 1) Uninstall both Application Catalog roles
              2) Check SMSPORTALWEBSetup.log and SMSAWEBSVCSetup.log in the Configuration Manager folder to track the uninstall progress
              3) Install both Application Catalog roles with defaults
              Run %windir%Microsoft.NETFramework64v4.0.30319aspnet_regiis.exe /-i –enable

              • Davood

                Than you so much, fixed.
                you’re my angel !

  • Sharda Giri

    Hi Prajwal… Is it possible to enable mail trigger when user request for application..can we get the mail as well instead of seeing in configuration manager….

  • Srilal

    Without using Query Rule, cant we use Direct Rule to AD Group

  • Serdar

    Hello Prajwal

    Can you help me?

    I can not find solution to such a problem

    Thenk you

    https://uploads.disquscdn.com/images/f0ec0e1327425a80154867eed5162d0f15eab0f02b65fbeefc4806270dff44b9.jpg

    • I see the role was uninstalled successfully. Is it the error in the log file you are concerned about ?.

      • Serdar

        thank you

        I found an error

  • Serdar

    Hello Prajwal

    I have a different problem

    Although I do not see anything sccm successful updates.

    Thank you

    https://uploads.disquscdn.com/images/965c7eabec0e2ced7e4d3358c43850ae87ff6743674322651b612406bdb3a545.jpg

  • Peter JOHN

    Hello Prajwal,
    thanks for you blog
    I have a problem with the approval request.
    When I try to get an application, I write some text to explain why I want this software and then I click submit, I ve got an error, Impossible to send ou to ask this software
    Have you already see this message ?
    Bye

  • John

    Hi,

    What would the solution be for deploying to Users but only to a single computer they access?
    For example we wouldn’t want to deploy to them on a conference computer.

    • That’s the issue because when you deploy an app to a user, wherever the user logs in the app is available to the user. I don’t think restricting a user to login to only one computer is something that cannot be done through SCCM.

  • Creed Cordonier

    Deploy to a Device Collection, not a User Collection.

  • Chafik Kasmi

    Hello,
    I have a question related to application deployment:
    In my case I deployed previously an application through the OS capture, so the application is installed with OS deployment.

    This year, I received a new version of the application which need to be installed on over 1000 workstations.

    The application provider ask to uninstall the previous application before reinstalling the new one.

    I know sccm 2012r2 include the superseded property. But I can not find the old application ???

    I want to know how to proceed?

    Thank you

  • Ben Copeland

    Hello all, I am fairly new to SCCM 2012 and my question is for deployment.

    Now what I would like to do is set up a job to Deploy 3rd party software (custom application) of to all clients in a perpendicular group, but what i would like to do is deploy it out to everyone but not install for 2 weeks. My thoughts here are that everyone in my domain will get the software but it will install all at the same time. is that possible in SCCM 2012 ?

  • Ian

    Only choose the “Install behavior” as “Install for user” option if you want the application to run with the current logged-on user’s credentials. If the users does not have administrator right, the application may not install.

  • Ben Copeland

    ello all, I am fairly new to SCCM 2012 and my question is for deployment.
    Now what I would like to do is set up a job to Deploy 3rd party software (custom application) of to all clients in a perpendicular group, but what i would like to do is deploy it out to everyone but not install for 2 weeks. My thoughts here are that everyone in my domain will get the software but it will install all at the same time. is that possible in SCCM 2012 ?