Best Guide to Deploy SCCM Clients Using Group Policy

Prajwal Desai
Posted by Prajwal Desai
Deploy SCCM Clients Using Group Policy

This article details the steps to deploy SCCM clients using group policy (GPO). You can also upgrade SCCM client agents using group policy.

You can use different methods to install the Configuration Manager client software. This article describes each method, so you can learn which one works best for your organization.

Listed below are all the methods to install the SCCM client agents:

Microsoft recommends using the client push installation method to deploy SCCM clients in the setup. That’s because it is easy and can be used to automatically install the client on all discovered computers.

However, some organizations prefer to deploy SCCM clients using group policy. A GPO works best when you have Windows computers joined to an Active Directory domain.

If you are planning to deploy SCCM clients using group policy, you must uncheck the option “Enable Automatic site wide client push installation” under client push installation properties.

If this option is enabled then the SCCM client agents would get installed automatically on all the systems after its discovery.

To disable Automatic site wide client push installation:

  • Launch the Configuration Manager console
  • Go to Administration\Overview\Site Configuration\Sites
  • On the top bar, click Client Installation Settings and select Client Push Installation
  • On the Client Push Installation properties, uncheck “Automatic site wide client push installation“.
  • Click Apply and OK.
Disable Automatic site wide client push installation
Disable Automatic site wide client push installation

To create a GPO to deploy SCCM clients, you must have necessary permissions. I recommend testing the GPO on a few test machines first. If the SCCM client agent deployment GPO works, expand it to a larger set of computers.

Deploy SCCM Clients Using Group Policy

Let’s see the steps to create a group policy to deploy SCCM clients. Login to the domain controller machine or a member server installed with Group Policy Management console.

Launch the Windows Server Manager, click on Tools and select Group Policy Management.

In the GPMC console, right-click your domain and select Create a new policy. Specify the name as deploy SCCM clients using Group Policy.

Now right-click the new policy that you just created and select Edit.

Deploy SCCM Clients Using Group Policy
Deploy SCCM Clients Using Group Policy

In the Group Policy Management Editor, expand Computer Configuration, Policies and right click on Administrative Templates and click on Add/Remove Templates.

Deploy SCCM Clients Using Group Policy
Deploy SCCM Clients Using Group Policy

You can add new SCCM client agent templates by clicking on ADD. The Configuration Manager templates can be found in SMSSETUP\TOOLS\ConfigMgrADMTemplates.

You can also add it from <Drive>:Program Files\Microsoft Configuration Manager\tools\ConfigMgrADMTemplates. You need to add 2 templates ConfigMgrAssignment and ConfigMgrInstallation.

After you add both the templates, click on Close.

Add Configuration Manager Templates
Add Configuration Manager Templates

Expand Administrative Templates, Classic Administrative Templates, Configuration Manager, Configuration Manager Client.

Now on the right panel, we see both the Configuration Manager templates have been added. The state of these templates shows it’s not configured.

The next steps will cover the configuration part of the Configuration Manager Templates.

Deploying Configuration Manager 2012 R2 Clients Using Group Policy

Configure Configuration Manager Site Assignment

Right click on Configure Configuration Manager 2012 Site Assignment template and click edit. Click Enabled to enable the policy.

Under Options specify Assigned Site code, Site Assignment Retry Interval to 5 minutes, Site Assignment Retry Duration to 1 hour (You can also choose to leave the options to default except site code). Click OK.

Configure Configuration Manager Site Assignment
Configure Configuration Manager Site Assignment

Configure Configuration Manager Client Deployment Settings

Right click Configure Configuration Manager 2012 Client Deployment Settings and click on Enabled.

Under options specify the installation properties for CCMSetup file. If you provide client installation parameters on the command line, they modify the installation behavior.

In our case, I have used following installation command CCMSetup.exe SMSSITECODE=IND FSP=SCCM.PRAJWAL.LOCAL MP=SCCM.PRAJWAL.LOCAL

Click on OK.

Configure Configuration Manager Client Deployment Settings
Configure Configuration Manager Client Deployment Settings

Create New Package to Deploy SCCM Client Agent via GPO

In this section, we will create a new software installation package to deploy SCCM client agent. Under Computer Configuration expand Policies, Software Settings. Right click Software Installation and click New > Package.

Deploying Configuration Manager 2012 R2 Clients Using Group Policy

You have to specify or use the ccmsetup.msi as package. The ccmsetup.msi installer can be found in ConfigMgr_Media\SMS\SETUP\BIN\I386. Copy the ccmsetup.msi in a folder (Create a new folder on SCCM Server) and share it with permissions Read-only for Everyone.

Browse the file ccmsetup.msi to the folder that you created and Select the deployment method as Assigned. Click OK.

Deploying Configuration Manager 2012 R2 Clients Using Group Policy

When you click on Software installation, you should see the following details about the Configuration Manager client. The details include Package, its Version, Deployment Status and Source.

The deployment status for ConfigMgr client package is Assigned. Close the Group Policy Management Editor.

Deploying Configuration Manager 2012 R2 Clients Using Group Policy

Apply the Group Policy to OU

In the above steps we created a group policy to deploy SCCM clients. We also configured the ConfigMgr templates. The next step is to apply the group policy to computers.

You can choose to apply this policy at domain level or at OU level. If you apply it at domain level then every computer in your domain will get the SCCM client installation on next reboot.

I have created a OU called Windows Systems which consists of client computers. To link the policy to this OU, right click on OU Windows Systems, click Link an existing GPO, choose the GPO Deploy SCCM clients using Group Policy and click OK.

Deploy SCCM clients using Group Policy
Deploy SCCM clients using Group Policy

You need to perform gpupdate on domain controller first and then on client machines.

Testing the SCCM Client Agent Installation

The group policy to install SCCM clients is now applied to your computers. Reboot the client machine, and after you log in to the client machine the configuration manager client installation begins.

You can see the cmmsetup.exe *32 service running on the computer. This confirms the ConfigMgr client agent installation has begun.

Testing the SCCM Client Agent Installation
Testing the SCCM Client Agent Installation

This completes the steps to deploy SCCM clients using Group Policy. If you have any questions, let me know in the comments section.

Share This Article
Prajwal Desai
Posted by Prajwal Desai
Follow:
Prajwal Desai is a Microsoft MVP in Intune and SCCM. He writes articles on SCCM, Intune, Windows 365, Windows Server, Windows 11, WordPress and other topics, with the goal of providing people with useful information.
63 Comments