Microsoft Configuration Manager

https://learn.microsoft.com/en-us/intune/configmgr/
Admin
Microsoft Configuration Manager is an enterprise management solution for deploying, updating, and...
Tokens:1,327,173
Snippets:20,157
Trust Score:10
Update:2 months ago
Show doc for...
Tokens:
Raw
### Install Configuration Manager client via command line

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/clients/deploy/deploy-clients-to-windows-computers

Example command for installing the client with specific internet-based management parameters.

```text
CCMSetup.exe /source: D:\Clients /UsePKICert CCMHOSTNAME=server1.contoso.com SMSSIGNCERT=siteserver.cer SMSSITECODE=ABC FSP=server2.contoso.com CCMALWAYSINF=1 CCMFIRSTCERT=1
```

--------------------------------

### Run Configuration Manager Setup

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/servers/deploy/configure/configure-aoag

Execute the setup executable from the site installation folder to begin site maintenance.

```text
\BIN\X64\setup.exe
```

--------------------------------

### Cloud management gateway ccmsetup command example

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/clients/deploy/deploy-clients-cmg-azure

A specific command-line example for installing the client using a cloud management gateway with sample values.

```bash
ccmsetup.exe /mp:https://CONTOSO.EASTUS.CLOUDAPP.AZURE.COM/CCM_Proxy_MutualAuth/72186325152220500 CCMHOSTNAME=CONTOSO.EASTUS.CLOUDAPP.AZURE.COM/CCM_Proxy_MutualAuth/72186325152220500 SMSSITECODE=ABC
```

--------------------------------

### Install Configuration Manager client via CMG

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/get-started/capabilities-in-technical-preview-1806

Command-line example for installing the client using required properties for CMG, Microsoft Entra ID authentication, and intranet roaming.

```bash
ccmsetup.exe CCMHOSTNAME=CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72186325152220500 SMSSiteCode=ABC AADCLIENTAPPID=7506ee10-f7ec-415a-b415-cd3d58790d97 AADRESOURCEURI=https://contososerver SMSMP=https://mp1.contoso.com
```

--------------------------------

### ccmsetup command-line properties

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/clients/manage/azure-ccmsetup

Example command-line properties used for installing the Configuration Manager client over the internet.

```text
CCMHOSTNAME="CMG.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72186325152220500" SMSSITECODE="MEM"
```

--------------------------------

### Configure BitLocker with TPM and Startup Key

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/properties

Example configuration for setting BitLocker drive size, installation method, and key storage location.

```ini
[Settings] Priority=Default  [Default] BDEInstallSuppress=NO BDEDriveLetter=S: BDEDriveSize=2000 BDEInstall=TPMKey BDERecoveryKey=AD BDEKeyLocation=C:
```

--------------------------------

### Example manifest.xml Implementation

Source: https://learn.microsoft.com/en-us/intune/configmgr/develop/core/servers/console/console-extension-register

A concrete example of a manifest.xml file defining a node and an action extension.

```XML
<CustomExtensionManifest ExtensionID="808b9ce3-e574-49be-82be-64ed35d800c5" Name="Nice Console Node and Console Action Extension" Description="Very Useful Extension" Version="1.1" Author="Me">
	<Deployments>
		<NodeExtensionDeployment ParentNode="d61498cb-7b3f-4748-ae3e-026674fb0cbd">
			<FileList>
				<File Name="Test.xml">
					<Hash Algorithm="sha256">543F2947AEA734B6833F275091AC6A159C0FCD341373D6E53062E37281B602B3</Hash>
				</File>
			</FileList>
		</NodeExtensionDeployment>
      <ActionExtensionDeployment ParentNode="172d85e7-bb7a-4479-a6a2-768f175b75cb">
        <FileList>
          <File Name="Test2.xml">
            <Hash Algorithm="sha256">C60FB69B86BF9B2E924FF272292CA2C97864D636B8190C95DC926049651A002E</Hash>
          </File>
        </FileList>
      </ActionExtensionDeployment>
	</Deployments>
</CustomExtensionManifest>
```

--------------------------------

### CustomSettings.ini for ZTI Deployment

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example configuration for Zero Touch Installation (ZTI) within Configuration Manager, demonstrating priority settings and custom properties.

```ini
[Settings]
Priority=Default, MACAddress
Properties=CustomProperty

[Default]
OSInstall=Y
ScanStateArgs=/v:5 /o /c
LoadStateArgs=/v:5 /c /lac
UserDataLocation=NONE

[00:0F:20:35:DE:AC]
CustomProperty=TRUE

[00:03:FF:FE:FF:FF]
CustomProperty=FALSE
```

--------------------------------

### Start Method

Source: https://learn.microsoft.com/en-us/intune/configmgr/develop/reference/core/migration/sms_migrationjob-server-wmi-class

Starts the migration job.

```APIDOC
## Start Method

### Description
Starts the migration job.

### Method
Start
```

--------------------------------

### Start the Deployment Wizard

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Command to initiate the Deployment Wizard from a deployment share.

```VBScript
cscript litetouch.vbs
```

--------------------------------

### CustomSettings.ini Configuration Examples

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Examples showing the evolution of the CustomSettings.ini file from a default template to a customized version with target-specific properties.

```ini
[Settings]
Priority=Default
Properties=MyCustomProperty

[Default]
OSInstall=Y
ScanStateArgs=/v:5 /o /c
LoadStateArgs=/v:5 /c /lac
```

```ini
[Settings]
Priority=Default
Properties=MyCustomProperty

[Default]
OSInstall=Y
ScanStateArgs=/v:5 /o /c
LoadStateArgs=/v:5 /c /lac
UserDataLocation=NONE
```

```ini
[Settings]
Priority=Default, MACAddress
Properties=MyCustomProperty

[Default]
OSInstall=Y
ScanStateArgs=/v:5 /o /c
LoadStateArgs=/v:5 /c /lac
UserDataLocation=NONE

[00:0F:20:35:DE:AC]
MyCustomProperty=TRUE

[00:03:FF:FE:FF:FF]
MyCustomProperty=FALSE
```

--------------------------------

### CustomSettings.ini Configuration Example

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of the CustomSettings.ini file after the Configure DB Wizard has finished, showing various SQL server connection and table mapping sections.

```ini
[Settings]
Priority=CSettings, CPackages, CApps, CAdmins, CRoles, Locations, LSettings, LPackages, LApps, LAdmins, LRoles, MMSettings, MMPackages, MMApps, MMAdmins, MMRoles, RSettings, RPackages, RApps, RAdmins, Default
Properties=MyCustomProperty

[Default]
OSInstall=Y

SkipCapture=NO
SkipAdminPassword=YES
SkipProductKey=YES

[CSettings]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=ComputerSettings
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR

[CPackages]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=ComputerPackages
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR
Order=Sequence

[CApps]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=ComputerApplications
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR
Order=Sequence

[CAdmins]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=ComputerAdministrators
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR

[CRoles]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=ComputerRoles
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR

[Locations]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=Locations
Parameters=DefaultGateway

[LSettings]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=LocationSettings
Parameters=DefaultGateway

[LPackages]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=LocationPackages
Parameters=DefaultGateway
Order=Sequence

[LApps]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=LocationApplications
Parameters=DefaultGateway
Order=Sequence

[LAdmins]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=LocationAdministrators
Parameters=DefaultGateway

[LRoles]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=LocationRoles
Parameters=DefaultGateway

[MMSettings]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=MakeModelSettings
Parameters=Make, Model

[MMPackages]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=MakeModelPackages
Parameters=Make, Model
Order=Sequence

[MMApps]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=MakeModelApplications
Parameters=Make, Model
Order=Sequence

[MMAdmins]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=MakeModelAdministrators
Parameters=Make, Model

[MMRoles]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=MakeModelRoles
Parameters=Make, Model

[RSettings]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=RoleSettings
Parameters=Role

[RPackages]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=RolePackages
Parameters=Role
Order=Sequence

[RApps]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=RoleApplications
Parameters=Role
Order=Sequence

[RAdmins]
SQLServer=R33-dep-01
Instance=R33instance
Database=AdminDB
Netlib=DBNMPNTW
SQLShare=Client
Table=RoleAdministrators
Parameters=Role
```

--------------------------------

### BootStrap.ini Configuration Example

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Standard BootStrap.ini file structure generated by the Deployment Workbench for a deployment share.

```ini
[Settings]
Priority=Default

[Default]
DeployRoot=\\NYC-MDT-01\Distribution$
```

--------------------------------

### Example CustomSettings.ini Configuration

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Configuration file demonstrating how to reference a user exit script and assign a function return value to a property.

```ini
[Settings]
Priority=Default

[Default]
OSInstall=Y
TaskSequenceID=#SetTaskSequence("%MEMORY%")#
UserExit=Z-RAMTest.vbs

UserDataLocation=NONE
SkipCapture=YES
SkipAdminPassword=NO
SkipProductKey=YES
```

--------------------------------

### Correct Partition Creation Order

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of a valid partition sequence where logical partitions follow the extended partition directly.

```Console
Partition 1: Primary
Partition 2: Extended
Partition 3: Logical
Partition 4: Logical
Partition 5: Primary
Partition 6: Primary
```

--------------------------------

### Assign Values to Properties

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of assigning configuration arguments to a property without using quotation marks.

```ini
/v:5 /c /lac
```

--------------------------------

### Example CustomSettings.ini for MDT SQL Query

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

This configuration demonstrates how to define SQL connection properties and query parameters within the CustomSettings.ini file.

```ini
[Settings]
Priority=CSettings, Default

[Default]
OSInstall=YES

[CSettings]
SQLServer=NYC-SQL-01
Instance=SQLEXPRESS
Database=MDTDB
Netlib=DBNMPNTW
SQLShare=SQL$
Table=ComputerSettings
Parameters=UUID, AssetTag, SerialNumber, MacAddress
ParameterCondition=OR
```

--------------------------------

### Incorrect Partition Creation Order

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of an invalid partition sequence where logical partitions are not placed immediately after the extended partition.

```Console
Partition 1: Primary
Partition 2: Extended
Partition 3: Primary
Partition 4: Logical
Partition 5: Logical
Partition 6: Primary
```

--------------------------------

### Customized CustomSettings.ini Configuration

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

An example of the CustomSettings.ini file after being modified by the New Deployment Share Wizard, including additional properties for deployment automation.

```ini
[Settings]
Priority=Default
Properties=MyCustomProperty

[Default]
OSInstall=Y
ScanStateArgs=/v:5 /o /c
LoadStateArgs=/v:5 /c /lac
UserDataLocation=NONE
SkipCapture=NO
SkipAdminPassword=YES
SkipProductKey=YES
```

--------------------------------

### Specify application packages in CustomSettings.ini

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Use this format to define multiple application packages for installation during a Configuration Manager deployment.

```ini
PACKAGES001=DEP0002B:Install Office 2007
PACKAGES002=DEP00011:Install Office Communicator
```

--------------------------------

### Import ZTIUtility Module

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Load the ZTIUtility module at the start of your script to enable TSENV and TSENVLIST drives for testing and future compatibility.

```powershell
Import-Module `.\ZTIUtility.psm1`
```

--------------------------------

### DriverGroups.xml Excerpt

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

An example of the XML structure used to define a driver group within the DriverGroups.xml file.

```xml
<groups>
...
<group_quid="{e5143c1c-24e4-466d-9b56-b0db693c8619}" enable="True">
   <Name>WinPEAndFullOS</Name>
...
   <Member>{1eca45a5-d7ef-475a-bb0d-7f7747f16b3a}</Member>
```

--------------------------------

### Define Custom Properties in CustomSettings.ini

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of defining a custom property and a list-based property using the Properties reserved property.

```ini
[Settings]
Priority=Default
Property=CustomProperty, ListProperty(*)

[Default]
CustomProperty=TRUE
ListProperty001=New York City
ListProperty002=Chicago
```

--------------------------------

### Access Task Sequence Variables

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Examples of reading and writing task sequence variables using the TSENV and TSENVLIST drives.

```powershell
dir tsenv:
```

```powershell
$tsenv:GPOPackPath = "\\WDG-MDT-01\Packages$\GPOPacks"
```

```powershell
Write-Host $tsenv:ScriptRoot
```

```powershell
$packages = $tsenvlist:PACKAGES
```

```powershell
$tsenvlist:PACKAGES = @("XXX00001:Program","XXX00002:Program")
```

--------------------------------

### SelectionProfile.xml Excerpt

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

An example of the XML structure used to define a selection profile within the SelectionProfile.xml file.

```xml
<selectionProfile quid="{46a3e6a2-694c-4c2f-afd8-a2986e6e252e}" enable="True">
  <Name>Drivers Safe For WinPE</Name>
  <Comments>Include Driver packages safe for WinPE.</Comments>
  <ReadOnly>True</ReadOnly>
  <Definition><SelectionProfile><Include path="Out-of-Box Drivers\WinPEAndFullOS" /><Include path="Out-of-Box Drivers\WinPEOnly" /></SelectionProfile></Definition>
</selectionProfile>
```

--------------------------------

### Example User Exit Script

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

A VBScript function library that determines a task sequence based on available system RAM using the ZTIUtility logging class.

```vb
Function UserExit(sType, sWhen, sDetail, bSkip)
  UserExit = Success
End Function

Function SetTaskSequence(vMemory)

  oLogging.CreateEntry "UserExit - Determining Task " & _
    "Sequence to run based on available RAM", LogTypeInfo

  If vMemory <= 2048 Then
    SetTaskSequence = "Win7_X86"
    oLogging.CreateEntry "UserExit - Available RAM: " &
      vMemory & ". Selecting Win7_X86 TS.", LogTypeInfo
  Else
    SetTaskSequence = "Win8_X86"
    oLogging.CreateEntry "UserExit - Available RAM: " &
      vMemory & ". Selecting Win8_X86 TS.", LogTypeInfo
  End If
End Function
```

--------------------------------

### Use Subsection Directive for Dynamic Referencing

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of using the Subsection directive to dynamically group configuration settings based on computer model properties.

```ini
[Settings]
Priority=Make, Default

[Default]

[Contoso Computer Corporation]
Subsection=Contoso-%Model%

[Contoso-MDT 6600]
Packages001=XXX00009:Program9
Packages002=XXX0000A:Program10

[Contoso-MDT 2431]
Packages001=XXX00003:Program2
Packages002=XXX00003:Program4
```

--------------------------------

### Suppress BitLocker Installation

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/properties

Example configuration to skip BitLocker installation during the deployment process.

```ini
[Settings] Priority=Default  [Default] BDEInstallSuppress=YES
```

--------------------------------

### View Import Error Log

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/use-the-mdt

Example of the error message displayed when a custom image lacks an Edition ID during the import process.

```text
Setup failed applying image F:\Deploy\Operating Systems\W2K8R2RTM\W2K8R2RTM.wim, rc = 31
ZTI ERROR - Non-zero return code by LTIApply, rc = 31.
```

--------------------------------

### Run Setup Downloader via Command Line

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/servers/deploy/install/setup-downloader

Execute Setupdl.exe with various flags to control verification and download behavior.

```bash
setupdl.exe C:\Download
```

```bash
setupdl.exe /VERIFY C:\Download
```

```bash
setupdl.exe /NOUI C:\Download
```

```bash
setupdl.exe /LANG C:\Download
```

--------------------------------

### CCMSetup.exe example command

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/clients/deploy/about-client-installation-properties

Example command demonstrating the use of management point, logon, site code, and fallback status point properties.

```text
CCMSetup.exe /mp:SMSMP01 /logon SMSSITECODE=S01 FSP=SMSFSP01
```

--------------------------------

### InitiateUserInstall Method

Source: https://learn.microsoft.com/en-us/intune/configmgr/develop/reference/apps/initiateuserinstall-method-in-class-sms_application

This method is used to initiate a user installation. Note: This method is reserved for future use.

```APIDOC
## InitiateUserInstall

### Description
Initiates a user installation for a specified application model, user, and client.

### Syntax
SInt32 InitiateUserInstall (String ModelName, String Username, String ClientGUID);

### Parameters
- **ModelName** (String) - [in] Model name of the application.
- **Username** (String) - [in] Unique user name.
- **ClientGUID** (String) - [in] Unique identifier of a client.

### Return Values
- **SInt32** - Returns 0 to indicate success or non-zero to indicate failure.
```

--------------------------------

### Import Operating System Packages Example

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/mdt-windows-powershell-cmdlets

Example demonstrating how to scan a network path and import packages into a deployment share.

```PowerShell
Import-MDTOperatingSystem -Path "DS001:\Packages" SourcePath "\\WDGMDT01\Source$\OSPackages"
```

--------------------------------

### Configure BitLocker Mode

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/properties

Example configuration for setting the BitLocker installation mode to TPM.

```ini
[Settings] Priority=Default  [Default] BDEInstallSuppress=NO BDEDriveLetter=S: BDEDriveSize=2000 OSDBitLockerMode=TPM OSDBitLockerCreateRecoveryPassword=AD
```

--------------------------------

### Specify Applications for Deployment

Source: https://learn.microsoft.com/en-us/intune/configmgr/mdt/properties

Lists application GUIDs to be installed, corresponding to entries in the Applications.xml file.

```ini
[Settings] Priority=Default  [Default] Applications001={1D7DF331-47B7-472C-87B3-442597EC2F7D} Applications002={9d2b8999-5e4d-4f3d-bb05-edaaf4fe5628}
```

--------------------------------

### Install Configuration Manager client from the internet

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/get-started/capabilities-in-technical-preview-1705

Use this command line to install the client, ensuring all placeholders are replaced with your specific environment values.

```bash
ccmsetup.exe /NoCrlCheck /Source:C:\CLIENT CCMHOSTNAME=SCCMPROXYCONTOSO.CLOUDAPP.NET/CCM_Proxy_ServerAuth/72457598037527932 SMSSiteCode=HEC AADTENANTID=780433B5-E05E-4B7D-BFD1-E8013911E543 AADTENANTNAME=contoso AADCLIENTAPPID= <GUID> AADRESOURCEURI=`https://contososerver`
```

--------------------------------

### Run CCMSetup without Service

Source: https://learn.microsoft.com/en-us/intune/configmgr/core/clients/deploy/about-client-installation-properties

Example of using the /noservice parameter to run the installation in the current user context.

```text
ccmsetup.exe /noservice
```
Tokens:
Raw