question

WRaspe-5601 avatar image
0 Votes"
WRaspe-5601 asked saldana-msft edited

MECM software deployment

I am wondering who could provide me some good and valid information about how to deploy software via MECM through software center.
On google I found information that applications can be deployed by User or Device Collection.

For example, I have 2 Global Group:
Google_Chrome_96_Install
Google_Chrome_96_Uninstall

What I want is a connection with the Global group to an Device collection inside MECM.
The outcome should be, add the Global group to a device/hostname and after updating group policies or run the actions in Configuration manager, that the application install automatically.



mem-cm-generalmem-intune-device-configurationsmem-cm-osdmem-cm-site-deployment
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AllenLiu-MSFT avatar image
0 Votes"
AllenLiu-MSFT answered AllenLiu-MSFT commented

Hi, @WRaspe-5601
Thank you for posting in Microsoft Q&A forum.

It seems you need to create a device collection with the query rule like:

 select * from SMS_R_System where SMS_R_System.SecurityGroupName = "Domain\\Google_Chrome_96.0.4664.45_x64_EN_R01_Install"

And make sure you have deployed the application to the device collection with "Required" method.
Then when you add a random device to Google_Chrome_96.0.4664.45_x64_EN_R01_Install group, it will be added to the device collection, then when you trigger the Machine policy and retrieval evaluation cycle, it will push the software automatically after running the actions in ConfigMgr client.


If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.





· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AllenLiu-MSFT ,

Yes I think I need this query indeed. I had it working with a user collection yesterday!
If not I will search the web again.

Thank you!

0 Votes 0 ·

hi @AllenLiu-MSFT

You mention to create a query rule as folow, but I don't think it work like I want.

select * from SMS_R_System where SMS_R_System.SecurityGroupName = "Domain\\Google_Chrome_96.0.4664.45_x64_EN_R01_Install"


Do I need to change Domain\\ also?
Do I need to change Domain\\ into the hostname of Domain controller?
or for example if my domain named is contoso.com do I need to specify as below:
select * from SMS_R_System where SMS_R_System.SecurityGroupName = "contoso\\Google_Chrome_96.0.4664.45_x64_EN_R01_Install"

I have configured it as below:

165371-1.png
165317-2.png

165269-3.png

The device collection GoogleChrome_96_64x does not have any members.
The device which I need to push the application are member of All Windows 10 Computers device collection.


0 Votes 0 ·
1.png (36.1 KiB)
3.png (126.3 KiB)

Yes, if your domain named is contoso.com, you query should be:
select * from SMS_R_System where SMS_R_System.SecurityGroupName = "contoso\\Google_Chrome_96.0.4664.45_x64_EN_R01_Install"

0 Votes 0 ·
GarthJones-9654 avatar image
0 Votes"
GarthJones-9654 answered WRaspe-5601 commented
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@GarthJones-9654
I understand that I need to create an user or device collection.
What I am trying to understand is the connection between an AD group and a colletion to push software automatically, when adding a GG to a device or user collection.

I am not sure which and how I need to configure a SQL querie to push the software

0 Votes 0 ·
RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered WRaspe-5601 commented

If you want to target members of AD SG for deployments then you will need to enable AD group discovery in ConfigMgr as the first step. Once discovered, you can then create collections using the groups.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

164959-1.png164948-2.png164960-3.png164971-4.png


Alright, to make it clear I have configured the following in the pictures.
Add a random device to Google_Chrome_96.0.4664.45_x64_EN_R01_Install group as follow:
164949-5.png
After adding the Global group, running the actions in ConfigMgr:
164981-6.png
to receive the software automatically. My issue it that it do not push the software automatically after running the actions in ConfigMgr client.


0 Votes 0 ·
1.png (32.1 KiB)
2.png (38.5 KiB)
3.png (25.7 KiB)
4.png (24.5 KiB)
5.png (41.9 KiB)
6.png (88.4 KiB)
RahulJindal-2267 avatar image
0 Votes"
RahulJindal-2267 answered RahulJindal-2267 edited

After adding the device in SG, does it populate in the targeted collection? Also you are running the wrong action. You need to run Machine policy and retrieval evaluation cycle. Although this is only required when you want to force policy download.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.