Set-CMClientPushInstallation
Configure settings for client push installation.
Syntax
Set-CMClientPushInstallation
[-AddAccount <String[]>]
[-AllownNTLMFallback <Boolean>]
[-ChosenAccount <String[]>]
[-ClearAccount]
[-EnableAutomaticClientPushInstallation <Boolean>]
[-EnableSystemTypeConfigurationManager <Boolean>]
[-EnableSystemTypeServer <Boolean>]
[-EnableSystemTypeWorkstation <Boolean>]
-InputObject <IResultObject>
[-InstallationProperty <String>]
[-InstallClientToDomainController <Boolean>]
[-RemoveAccount <String[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-CMClientPushInstallation
[-AddAccount <String[]>]
[-AllownNTLMFallback <Boolean>]
[-ChosenAccount <String[]>]
[-ClearAccount]
[-EnableAutomaticClientPushInstallation <Boolean>]
[-EnableSystemTypeConfigurationManager <Boolean>]
[-EnableSystemTypeServer <Boolean>]
[-EnableSystemTypeWorkstation <Boolean>]
-InputObject <IResultObject>
[-InstallationProperty <String>]
[-InstallClientToDomainController <Boolean>]
[-RemoveAccount <String[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-CMClientPushInstallation
[-AddAccount <String[]>]
[-AllownNTLMFallback <Boolean>]
[-ChosenAccount <String[]>]
[-ClearAccount]
[-EnableAutomaticClientPushInstallation <Boolean>]
[-EnableSystemTypeConfigurationManager <Boolean>]
[-EnableSystemTypeServer <Boolean>]
[-EnableSystemTypeWorkstation <Boolean>]
[-InstallationProperty <String>]
[-InstallClientToDomainController <Boolean>]
-Name <String>
[-RemoveAccount <String[]>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Set-CMClientPushInstallation
[-AddAccount <String[]>]
[-AllownNTLMFallback <Boolean>]
[-ChosenAccount <String[]>]
[-ClearAccount]
[-EnableAutomaticClientPushInstallation <Boolean>]
[-EnableSystemTypeConfigurationManager <Boolean>]
[-EnableSystemTypeServer <Boolean>]
[-EnableSystemTypeWorkstation <Boolean>]
[-InstallationProperty <String>]
[-InstallClientToDomainController <Boolean>]
[-RemoveAccount <String[]>]
[-SiteCode <String>]
[-DisableWildcardHandling]
[-ForceWildcardHandling]
[-WhatIf]
[-Confirm]
[<CommonParameters>] Description
Use this cmdlet to change the site configuration for client push installation. The client push installation method installs the Configuration Manager client on computers that the site discovers.
You can also start a client push installation by running the Client Push Installation Wizard for a specific collection or resource within a collection.
For more information, see How to install clients on Windows-based computers in Configuration Manager.
Note
Run Configuration Manager cmdlets from the Configuration Manager site drive, for example PS XYZ:\>. For more information, see getting started.
Examples
Example 1: Change the settings of a client push installation
This command makes the following configurations:
- Automatically use client push for discovered computers.
- Push the client to site system servers
- The site uses the account named contoso\svc_smspush to connect to the computer to install the client software.
The InstallationProperty parameter sets the value of the SMSSITECODE property for the Windows Installer package to CM1. This setting assigns the client to the site that has the site code CM1.
Set-CMClientPushInstallation -SiteCode "CM1" -EnableAutomaticClientPushInstallation $True -EnableSystemTypeConfiguationManager $True -ChosenAccount "contoso\svc_smspush" -InstallationProperty "SMSSITECODE=CM1"Parameters
-AddAccount
Specify a string array for one or more accounts that can install the client. The accounts need to be a local Administrator on the destination computer. For each account, use the format domain\username.
For more information, see Client push installation account.
| Type: | String[] |
| Aliases: | AddAccounts |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-AllownNTLMFallback
When this parameter is $true, if the site can't authenticate the client by using Kerberos, it retries the connection by using NTLM. The recommended configuration for improved security is to set this parameter to $false, which requires Kerberos without NTLM fallback.
Note
When it uses client push to install the Configuration Manager client, the site server creates a remote connection to the client. The site can require Kerberos mutual authentication by not allowing fallback to NTLM before establishing the connection. This behavior helps to secure the communication between the server and the client.
Depending on your security policies, your environment might already prefer or require Kerberos over the older NTLM authentication. For more information on the security considerations of these authentication protocols, read about the Windows security policy setting to restrict NTLM.
To use this feature, clients must be in a trusted Active Directory forest. Kerberos in Windows relies on Active Directory for mutual authentication.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ChosenAccount
Specify a string array for one or more accounts already added to Configuration Manager.
| Type: | String[] |
| Aliases: | ChosenAccounts |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ClearAccount
Add this parameter to remove all accounts that are currently specified for client push at the site. To remove a single account, use the RemoveAccount parameter.
| Type: | SwitchParameter |
| Aliases: | ClearAccounts |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Confirm
Prompts you for confirmation before running the cmdlet.
| Type: | SwitchParameter |
| Aliases: | cf |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-DisableWildcardHandling
This parameter treats wildcard characters as literal character values. You can't combine it with ForceWildcardHandling.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnableAutomaticClientPushInstallation
Set this parameter to $true to install the Configuration Manager client on newly discovered computer resources. It also enables installation on existing computer resources that don't have the client installed.
If you set this parameter to $false, you can still use the Install client action on a collection or device.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnableSystemTypeConfigurationManager
Set this parameter to $true to install the Configuration Manager client on site system servers.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnableSystemTypeServer
Set this parameter to $true to install the Configuration Manager client on servers.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-EnableSystemTypeWorkstation
Set this parameter to $true to install the Configuration Manager client on workstations.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-ForceWildcardHandling
This parameter processes wildcard characters and may lead to unexpected behavior (not recommended). You can't combine it with DisableWildcardHandling.
| Type: | SwitchParameter |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-InputObject
Specify a client push installation object. To get this object, use the Get-CMClientPushInstallation cmdlet.
| Type: | IResultObject |
| Aliases: | ClientPushComponent |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | True |
| Accept wildcard characters: | False |
-InstallationProperty
Specify any installation properties to use when installing the Configuration Manager client.
For example:
/mp:mp01.contoso.com CCMDEBUGLOGGING="1" CCMLOGGINGENABLED="TRUE" CCMLOGLEVEL="0" CCMLOGMAXHISTORY="5" CCMLOGMAXSIZE="10000000" SMSCACHESIZE="15000" SMSSITECODE="XYZ" SMSMP=mp01.contoso.com
For more information, see About client installation parameters and properties in Configuration Manager.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-InstallClientToDomainController
Set this parameter to specify whether to install the Configuration Manager client on domain controllers:
- $true: Always install the client on domain controllers.
- $false: Never install the client on domain controllers, unless specified in the Client Push Installation Wizard.
| Type: | Boolean |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-Name
Specifies a name for the client push installation.
| Type: | String |
| Aliases: | SiteName |
| Position: | Named |
| Default value: | None |
| Required: | True |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-RemoveAccount
Specify a string array of client push installation accounts to remove. To remove all accounts, use the ClearAccount parameter.
| Type: | String[] |
| Aliases: | RemoveAccounts |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-SiteCode
Specify the three character site code. For example, XYZ.
| Type: | String |
| Position: | Named |
| Default value: | None |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet doesn't run.
| Type: | SwitchParameter |
| Aliases: | wi |
| Position: | Named |
| Default value: | False |
| Required: | False |
| Accept pipeline input: | False |
| Accept wildcard characters: | False |
Inputs
Microsoft.ConfigurationManagement.ManagementProvider.IResultObject
Related Links
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for