如何在 Configuration Manager 中管理客户端How to manage clients in Configuration Manager

适用范围:Configuration Manager (Current Branch)Applies to: Configuration Manager (current branch)

在设备上安装 Configuration Manager 客户端并将其成功分配到站点后,你将在“设备”节点的“资产和符合性”工作区中看到设备,并在“设备集合”节点中看到一个或多个集合。When the Configuration Manager client installs on a device and successfully assigns to a site, you see the device in the Assets and Compliance workspace in the Devices node, and in one or more collections in the Device Collections node. 选择设备或集合,然后运行管理操作。Select the device or a collection, and then run management operations. 但是,也可以使用其他方式来管理客户端,其中可能涉及控制台中的其他工作区或控制台未涉及的任务。However, there are other ways to manage the client, which might involve other workspaces in the console, or tasks outside of the console.

备注

如果已安装 Configuration Manager 客户端但尚未成功分配到站点,则该客户端可能不会显示在控制台中。If you install the Configuration Manager client, but it hasn't yet successfully assigned to a site, it might not display in the console. 在客户端分配到站点后,更新集合成员身份,然后刷新控制台视图。After the client assigns to a site, update collection membership, and then refresh the console view.

在未安装 Configuration Manager 客户端时,设备也可能显示在控制台中。A device can also display in the console when the Configuration Manager client isn't installed. 如果站点发现了设备,但未安装和分配客户端,则可能发生此情况。This behavior happens if the site discovers a device but the client isn't installed and assigned.

通过 Exchange Server 连接器本地 MDM 管理的移动设备不会安装 Configuration Manager 客户端。Mobile devices managed with the Exchange Server connector or on-premises MDM don't install the Configuration Manager client.

若要从控制台管理设备,请使用“设备”节点中的“客户端”列来确定是否安装了客户端 。To manage a device from the console, use the Client column in the Devices node to determine whether the client is installed.

通过“设备”节点管理客户端Manage clients from the Devices node

根据设备类型,其中某些选项可能不可用。Depending on the device type, some of these options might not be available.

  1. 在 Configuration Manager 控制台中,转到“资产和符合性”工作区,并选择“设备”节点 。In the Configuration Manager console, go to the Assets and Compliance workspace, and select the Devices node.

  2. 选择一台或多台设备,然后从功能区中选择以下其中一个客户端管理任务。Select one or more devices, and then select one of these client management tasks from the ribbon. 还可以右键单击该设备。)You can also right-click the device.)

导入用户设备相关性Import user device affinity

配置用户和设备之间的关联,以便高效地向用户部署软件。Configure the associations between users and devices, so you can efficiently deploy software to users.

有关详细信息,请参阅将用户和设备与用户设备相关性进行链接For more information, see Link users and devices with user device affinity.

导入计算机信息Import computer information

启动导入计算机信息向导,将新计算机信息导入 Configuration Manager 数据库。Launch the Import Computer Information Wizard to import new computer information into the Configuration Manager database. 可使用文件导入多台计算机,或指定单台计算机的信息。You can import multiple computers using a file, or specify information for a single computer.

添加所选项Add selected items

提供下列选项:Provides the following options:

  • 将所选项目添加到现有设备集合:打开“选择集合” 对话框。Add selected items to existing device collection: Opens the Select Collection dialog box. 选择要向其添加此设备的集合。Select the collection to which you want to add this device. 使用“直接”成员身份规则可将该设备包括在此集合中。The device is included in this collection by using a Direct membership rule.

  • 将所选项目添加到新的设备集合:将打开“创建设备集合向导”,可以在其中创建新的集合。Add selected items to new device collection: Opens the Create Device Collection Wizard where you can create a new collection. 使用“直接”成员身份规则可将所选集合包括在此集合中。The selected collection is included in this collection by using a Direct membership rule.

有关详细信息,请参阅如何创建集合For more information, see How to create collections.

安装客户端Install client

将打开“安装客户端向导”。Opens the Install Client Wizard. 此向导使用客户端请求安装在所选设备上安装或重新安装 Configuration Manager 客户端。This wizard uses client push installation to install or reinstall the Configuration Manager client on the selected device.

提示

可通过多种不同的方式来安装 Configuration Manager 客户端。There are many different ways to install the Configuration Manager client. 尽管客户端请求向导提供一种通过控制台实现的便捷客户端安装方法,但此方法有许多依赖关系,并且并非适合所有环境。Although the Client Push wizard offers a convenient client installation method from the console, this method has many dependencies and isn't suitable for all environments. 有关依赖关系的详细信息,请参阅将客户端部署到 Windows 计算机的先决条件For more information about the dependencies, see Prerequisites for deploying clients to Windows computers. 有关其他客户端安装方法的详细信息,请参阅客户端安装方法For more information about the other client installation methods, see Client installation methods.

有关详细信息,请参阅如何使用客户端请求安装 Configuration Manager 客户端For more information, see How to install Configuration Manager clients by using client push.

运行脚本Run script

打开“运行脚本”向导,在所选设备上运行 PowerShell 脚本。Opens the Run Script wizard to run a PowerShell script on the selected device.

有关详细信息,请参阅创建和运行 PowerShell 脚本For more information, see Create and run PowerShell scripts.

安装应用程序Install application

在设备上实时安装应用程序。Install an application to a device in real time. 此功能有助于减少对每个应用程序的单独集合的需求。This feature can help reduce the need for separate collections for every application.

有关详细信息,请参阅为设备安装应用程序For more information, see Install applications for a device.

重新分配站点Reassign site

将一个或多个客户端(包括被管理的移动设备)重新分配到层次结构中的另一个主站点。Reassign one or more clients, including managed mobile devices, to another primary site in the hierarchy. 可逐个重新分配客户端,也可以选择多个客户端以进行批量重新分配。You can individually reassign clients or select more than one to reassign them in bulk.

客户端设置 - 生成的客户端设置Client settings - Resultant client settings

如果已将多个客户端设置部署到同一设备,则设置的优先顺序和组合会很复杂。When you deploy multiple client settings to the same device, the prioritization and combination of settings is complex. 使用此选项查看部署到此设备的生成的客户端设置集合。Use this option to view the resultant set of client settings deployed to this device.

有关详细信息,请参阅如何配置客户端设置For more information, see How to configure client settings.

启动Start

批准Approve

客户端使用 HTTP 和自签名证书与站点系统通信时,必须批准这些客户端以将其标识为受信任计算机。When the client communicates with site systems using HTTP and a self-signed certificate, you must approve these clients to identify them as trusted computers. 默认情况下,站点配置会自动批准同一 Active Directory 林、受信任林和连接的 Azure Active Directory (Azure AD) 租户中的客户端By default, the site configuration automatically approves clients from the same Active Directory forest, trusted forests, and connected Azure Active Directory (Azure AD) tenants. 此默认行为意味着不必手动批准每个客户端。This default behavior means that you don't have to manually approve each client. 手动批准你信任的工作组计算机,以及你信任但未获批准的任何其他计算机。Manually approve workgroup computers that you trust, and any other unapproved computers that you trust.

重要

尽管某些管理功能可能适合于未批准的客户端,但 Configuration Manager 不支持这种情况。Although some management functions might work for unapproved clients, this is an unsupported scenario for Configuration Manager.

不必批准始终使用 HTTPS 与站点系统通信的客户端,或在通过 HTTP 与站点系统通信时使用 PKI 证书的客户端。You don't have to approve clients that always communicate to site systems using HTTPS, or clients that use a PKI certificate when they communicate to site systems using HTTP. 这些客户端通过使用 PKI 证书建立信任。These clients establish trust by using the PKI certificates.

阻止或解除阻止Block or unblock

阻止不再受信任的客户端。Block a client that you no longer trust. 阻止操作可以阻止客户端接收策略,阻止站点系统与客户端进行通信。Blocking prevents the client from receiving policy, and prevents site systems from communicating with the client.

重要

阻止客户端的操作只会阻止从客户端到 Configuration Manager 站点系统的通信,Blocking a client only prevents communication from the client to Configuration Manager site systems. 不会阻止与其他设备的通信。It doesn't prevent communication to other devices. 客户端通过使用 HTTP(而不是 HTTPS)与站点系统通信时,还有一些安全限制。When the client communicates to site systems by using HTTP instead of HTTPS, there are some security limitations.

也可以取消阻止已阻止的客户端。You can also unblock a client that is blocked.

有关详细信息,请参阅确定是否阻止客户端For more information, see Determine whether to block clients.

清除所需的 PXE 部署Clear required PXE deployments

通过清除分配给 Configuration Manager 集合或计算机的上一个 PXE 部署的状态,可以重新部署所需的 PXE 部署。You can redeploy a required PXE deployment by clearing the status of the last PXE deployment assigned to a Configuration Manager collection or a computer. 此操作将重置该部署的状态并重新安装最新的所需部署。This action resets the status of that deployment and reinstalls the most recent required deployments.

有关详细信息,请参阅使用 PXE 通过网络部署 WindowsFor more information, see Use PXE to deploy Windows over the network.

客户端通知Client notification

有关详细信息,请参阅客户端通知For more information, see Client notifications.

Endpoint ProtectionEndpoint Protection

有关详细信息,请参阅客户端通知For more information, see Client notifications.

编辑主要用户Edit primary users

查看此设备在过去 90 天内的用户,或指定此设备的主要用户。View users of this device in the last 90 days, or specify the primary users of this device.

有关详细信息,请参阅将用户和设备与用户设备相关性进行链接For more information, see Link users and devices with user device affinity.

擦除移动设备Wipe a mobile device

你可以擦除支持擦除命令的移动设备。You can wipe mobile devices that support the wipe command. 此操作会永久删除移动设备上的所有数据,包括个人设置和个人数据。This action permanently removes all data on the mobile device, including personal settings and personal data. 通常,此操作会将移动设备重置回出厂默认值。Typically, this action resets the mobile device back to factory defaults. 在移动设备不再受信任时将其擦除。Wipe a mobile device when it's no longer trusted. 例如设备丢失或被盗的情况。For example, if the device is lost or stolen.

提示

请检查制造商的文档以了解有关移动设备如何处理远程擦除命令的详细信息。Check the manufacturer's documentation for more information about how the mobile device processes a remote wipe command.

移动设备收到擦除命令之前通常会有延迟:There's often a delay until the mobile device receives the wipe command:

  • 如果移动设备是通过 Configuration Manager 注册的,则客户端会在下载客户端策略时收到命令。If the mobile device is enrolled by Configuration Manager, the client receives the command when it downloads its client policy.

  • 如果通过 Exchange Server 连接器管理移动设备,则移动设备会在其与 Exchange 同步时收到命令。If the mobile device is managed by the Exchange Server connector, it receives the command when it synchronizes with Exchange.

若要监视设备何时收到擦除命令,可使用“擦除状态”列。To monitor when the device receives the wipe command, use the Wipe Status column. 设备将擦除确认发送到 Configuration Manager 之前,可以取消擦除命令。Until the device sends a wipe acknowledgment to Configuration Manager, you can cancel the wipe command.

停用移动设备Retire a mobile device

只有本地 MDM 注册的移动设备才支持“停用”选项。The Retire option is supported only by mobile devices enrolled by on-premises MDM.

有关详细信息,请参阅使用远程擦除、远程锁定或密码重置功能帮助保护数据For more information, see Help protect your data with remote wipe, remote lock, or passcode reset.

更改所有权Change ownership

如果设备未加入域并且未安装 Configuration Manager 客户端,则可以使用此选项将所有权更改为“公司”或“个人” 。If a device isn't domain-joined and doesn't have the Configuration Manager client installed, use this option to change the ownership to Company or Personal.

可在应用程序要求中使用此值来控制部署,以及控制从用户设备中收集的清单数量。You can use this value in application requirements to control deployments, and to control how much inventory is collected from users' devices.

可能需要右键单击任意列标题并选择“设备所有者”列,将此列添加到视图中。You may need to add the Device Owner column to the view by right-clicking any column heading and choosing it.

删除Delete

警告

如果要卸载 Configuration Manager 客户端或将其从集合中移除,请不要删除客户端。Don't delete a client if you want to uninstall the Configuration Manager client or remove it from a collection.

“删除”操作会从 Configuration Manager 数据库中手动删除客户端记录。The Delete action manually removes the client record from the Configuration Manager database. 仅使用此操作来解决问题。Only use this action to troubleshoot a problem. 如果删除了对象,但是依然安装了客户端并与站点进行通信,检测信号发现会重新创建客户端记录。If you delete the object, but the client is still installed and communicating with the site, Heartbeat Discovery recreates the client record. 客户端记录会重新出现在 Configuration Manager 控制台中,然而客户端历史记录和以前的所有关联都会丢失。It reappears in the Configuration Manager console, although the client history and any previous associations are lost.

备注

删除 Configuration Manager 注册的移动设备客户端时,此操作还会撤销颁发的 PKI 证书。When you delete a mobile device client that was enrolled by Configuration Manager, this action also revokes the issued PKI certificate. 即使 IIS 不检查证书吊销列表 (CRL),管理点也会拒绝此证书。This certificate is then rejected by the management point, even if IIS doesn't check the certificate revocation list (CRL).

在删除这些客户端时,不会吊销移动设备旧客户端上的证书。Certificates on mobile device legacy clients are not revoked when you delete these clients.

要卸载客户端,请参阅卸载 Configuration Manager 客户端To uninstall the client, see Uninstall the Configuration Manager client.

要将客户端分配到新的主站点,请参阅如何将客户端分配到站点To assign the client to a new primary site, see How to assign clients to a site.

要从集合中删除客户端,请重新配置集合属性。To remove the client from a collection, reconfigure the collection properties. 有关详细信息,请参阅如何管理集合For more information, see How to manage collections.

刷新Refresh

用数据库中的最新数据刷新控制台视图。Refresh the console view with the latest data in the database. 例如,设备显示在发现列表中,但未显示为已安装。For example, if a device appears in the list from discovery, but doesn't show as installed. 安装客户端并确保将其分配给站点后,请选择“刷新”。After you install the client and make sure it's assigned to the site, select Refresh.

属性Properties

查看发现数据和针对客户端的部署。View the discovery data and deployments targeted for the client.

也可以配置任务序列用于将 OS 部署到设备的变量。You can also configure variables that task sequences use to deploy an OS to the device. 有关详细信息,请参阅为设备和集合创建任务序列变量For more information, se Create task sequence variables for devices and collections.

通过“设备集合”节点管理客户端Manage clients from the Device Collections node

许多在“设备”节点中的设备上可用的任务在集合上也可用。Many of the tasks that are available for devices in the Devices node are also available on collections. 控制台会将操作自动应用于集合中的所有合格设备。The console automatically applies the operation to all eligible devices in the collection. 此操作对整个集合生成附加的网络数据包,并提高站点服务器上的 CPU 使用率。This action on an entire collection generates additional network packets and increases CPU usage on the site server.

在运行集合级别任务之前,请考虑以下问题。Consider the following questions before you run collection-level tasks. 开始后则无法从控制台停止任务。Once started, you can't stop the task from the console.

  • 集合中有多少设备?How many devices are in the collection?
  • 是否通过低带宽网络连接进行设备连接?Are the devices connected by low-bandwidth network connections?
  • 在所有设备上完成此任务需要多少时间?How much time does this task need to complete for all the devices?

有关详细信息,请参阅如何管理集合For more information, see How to manage collections.

重新启动客户端Restart clients

使用 Configuration Manager 控制台来标识需要重启的客户端。Use the Configuration Manager console to identify clients that require a restart. 然后使用客户端通知操作进行重启。Then use a client notification action to restart them.

提示

启用自动客户端升级,以更轻松的方式使客户端保持最新状态。Enable automatic client upgrade to keep your clients up-to-date with less effort. 有关详细信息,请参阅关于自动客户端升级For more information, see About automatic client upgrade.

若要标识正在等待重启的设备,请转到 Configuration Manager 控制台中的“资产和符合性”工作区,并选择“设备”节点。To identify devices that are pending a restart, go to the Assets and Compliance workspace in the Configuration Manager console and select the Devices node. 然后可以在名为“等待重启”的新列的详细信息窗格中查看每个设备的状态。Then view the status for each device in the details pane in a new column named Pending Restart. 每个设备都具有以下一个或多个值:Each device has one or more of the following values:

  • No:没有正在等待的重启No: there's no pending restart
  • Configuration Manager:此值源于客户端重新启动处理协调器组件 (RebootCoordinator.log)Configuration Manager: this value comes from the client reboot coordinator component (RebootCoordinator.log)
  • File rename:此值源于 Windows 报告挂起的文件重命名操作 (HKLM\SYSTEM\CurrentControlSet\Control\Session Manager, PendingFileRenameOperations)File rename: this value comes from Windows reporting a pending file rename operation (HKLM\SYSTEM\CurrentControlSet\Control\Session Manager, PendingFileRenameOperations)
  • Windows Update:此值源于 Windows 更新代理报告由于一个或多个更新而需要挂起的重启 (HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired)Windows Update: this value comes from the Windows Update Agent reporting a pending restart is required for one or more updates (HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired)
  • Add or remove feature:此值源于 Windows 基于组件的服务报告由于添加或删除一种 Windows 功能而需要重启 (HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Reboot Pending)Add or remove feature: this value comes from the Windows component-based servicing reporting the addition or removal of a Windows feature requires a restart (HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Reboot Pending)

创建要重启设备的客户端通知Create the client notification to restart a device

  1. 在控制台的“设备集合”节点,选择集合中要重启的设备。Select the device you want to restart within a collection in the Device Collections node of the console.
  2. 在功能区中,选择“客户端通知”,然后选择“重启” 。In the ribbon, select Client Notification, and then select Restart. 会打开一个有关重启的信息窗口。An information window opens about the restart. 选择“确定”确认重启请求。Select OK to confirm the restart request.

当客户端收到通知时,将打开“软件中心”通知窗口以通知用户重启。When the notification is received by a client, a Software Center notification window opens to inform the user about the restart. 默认情况下,重启会在 90 分钟后发生。By default, the restart occurs after 90 minutes. 可以通过配置客户端设置来修改重启时间。You can modify the restart time by configuring client settings. 重启行为的设置可在默认设置的“计算机重启”选项卡上找到。Settings for the restart behavior are found on the Computer restart tab of the default settings.

配置客户端缓存Configure the client cache

客户端缓存会存储客户端安装应用程序和程序时的临时文件。The client cache stores temporary files for when clients install applications and programs. 软件更新也使用客户端缓存,但始终尝试在不考虑大小设置的情况下将内容下载到缓存中。Software updates also use the client cache, but always attempt to download to the cache regardless of the size setting. 可以在手动安装客户端时、使用客户端请求安装时或在安装之后配置客户端缓存设置,例如大小和位置。Configure the cache settings, such as size and location, when you manually install the client, when you use client push installation, or after installation.

可使用 Configuration Manager 控制台中的客户端设置来指定缓存文件夹的大小。You can specify the cache folder size using client settings in the Configuration Manager console. 有关详细信息,请参阅客户端缓存设置For more information, see Client cache settings.

Configuration Manager 客户端缓存的默认位置为 %windir%\ccmcache,默认磁盘空间为 5120 MB。The default location for the Configuration Manager client cache is %windir%\ccmcache and the default disk space is 5120 MB.

重要

不要对用于客户端缓存的文件夹进行加密。Don't encrypt the folder used for the client cache. Configuration Manager 无法将内容下载到加密的文件夹。Configuration Manager can't download content to an encrypted folder.

关于客户端缓存About the client cache

Configuration Manager 客户端会在部署的可用时间之后立即下载所需软件的内容,但会等到部署计划时间之后才会运行。The Configuration Manager client downloads the content for required software soon after the deployment's available time but waits to run it until the deployment's scheduled time. 在计划的时间,Configuration Manager 客户端将检查以确定缓存中是否有内容。At the scheduled time, the Configuration Manager client checks to see whether the content is available in the cache. 如果内容位于缓存中且版本正确,则客户端会使用该缓存内容。If content is in the cache and it's the correct version, the client uses the cached content. 如果内容的所需版本发生了更改或者客户端已将内容删除以便为另一个包腾出空间,客户端则会将内容再次下载到缓存。When the required version of the content changes, or if the client deletes the content to make room for another package, the client downloads the content to the cache again.

如果客户端尝试下载的程序或应用程序内容大小超出缓存的大小,则部署将因缓存大小不足而失败。If the client attempts to download content for a program or application that is greater than the size of the cache, the deployment fails because of insufficient cache size. 客户端会生成缓存大小不足的状态消息 10050。The client generates status message 10050 for insufficient cache size. 如果稍后增加了缓存大小,则会出现以下结果:If you increase the cache size later, the result is:

  • 对于所需程序:客户端不会自动重试下载内容。For a required program: The client doesn't automatically retry to download the content. 将包和程序重新部署到客户端。Redeploy the package and program to the client.
  • 对于所需应用程序:客户端会在下载其客户端策略时自动重试下载内容。For a required application: The client automatically retries to download the content when it downloads its client policy.

如果客户端尝试下载的内容小于缓存大小,但缓存已满,则所有必需的部署将一直重试,直到满足以下条件为止:If the client attempts to download content that's less than the size of the cache, but the cache is full, all required deployments keep retrying until:

  • 缓存空间可用The cache space is available
  • 下载超时The download times out
  • 重试次数达到限制The retry count reaches its limit

如果稍后增加了缓存大小,则客户端将尝试在下一次重试间隔期间再次下载该内容。If you later increase the cache size, the client attempts to download the content again during the next retry interval. 客户端将每隔四小时尝试下载内容一次,直至尝试 18 次为止。The client tries to download the content every four hours until it tries 18 times.

系统不会自动删除缓存内容。Cached content isn't automatically deleted. 在客户端使用缓存内容后,该内容至少在缓存中保留一天。It remains in the cache for at least one day after the client uses that content. 如果将该内容配置为包含将内容保留在客户端缓存中的选项,则客户端不会自动将其删除。If you configure the content with the option to persist content in the client cache, the client doesn't automatically delete it. 如果缓存空间由最近 24 小时内下载的内容占用,并且客户端必须下载新内容,则可以增加缓存大小,或选择选项以删除保留的缓存内容。If the cache space is used by content that was downloaded within the last 24 hours, and the client must download new content, either increase the cache size or choose the option to delete persisted cache content.

仅适用于应用程序,如果缓存中当前存在相关部署的内容,则客户端只会下载新的或更改的文件。For applications only, if the content for a related deployment currently exists in the cache, then the client downloads only new or changed files. 相关部署包括相同部署类型的旧版部署和被取代应用程序的的部署。Related deployments include those for older revisions of the same deployment type and superseded applications.

使用以下过程在手动客户端安装过程中或在安装客户端之后配置客户端缓存。Use the following procedures to configure the client cache during manual client installation, or after the client is installed.

在客户端手动安装过程中配置缓存Configure the cache during manual client installation

从安装源位置运行 CCMSetup.exe 命令,并指定所需的以下属性,用空格分隔:Run the CCMSetup.exe command from the install source location and specify the following properties that you require, and separated by spaces:

  • DISABLECACHEOPTDISABLECACHEOPT

    • SMSCACHEDIRSMSCACHEDIR

    • SMSCACHEFLAGSSMSCACHEFLAGS

    • SMSCACHESIZESMSCACHESIZE

      备注

      请使用 Configuration Manager 控制台中“客户端设置”的可用缓存大小设置,而不是 SMSCACHESIZE。Use the cache size settings available in Client Settings in the Configuration Manager console instead of SMSCACHESIZE. 有关详细信息,请参阅客户端缓存设置For more information, see Client cache settings.

有关如何使用 CCMSetup.exe 的这些命令行属性的详细信息,请参阅关于客户端安装属性For more information about how to use these command-line properties for CCMSetup.exe, see About client installation properties.

在客户端请求安装过程中配置缓存Configure the cache during client push installation

  1. 在 Configuration Manager 控制台中,转到“管理”工作区,展开“站点配置”,然后选择“站点”节点。In the Configuration Manager console, go to the Administration workspace, expand Site Configuration, and select the Sites node.

  2. 选择适当的站点。Select the appropriate site. 在功能区的“主页”选项卡上的“设置”组中,依次选择“客户端安装设置”、“客户端请求安装” 。On the Home tab of the ribbon, in the Settings group, select Client Installation Settings, and choose Client Push Installation. 切换到“安装属性”选项卡。Switch to the Installation Properties tab.

  3. 指定以下属性,并使用空格分隔:Specify the following properties, separated by spaces:

    • DISABLECACHEOPTDISABLECACHEOPT

    • SMSCACHEDIRSMSCACHEDIR

    • SMSCACHEFLAGSSMSCACHEFLAGS

    • SMSCACHESIZESMSCACHESIZE

      备注

      请使用 Configuration Manager 控制台中“客户端设置”的可用缓存大小设置,而不是 SMSCACHESIZE。Use the cache size settings available in Client Settings in the Configuration Manager console instead of SMSCACHESIZE. 有关详细信息,请参阅客户端缓存设置For more information, see Client cache settings.

      有关如何使用 CCMSetup.exe 的这些命令行属性的详细信息,请参阅关于客户端安装属性For more information about how to use these command-line properties for CCMSetup.exe, see About client installation properties.

配置客户端计算机上的缓存Configure the cache on the client computer

  1. 在客户端计算机上,打开“Configuration Manager”控制面板。On the client computer, open the Configuration Manager control panel.

  2. 切换到“缓存”选项卡。设置空间和位置属性。Switch to the Cache tab. Set the space and location properties. 默认位置为 %windir%\ccmcacheThe default location is %windir%\ccmcache.

  3. 若要删除缓存文件夹中的文件,请选择“删除文件”。To delete the files in the cache folder, choose Delete Files.

在客户端设置中配置客户端缓存大小Configure client cache size in Client Settings

在无需重新安装客户端的情况下调整客户端缓存的大小。Adjust the size of the client cache without having to reinstall the client. 请使用 Configuration Manager 控制台中“客户端设置”的可用缓存大小设置。Use the cache size settings available in Client Settings in the Configuration Manager console. 有关详细信息,请参阅客户端缓存设置For more information, see Client cache settings.

卸载客户端Uninstall the client

可通过将 CCMSetup.exe 与 /Uninstall 属性一起使用从计算机卸载 Configuration Manager 客户端软件 。You can uninstall the Configuration Manager client software from a computer by using CCMSetup.exe with the /Uninstall property. 在单独的计算机上从命令提示符运行 CCMSetup.exe,或部署包以便为计算机集合卸载客户端。Run CCMSetup.exe on an individual computer from the command prompt, or deploy a package to uninstall the client for a collection of computers.

备注

无法从移动设备中卸载 Configuration Manager 客户端。You can't uninstall the Configuration Manager client from a mobile device. 如果必须从移动设备中删除 Configuration Manager 客户端,则必须擦除设备,从而删除移动设备上的所有数据。If you must remove the Configuration Manager client from a mobile device, you must wipe the device, which deletes all data on the mobile device.

  1. 以管理员身份打开 Windows 命令提示符。Open a Windows command prompt as an administrator. 将文件夹更改到 CCMSetup.exe 所在的位置,如 cd %windir%\ccmsetupChange the folder to the location in which CCMSetup.exe is located, for example: cd %windir%\ccmsetup

  2. 运行以下命令:CCMSetup.exe /uninstallRun the following command: CCMSetup.exe /uninstall

提示

卸载过程不会在屏幕上显示结果。The uninstall process displays no results on the screen. 要验证客户端是否已成功卸载,请查看以下日志文件:%windir%\ccmsetup\logs\CCMSetup.logTo verify that the client successfully uninstalls, see the following log file: %windir%\ccmsetup\logs\CCMSetup.log

如果需要等待卸载过程完成,才能执行其他操作,请在 PowerShell 中运行 Wait-Process CCMSetupIf you need to wait for the uninstall process to complete before doing something else, run Wait-Process CCMSetup in PowerShell. 此命令可以暂停脚本,直到 CCMSetup 过程完成。This command can pause a script until the CCMSetup process completes.

管理冲突的记录Manage conflicting records

Configuration Manager 使用硬件标识符来尝试标识可能重复的客户端,并发出有关冲突的记录的警报。Configuration Manager uses the hardware identifier to attempt to identify clients that might be duplicates and alert you to the conflicting records. 例如,如果重新安装计算机,则硬件标识符将相同,但 Configuration Manager 使用的 GUID 可能已更改。For example, if you reinstall a computer, the hardware identifier would be the same but the GUID used by Configuration Manager might be changed.

通过 Configuration Manager,可以使用计算机帐户的 Windows 身份验证或来自受信任来源的 PKI 证书自动解决冲突。Configuration Manager automatically resolves conflicts by using Windows authentication of the computer account or a PKI certificate from a trusted source. 如果 Configuration Manager 无法解决重复硬件标识符冲突,则由层次结构设置决定行为。When Configuration Manager can't resolve the conflict of duplicate hardware identifiers, a hierarchy setting determines the behavior.

更改用于管理冲突记录的层次结构设置Change the hierarchy setting for managing conflicting records

  1. 在 Configuration Manager 控制台中,转到“管理”工作区,展开“站点配置”,然后选择“站点”节点。In the Configuration Manager console, go to the Administration workspace, expand Site Configuration, and select the Sites node.

  2. 在功能区中,选择“层次结构设置”。In the ribbon, select Hierarchy Settings.

  3. 切换到“客户端批准和冲突的记录”选项卡,并选择下列选项之一:Switch to the Client Approval and Conflicting Records tab, and select one of the following options:

    • 自动解决冲突的记录Automatically resolve conflicting records
    • 手动解决冲突的记录Manually resolve conflicting records

手动解决冲突的记录Manually resolve conflicting records

  1. 在 Configuration Manager 控制台中,转到“监视”工作区,展开“系统状态”,然后选择“冲突的记录”节点 。In the Configuration Manager console, go to the Monitoring workspace, expand System Status, and select the Conflicting Records node.

  2. 选择一个或多个冲突的记录,然后选择“冲突的记录”。Select one or more conflicting records, and then choose Conflicting Record.

  3. 选择下列选项之一:Select one of the following options:

    • 合并:合并新检测到的记录和现有客户端记录。Merge: Combine the newly detected record with the existing client record.

    • 新建:为冲突的客户端记录创建新记录。New: Create a new record for the conflicting client record.

    • 阻止:为冲突的客户端记录创建新记录,但将其标记为已阻止。Block: Create a new record for the conflicting client record, but mark it as blocked.

管理重复的硬件标识符Manage duplicate hardware identifiers

可以提供 Configuration Manager 为实现 PXE 启动和客户端注册,而忽略的硬件标识符列表。You can provide a list of hardware identifiers that Configuration Manager ignores for PXE boot and client registration. 此列表可帮助解决两个常见问题:This list helps to address two common issues:

  1. 许多新设备不包括板载以太网端口。Many new devices don't include an onboard Ethernet port. 为部署 OS,技术人员会使用 USB 转以太网适配器来建立有线连接。Technicians use a USB-to-Ethernet adapter to establish a wired connection for purposes of OS deployment. 出于成本和一般可用性的考虑,这些适配器通常会共享使用。These adapters are often shared because of cost and general usability. 站点使用此适配器的 MAC 地址来标识设备。The site uses the MAC address of this adapter to identify the device. 因此,如果每次部署之间没有其他管理员操作,则重复使用适配器的操作会出现问题。So reusing the adapter becomes problematic without additional administrator actions between each deployment. 若要重复使用此方案中的适配器,请排除其 MAC 地址。To reuse the adapter in this scenario, exclude its MAC address.

  2. SMBIOS 属性应唯一,某些特殊硬件设备具有重复标识符。While the SMBIOS attribute should be unique, some specialty hardware devices have duplicate identifiers. 排除此重复标识符,并依赖于每个设备的唯一 MAC 地址。Exclude this duplicate identifier and rely on the unique MAC address of each device.

通过以下过程,添加 Configuration Manager 要忽略的硬件标识符:Use the following process to add hardware identifiers for Configuration Manager to ignore:

  1. 在 Configuration Manager 控制台中,转到“管理”工作区,展开“站点配置”,然后选择“站点”节点。In the Configuration Manager console, go to the Administration workspace, expand Site Configuration, and select the Sites node.

  2. 在功能区“主页”选项卡的“站点”组中,选择“层次结构设置” 。On the Home tab of the ribbon, in the Sites group, choose Hierarchy Settings.

  3. 切换到“客户端批准和冲突的记录”选项卡。若要添加新的硬件标识符,在“复制硬件标识符”部分中选择“添加” 。Switch to the Client Approval and Conflicting Records tab. To add new hardware identifiers, choose Add in the Duplicate hardware identifiers section.

提示

自版本 1910 开始,使用以下 PowerShell cmdlet 自动管理重复的硬件标识符:Starting in version 1910, use the following PowerShell cmdlets to automate the management of duplicate hardware identifiers:

  • New-CMDuplicateHardwareIdGuidNew-CMDuplicateHardwareIdGuid
  • Remove-CMDuplicateHardwareIdGuidRemove-CMDuplicateHardwareIdGuid
  • New-CMDuplicateHardwareIdMacAddressNew-CMDuplicateHardwareIdMacAddress
  • Remove-CMDuplicateHardwareIdMacAddressRemove-CMDuplicateHardwareIdMacAddress

启动策略检索Start policy retrieval

Configuration Manager 客户端按配置为客户端设置的计划下载其客户端策略。A Configuration Manager client downloads its client policy on a schedule that you configure as a client setting. 还可以从客户端启动按需策略检索。You can also start on-demand policy retrieval from the client. 例如,用于故障排除或测试的情况。For example, for troubleshooting or testing situations.

通过客户端通知启动客户端策略检索Start client policy retrieval with client notification

  1. 在 Configuration Manager 控制台中,转到“资产和符合性”工作区,并选择“设备” 。In the Configuration Manager console, go to the Assets and Compliance workspace, and select Devices.

  2. 选择要下载策略的设备。Select the device that you want to download policy. 在功能区“主页”选项卡上的“设备”组中,选择“客户端通知”,然后选择“下载计算机策略” 。On the Home tab of the ribbon, in the Device group, select Client Notification, and then choose Download Computer Policy.

    备注

    还可以使用客户端通知来为集合中的所有设备启动策略检索。You can also use client notification to start policy retrieval for all devices in a collection.

从 Configuration Manager 客户端控制面板中启动客户端策略检索Start client policy retrieval from the Configuration Manager client control panel

  1. 打开计算机上的“Configuration Manager”控制面板。Open the Configuration Manager control panel on the computer.

  2. 切换到“操作”选项卡。选择“计算机策略检索和评估周期”以启动计算机策略,然后选择“立即运行” 。Switch to the Actions tab. Select Machine Policy Retrieval & Evaluation Cycle to start the computer policy, and then select Run Now.

  3. 选择“确定”,确认提示。Select OK to confirm the prompt.

  4. 对任何其他操作,重复前面的步骤。Repeat the previous steps for any other actions. 例如,对用户客户端设置,选择“用户策略检索和评估周期”。For example, User Policy Retrieval & Evaluation Cycle for user client settings.

通过支持中心启动客户端策略检索Start client policy retrieval with Support Center

使用支持中心来请求和查看客户端策略。Use Support Center to request and view client policy. 有关详细信息,请参阅支持中心参考For more information, see Support Center reference.

使用脚本启动客户端策略检索Start client policy retrieval by script

  1. 打开脚本编辑器,如记事本或 Windows PowerShell ISE。Open a script editor, such as Notepad or Windows PowerShell ISE.

  2. 复制以下示例 PowerShell 代码并将其插入Copy and insert the following sample PowerShell code 到文件中:into the file:

    $trigger = "{00000000-0000-0000-0000-000000000021}"
    Invoke-WmiMethod -Namespace root\ccm -Class sms_client -Name TriggerSchedule $trigger
    

    提示

    有关计划 ID 的详细信息,请参阅消息 IDFor more information about the schedule IDs, see Message IDs.

  3. 以 .ps1 扩展名保存文件。Save the file with a .ps1 extension.

  4. 在客户端上运行脚本。Run the script on the client.