關於 Configuration Manager 中的用戶端安裝參數和屬性About client installation parameters and properties in Configuration Manager

適用於:Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

使用 CCMSetup.exe 命令來安裝設定管理員用戶端。Use the CCMSetup.exe command to install the Configuration Manager client. 如果在命令列上提供用戶端安裝「參數」,則這些參數會修改安裝行為。If you provide client installation parameters on the command line, they modify the installation behavior. 如果在命令列上提供用戶端安裝「屬性」,則這些屬性會修改所安裝用戶端代理程式的初始組態。If you provide client installation properties on the command line, they modify the initial configuration of the installed client agent.

關於 CCMSetup.exeAbout CCMSetup.exe

CCMSetup.exe 命令會下載所需的檔案,以從管理點或來源位置安裝用戶端。The CCMSetup.exe command downloads needed files to install the client from a management point or a source location. 這些檔案可能包含下列項目:These files might include:

  • 安裝用戶端軟體的 Windows Installer 套件 client.msiThe Windows Installer package client.msi that installs the client software

  • 用戶端先決條件Client prerequisites

  • Configuration Manager 用戶端的更新和修正程式Updates and fixes for the Configuration Manager client

注意

您無法直接安裝 client.msi。You can't directly install client.msi.

CCMSetup.exe 提供命令列「參數」來自訂安裝。CCMSetup.exe provides command-line parameters to customize the installation. 參數前面會加上斜線 (/),且通常會採用小寫。Parameters are prefixed with a slash (/) and are generally lower case. 您可在必要時指定參數值,方法是使用冒號 (:),後面緊接著值。You specify the value of a parameter when necessary using a colon (:) immediately followed by the value. 如需詳細資訊,請參閱 CCMSetup.exe 命令列參數For more information, see CCMSetup.exe command-line parameters.

您也可以在 CCMSetup.exe 命令列上提供「屬性」,以修改 client.msi 的行為。You can also supply properties at the CCMSetup.exe command line to modify the behavior of client.msi. 依慣例,屬性會採用大寫。Properties by convention are upper case. 指定屬性值的方式是使用等號 (=),後面緊接著值。You specify a value for a property using an equal sign (=) immediately followed by the value. 如需詳細資訊,請參閱 Client.msi 屬性For more information, see Client.msi properties.

重要

請先指定 CCMSetup 參數,再指定 client.msi 的屬性。Specify CCMSetup parameters before you specify properties for client.msi.

CCMSetup.exe 及其支援檔案位於站台伺服器上 Configuration Manager 安裝資料夾的 Client 資料夾中。CCMSetup.exe and the supporting files are on the site server in the Client folder of the Configuration Manager installation folder. Configuration Manager 會將此資料夾與站台共用下的網路共用。Configuration Manager shares this folder to the network under the site share. 例如 \\SiteServer\SMS_ABC\ClientFor example, \\SiteServer\SMS_ABC\Client.

在命令列提示字元,CCMSetup.exe 命令會使用下列格式:At the command prompt, the CCMSetup.exe command uses the following format:

CCMSetup.exe [<Ccmsetup parameters>] [<client.msi setup properties>]

例如:For example:

CCMSetup.exe /mp:SMSMP01 /logon SMSSITECODE=S01 FSP=SMSFSP01

此範例會執行下列動作:This example does the following things:

  • 指定名為 SMSMP01 的管理點要求發佈點清單,以下載用戶端安裝檔案。Specifies the management point named SMSMP01 to request a list of distribution points to download the client installation files.

  • 指定如果電腦上已存在用戶端版本,則應停止安裝程序。Specifies that installation should stop if a version of the client already exists on the computer.

  • 指示 client.msi 將用戶端指派為網站碼 S01。Instructs client.msi to assign the client to the site code S01.

  • 指示 client.msi 使用名為 SMSFP01 的後援狀態點。Instructs client.msi to use the fallback status point named SMSFP01.

提示

如果參數具有空白字元,請使用引號將其括住。If a parameter value has spaces, surround it with quotation marks.

如果擴充 Configuration Manager 的 Active Directory 架構,則站台會在 Active Directory Domain Services 中發佈許多用戶端安裝屬性。If you extend the Active Directory schema for Configuration Manager, the site publishes many client installation properties in Active Directory Domain Services. 設定管理員用戶端會自動讀取這些屬性。The Configuration Manager client automatically reads these properties. 如需詳細資訊,請參閱關於發佈至 Active Directory 網域服務的用戶端安裝屬性For more information, see About client installation properties published to Active Directory Domain Services

CCMSetup.exe 命令列參數CCMSetup.exe command-line parameters

/?/?

顯示 ccmsetup.exe 的可用命令列參數。Shows available command-line parameters for ccmsetup.exe.

範例:ccmsetup.exe /?Example: ccmsetup.exe /?

/AllowMetered/AllowMetered

從 2006 版開始,使用此參數來控制用戶端使用計量付費網路時的行為。Starting in version 2006, use this parameter to control the client's behavior on a metered network. 此參數不會接受任何值。This parameter takes no values. 當您允許在適用於 ccmsetup 的計量付費網路上進行用戶端通訊時,其會下載內容、向網站註冊,並下載初始原則。When you allow client communication on a metered network for ccmsetup, it downloads the content, registers with the site, and downloads the initial policy. 任何進一步的用戶端通訊都會遵循該原則中的用戶端設定。Any further client communication follows the configuration of the client setting from that policy. 如需詳細資訊,請參閱關於用戶端設定For more information, see About client settings.

如果您在現有裝置上重新安裝用戶端,其會使用下列優先順序來決定其設定:If you reinstall the client on an existing device, it uses the following priority to determine its configuration:

  1. 現有的本機用戶端原則Existing local client policy
  2. 儲存在 Windows 登錄中的最後一個命令列The last command line stored in the Windows registry
  3. ccmsetup 命令列上的參數Parameters on the ccmsetup command line

/AlwaysExcludeUpgrade/AlwaysExcludeUpgrade

此參數會指定用戶端是否會在您啟用 [自動用戶端升級] 時自動升級。This parameter specifies whether or not a client will auto upgrade when you enable Automatic client upgrade.

支援的值:Supported values:

  • TRUE:用戶端不會自動升級TRUE: The client won't automatically upgrade
  • FALSE:用戶端會自動升級 (預設值)FALSE: The client automatically upgrades (default)

例如:For example:

CCMSetup.exe /AlwaysExcludeUpgrade:TRUE

如需詳細資訊,請參閱延伸互通性用戶端For more information, see Extended interoperability client.

注意

使用 /AlwaysExcludeUpgrade 參數時,自動升級仍會執行。When using the /AlwaysExcludeUpgrade parameter, the auto upgrade still runs. 不過,當系統執行 CCMSetup 以執行升級時,其會注意到已設定 /AlwaysExcludeUpgrade 參數,並會在 ccmsetup.log 中記錄下列這一行:However when CCMSetup runs to perform the upgrade, it will note that /AlwaysExcludeUpgrade parameter has been set and will log the following line in the ccmsetup.log:

Client is stamped with /alwaysexcludeupgrade. Stop proceeding.

CCMSetup 將會立即結束,且不會執行升級。CCMSetup will then immediately exit and not perform the upgrade.

/BITSPriority/BITSPriority

當裝置透過 HTTP 連線下載用戶端安裝檔案時,請使用此參數來指定下載優先順序。When the device downloads client installation files over an HTTP connection, use this parameter to specify the download priority. 請指定下列其中一個可能的值:Specify one of the following possible values:

  • FOREGROUND

  • HIGH

  • NORMAL (預設)NORMAL (default)

  • LOW

範例:ccmsetup.exe /BITSPriority:HIGHExample: ccmsetup.exe /BITSPriority:HIGH

/config/config

此參數會指定列出用戶端安裝屬性的文字檔。This parameter specifies a text file that lists client installation properties.

  • 如果 CCMSetup 以服務形式執行,請將此檔案放在 CCMSetup 系統資料夾 %Windir%\Ccmsetup 中。If CCMSetup runs as a service, place this file in the CCMSetup system folder: %Windir%\Ccmsetup.

  • 如果指定 /noservice 參數,請將此檔案放在與 CCMSetup.exe 相同的資料夾中。If you specify the /noservice parameter, place this file in the same folder as CCMSetup.exe.

範例:CCMSetup.exe /config:"configuration file name.txt"Example: CCMSetup.exe /config:"configuration file name.txt"

為了提供正確檔案格式,請使用站台伺服器上 Configuration Manager 安裝目錄其 \bin\<platform> 資料夾中的 mobileclienttemplate.tcf 檔案。To provide the correct file format, use the mobileclienttemplate.tcf file in the \bin\<platform> folder in the Configuration Manager installation directory on the site server. 此檔案具有各區段及其使用方式的相關註解。This file has comments about the sections and how to use them. [Client Install] 區段中的 Install=INSTALL=ALL 文字後方指定用戶端安裝屬性。Specify the client installation properties in the [Client Install] section, after the following text: Install=INSTALL=ALL.

[Client Install] 區段項目的範例:Install=INSTALL=ALL SMSSITECODE=ABC SMSCACHESIZE=100Example [Client Install] section entry: Install=INSTALL=ALL SMSSITECODE=ABC SMSCACHESIZE=100

/downloadtimeout/downloadtimeout

如果 CCMSetup 無法下載用戶端安裝檔案,則此參數會指定逾時上限 (分鐘)。If CCMSetup fails to download the client installation files, this parameter specifies the maximum timeout in minutes. 超過此逾時值,CCMSetup 就會停止嘗試下載安裝檔案。After this timeout, CCMSetup stops trying to download the installation files. 預設值為 1440 分鐘 (一天)。The default value is 1440 minutes (one day).

使用 /retry 參數來指定重試嘗試之間的間隔。Use the /retry parameter to specify the interval between retry attempts.

範例:ccmsetup.exe /downloadtimeout:100Example: ccmsetup.exe /downloadtimeout:100

/ExcludeFeatures/ExcludeFeatures

此參數會指定 CCMSetup.exe 不安裝指定的功能。This parameter specifies that CCMSetup.exe doesn't install the specified feature.

範例:CCMSetup.exe /ExcludeFeatures:ClientUI 不會在用戶端上安裝軟體中心。Example: CCMSetup.exe /ExcludeFeatures:ClientUI doesn't install Software Center on the client.

注意

ClientUI/ExcludeFeatures 參數唯一支援的值。ClientUI is the only value that the /ExcludeFeatures parameter supports.

/forceinstall/forceinstall

指定 CCMSetup.exe 解除安裝任何現有的用戶端,並安裝新的用戶端。Specify that CCMSetup.exe uninstalls any existing client, and installs a new client.

/forcereboot/forcereboot

如有必要,請使用此參數來強制電腦重新啟動以完成安裝。Use this parameter to force the computer to restart if necessary to complete the installation. 如果未指定此參數,CCMSetup 就會在需要重新啟動時結束。If you don't specify this parameter, CCMSetup exits when a restart is necessary. 然後在下一次手動重新啟動之後繼續。It then continues after the next manual restart.

範例:CCMSetup.exe /forcerebootExample: CCMSetup.exe /forcereboot

/logon/logon

如果已安裝任何版本的用戶端,此參數會指定應該停止用戶端安裝。If any version of the client is already installed, this parameter specifies that the client installation should stop.

範例:ccmsetup.exe /logonExample: ccmsetup.exe /logon

/mp/mp

指定電腦要連線的來源管理點。Specifies a source management point for computers to connect to. 電腦會使用此管理點來尋找安裝檔案的最接近發佈點。Computers use this management point to find the nearest distribution point for the installation files. 如果沒有發佈點或電腦在 4 小時後仍無法從發佈點下載檔案,它們便會從指定的管理點下載檔案。If there are no distribution points, or computers can't download the files from the distribution points after four hours, they download the files from the specified management point.

如需 ccmsetup 如何下載內容的詳細資訊,請參閱界限群組 - 用戶端安裝For more information on how ccmsetup downloads content, see Boundary groups - client installation. 如果您同時使用 /mp/source 參數,該文章也會包含 ccmsetup 行為的詳細資料。That article also includes details of ccmsetup behavior if you use both /mp and /source parameters.

重要

此參數會指定可供電腦尋找下載來源的初始管理點,且可以是任何站台中的任何管理點。This parameter specifies an initial management point for computers to find a download source, and can be any management point in any site. 不會將用戶端「指派」給指定的管理點。It doesn't assign the client to the specified management point.

電腦會根據用戶端連線的網站系統角色設定,透過 HTTP 或 HTTPS 連線下載檔案。Computers download the files over an HTTP or HTTPS connection, depending on the site system role configuration for client connections. 如有設定,您也可以使用 BITS 節流進行下載。The download can also use BITS throttling if you configure it. 如果將所有發佈點和管理點設為僅供 HTTPS 用戶端連線,請確認用戶端電腦具備有效的用戶端憑證。If you configure all distribution points and management points for HTTPS client connections only, verify that the client computer has a valid client certificate.

您可以使用 /mp 命令列參數來指定多個管理點。You can use the /mp command-line parameter to specify more than one management point. 如果電腦無法連線到第一個管理點,則會嘗試指定清單中的下一個管理點。If the computer fails to connect to the first one, it tries the next in the specified list. 當您指定多個管理點時,請使用分號分隔這些值。When you specify multiple management points, separate the values by semicolons.

如果用戶端使用 HTTPS 連線到管理點,請指定 FQDN,而不是電腦名稱。If the client connects to a management point using HTTPS, specify the FQDN not the computer name. 此值必須符合管理點 PKI 憑證的主體名稱主體別名The value must match the management point PKI certificate's Subject or Subject Alternative Name. 雖然 Configuration Manager 支援在內部網路上使用憑證中的電腦名稱來進行連線,但建議使用 FQDN。Although Configuration Manager supports using a computer name in the certificate for connections on the intranet, using an FQDN is recommended.

使用電腦名稱的範例:ccmsetup.exe /mp:SMSMP01Example with the computer name: ccmsetup.exe /mp:SMSMP01

使用 FQDN 的範例:ccmsetup.exe /mp:smsmp01.contoso.comExample with the FQDN: ccmsetup.exe /mp:smsmp01.contoso.com

此參數也可以指定雲端管理閘道 (CMG) 的 URL。This parameter can also specify the URL of a cloud management gateway (CMG). 使用這個 URL 在以網際網路為基礎的裝置上安裝用戶端。Use this URL to install the client on an internet-based device. 若要取得此參數的值,請使用下列步驟:To get the value for this parameter, use the following steps:

  • 建立 CMG。Create a CMG. 如需詳細資訊,請參閱設定 CMGFor more information, see Set up a CMG.

  • 在使用中用戶端上,以系統管理員身分開啟 Windows PowerShell 命令提示字元。On an active client, open a Windows PowerShell command prompt as an administrator.

  • 執行下列命令:Run the following command:

    (Get-WmiObject -Namespace Root\Ccm\LocationServices -Class SMS_ActiveMPCandidate | Where-Object {$_.Type -eq "Internet"}).MP
    
  • 附加 https:// 首碼以與 /mp 參數搭配使用。Append the https:// prefix to use with the /mp parameter.

當您使用雲端管理閘道 URL 時的範例:ccmsetup.exe /mp:https://CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72057598037248100Example for when you use the cloud management gateway URL: ccmsetup.exe /mp:https://CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72057598037248100

重要

/mp 參數指定雲端管理閘道的 URL 時,其開頭必須是 https://When specifying the URL of a cloud management gateway for the /mp parameter, it must start with https://.

/NoCRLCheck/NoCRLCheck

指定用戶端在使用 PKI 憑證進行 HTTPS 通訊時,不應該檢查憑證撤銷清單 (CRL)。Specifies that a client shouldn't check the certificate revocation list (CRL) when it communicates over HTTPS with a PKI certificate. 若未指定此參數,則用戶端會先檢查 CRL,再建立 HTTPS 連線。When you don't specify this parameter, the client checks the CRL before it establishes an HTTPS connection. 如需有關用戶端 CRL 檢查的詳細資訊,請參閱 PKI 憑證撤銷的規劃For more information about client CRL checking, see Planning for PKI certificate revocation.

範例:CCMSetup.exe /UsePKICert /NoCRLCheckExample: CCMSetup.exe /UsePKICert /NoCRLCheck

/noservice/noservice

此參數可防止 CCMSetup 以預設的服務形式執行。This parameter prevents CCMSetup from running as a service, which it does by default. 當 CCMSetup 以服務形式執行時,它會在電腦的本機系統帳戶內容中執行。When CCMSetup runs as a service, it runs in the context of the Local System account of the computer. 此帳戶可能沒有足夠權限可以存取安裝必要的網路資源。This account might not have sufficient rights to access required network resources for the installation. 若使用 /noservice,CCMSetup.exe 會在您用於啟動安裝的使用者帳戶內容中執行。With /noservice, CCMSetup.exe runs in the context of the user account that you use to start the installation.

範例:ccmsetup.exe /noserviceExample: ccmsetup.exe /noservice

/regtoken/regtoken

從 2002 版開始,您可使用此參數來提供大量註冊權杖。Starting in version 2002, use this parameter to provide a bulk registration token. 網際網路型裝置會在透過雲端管理閘道 (CMG) 的註冊程序中使用此權杖。An internet-based device uses this token in the registration process through a cloud management gateway (CMG). 如需詳細資訊,請參閱 CMG 的權杖型驗證For more information, see Token-based authentication for CMG.

當使用此參數時,亦需一併加入下列參數和屬性:When you use this parameter, also include the following parameters and properties:

下列範例命令列包含其他必要的安裝程式參數和屬性:The following example command line includes the other required setup parameters and properties:

ccmsetup.exe /mp:https://CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72186325152220500 CCMHOSTNAME=CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72186325152220500 SMSSiteCode=ABC SMSMP=https://mp1.contoso.com /regtoken:eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6Ik9Tbzh2Tmd5VldRUjlDYVh5T2lacHFlMDlXNCJ9.eyJTQ0NNVG9rZW5DYXRlZ29yeSI6IlN7Q01QcmVBdXRoVG9rZW4iLCJBdXRob3JpdHkiOiJTQ0NNIiwiTGljZW5zZSI6IlNDQ00iLCJUeXBlIjoiQnVsa1JlZ2lzdHJhdGlvbiIsIlRlbmFudElkIjoiQ0RDQzVFOTEtMEFERi00QTI0LTgyRDAtMTk2NjY3RjFDMDgxIiwiVW5pcXVlSWQiOiJkYjU5MWUzMy1wNmZkLTRjNWItODJmMy1iZjY3M2U1YmQwYTIiLCJpc3MiOiJ1cm46c2NjbTpvYXV0aDI6Y2RjYzVlOTEtMGFkZi00YTI0LTgyZDAtMTk2NjY3ZjFjMDgxIiwiYXVkIjoidXJuOnNjY206c2VydmljZSIsImV4cCI6MTU4MDQxNbUwNSwibmJmIjoxNTgwMTU2MzA1fQ.ZUJkxCX6lxHUZhMH_WhYXFm_tbXenEdpgnbIqI1h8hYIJw7xDk3wv625SCfNfsqxhAwRwJByfkXdVGgIpAcFshzArXUVPPvmiUGaxlbB83etUTQjrLIk-gvQQZiE5NSgJ63LCp5KtqFCZe8vlZxnOloErFIrebjFikxqAgwOO4i5ukJdl3KQ07YPRhwpuXmwxRf1vsiawXBvTMhy40SOeZ3mAyCRypQpQNa7NM3adCBwUtYKwHqiX3r1jQU0y57LvU_brBfLUL6JUpk3ri-LSpwPFarRXzZPJUu4-mQFIgrMmKCYbFk3AaEvvrJienfWSvFYLpIYA7lg-6EVYRcCAA

/retry/retry

如果 CCMSetup.exe 無法下載安裝檔案,請使用此參數來指定重試間隔 (分鐘)。If CCMSetup.exe fails to download installation files, use this parameter to specify the retry interval in minutes. CCMSetup 會持續重試,直到達到 /downloadtimeout 參數所指定的限制為止。CCMSetup continues to retry until it reaches the limit specified in the /downloadtimeout parameter.

範例:ccmsetup.exe /retry:20Example: ccmsetup.exe /retry:20

/service/service

指定 CCMSetup 應以使用本機系統帳戶的服務形式執行。Specifies that CCMSetup should run as a service that uses the Local System account.

提示

如果搭配 /service 參數使用指令碼來執行 CCMSetup.exe,CCMSetup.exe 就會在服務啟動後結束。If you're using a script to run CCMSetup.exe with the /service parameter, CCMSetup.exe exits after the service starts. 而可能無法正確回報安裝詳細資料給指令碼。It might not correctly report installation details to the script.

範例:ccmsetup.exe /serviceExample: ccmsetup.exe /service

/skipprereq/skipprereq

此參數會指定 CCMSetup.exe 不安裝指定的必要條件。This parameter specifies that CCMSetup.exe doesn't install the specified prerequisite. 您可輸入多個值。You can enter more than one value. 使用分號字元 (;) 分隔每一個值。Use the semicolon character (;) to separate each value.

範例:Examples:

  • CCMSetup.exe /skipprereq:filename.exe

  • CCMSetup.exe /skipprereq:filename1.exe;filename2.exe

如需用戶端先決條件的詳細資訊,請參閱 Windows 用戶端先決條件For more information on client prerequisites, see Windows client prerequisites.

/source/source

指定檔案的下載位置。Specifies the file download location. 使用本機或 UNC 路徑。Use a local or UNC path. 裝置會利用伺服器訊息區 (SMB) 通訊協定下載檔案。The device downloads files using the server message block (SMB) protocol. 若要使用 /source,則進行用戶端安裝的 Windows 使用者帳戶需要該位置的讀取權限。To use /source, the Windows user account for client installation needs Read permissions to the location.

如需 ccmsetup 如何下載內容的詳細資訊,請參閱界限群組 - 用戶端安裝For more information on how ccmsetup downloads content, see Boundary groups - client installation. 如果您同時使用 /mp/source 參數,該文章也會包含 ccmsetup 行為的詳細資料。That article also includes details of ccmsetup behavior if you use both /mp and /source parameters.

提示

您可以在命令列中多次使用 /source 參數來指定替代的下載位置。You can use the /source parameter more than once in a command line to specify alternative download locations.

範例:ccmsetup.exe /source:"\\server\share"Example: ccmsetup.exe /source:"\\server\share"

/uninstall/uninstall

使用此參數來解除安裝 Configuration Manager 用戶端。Use this parameter to uninstall the Configuration Manager client. 如需詳細資訊,請參閱解除安裝用戶端For more information, see Uninstall the client.

範例:ccmsetup.exe /uninstallExample: ccmsetup.exe /uninstall

/UsePKICert/UsePKICert

為用戶端指定此參數,以使用 PKI 用戶端驗證憑證。Specify this parameter for the client to use a PKI client authentication certificate. 如果未包含此參數,或如果用戶端找不到有效的憑證,則會使用具有自我簽署憑證的 HTTP 連線。If you don't include this parameter, or if the client can't find a valid certificate, it uses an HTTP connection with a self-signed certificate.

範例:CCMSetup.exe /UsePKICertExample: CCMSetup.exe /UsePKICert

注意

在某些情況下,您不需要指定此參數,但仍可以使用用戶端憑證。In some scenarios, you don't have to specify this parameter, but still use a client certificate. 例如,以用戶端推入和軟體更新為基礎的用戶端安裝。For example, client push and software update–based client installation. 當手動安裝用戶端並搭配啟用 HTTPS 的管理點使用 /mp 參數時,請使用此參數。Use this parameter when you manually install a client and use the /mp parameter with an HTTPS-enabled management point.

此外,當安裝用戶端來進行僅限網際網路的通訊時,請指定此參數。Also specify this parameter when you install a client for internet-only communication. 請將 CCMALWAYSINF=1 屬性與以網際網路為基礎的管理點屬性 (CCMHOSTNAME) 及站台碼屬性 (SMSSITECODE) 搭配使用。Use the CCMALWAYSINF=1 property together with the properties for the internet-based management point (CCMHOSTNAME) and the site code (SMSSITECODE). 如需以網際網路為基礎的用戶端管理的詳細資訊,請參閱從網際網路或未受信任之樹系的用戶端通訊考量For more information about internet-based client management, see Considerations for client communications from the internet or an untrusted forest.

CCMSetup.exe 傳回碼CCMSetup.exe return codes

CCMSetup.exe 命令會提供下列傳回碼。The CCMSetup.exe command provides the following return codes. 若要進行疑難排解,請檢閱用戶端上的 %WinDir%\ccmsetup\ccmsetup.log,以取得傳回碼的內容和其他詳細資料。To troubleshoot, review %WinDir%\ccmsetup\ccmsetup.log on the client for context and additional detail about return codes.

傳回碼Return code 意義Meaning
00 成功Success
66 錯誤Error
77 需要重新開機Reboot required
88 安裝程式已在執行中Setup already running
99 必要條件評估失敗Prerequisite evaluation failure
1010 安裝程式資訊清單雜湊驗證失敗Setup manifest hash validation failure

Ccmsetup.msi 屬性Ccmsetup.msi properties

下列屬性可以修改 ccmsetup.msi 的安裝行為。The following properties can modify the installation behavior of ccmsetup.msi.

CCMSETUPCMDCCMSETUPCMD

使用此 ccmsetup.msi 屬性將其他命令列參數和屬性傳遞給 ccmsetup.exeUse this ccmsetup.msi property to pass additional command-line parameters and properties to ccmsetup.exe. 請以引號 (") 括住其他參數和屬性。Include other parameters and properties inside quotation marks ("). 當使用 Intune MDM 安裝方法來啟動載入 Configuration Manager 用戶端時,請使用此屬性。Use this property when you bootstrap the Configuration Manager client with the Intune MDM installation method.

範例:ccmsetup.msi CCMSETUPCMD="/mp:https://mp.contoso.com CCMHOSTNAME=mp.contoso.com"Example: ccmsetup.msi CCMSETUPCMD="/mp:https://mp.contoso.com CCMHOSTNAME=mp.contoso.com"

提示

Microsoft Intune 會將命令列限制為 1024 個字元。Microsoft Intune limits the command line to 1024 characters.

Client.msi 屬性Client.msi properties

下列屬性可以修改 ccmsetup.exe 所安裝 client.msi 的安裝行為。The following properties can modify the installation behavior of client.msi, which ccmsetup.exe installs. 如果使用用戶端推入安裝方法,請在 Configuration Manager 主控台其 [用戶端推入安裝內容] 的 [用戶端] 索引標籤中指定這些屬性。If you use the client push installation method, specify these properties on the Client tab of the Client Push Installation Properties in the Configuration Manager console.

AADCLIENTAPPIDAADCLIENTAPPID

指定 Azure Active Directory (Azure AD) 用戶端應用程式識別碼。Specifies the Azure Active Directory (Azure AD) client app identifier. 當為雲端管理設定 Azure 服務時,可建立或匯入用戶端應用程式。You create or import the client app when you configure Azure services for Cloud Management. Azure 系統管理員可以從 Azure 入口網站取得此屬性的值。An Azure administrator can get the value for this property from the Azure portal. 如需詳細資訊,請參閱取得應用程式識別碼For more information, see get application ID. 針對 AADCLIENTAPPID 屬性,此應用程式識別碼適用於 [原生] 應用程式類型。For the AADCLIENTAPPID property, this application ID is for the Native application type.

範例:ccmsetup.exe AADCLIENTAPPID=aa28e7f1-b88a-43cd-a2e3-f88b257c863bExample: ccmsetup.exe AADCLIENTAPPID=aa28e7f1-b88a-43cd-a2e3-f88b257c863b

AADRESOURCEURIAADRESOURCEURI

指定 Azure AD 伺服器應用程式識別碼。Specifies the Azure AD server app identifier. 當為雲端管理設定 Azure 服務時,可建立或匯入伺服器應用程式。You create or import the server app when you configure Azure services for Cloud Management. 當建立伺服器應用程式時,在 [建立伺服器應用程式] 視窗中,此屬性是 [App 識別碼 URI]。When you create the server app, in the Create Server Application window, this property is the App ID URI.

Azure 系統管理員可以從 Azure 入口網站取得此屬性的值。An Azure administrator can get the value for this property from the Azure portal. Azure Active Directory 中,於 [應用程式註冊] 下尋找伺服器應用程式。In Azure Active Directory, find the server app under App registrations. 尋找應用程式類型 [Web 應用程式/API]。Look for application type Web app / API. 開啟應用程式,選取 [設定],然後選取 [屬性]。Open the app, select Settings, and then select Properties. 針對此 AADRESOURCEURI 用戶端安裝屬性,使用 [App 識別碼 URI] 值。Use the App ID URI value for this AADRESOURCEURI client installation property.

範例:ccmsetup.exe AADRESOURCEURI=https://contososerverExample: ccmsetup.exe AADRESOURCEURI=https://contososerver

AADTENANTIDAADTENANTID

指定 Azure AD 租用戶識別碼。Specifies the Azure AD tenant identifier. 當為雲端管理設定 Azure 服務時,Configuration Manager 會連結至此租用戶。Configuration Manager links to this tenant when you configure Azure services for Cloud Management. 若要取得這個屬性的值,請使用下列步驟:To get the value for this property, use the following steps:

  • 在已加入相同 Azure AD 租用戶的 Windows 10 裝置上,開啟命令提示字元。On a Windows 10 device that is joined to the same Azure AD tenant, open a command prompt.

  • 執行下列命令:dsregcmd.exe /statusRun the following command: dsregcmd.exe /status

  • 在 [裝置狀態] 區段中,尋找 TenantId 值。In the Device State section, find the TenantId value. 例如, TenantId : 607b7853-6f6f-4d5d-b3d4-811c33fdd49aFor example, TenantId : 607b7853-6f6f-4d5d-b3d4-811c33fdd49a

    注意

    Azure 系統管理員也可以在 Azure 入口網站取得此值。An Azure administrator can also obtain this value in the Azure portal. 如需詳細資訊,請參閱取得租用戶識別碼For more information, see get tenant ID.

範例:ccmsetup.exe AADTENANTID=607b7853-6f6f-4d5d-b3d4-811c33fdd49aExample: ccmsetup.exe AADTENANTID=607b7853-6f6f-4d5d-b3d4-811c33fdd49a

CCMADMINSCCMADMINS

指定一個或多個 Windows 使用者帳戶或群組,授與用戶端設定和原則的存取權限。Specifies one or more Windows user accounts or groups to be given access to client settings and policies. 此屬性適用於在用戶端電腦上沒有本機系統管理認證的情況。This property is useful when you don't have local administrative credentials on the client computer. 指定以分號 (;) 分隔的帳戶清單。Specify a list of accounts that are separated by semicolons (;).

範例:CCMSetup.exe CCMADMINS="domain\account1;domain\group1"Example: CCMSetup.exe CCMADMINS="domain\account1;domain\group1"

CCMALLOWSILENTREBOOTCCMALLOWSILENTREBOOT

如有必要,請允許電腦以無訊息方式在用戶端安裝後重新啟動。If necessary, allow the computer to silently restart after the client installation.

重要

當使用此屬性時,電腦會重新啟動,而不顯示警告。When you use this property, the computer restarts without warning. 即使使用者已登入 Windows,也會發生這種行為。This behavior occurs even if a user is signed in to Windows.

範例:CCMSetup.exe CCMALLOWSILENTREBOOTExample: CCMSetup.exe CCMALLOWSILENTREBOOT

CCMALWAYSINFCCMALWAYSINF

若要指定用戶端一律是以網際網路為基礎,且永遠不會連線到內部網路,請將此屬性值設定為 1To specify that the client is always internet-based and never connects to the intranet, set this property value to 1. 用戶端的連線類型會顯示 [永遠為網際網路] 。The client's connection type displays Always Internet.

搭配 CCMHOSTNAME 使用此屬性來指定以網際網路為基礎管理點的 FQDN。Use this property with CCMHOSTNAME to specify the FQDN of the internet-based management point. 您也可以將其與 CCMSetup 參數 /UsePKICert 及站台碼 (SMSSITECODE) 搭配使用。Also use it with the CCMSetup parameter /UsePKICert and the site code (SMSSITECODE).

如需以網際網路為基礎的用戶端管理的詳細資訊,請參閱從網際網路或未受信任之樹系的用戶端通訊考量For more information about internet-based client management, see Considerations for client communications from the internet or an untrusted forest.

範例:CCMSetup.exe /UsePKICert CCMALWAYSINF=1 CCMHOSTNAME=SERVER3.CONTOSO.COM SMSSITECODE=ABCExample: CCMSetup.exe /UsePKICert CCMALWAYSINF=1 CCMHOSTNAME=SERVER3.CONTOSO.COM SMSSITECODE=ABC

CCMCERTISSUERSCCMCERTISSUERS

使用此屬性來指定憑證簽發者清單。Use this property to specify the certificate issuers list. 此清單包含 Configuration Manager 站台所信任受信任的根憑證授權單 (CA) 相關憑證資訊。This list includes certificate information for the trusted root certification authorities (CA) that the Configuration Manager site trusts.

根 CA 憑證中的主體屬性會區分大小寫。This value is a case-sensitive match for subject attributes that are in the root CA certificate. 請以逗號 (,) 或分號 (;) 分隔屬性。Separate attributes by a comma (,) or a semicolon (;). 並使用分隔線 (|) 來指定多個根 CA 憑證。Specify more than one root CA certificate by using a separator bar (|).

範例:CCMCERTISSUERS="CN=Contoso Root CA; OU=Servers; O=Contoso, Ltd; C=US | CN=Litware Corporate Root CA; O=Litware, Inc."Example: CCMCERTISSUERS="CN=Contoso Root CA; OU=Servers; O=Contoso, Ltd; C=US | CN=Litware Corporate Root CA; O=Litware, Inc."

提示

請使用站台的 mobileclient.tcf 檔案中 CertificateIssuers 屬性值。Use the value of the CertificateIssuers attribute in the mobileclient.tcf file for the site. 此檔案位於站台伺服器上 Configuration Manager 安裝目錄的 \bin\<platform> 子資料夾中。This file is in the \bin\<platform> subfolder of the Configuration Manager installation directory on the site server.

如需憑證簽發者清單,以及憑證選取程序期間,用戶端如何使用清單的詳細資訊,請參閱規劃 PKI 用戶端憑證選擇For more information about the certificate issuers list and how clients use it during the certificate selection process, see Planning for PKI client certificate selection.

CCMCERTSELCCMCERTSEL

如果用戶端有一個以上適用於 HTTPS 通訊的憑證,則此屬性會指定準則,讓其能夠選取有效的用戶端驗證憑證。If the client has more than one certificate for HTTPS communication, this property specifies the criteria for it to select a valid client authentication certificate.

使用下列關鍵字來搜尋憑證主體名稱或主體別名:Use the following keywords to search the certificate Subject Name or Subject Alternative Name:

  • 主旨:尋找完全相符的項目Subject: Find an exact match
  • SubjectStr:尋找部分符合的項目SubjectStr: Find a partial match

範例:Examples:

  • CCMCERTSEL="Subject:computer1.contoso.com":搜尋與 [主體名稱] 或 [主體別名] 中電腦名稱 computer1.contoso.com 完全相符的憑證。CCMCERTSEL="Subject:computer1.contoso.com": Search for a certificate with an exact match to the computer name computer1.contoso.com in the Subject Name or the Subject Alternative Name.

  • CCMCERTSEL="SubjectStr:contoso.com":搜尋 [主體名稱] 或 [主體別名] 中含 contoso.com 的憑證。CCMCERTSEL="SubjectStr:contoso.com": Search for a certificate that contains contoso.com in the Subject Name or the Subject Alternative Name.

使用 SubjectAttr 關鍵字來搜尋 [主體名稱] 或 [主體別名] 中的物件識別碼 (OID) 或辨別名稱屬性。Use the SubjectAttr keyword to search for the Object Identifier (OID) or distinguished name attributes in the Subject Name or Subject Alternative Name.

範例:Examples:

  • CCMCERTSEL="SubjectAttr:2.5.4.11 = Computers":搜尋以物件識別碼表示並命名為 Computers 的組織單位屬性。CCMCERTSEL="SubjectAttr:2.5.4.11 = Computers": Search for the organizational unit attribute expressed as an object identifier and named Computers.

  • CCMCERTSEL="SubjectAttr:OU = Computers":搜尋以辨別名稱表示並命名為 Computers 的組織單位屬性。CCMCERTSEL="SubjectAttr:OU = Computers": Search for the organizational unit attribute expressed as a distinguished name, and named Computers.

重要

如果使用 [主體名稱],則 Subject 關鍵字區分大小寫,而 SubjectStr 關鍵字不區分大小寫。If you use the Subject Name, the Subject keyword is case-sensitive, and the SubjectStr keyword is case-insensitive.

如果使用 [主體別名],則 SubjectSubjectStr 關鍵字皆不區分大小寫。If you use the Subject Alternative Name, both the Subject and the SubjectStr keywords are case-insensitive.

如需可用於憑證選擇的完整屬性清單,請參閱 PKI 憑證選擇準則支援的屬性值For the complete list of attributes that you can use for certificate selection, see Supported attribute values for PKI certificate selection criteria.

如果有一個以上的憑證符合搜尋,且將 CCMFIRSTCERT 設定為 1,則用戶端安裝程式會選取有效期最長的憑證。If more than one certificate matches the search, and you set CCMFIRSTCERT to 1, then the client installer selects the certificate with the longest validity period.

CCMCERTSTORECCMCERTSTORE

如果用戶端安裝程式在電腦的預設 [個人] 憑證存放區中找不到有效的憑證,請使用此屬性來指定替代憑證存放區名稱。If the client installer can't locate a valid certificate in the default Personal certificate store for the computer, use this property to specify an alternate certificate store name.

範例:CCMSetup.exe /UsePKICert CCMCERTSTORE="ConfigMgr"Example: CCMSetup.exe /UsePKICert CCMCERTSTORE="ConfigMgr"

CCMDEBUGLOGGINGCCMDEBUGLOGGING

此屬性會在用戶端安裝時啟用偵錯記錄。This property enables debug logging when the client installs. 此屬性可讓用戶端記錄用於疑難排解的低階資訊。This property causes the client to log low-level information for troubleshooting. 請避免在生產站台中使用此屬性。Avoid using this property in production sites. 可能發生過多記錄,讓您難以在記錄檔中尋找相關資訊。Excessive logging can occur, which might make it difficult to find relevant information in the log files. 請同時啟用 CCMENABLELOGGINGAlso enable CCMENABLELOGGING.

支援的值:Supported values:

  • 0:關閉偵錯記錄 (預設)0: Turn off debug logging (default)
  • 1:開啟偵錯記錄1: Turn on debug logging

範例:CCMSetup.exe CCMDEBUGLOGGING=1Example: CCMSetup.exe CCMDEBUGLOGGING=1

如需詳細資訊,請參閱關於記錄檔For more information, see About log files.

CCMENABLELOGGINGCCMENABLELOGGING

Configuration Manager 預設會啟用記錄。Configuration Manager enables logging by default.

支援的值:Supported values:

  • TRUE:開啟記錄 (預設)TRUE: Turn on logging (default)
  • FALSE:關閉記錄FALSE: Turn off logging

範例:CCMSetup.exe CCMENABLELOGGING=TRUEExample: CCMSetup.exe CCMENABLELOGGING=TRUE

如需詳細資訊,請參閱關於記錄檔For more information, see About log files.

CCMEVALINTERVALCCMEVALINTERVAL

用戶端健全狀況評估工具 (ccmeval.exe) 執行的頻率 (分鐘)。The frequency in minutes at which the client health evaluation tool (ccmeval.exe) runs. 請指定介於 11440 之間的整數值。Specify an integer value from 1 to 1440. 根據預設,ccmeval 會一天 (1440 分鐘) 執行一次。By default, ccmeval runs once a day (1440 minutes).

範例:CCMSetup.exe CCMEVALINTERVAL=1440Example: CCMSetup.exe CCMEVALINTERVAL=1440

如需用戶端健全狀況評估的詳細資訊,請參閱監視用戶端For more information on client health evaluation, see Monitor clients.

CCMEVALHOURCCMEVALHOUR

用戶端健全狀況評估工具 (ccmeval.exe) 執行當天的時數。The hour during the day when the client health evaluation tool (ccmeval.exe) runs. 請指定介於 0 (午夜) 到 23 (下午 11:00) 之間的整數值。Specify an integer value from 0 (midnight) to 23 (11:00 PM). 根據預設,ccmeval 會在午夜執行。By default, ccmeval runs at midnight.

如需用戶端健全狀況評估的詳細資訊,請參閱監視用戶端For more information on client health evaluation, see Monitor clients.

CCMFIRSTCERTCCMFIRSTCERT

如果將此屬性設定為 1,則用戶端會選取有效期最長的 PKI 憑證。If you set this property to 1, the client selects the PKI certificate with the longest validity period.

範例:CCMSetup.exe /UsePKICert CCMFIRSTCERT=1Example: CCMSetup.exe /UsePKICert CCMFIRSTCERT=1

CCMHOSTNAMECCMHOSTNAME

如果是透過網際網路管理用戶端,則此屬性會指定以網際網路為基礎之管理點的 FQDN。If the client is managed over the internet, this property specifies the FQDN of the internet-based management point.

請勿指定將此選項搭配 SMSSITECODE=AUTO 的安裝屬性。Don't specify this option with the installation property of SMSSITECODE=AUTO. 請將以網際網路為基礎用戶端直接指派給同樣基礎的站台。Directly assign internet-based clients to an internet-based site.

範例:CCMSetup.exe /UsePKICert CCMHOSTNAME="SMSMP01.corp.contoso.com"Example: CCMSetup.exe /UsePKICert CCMHOSTNAME="SMSMP01.corp.contoso.com"

此屬性可以指定雲端管理閘道 (CMG) 的位址。This property can specify the address of a cloud management gateway (CMG). 若要取得這個屬性的值,請使用下列步驟:To get the value for this property, use the following steps:

  • 建立 CMG。Create a CMG. 如需詳細資訊,請參閱設定 CMGFor more information, see Set up a CMG.

  • 在使用中用戶端上,以系統管理員身分開啟 Windows PowerShell 命令提示字元。On an active client, open a Windows PowerShell command prompt as an administrator.

  • 執行下列命令:Run the following command:

    (Get-WmiObject -Namespace Root\Ccm\LocationServices -Class SMS_ActiveMPCandidate | Where-Object {$_.Type -eq "Internet"}).MP`
    
  • 原封不動使用傳回值與 CCMHOSTNAME 屬性。Use the returned value as-is with the CCMHOSTNAME property.

例如:ccmsetup.exe CCMHOSTNAME=CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72057598037248100For example: ccmsetup.exe CCMHOSTNAME=CONTOSO.CLOUDAPP.NET/CCM_Proxy_MutualAuth/72057598037248100

重要

當針對 CCMHOSTNAME 屬性指定 CMG 的位址時,請勿附加 https:// 之類的首碼。When you specify the address of a CMG for the CCMHOSTNAME property, don't append a prefix such as https://. 請只將此首碼與 CMG 的 /mp URL 搭配使用。Only use this prefix with the /mp URL of a CMG.

CCMHTTPPORTCCMHTTPPORT

指定用戶端在透過 HTTP 與站台系統伺服器通訊時所要使用的連接埠。Specifies the port for the client to use when it communicates over HTTP to site system servers. 根據預設,此值為 80By default, this value is 80.

範例:CCMSetup.exe CCMHTTPPORT=80Example: CCMSetup.exe CCMHTTPPORT=80

CCMHTTPSPORTCCMHTTPSPORT

指定用戶端在透過 HTTPS 與站台系統伺服器通訊時所要使用的連接埠。Specifies the port for the client to use when it communicates over HTTPS to site system servers. 根據預設,此值為 443By default, this value is 443.

範例:CCMSetup.exe /UsePKICert CCMHTTPSPORT=443Example: CCMSetup.exe /UsePKICert CCMHTTPSPORT=443

CCMINSTALLDIRCCMINSTALLDIR

使用此屬性來設定安裝 Configuration Manager 用戶端檔案的資料夾。Use this property to set the folder to install the Configuration Manager client files. 預設會使用 %WinDir%\CCMBy default, it uses %WinDir%\CCM.

提示

無論將用戶端檔案安裝在何處,一律會在 %WinDir%\System32 資料夾中安裝 ccmcore.dll 檔案。Regardless of where you install the client files, it always installs the ccmcore.dll file in the %WinDir%\System32 folder. 在 64 位元 OS 上,則會在 %WinDir%\SysWOW64 資料夾中安裝 ccmcore.dll 的複本。On a 64-bit OS, it installs a copy of ccmcore.dll in the %WinDir%\SysWOW64 folder. 這個檔案支援 32 位元應用程式,該應用程式會使用來自 Configuration Manager SDK 的 32 位元版本用戶端 API。This file supports 32-bit applications that use the 32-bit version of the client APIs from the Configuration Manager SDK.

範例:CCMSetup.exe CCMINSTALLDIR="C:\ConfigMgr"Example: CCMSetup.exe CCMINSTALLDIR="C:\ConfigMgr"

CCMLOGLEVELCCMLOGLEVEL

使用此屬性來指定要寫入 Configuration Manager 記錄檔的詳細資料層級。Use this property to specify the level of detail to write to Configuration Manager log files.

支援的值:Supported values:

  • 0:詳細資訊0: Verbose
  • 1:預設值1: Default
  • 2:警告和錯誤2: Warnings and errors
  • 3:僅錯誤3: Errors only

範例:CCMSetup.exe CCMLOGLEVEL=0Example: CCMSetup.exe CCMLOGLEVEL=0

如需詳細資訊,請參閱關於記錄檔For more information, see About log files.

CCMLOGMAXHISTORYCCMLOGMAXHISTORY

當 Configuration Manager 記錄檔達到大小上限時,用戶端會將它重新命名以當作備份,並建立新的記錄檔。When a Configuration Manager log file reaches the maximum size, the client renames it as a backup and creates a new log file. 此屬性可指定要保留多少個舊版的記錄檔。This property specifies how many previous versions of the log file to keep. 預設值為 1The default value is 1. 如果將此值設定為 0,則用戶端不會保留任何記錄檔歷程記錄。If you set the value to 0, the client doesn't keep any log file history.

範例:CCMSetup.exe CCMLOGMAXHISTORY=5Example: CCMSetup.exe CCMLOGMAXHISTORY=5

如需詳細資訊,請參閱關於記錄檔For more information, see About log files.

CCMLOGMAXSIZECCMLOGMAXSIZE

此屬性會指定記錄檔大小上限 (位元組)。This property specifies the maximum log file size in bytes. 當記錄檔成長到指定大小時,用戶端會將其重新命名為歷程記錄檔案,並建立新的記錄檔。When a log grows to the specified size, the client renames it as a history file, and creates a new one. 預設大小為 250,000 個位元組,而大小下限為 10,000 個位元組。The default size is 250,000 bytes, and the minimum size is 10,000 bytes.

範例:CCMSetup.exe CCMLOGMAXSIZE=300000 (300,000 個位元組)Example: CCMSetup.exe CCMLOGMAXSIZE=300000 (300,000 bytes)

DISABLESITEOPTDISABLESITEOPT

將此屬性設定為 TRUE,以禁止系統管理員在 Configuration Manager 控制台中變更指派的站台。Set this property to TRUE to block administrators from changing the assigned site in the Configuration Manager control panel.

範例:CCMSetup.exe DISABLESITEOPT=TRUEExample: CCMSetup.exe DISABLESITEOPT=TRUE

DISABLECACHEOPTDISABLECACHEOPT

如果設為 TRUE,這個屬性會停用系統管理使用者在 Configuration Manager 控制台中變更用戶端快取資料夾設定的能力。If set to TRUE, this property disables the ability of administrative users from changing the client cache folder settings in the Configuration Manager control panel.

範例:CCMSetup.exe DISABLECACHEOPT=TRUEExample: CCMSetup.exe DISABLECACHEOPT=TRUE

DNSSUFFIXDNSSUFFIX

指定用戶端的 DNS 網域以尋找在 DNS 中發佈的管理點。Specify a DNS domain for clients to locate management points that you publish in DNS. 當用戶端找到管理點時,會告知用戶端有關階層中的其他管理點。When the client locates a management point, it tells the client about other management points in the hierarchy. 此行為表示用戶端從 DNS 找到的管理點可以是階層中任何管理點。This behavior means that the management point that the client finds from DNS can be any one in the hierarchy.

注意

如果用戶端位於與已發佈管理點相同的網域,您就不必指定此屬性。You don't have to specify this property if the client is in the same domain as a published management point. 若是這種情況,會自動使用用戶端網域來搜尋管理點的 DNS。In that case, the client's domain is automatically used to search DNS for management points.

如需發佈為設定管理員用戶端服務位置方法之 DNS 的詳細資訊,請參閱服務位置以及用戶端如何判斷其指派的管理點For more information about DNS publishing as a service location method for Configuration Manager clients, see Service location and how clients determine their assigned management point.

注意

根據預設,Configuration Manager 不會啟用 DNS 發佈。By default, Configuration Manager doesn't enable DNS publishing.

範例:CCMSetup.exe SMSSITECODE=ABC DNSSUFFIX=contoso.comExample: CCMSetup.exe SMSSITECODE=ABC DNSSUFFIX=contoso.com

FSPFSP

指定後援狀態點,這些狀態點會接收及處理 Configuration Manager 用戶端所傳送的狀態訊息。Specify the fallback status point that receives and processes state messages sent by Configuration Manager clients.

如需詳細資訊,請參閱判斷是否需要後援狀態點For more information, see Determine if you need a fallback status point.

範例:CCMSetup.exe FSP=SMSFP01Example: CCMSetup.exe FSP=SMSFP01

IGNOREAPPVVERSIONCHECKIGNOREAPPVVERSIONCHECK

如果將此屬性設定為 TRUE,則用戶端安裝程式不會檢查 Microsoft Application Virtualization (App-V) 版本是否符合最低需求。If you set this property to TRUE, the client installer doesn't check the minimum required version of Microsoft Application Virtualization (App-V).

重要

如果安裝 Configuration Manager 用戶端而未安裝 App-V,則無法部署虛擬應用程式If you install the Configuration Manager client without installing App-V, you can't deploy virtual applications.

範例:CCMSetup.exe IGNOREAPPVVERSIONCHECK=TRUEExample: CCMSetup.exe IGNOREAPPVVERSIONCHECK=TRUE

NOTIFYONLYNOTIFYONLY

當啟用此屬性時,用戶端會報告狀態,但不會針對所找到的問題進行補救。When you enable this property, the client reports status, but doesn't remediate problems that it finds.

範例:CCMSetup.exe NOTIFYONLY=TRUEExample: CCMSetup.exe NOTIFYONLY=TRUE

如需詳細資訊,請參閱如何設定用戶端狀態For more information, see How to configure client status.

PROVISIONTSPROVISIONTS

從 2002 版開始,您可使用此屬性在用戶端成功向站台註冊後,於其上啟動工作順序。Starting in version 2002, use this property to start a task sequence on a client after it successfully registers with the site.

注意

若工作順序會安裝軟體更新或應用程式,用戶端就需要有效的用戶端驗證憑證。If the task sequence installs software updates or applications, clients need a valid client authentication certificate. 單一權杖驗證無法使用。Token authentication alone doesn't work. 如需詳細資訊,請參閱版本資訊 - OS 部署For more information, see Release notes - OS deployment.

例如,您使用 Windows Autopilot 佈建新的 Windows 10 裝置、將該裝置自動註冊到 Microsoft Intune,然後安裝 Configuration Manager 用戶端以進行共同管理。For example, you provision a new Windows 10 device with Windows Autopilot, auto-enroll it to Microsoft Intune, and then install the Configuration Manager client for co-management. 如果指定這個新選項,新佈建的用戶端就會執行工作順序。If you specify this new option, the newly provisioned client then runs a task sequence. 這個處理序可讓您更靈活地安裝應用程式和軟體更新,或進行設定。This process gives you additional flexibility to install applications and software updates, or configure settings.

請使用下列程序:Use the following process:

  1. 建立非 OS 部署工作順序來安裝應用程式、安裝軟體更新,以及進行設定。Create a non-OS deployment task sequence to install apps, install software updates, and configure settings.

  2. 部署此工作順序到 [所有佈建裝置] 這個新的內建集合。Deploy this task sequence to the new built-in collection, All Provisioning Devices. 請記下工作順序部署識別碼,例如 PRI20001Note the task sequence deployment ID, for example PRI20001.

    提示

    部署目的可以是「可用」或「必要」。The deployment's purpose can be either available or required. 因為您將部署識別碼指定為屬性值,所以目的並不重要。Since you specify the deployment ID as the property value, the purpose doesn't matter.

  3. 在裝置上安裝 Configuration Manager 用戶端,並包含下列屬性:PROVISIONTS=PRI20001Install the Configuration Manager client on a device, and include the following property: PROVISIONTS=PRI20001. 請將此屬性的值設定為工作順序部署識別碼。Set the value of this property as the task sequence deployment ID.

    • 如果您是在共同管理註冊期間從 Intune 安裝用戶端,請參閱如何準備網際網路型裝置以進行共同管理If you're installing the client from Intune during co-management enrollment, see How to prepare internet-based devices for co-management.

      注意

      這個方法可能有其他必要條件。This method may have additional prerequisites. 例如,將站台註冊到 Azure Active Directory,或建立已啟用內容的雲端管理閘道。For example, enrolling the site to Azure Active Directory, or creating a content-enabled cloud management gateway.

在用戶端安裝並正確地向站台註冊之後,就會啟動參考的工作順序。After the client installs and properly registers with the site, it starts the referenced task sequence. 如果用戶端註冊失敗,則不會啟動工作順序。If client registration fails, the task sequence won't start.

RESETKEYINFORMATIONRESETKEYINFORMATION

如果用戶端具有錯誤的 Configuration Manager 受信任根金鑰,則無法連絡受信任管理點以接收新的受信任根金鑰。If a client has the wrong Configuration Manager trusted root key, it can't contact a trusted management point to receive the new trusted root key. 請使用此屬性來移除舊的受信任根金鑰。Use this property to remove the old trusted root key. 在您將用戶端從某個站台階層移至另一個站台階層時,就可能會發生這種情況。This situation may occur when you move a client from one site hierarchy to another. 此內容適用於使用 HTTP 和 HTTPS 用戶端通訊的用戶端。This property applies to clients that use HTTP and HTTPS client communication. 如需詳細資訊,請參閱規劃受信任的根金鑰For more information, see Planning for the trusted root key.

範例:CCMSetup.exe RESETKEYINFORMATION=TRUEExample: CCMSetup.exe RESETKEYINFORMATION=TRUE

SITEREASSIGNSITEREASSIGN

SMSSITECODE=AUTO 搭配使用時,可啟用用戶端升級的自動站台重新指派。Enables automatic site reassignment for client upgrades when used with SMSSITECODE=AUTO.

範例:CCMSetup.exe SMSSITECODE=AUTO SITEREASSIGN=TRUEExample: CCMSetup.exe SMSSITECODE=AUTO SITEREASSIGN=TRUE

SMSCACHEDIRSMSCACHEDIR

指定用戶端電腦上用戶端快取資料夾的位置。Specifies the location of the client cache folder on the client computer. 根據預設,此快取位置為 %WinDir%\ccmcacheBy default, the cache location is %WinDir%\ccmcache.

範例:CCMSetup.exe SMSCACHEDIR="C:\Temp"Example: CCMSetup.exe SMSCACHEDIR="C:\Temp"

搭配 SMSCACHEFLAGS 屬性使用此屬性來控制用戶端快取資料夾的位置。Use this property with the SMSCACHEFLAGS property to control the client cache folder location. 例如,若要在最大的可用用戶端磁碟機上安裝用戶端快取資料夾:CCMSetup.exe SMSCACHEDIR=Cache SMSCACHEFLAGS=MAXDRIVEFor example, to install the client cache folder on the largest available client disk drive: CCMSetup.exe SMSCACHEDIR=Cache SMSCACHEFLAGS=MAXDRIVE

SMSCACHEFLAGSSMSCACHEFLAGS

使用此屬性為用戶端快取資料夾指定進一步的安裝詳細資料。Use this property to specify further installation details for the client cache folder. 您可個別使用 SMSCACHEFLAGS 屬性,或以分號 (;) 分隔來合併使用。You can use SMSCACHEFLAGS properties individually or in combination separated by semicolons (;).

如果未包含此屬性:If you don't include this property:

  • 用戶端會根據 SMSCACHE 屬性來安裝快取資料夾The client installs the cache folder according to the SMSCACHEDIR property
  • 不會壓縮資料夾The folder isn't compressed
  • 用戶端會使用 SMSCACHESIZE 屬性作為快取的大小限制 (MB)The client uses the SMSCACHESIZE property as the size limit in MB of the cache

當升級現有的用戶端時,用戶端安裝程式會忽略這個屬性。When you upgrade an existing client, the client installer ignores this property.

SMSCACHEFLAGS 屬性的值Values for the SMSCACHEFLAGS property

  • PERCENTDISKSPACE:以「總」磁碟空間的百分比來設定快取大小。PERCENTDISKSPACE: Set the cache size as a percentage of the total disk space. 如果指定此屬性,請同時將 SMSCACHESIZE 設定為百分比值。If you specify this property, also set SMSCACHESIZE to a percentage value.

  • PERCENTFREEDISKSPACE:以「可用」磁碟空間的百分比來設定快取大小。PERCENTFREEDISKSPACE: Set the cache size as a percentage of the free disk space. 如果指定此屬性,請同時將 SMSCACHESIZE 設定為百分比值。If you specify this property, also set SMSCACHESIZE as a percentage value. 例如,磁碟的可用空間為 10 MB,且指定 SMSCACHESIZE=50For example, the disk has 10 MB free, and you specify SMSCACHESIZE=50. 用戶端安裝程式會將快取大小設定為 5 MB。The client installer sets the cache size to 5 MB. 此屬性無法搭配 PERCENTDISKSPACE 屬性使用。You can't use this property with the PERCENTDISKSPACE property.

  • MAXDRIVE:在最大的可用磁碟上安裝快取。MAXDRIVE: Install the cache on the largest available disk. 如果使用 SMSCACHEDIR 屬性指定路徑,則用戶端安裝程式會忽略這個值。If you specify a path with the SMSCACHEDIR property, the client installer ignores this value.

  • MAXDRIVESPACE:在具有最多可用空間的磁碟機上安裝快取。MAXDRIVESPACE: Install the cache on the disk drive with the most free space. 如果使用 SMSCACHEDIR 屬性指定路徑,則用戶端安裝程式會忽略這個值。If you specify a path with the SMSCACHEDIR property, the client installer ignores this value.

  • NTFSONLY:只在 NTFS 格式的磁碟機上安裝快取。NTFSONLY: Only install the cache on an NTFS-formatted disk drive. 如果使用 SMSCACHEDIR 屬性指定路徑,則用戶端安裝程式會忽略這個值。If you specify a path with the SMSCACHEDIR property, the client installer ignores this value.

  • COMPRESS:以壓縮格式儲存快取。COMPRESS: Store the cache in a compressed form.

  • FAILIFNOSPACE:如果空間不足,無法安裝快取,請移除 Configuration Manager 用戶端。FAILIFNOSPACE: If there's insufficient space to install the cache, remove the Configuration Manager client.

範例:CCMSetup.exe SMSCACHEFLAGS=NTFSONLY;COMPRESSExample: CCMSetup.exe SMSCACHEFLAGS=NTFSONLY;COMPRESS

SMSCACHESIZESMSCACHESIZE

重要

用戶端設定可用於指定用戶端快取資料夾大小。Client settings are available for specifying the client cache folder size. 加入這些用戶端設定實際上會取代使用 SMSCACHESIZE 作為 client.msi 內容來指定用戶端快取大小。The addition of those client settings effectively replaces using SMSCACHESIZE as a client.msi property to specify the size of the client cache. 如需詳細資訊,請參閱快取大小的用戶端設定For more information, see the client settings for cache size.

當升級現有的用戶端時,用戶端安裝程式會忽略這項設定。When you upgrade an existing client, the client installer ignores this setting. 當用戶端下載軟體更新時,也會忽略快取大小。The client also ignores the cache size when it downloads software updates.

範例:CCMSetup.exe SMSCACHESIZE=100Example: CCMSetup.exe SMSCACHESIZE=100

注意

如果重新安裝用戶端,則無法使用 SMSCACHESIZESMSCACHEFLAGS 將快取大小設定為比先前設定更小的值。If you reinstall a client, you can't use SMSCACHESIZE or SMSCACHEFLAGS to set the cache size to be smaller than it was previously. 先前的大小是最小值。The previous size is the minimum value.

SMSCONFIGSOURCESMSCONFIGSOURCE

使用此屬性來指定用戶端安裝程式檢查組態設定的位置和順序。Use this property to specify the location and order that the client installer checks for configuration settings. 這是包含一或多個字元的字串,每一個字元都定義了特定的組態來源:It's a string of one or more characters, each defining a specific configuration source:

  • R:檢查登錄中的組態設定。R: Check for configuration settings in the registry.

    如需詳細資訊,請參閱佈建用戶端安裝內容For more information, see Provision client installation properties.

  • P:從命令列檢查安裝屬性中的組態設定。P: Check for configuration settings in the installation properties from the command line.

  • M:當升級舊版用戶端時,檢查現有的設定。M: Check for existing settings when you upgrade an older client.

  • U:將安裝的用戶端升級至較新版本,並使用指派的站台碼。U: Upgrade the installed client to a newer version and use the assigned site code.

根據預設,用戶端安裝程式會使用 PUBy default, the client installer uses PU. 其會先檢查安裝屬性 (P),再檢查現有的設定 (U)。It first checks the installation properties (P) and then the existing settings (U).

範例:CCMSetup.exe SMSCONFIGSOURCE=RPExample: CCMSetup.exe SMSCONFIGSOURCE=RP

SMSDIRECTORYLOOKUPSMSDIRECTORYLOOKUP

指定用戶端是否可以使用 Windows 網際網路名稱服務 (WINS) 尋找接受 HTTP 連線的管理點。Specifies whether the client can use Windows Internet Name Service (WINS) to find a management point that accepts HTTP connections. 用戶端在 Active Directory 網域服務或 DNS 中找不到管理點時,會使用此方法。Clients use this method when they can't find a management point in Active Directory Domain Services or in DNS.

此內容不會影響用戶端是否使用 WINS 進行名稱解析。This property doesn't affect whether the client uses WINS for name resolution.

您可以為此內容設定兩個不同的模式:You can configure two different modes for this property:

  • NOWINS:這個值是此屬性最安全的設定。NOWINS: This value is the most secure setting for this property. 可防止用戶端在 WINS 中尋找管理點。It prevents clients from finding a management point in WINS. 當您使用此設定時,用戶端必須使用替代方法來找出內部網路的管理點。When you use this setting, clients must have an alternative method to locate a management point on the intranet. 例如,Active Directory Domain Services 或 DNS 發行。For example, Active Directory Domain Services or DNS publishing.

  • WINSSECURE (預設):在此模式中,使用 HTTP 通訊的用戶端可以使用 WINS 來尋找管理點。WINSSECURE (default): In this mode, a client that uses HTTP communication can use WINS to find a management point. 不過,用戶端必須擁有受信任根金鑰的複本,才能順利與管理點連線。However, the client must have a copy of the trusted root key before it can successfully connect to the management point. 如需詳細資訊,請參閱規劃受信任的根金鑰For more information, see Planning for the trusted root key.

範例:CCMSetup.exe SMSDIRECTORYLOOKUP=NOWINSExample: CCMSetup.exe SMSDIRECTORYLOOKUP=NOWINS

SMSMPSMSMP

指定 Configuration Manager 用戶端要使用的初始管理點。Specifies an initial management point for the Configuration Manager client to use.

重要

如果管理點只接受透過 HTTPS 的用戶端連線,請在管理點名稱前面加上 https://If the management point only accepts client connections over HTTPS, prefix the management point name with https://.

範例:Examples:

  • CCMSetup.exe SMSMP=smsmp01.contoso.com

  • CCMSetup.exe SMSMP=https://smsmp01.contoso.com

SMSPUBLICROOTKEYSMSPUBLICROOTKEY

如果用戶端無法從 Active Directory Domain Services 取得 Configuration Manager 受信任的根金鑰,請使用此屬性來指定金鑰。If the client can't get the Configuration Manager trusted root key from Active Directory Domain Services, use this property to specify the key. 此屬性適用於使用 HTTP 和 HTTPS 通訊的用戶端。This property applies to clients that use HTTP and HTTPS communication. 如需詳細資訊,請參閱規劃受信任的根金鑰For more information, see Planning for the trusted root key.

範例:CCMSetup.exe SMSPUBLICROOTKEY=<keyvalue>Example: CCMSetup.exe SMSPUBLICROOTKEY=<keyvalue>

提示

從站台伺服器上的 mobileclient.tcf 檔案中,取得站台的受信任根金鑰值。Get the value for the site's trusted root key from the mobileclient.tcf file on the site server. 如需詳細資訊,請參閱使用檔案以受信任的根金鑰預先佈建用戶端For more information, see Pre-provision a client with the trusted root key by using a file.

SMSROOTKEYPATHSMSROOTKEYPATH

使用此屬性來重新安裝 Configuration Manager 受信任的根金鑰。Use this property to reinstall the Configuration Manager trusted root key. 這會指定包含受信任根金鑰的檔案完整路徑和名稱。It specifies the full path and name of a file that contains the trusted root key. 此內容適用於使用 HTTP 和 HTTPS 用戶端通訊的用戶端。This property applies to clients that use HTTP and HTTPS client communication. 如需詳細資訊,請參閱規劃受信任的根金鑰For more information, see Planning for the trusted root key.

範例:CCMSetup.exe SMSROOTKEYPATH=C:\folder\trkExample: CCMSetup.exe SMSROOTKEYPATH=C:\folder\trk

SMSSIGNCERTSMSSIGNCERT

指定站台伺服器上所匯出自我簽署憑證的完整路徑和名稱。Specifies the full path and name of the exported self-signed certificate on the site server. 站台伺服器會將此憑證儲存在 SMS 憑證存放區中。The site server stores this certificate in the SMS certificate store. 其主體名稱為站台伺服器,易記名稱為站台伺服器簽署憑證It has the Subject name Site Server and the friendly name Site Server Signing Certificate.

範例:CCMSetup.exe /UsePKICert SMSSIGNCERT=C:\folder\smssign.cerExample: CCMSetup.exe /UsePKICert SMSSIGNCERT=C:\folder\smssign.cer

SMSSITECODESMSSITECODE

此屬性會指定要指派用戶端的目標 Configuration Manager 站台。This property specifies a Configuration Manager site to which you assign the client. 這個值可以是三個字元的站台碼或單字 AUTOThis value can either be a three-character site code or the word AUTO. 如果指定 AUTO,或未指定此屬性,則用戶端會嘗試從 Active Directory Domain Services 或從指定的管理點判斷其站台指派。If you specify AUTO, or don't specify this property, the client attempts to determine its site assignment from Active Directory Domain Services or from a specified management point. 若要針對用戶端升級啟用 AUTO,請同時設定 SITEREASSIGN=TRUETo enable AUTO for client upgrades, also set SITEREASSIGN=TRUE.

注意

如果同時還使用 CCMHOSTNAME 屬性來指定以網際網路為基礎的管理點,請勿搭配 SMSSITECODE 使用 AUTOIf you also specify an internet-based management point with the CCMHOSTNAME property, don't use AUTO with SMSSITECODE. 請藉由指定站台碼,以直接將用戶端指派給其站台。Directly assign the client to its site by specifying the site code.

範例:CCMSetup.exe SMSSITECODE=XZYExample: CCMSetup.exe SMSSITECODE=XZY

憑證選擇準則的屬性值Attribute values for certificate selection criteria

Configuration Manager 支援下列 PKI 憑證選擇準則屬性值:Configuration Manager supports the following attribute values for the PKI certificate selection criteria:

OID 屬性OID attribute 辨別名稱屬性Distinguished Name attribute 屬性定義Attribute definition
0.9.2342.19200300.100.1.250.9.2342.19200300.100.1.25 DCDC 網域元件Domain component
1.2.840.113549.1.9.11.2.840.113549.1.9.1 E 或 E-mailE or E-mail 電子郵件地址Email address
2.5.4.32.5.4.3 CNCN 一般名稱Common name
2.5.4.42.5.4.4 SNSN 主體名稱Subject name
2.5.4.52.5.4.5 SERIALNUMBERSERIALNUMBER 序號Serial number
2.5.4.62.5.4.6 CC 國碼 (地區碼)Country code
2.5.4.72.5.4.7 LL 位置Locality
2.5.4.82.5.4.8 S 或 STS or ST 省份名稱State or province name
2.5.4.92.5.4.9 STREETSTREET 街道地址Street address
2.5.4.102.5.4.10 OO 組織名稱Organization name
2.5.4.112.5.4.11 OUOU 組織單位Organizational unit
2.5.4.122.5.4.12 T 或 TitleT or Title 標題Title
2.5.4.422.5.4.42 G 或 GN 或 GivenNameG or GN or GivenName 指定的名稱Given name
2.5.4.432.5.4.43 I 或 InitialsI or Initials 縮寫Initials
2.5.29.172.5.29.17 (沒有值)(no value) 主體替代名稱Subject Alternative Name