Hey guys, We've recently had SCCM installed on our network, and I have a few questions about the best way to deploy the client. I see that http://blogcastrepository.com/blogs/kim_oppalfenss_systems_management_ideas/archive/2007/05/19/sccm-2007-client-agent-deployment-using-software-updates.aspx is one way, but also see that, as long as the Software Update Point Client Installation / Client Push Installation are checked, that the client will install. My question is, how do the computrs under 'All Systems' know how to get the client? We pushed the client out through and added the svcsccm-push account into the Admin group through GPO in one of our offices, but in doing so we had to add everyone into the Admin group in that office, since the GPO removed individual users from the Admin group. Do I just click on All Systems (under Collections), then click Install Client? Is it that easy? Do I deploy this through WSUS, like the link above suggests? Thanks We have a

Just right click all systems and do install client. I always just use automatic client push. That WSUS method Kim talks about is an alternative. Adding that group via a GPO shouldnt have removed people from local admins. John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|

Thanks. That's what I figured. The GPO was configured so that only 3 groups were added into the Admin group on every PC in this office - Domain Admin, svcsccm-push, and the Helpdesk group. So because only those groups were allowed in, all other groups (including individual users) were bumped, and, of course, if you added the individual user back into the Admin group, in 30 minutes they were deleted. Speaking of which, the only list of computers in All Systems that are 'Approved' are the ones in the office that have the GPO applied. Should I be concerned about that? Those computers are the only ones showing as having the client installed. One last question - do I need to inject the [domain]\svcsccm-push group into the Admin group before I install the client? Edit: Checked the ccm.log, and, yeah, it appears svcsccm-push needs to be there before the client installs. Figured that was done already

Speaking of which, the only list of computers in All Systems that are 'Approved' are the ones in the office that have the GPO applied. Should I be concerned about that? Those computers are the only ones showing as having the client installed. You can only approve systems that have got the client installed, so that's fine.Torsten Meringer | http://www.mssccmfaq.de