No, SCCM does not require any GPO's and it does not install any. All settings are configured via the client agent. As matter fact SCCM will work without AD. John Marcum | http://myitforum.com/cs2/blogs/jmarcum/|

Any time you see "policy" mentioned in the context of ConfigMgr, it is specific to the ConfigMgr policy which is delivered to the clients by the Management Point, and to echo John has nothing to do with AD. The policy is distributed to clients in the form of an XML file and stored in WMI. Besides poking around in WMI, you can also use the PolicySpy app from the ConfigMgr toolkit to view the policy on a specific system. One place where it does use a GPO though is for software updates: the ConfigMgr agent uses a local GPO to configure the WSUS server. These are not delivered via AD (obviously) but it they are in play and if you happen to have a domain based GPO in place already that configures the WSUS server, it will stomp on the local GPO created by ConfigMgr possibly causing issues with Software Updates.. Many folks do recommend that you use an AD GPO to disable Windows Updates (not the service) so that the WUA only does things that ConfigMgr tells it to. I have a two part post on my blog that goes into this if you are interested. There are a couple of other places that a GPO can over-ride ConfigMgr behavior also -- specifically when it comes to enabling Remote Desktop and Remote Assistance.Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys

Thank you for the feedback gentlemen! Jason, At the moment I do not have any GPO's created in regards to WSUS in AD. However, I will create one to disable Automatic Windows. Is this correct? Also, in the Collection field I noticed all my network users are listed in "All Users" collection container, however my workstations aren't showing up in " All systems" collection container. But in the "Query" container everything pertaining to Active Directory in regards to Users, Groups, and workstations are displaying even though I enabled Active Directory discovery in "Discovery Methods". Can you link me to your part two blog as I am very curious and eager to make sure I have this working correctly. Thank You,

This might sound irrelevant but I'm new to this platform. After installation of SCCM, does the application install a default GPO within Active Directory? for updates or any other configurations SCCM needs? I go into the policies already in place and do not see any policy for SCCM. This is why I ask.

Thank you for the feedback gentlemen! Jason, At the moment I do not have any GPO's created in regards to WSUS in AD. However, I will create one to disable Automatic Windows. Is this correct? Can you link me to your part two blog as I am very curious and eager to make sure I have this working correctly. Thank You,

Hello - Yes, you can get more details on WSUS related GPO from below technet article. http://technet.microsoft.com/en-us/library/bb633194.aspxAnoop C Nair

to your part two blog as I am very curious and eager to make sure I have this working correctly. The URL to Jason's blog can be found in his signature.