Our Management Point has the SCCM Client and I updated to CU1... We have had this issue in the past with manual pushes to our MP but I am now using Automatic Client Update and when it trys to run @ 12:38PM every day my permissions break on SMS_CCM which breaks portal and imaging.  Thoughts on best way to exclude this server from Automatic Apply... Should I just remove the client from MP what are the risk/gains from this?

I did not see anything about an exclusion list here:

http://blogs.technet.com/b/configmgrteam/archive/2015/08/04/automatically-updating-the-configuration-manager-client.aspx

In the automatic client upgrade option you should have a check box called Do not upgrade servers.

Did you try it?

In case you are wondering where it is:

Go to the Administration section

Site configuration

select your site in the ribbon you should see Hierarchy settings and you should see the tab call Automatic Client upgrade

• Edited by Frederick Dicaire 14 hours 45 minutes ago

In the automatic client upgrade option you should have a check box called Do not upgrade servers.

Did you try it?

No I did not because I want my Servers in my environment to be upgraded I just want my SMS_CCM folder to stop resetting and I know the client install/upgrade is the cause.

You can remove the SCCM client from the MP it`s not require at all just wont be manage.

Also why not just upgrade manually so the automatic upgrade wont need to run over and over ?

The idea might sound stupid but would it be possible to modifies the schedule task the automatic client upgrade did on that server. Maybe change the date to the FUTURE ?

I would like to leave the client for Inventory & Patching etc... but if that is best that is what I will do.  I do not see a scheduled task on the server.

Is it possible for you to upgrade the client on the MP manually so it would not be caught by the rule?

The task should be here :When you have Automatic Client Upgrade enabled, each client adds a scheduled task called Configuration Manager Client Upgrade Task. If you say it`s running every day at 12:38 you should find it and modife it.

If all the above failed and you want to keep the rule going for all the servers but can`t touch this one i would remove the client now

Also did you ever look into why the client install is doing this. Did you change the security manually. Because this behavior should not be happening. 

• Edited by Frederick Dicaire 14 hours 19 minutes ago