we have some machines that are Thin Clients and use Write-Protect.   we have added ccmexec.exe to the write-protect exclusion list but we still can't get the cm2012 client fully installed.   How do you get it installed with write-protect?

Yes, we know we can disable write-protect, install software and then turn the write-protect back on but if you bake the cm2012 client into an image what happens when you close 50 of these images?   That will break the cm2012 client correct?  

any advice would be g

Hi,

If the embedded device supports write filters, you must disable these filters before you install the client, and then re-enable the filters again after the client is installed and assigned to a site.

With SP1, you can configure options to automatically disable and re-enable the write filters when you deploy software such as applications, task sequences, software updates, and the Endpoint Protection client.

Follow this:

Introduction to Client Deployment in Configuration Manager

Example Scenario for Deploying and Managing Configuration Manager Clients on Windows Embedded Devices