| Topic | Steps | Explanation | Example |
|---|---|---|---|
| Install SCCM Client | 1. Use Client Push, GPO, or Manual Install. 2. Run `ccmsetup.exe` if needed. 3. Verify installation via Configuration Manager Properties. 4. Check logs (`ccmsetup.log`). |
The SCCM client must be installed on devices to receive policies and software deployments. | Install SCCM Client on all new workstations using Client Push. |
| Deploy Software | 1. Go to Software Library → Applications. 2. Create a New Application (use MSI or EXE). 3. Set detection rules. 4. Deploy to a Device Collection. 5. Monitor via Deployment Status. |
Deploys applications like Microsoft Office, Chrome, or custom apps. | A company deploys Google Chrome to all employees. |
| Deploy Windows Updates | 1. Enable WSUS & Software Update Point. 2. Sync updates from Windows Update. 3. Create a Software Update Group. 4. Deploy updates to a Device Collection. 5. Monitor compliance reports. |
Ensures all devices stay updated with the latest Windows patches. | Deploy Patch Tuesday Updates to all Windows 11 PCs every month. |
| OS Deployment (OSD) | 1. Enable PXE Boot. 2. Import Windows 10/11 Image. 3. Create a Task Sequence. 4. Deploy to PXE Boot-enabled devices. 5. Monitor deployment progress. |
Automates Windows installation with drivers, domain join, and software pre-installed. | Deploy Windows 11 to 100 new laptops using PXE Boot. |
| Enforce Security Policies | 1. Create a Compliance Policy. 2. Configure password, BitLocker, Defender, and Firewall settings. 3. Deploy to All Workstations. 4. Monitor non-compliance in Reports. |
Ensures all devices meet security requirements before granting network access. | Require BitLocker encryption on all company laptops. |
| Troubleshoot SCCM Issues | 1. Check logs (`ccmsetup.log`, `AppEnforce.log`, `smsts.log`). 2. Use SCCM Reports for failures. 3. Run `ccmrepair.exe` for client issues. 4. Verify network and boundary settings. |
Logs and reports help identify and fix failed deployments and SCCM errors. | Fix failed software deployment by checking `AppEnforce.log`. |
| Manage Remote Devices (CMG) | 1. Enable Cloud Management Gateway (CMG). 2. Configure Intune Co-Management. 3. Deploy SCCM Client using Internet-based Management. 4. Manage updates & deployments over the cloud. |
Allows SCCM to manage remote devices without VPN using Azure-based CMG. | Deploy software to work-from-home employees over the internet. |
| Enroll Devices into SCCM/Intune | 1. Enable Co-Management in SCCM. 2. Allow automatic Intune enrollment. 3. Configure workloads for SCCM or Intune. 4. Deploy software & policies based on enrollment status. |
Ensures hybrid device management between SCCM (on-prem) and Intune (cloud). | A new laptop automatically registers in Intune & SCCM for policy enforcement. |