Application Deployed to User Collection...Excluded Collection sees Deployment

We have 2 versions of an application that need to be deployed. The newer version (6.0) is deployed to a collection that includes All Users, but excludes an exception collection. The users that are in the exception collection do not show in this application
collection.
We then deployed the older version (5.0) to the exception collection.
The issue is that the users in the exception collection can install both 5.0 and 6.0 from the Application Catalog. They should be excluded from the 6.0 deployment since they aren't in the collection, but they are still seeing it as available.
I thought maybe SCCM would recognize that they are not supposed to get the deployment when the user tried to install, but that wasn't the case...they could still follow through with either install.
We use this same process for machine-based deployments and it works fine. I am wondering if I am missing something, or if user deployments don't work quite the same as machine deployments...in this type of scenario.
Thanks for your help!

If the clients had originally downloaded the policy that told them that it was a superseded relationship, then that should correct itself in the next polling cycle when it detects the supersedence is no longer valid.
If that hasn't happened, you could delete one of the apps, and then recreate it.
Wally Mead

Similar Messages

Uninstall deployment for an AppV5 application with Connection group fails if using a User Collection but works on Machine Collections.

Hi,
I'm having troubles to understand why my application in AppV5 that was sequenced with "MS. AppV Sequencer SP1" is somehow failing to be uninstalled properly only if this on is deployed with a
User collection but on the other hand the same application installs & uninstalls perfectly if its deployed using a
Machine collection?
Here is an extract of the Appenforce.log:
Remove-AppvClientPackage : Operation failed because package belongs to a
connection group on the machine. Please ensure that package does not belong to
any connection groups.
Operation attempted: Remove AppV Package.
AppV Error Code: 020000050C.
Please consult AppV Client Event Log for more details.
Au caractŠre Ligne:1 : 106
+ import-module 'C:\Program Files\Microsoft Application
Virtualization\Client\Appv ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~
    + CategoryInfo          : InvalidResult : (:) [Remove-AppvClientPackage],
   ClientException
    + FullyQualifiedErrorId : RemovePackageError,Microsoft.AppV.AppvClientPowe
   rShell.RemoveAppvPackage
I know that SCCM 2012 does not uninstalls application prerequisites unless they are targeted by their individual uninstall collection or script an uninstall procedure on the main application. But if I try using the Machine collection the error is not appearing
and the main application is removed and the Prereq will be left behind without causing any trouble at all !!
So my question is: Why an APPV5 application with a connection group should be pushed in a Machine context ?
Notice that I already tried to do the troubleshooting to remove the application manually with PowerShell.
- set-executionpolicy unrestricted
- Import-Module AppvClient
- Get-AppvClientPackage -Name PackageName*
- Unpublish-AppvClientPackage $PackageName
- Remove-AppvClientPackage $PackageName
And actually it was removed but the problem started again if I tried to re-install /remove the application.
Will really appreciate your comments.
Kind Regards.
Joel E.G.

Hi Paul,
To be honest we already experienced many troubles after the SCCM console was migrated from R1 to R2, SCCM client was updated too in consequence, but our AppV5 client still remains on SP1.
I'm afraid that any application that uses Connections Groups will have to be pushed on a Machine context and I just wanted to really understand more about this subject of why it was working that way and not by User is there something I missed with (Run Virtual)
that for any reason is not perfectly implemented to run on a user context?
Any way, we will be testing AppV5 Client SP2 really soon because we have no choice.
Regards,
Joel EG

Deploy software to user collection but exlcude installing on Servers

I have a user collection I am deploying software to but need to exlcude that software from being installed on servers.When
I try to use an exclude for the servers collection I cannot see that device collection and any queries I use
claim the user/device difference class error....
Any help is greatly appreciated.

If you are using the Application Model you can set it so only install on a users primary device as well as set it to only install on a specific operating system.
Check step 6 here:
http://technet.microsoft.com/en-us/library/989dfb1d-a003-4200-817d-f917d8ae096b#BKMK_Step61 "Specify Requirements for the Deployment Type"
Tim Nilimaa | Blog: http://infoworks.tv | Twitter: @timnilimaa

Stagger application deployment to device collection

Hi,
I've created a device collection using a query that has list of machines with a specific application installed.
I have an updated version of that application that I'd like to deploy to that collection.
I'd like to stagger the deployment so that the update takes place on few computers each day or so. For example, every night update the application on 10 machines.
Can this be done? I'm using SCCM 2012 SP1.
Pman
http://www.pmansLab.com/

There's no direct way to do this.
One way to accomplish this though is to create a set of sub-collections that are limited to your main collection. You would then create new deployments with different deadlines for each of these "sub-"collections. The membership of these sub-collections
could then be done using a query based rule that looks at something like the last digit/character of the system's GUID. For example, you could create seven sub-collections and the query rule for the first would only include systems where the GUID's last character
was 1-3, the second collection would look for 4-6, the 3rd would be 7-9, ...
If, your application deployment re-evaluation is set to everyday, then you could also do something similar using requirement rules and a little basic math.
Jason | http://blog.configmgrftw.com | @jasonsandys

How to make a collection based on successful application deployment?

Hi,
Does anyone know how I can make a collection from where the members are all the computers that have successfully installed a particular application.
I saw this query from another site but i'm having a problem finding the assignmentID for the application I deployed.
select SMS_R_System.ResourceId from SMS_R_System inner join SMS_AppDeploymentAssetDetails on SMS_AppDeploymentAssetDetails.MachineID = SMS_R_System.ResourceId where SMS_AppDeploymentAssetDetails.AssignmentID = “16777222″ and SMS_AppDeploymentAssetDetails.StatusType
= “5″
Can someone also point me on where I can find the assignmentID for an application?

Why do you want to do that? Just explain what you are trying to achieve.
Torsten Meringer | http://www.mssccmfaq.de
Hi Torsten,
I wanted to create a collection that will contain the computers which have succeeded an application deployment. So then I can have a list of it. Vice versa, I wanted a list of those that failed. I know that I can do that by replacing the status type to what
ever corresponds Error or Fail. It just so happen that I can't find the assignmentID.
Another issue that I'm facing is that my reporting node is not working. I'm currently working on it but I have to get the list of successful/failed application deployment as soon as possible. That's why I though of creating a collection containing only those
computers.

Need help creating a device collection based on members of a user collection

Hello everyone,
I am working on developing a device collection based on the membership of a user collection. The purpose of the device collection is to provide us with the capability of deploying software to users while the users are logged off their systems.
I would love to use AD security groups but unfortunately that isn't an available approach in this case. I have been experimenting with SQL queries to find the best way to obtain the results I want and the following query works like a champ:
Select SYS.Name0,
v_R_User.Unique_User_Name0
FROM v_R_System AS SYS
JOIN v_UserMachineRelationship ON SYS.Name0=v_UserMachineRelationship.MachineResourceName
JOIN v_R_User ON v_UserMachineRelationship.UniqueUserName=v_R_User.Unique_User_Name0
JOIN v_FullCollectionMembership AS FCM on FCM.ResourceID = v_R_User.ResourceID
JOIN v_Collection AS COLMEM ON COLMEM.CollectionID = FCM.CollectionID
Where FCM.CollectionID = 'cha0000B'
The problem arises when I attempt this same query in SCCM 2012, I don't get any results from this query so of course it won't work to base a Device Collection from. Here is the WQL:
Select SYS.Name,
SMS_R_User.UniqueUserName
FROM SMS_R_System AS SYS
JOIN SMS_UserMachineRelationship ON SYS.Name=SMS_UserMachineRelationship.MachineResourceName
JOIN SMS_R_User ON SMS_UserMachineRelationship.UniqueUserName=SMS_R_User.UniqueUserName
join sms_v_FullCollectionMembership AS FCM on FCM.ResourceID = SMS_R_User.ResourceID
join SMS_v_Collection AS COLMEM ON COLMEM.CollectionID = FCM.CollectionIDwhere FCM.CollectionID = 'cha0000B'
I am hoping that someone will be able to look at my SQL and tell me how I can get the WQL right so I can use this query properly or provide suggestions to accomplish what I need.
Thanks in advance for the assist,
Chris Bolton

Hi Torsten,
While your suggestion of that link was close, it still went in the direction of using security groups as the basis for device queries and that isn't the direction I am pursuing. I had a colleague look at my original query and he identified
that I had some unnecessary redundancy but that didn't resolve my SQL -> WQL inconsistency. I continued to play with the query and the following SQL also works (and actually works a bit better for my purposes)
select distinct v_R_System.Name0,
v_R_User.Unique_User_Name0
FROM v_R_System
JOIN v_R_User on v_R_User.Full_User_Name0 = v_R_System.User_Name0
JOIN v_UserMachineRelationship ON v_R_System.Name0 = v_UserMachineRelationship.MachineResourceName
JOIN v_FullCollectionMembership on v_R_User.Unique_User_Name0 = v_FullCollectionMembership.SMSID
WHERE v_FullCollectionMembership.CollectionID = 'cha0000b'
however when I translate it to WQL I still am unable to get results (here is the WQL version)
select distinct sms_R_system.Name,
sms_R_User.UniqueUserName
FROM sms_R_system
JOIN SMS_R_User on SMS_R_User.FullUserName = SMS_R_System.UserName
JOIN SMS_UserMachineRelationship ON SMS_R_System.Name = SMS_UserMachineRelationship.MachineResourceName
JOIN SMS_FullCollectionMembership on SMS_R_User.UniqueUserName = SMS_FullCollectionMembership.SMSID
WHERE SMS_FullCollectionMembership.CollectionID = 'cha0000b'
I think I am on the verge of getting this right but it sure seems to be a challenge. Is there a "WQL Workbench" that I could use that is similar to SQL Management Studio inside of which I could test these queries rather than having to use the rather clunky
SCCM "Edit Query Statement" dialog box?
Thanks again,
Chris Bolton

SCCM2012: Can you create a Query-based "User Collection" using an IP Subnet (or IP Address range) in the Query?

The topic says it all (I hope). I am new to 2012 and I have tried to accomplish this feat all day, which includes researching online, but I have had zero success in finding anything helpful.
Obviously I can create "Device Collections" based on the IP Subnets, and I can do a "Direct Rule" in "User Collections" for the desired IP Subnet, but I do not want to do this because I need the results to update if/when
any changes occur during a "scheduled/incremental update".
The only thing I could find for the "User Collections" was this:
select * from SMS_R_User where SMS_R_User.FullUserName = SMS_R_User.UserName and SMS_R_System.IPAddresses like "111.11.1%"
EXAMPLE (Query for Devices):
select * from SMS_R_System where SMS_R_System.IPAddresses like "111.11.1%"
Is there a way to Query SCCM (2012) and display the Usernames of computers that login to the (sole) Domain through a specified (or desired) IP Subnet?

Why do you want to install software by location for a user? Why do you care?
Why would you want to create a collected of Users with software installed? PCs have the SW install not users so how would you use it?
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ
I was asked to setup these (Device and User Collections) in this manner so we can limit future distributions/deployments of Applications (and/or Packages) and (OS) Images by these groupings. Apparently there will be occasions where deployments will need
to be segmented as such because the company wants to have them grouped in this manner. If there is a better option available than this, which I would not doubt since I am new to SCCM 2012, then I would appreciate the information.
IMO, you need to go back to the person asking and get and better understand of exactly what they want and more importantly why. Making a collection, just in case doesn't make sense.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Client Settings for Device collections Vs Client Settings for User collections

I noticed there are "Client Settings" set for each User and Group in SCCM. I want all my "Client Settings" configured by Device Collections not User Collections, what can I do? Can someone explain the difference between those?
Thanks
James A+, Network+, MCP

One is for user settings on a client and the other is for device settings on a client. As you can imagine user settings can only be deployed to user collections and device settings can only be deployed to device collections.
For more information about the user and device settings see:
https://technet.microsoft.com/en-us/library/gg682067.aspx?f=255&MSPPError=-2147217396
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Use Global Conditions when Deploying an Application to a User

Hi,
Use Global Conditions when Deploying an Application to a User:
I would like to deploy App-V Application with User centic in mind. The problem is that when the user login to a specefic typ of desktop the application shall be deployed. But if the use login on there primary device or some other
device with same SLA the Application shall not be deployed.
I think I can use Global Conditions to solve this. I have read about GC and it looks like I could greate a GC rule that deploy the software if the computer is in an AD-group or maybe becas all this computer starts with same prefix, sp maybe
if the computernamn starts with PC the application will get deployed.
The issue is that there is differant SLA on the computers that the User login to.
Or what mor can I do?
/SaiTech

Just keep in mind this puts a load on AD, a Domain Controller can get tickled silly by these Global Conditions running from each of your Clients, depending on the scale of your environment it can have an impact. It's a great idea GC's, just need to consider
what load you are putting on the infra when they run.
Might not be an issue for\to you, worth nothing all the same.
Robert Marshall | This forum post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs

How to find using SQL query application deployed on win 7 machines with SCCM 2012 server or user installed manually.

Hi,
how to find using SCCM SQL query, application deployed on win 7 machines with SCCM 2012 server or user/technician installed manually. Please let me know.

Thanks, is it not possible via any script also?
Like Torsten said, how can you tell the difference between CM12 installed applications and locally installed? Once you can answer that, then you can write report.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Create a User Collection with installed specific software

Can someone help with Query to Create a User Collection with installed specific software.
I have created a collection for Computer Collection with installed specific software but i need to push apps on users and for that i need to create a user collection with specific software installed.
Thanks

Yes. I have created device collection with
installed specific software and used this collection to pull report from out the box report for Primary Device users( Not sure about exact report name but similar) for
this collection. Did some excel work to find primary device user.
But looks like there is no straight forward solution. It would be great if i know how to import multiple users from a text/csv file into a User collection.
Thanks

SCCM Report Top Console User Computer by User Collection

Trying to Get a report of where We can have a user collection then it comes back with that users computer information... I have this report working until I try to have it run by user collection. I have commented out the last join and where and
the reports run. Any help would be appreciated.
SELECT DISTINCT B.Netbios_Name0 AS [Computer Name],
G.SerialNumber0 AS [Service Tag],
C.Manufacturer0 AS [Make],
C.Model0 AS [Model],
e.Name0 AS [Processor Name],
E.MaxClockSpeed0 AS [Processor (GHz)],
E.ProcessorType0 AS [Processory Type],
D.TotalPhysicalMemory0/1024/1024 AS [Memory (GB)],
B.User_Name0 AS [Last Logged on User],
I.TopConsoleUser0 AS [Top User],
H.Size0/1024 AS [Disk Space (GB)],
J.Caption0 AS [Operating System],
J.CSDVersion0 AS [Service Pack Level]
FROM dbo.v_r_system B
JOIN dbo.v_gs_computer_system C ON C.ResourceID = B.ResourceID
JOIN dbo.v_gs_x86_pc_memory D ON D.resourceID = B.ResourceID
JOIN dbo.v_gs_processor E ON E.resourceID = D.ResourceID
JOIN dbo.v_gs_pc_bios F ON F.ResourceID = E.ResourceID
JOIN dbo.v_gs_system_enclosure G ON G.ResourceID = F.ResourceID
JOIN dbo.v_gs_logical_disk H ON H.ResourceID = G.ResourceID
JOIN dbo.v_GS_SYSTEM_CONSOLE_USAGE I ON I.ResourceID = H.ResourceID
JOIN dbo.v_GS_OPERATING_SYSTEM J ON J.ResourceID = I.ResourceID
JOIN dbo.v_FullCollectionMembership K ON C.ResourceID = K.ResourceID
WHERE K.CollectionID=@ColID
ORDER BY C.Model0

Was hoping for a little more meat on the bone.
What more meat do you want? Peter suggestion is exactly what you need to do.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

User based application deployment issue

Hi
Since one week ago I have some problems with the user based application deployment. It has worked until last week without any problem but now I can't deploy any application. If I check the deployment status the say me ever "unknown".
I see the username but no device before. But, if the user logon on another (new) device the deployment works again. But on all actual from the useres used devices I can't deploy applications.
Has anyone an idea what could be the reason for that and how could be fixed?
Thanks in advance.
Sacha

yes I've the ConfigMgr toolkit installed but the deployments are also on the Deployment Monitoring Tool not listed. the client logs are normal, no errors. I'm pretty sure the deployment doesn't reach the client. there are no requirements configured.
just to clarify, all actual clients are affected, not just a few. what could be also interesting, I've changed last week the client settings. before I had automatically primary device assignment by useage configured. Now I've disabled that again. Maybe that
could be a reason?

Application deployment - hide all system contrainer

HI All
wondering if you could help me, I am on a client site and we are sorting some security roles for their helpdesk staff
I have already managed to create an "import computer" roll to hide the all systems collection which is fine.
However no matter what combination of settings I use I can't seem to do the same for System collections for application deployment
Requirements are quite simple, allow a specific group of users the ability to deploy applications to these collections only.
I just can't seem hide the default containers
Any ideas, any help welcome
Regards
Chris

What do you means by "I just can't seem hide the default containers". The default collections
You will need to use RBAC and scope it to your deployment collection.
If you still sees the "All Systems" collection, it's probably because of your limiting collections. If your deployments collections are limited to "All
Systems" you will see "All Systems".
Here's a blog post that describe it : (although it's for OSD, the concept apply in your case)
http://blogs.technet.com/b/chandanbharti/archive/2013/10/16/restricting-user-to-import-computer-information-and-deploy-os-to-a-collection.aspx
Benoit Lecours | Blog: System Center Dudes

Help Troubleshoting Application Deployment

Hi Everyone,
I'm still working out my first user based deployment after years and years of device based. I've run into a snag and I'm not sure how to troubleshoot it further. I've created the user collection, and I've created the application and targeted
the users collection. It's run on about a quarter of them over the last week, but there are systems online assigned to users that aren't getting the update. I've gotten a list of a few users who don't have it, and I've run through these steps:
Ensured that they are assigned as primary users of the device - they are.
Ensured those users are in the target collection - they are (and show up as "unknown" in the deployment status)
Checked the User Device Affinity Log (pasted below).
Tried to force a computer policy refresh, a user policy refresh, and the Application Manager refresh - no change.
Looked for the App*.log files to troubleshoot further, but they don't exist!
Here is the last thread from UDA log:
Checking existing users for new device affinity.
Auto affinity threshold settings Days = '14', User Minutes = '1440', AutoApproveAffinity = '1'.
Device affinity for user '<username>' has not changed.
Updating WMI with assigned affinity relationships.
I'm a little confused why there would be no App* logs, such as AppDiscovery or AppIntent, since other systems have these and help show me what's happening along the way. Any next steps anyone could point me to would be a huge help.
Thanks,
Chris

Steps 1 to 5 are the things that I would check first, too. Is the deployment 'available' or 'required'?
Torsten Meringer | http://www.mssccmfaq.de
Thanks Torsten, I've double checked the deployment and the Action is Install, and the Purpose is Required.

Application Deployed to User Collection...Excluded Collection sees Deployment

Similar Messages

Maybe you are looking for