Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Technical Articles ID: KB84741
Last Modified: 2022-11-28 10:07:01 Etc/GMT

Environment

Application and Change Control (ACC) 8.x.x, 7.x.x, 6.2.x, 6.1.x
Microsoft System Center Configuration Manager (SCCM) server

Problem

You have an SCCM server that's set up to deploy and install packages on a 32-bit or 64-bit Microsoft Windows operating system endpoint. The SCCM server communicates to the SCCM client, which is responsible for deploying the package and installing the application on the Windows endpoint. The SCCM client itself is pushed and installed by the SCCM server.

With Application Control enabled, the SCCM client installation, reinstallation, or upgrade might fail. You might observe write-denied and pkg-modification-prevented events.

Solution

To resolve the problem, a two-step configuration is needed.

Add the SCCM client installation user as a Trusted User.

Determine which account is the Client Push Installation user (SCCM client installation user) on the SCCM server:
1. From the Configuration Manager console, click Administration, expand Site Configuration, and click Sites.
2. In the top ribbon, select Client Push Installation from the Client Installation Settings drop-down list. The Client Push Installation Properties dialog pop-up displays.
3. Click the Accounts tab. The SCCM client installation user displays in the Client Push Installation accounts section.
  
  NOTE: The account must have local administrator rights on every computer on which you want to install the SCCM client.
Add Wakeprxy.msi as an Updater.

NOTE: Make sure that you have the default Application Control rules for SCCM and SMS applied.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Installation or upgrade of Microsoft System Center Configuration Manager client might fail with Application Control enabled

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title