CCMALWAYSINF

Set to 1 to specify that the client will always be Internet-based and will never connect to the intranet. The client's connection type will display Always Internet.

This property should be used in conjunction with CCMHOSTNAME, which specifies the FQDN of the Internet-based management point. It should also be used in conjunction with the CCMSetup property for native mode and with the site code.

For more information about Internet-based client management, see Overview of Internet-Based Client Management.

Example: CCMSetup.exe /native CCMALWAYSINF=1 CCMHOSTNAME=SERVER3.CONTOSO.COM SMSSITECODE=ABC

CCMCERTSEL

Specifies the certificate selection criteria if the client has more than one certificate that can be used for native mode communication (a valid certificate that includes client authentication capability).

For more information about whether you need to specify this property, see Determine If You Need to Specify Client Certificate Settings (Native Mode).

You can search for an exact match in the Subject Name or Subject Alternative Name (use Subject:) or a partial match (use SubjectStr:), in the Subject Name or Subject Alternative Name. Examples:

CCMCERTSEL="Subject:computer1.contoso.com" searches for a certificate with an exact match to the computer name "computer1.contoso.com" in either the Subject Name, or the Subject Alternative Name.

CCMCERTSEL="SubjectStr:contoso.com" searches for a certificate that contains "contoso.com" in either the Subject Name, or the Subject Alternative Name.

You can also use Object Identifier (OID) or distinguished name attributes in the Subject Name or Subject Alternative Name attributes, for example:

CCMCERTSEL="SubjectAttr:2.5.4.11 = Computers" searches for the organizational unit attribute expressed as an Object Identifier, and named Computers.

CCMCERTSEL="SubjectAttr:OU = Computers" searches for the organizational unit attribute expressed as a distinguished name, and named Computers.

Important
If you use the Subject Name field, the matching process for the Subject: selection criteria value is case sensitive and the matching process for the SubjectStr: selection criteria value is case insensitive. If you use the Subject Alternative Name field, the matching process for both the Subject: selection criteria value and the SubjectStr: selection criteria value is case insensitive.

The complete list of attributes that can be used for certificate selection is listed in the table in Determine If You Need to Specify Client Certificate Settings (Native Mode).

If more than one certificate matches the search and the property CCMFIRSTCERT has been set to 1, a certificate from the search results is randomly selected, unless the client is running Configuration Manager 2007 SP1 or later, in which case the certificate with the longest validity period is selected . If CCMFIRSTCERT has not been set and the client has more than one certificate that can be used for native mode communication, the client sends a failure message to its assigned fallback status point.

CCMCERTSTORE

Specifies an alternate certificate store name if the client certificate to be used for native mode communication is not located in the default certificate store of Personal in the Computer store.

Example: CCMSetup.exe /native CCMCERTSTORE="ConfigMgr"

CCMFIRSTCERT

If set to 1, this property specifies that the client should select any valid and matching certificate for native mode communication if multiple valid certificates are found in the certificate store. However, if the client is running Configuration Manager 2007 SP1 or later, the certificate with the longest validity period will be selected. This setting might be required if you are using Network Access Protection with IPsec enforcement.

Example: CCMSetup.exe /native:CRLANDFALLBACK CCMFIRSTCERT=1

CCMHOSTNAME

Specifies the FQDN of the Internet-based management point, if the client is managed over the Internet.

Do not specify this option with the installation property of SMSSITECODE=AUTO. Internet-based clients must be directly assigned to their Internet-based site.

Example: CCMSetup.exe /native:CRL CCMHOSTNAME="SMSMP01.corp.contoso.com"

CCMHTTPPORT

Specifies the port the client should use when communicating over HTTP to site system servers. For more information about client communication over HTTP, see Client Communication in Mixed Mode and Native Mode.

If this is not specified, the default value of 80 will be used.

Example: CCMSetup.exe CCMHTTPPORT=80

CCMHTTPSPORT

Specifies the port the client should use when communicating over HTTPS to site system servers. For more information about client communication over HTTPS, see Client Communication in Mixed Mode and Native Mode. If this is not specified, the default value of 443 will be used.

Example: CCMSetup.exe /native CCMHTTPSORT=443

SMSPUBLICROOTKEY

Specifies the Configuration Manager trusted root key where this cannot be retrieved from Active Directory Domain Services. For more information, see How to Pre-provision the Trusted Root Key on Clients.

Example: CCMSetup.exe SMSPUBLICROOTKEY=<key>

SMSSIGNCERT

Specifies the full path and .cer filename of the exported site server signing certificate for native mode clients.

For more information about whether you need to specify this property, see Decide How to Deploy the Site Server Signing Certificate to Clients (Native Mode).

For procedural information about creating the .cer file, see How to Export the Site Server Signing Certificate for Configuration Manager Client Installation.

Example: CCMSetup.exe /native:CRL SMSSIGNCERT=<Full path and filename>

SMSROOTKEYPATH

Used to reinstall the Configuration Manager trusted root key. Specify the full path and file name to a file containing the trusted root key. For more information, see How to Pre-provision the Trusted Root Key on Clients.

Example: CCMSetup.exe SMSROOTKEYPATH=<Full path and filename>

RESETKEYINFORMATION

If a Configuration Manager 2007 client has the wrong Configuration Manager trusted root key and cannot contact a trusted management point to receive a valid copy of the new trusted root key, you must manually remove the old trusted root key by using this property. This situation commonly occurs when you move a client from one site hierarchy to another.

Example: CCMSetup.exe RESETKEYINFORMATION=TRUE

CCMDEBUGLOGGING

Enables debug logging. Values can be set to 0 (off) or 1 (on). The default value is 0. This causes the client to log low-level information that might be useful for troubleshooting problems. As a best practice, avoid using this property in production sites because excessive logging can occur, which might make it difficult to find relevant information in the log files. CCMENABLELOGGING must be set to TRUE to enable debug logging.

Example: CCMSetup.exe CCMDEBUGLOGGING=1

CCMENABLELOGGING

Enables logging if this property is set to TRUE. By default, logging is enabled. The log files are stored in the Logs folder in the Configuration Manager Client installation folder. By default, this folder is %Windir%\System32\CCM\Logs.

Example: CCMSetup.exe CCMENABLELOGGING=TRUE

CCMLOGLEVEL

Specifies the amount of detail to write to Configuration Manager 2007 log files. Specify an integer ranging from 0 to 3, where 0 is the most verbose logging and 3 logs only errors. The default is 1.

Example: CCMSetup.exe CCMLOGLEVEL=3

CCMLOGMAXHISTORY

When a Configuration Manager 2007 log file reaches 250000 bytes in size (or the value specified by the property CCMMAXLOGSIZE), it is renamed as a backup and a new log file is created.

This property specifies how many previous versions of the log file to retain. The default value is 1. If the value is set to 0, no old log files are kept.

Example: CCMSetup.exe CCMLOGMAXHISTORY=0

CCMLOGMAXSIZE

Specifies the maximum log file size in bytes. When a log grows to the size that is specified, it is renamed as a history file and a new file is created. This property must be set to at least 10000 bytes. The default value is 250000 bytes.

Example: CCMSetup.exe CCMLOGMAXSIZE=300000

CCMALLOWSILENTREBOOT

If this property is set to 1, the computer will be allowed to restart following the client installation if this is required.

Important
The computer will restart without warning even if a user is currently logged on.

Example: CCMSetup.exe CCMALLOWSILENTREBOOT=1

DISABLESITEOPT

If set to TRUE, disables the ability of end users with administrative credentials on the client computer to change the Configuration Manager Client assigned site by using Configuration Manager from the client computer's Control Panel.

Example: CCMSetup.exe DISABLESITEOPT=TRUE

DISABLECACHEOPT

If set to TRUE, disables the ability of end users with administrative credentials on the client computer to change the temporary program download folder settings for the Configuration Manager Client by using Configuration Manager from the client computer's Control Panel.

Example: CCMSetup.exe DISABLECACHEOPT=TRUE

SMSCACHEDIR

Specifies the location of the temporary program download folder on the client computer. By default, the location is %windir%\System32\CCM\Cache.

Example: CCMSetup.exe SMSCACHEDIR="C:\Temp"

This property can be used in conjunction with the SMSCACHEFLAGS property to further control the temporary program download folder location.

Example: CCMSetup.exe SMSCACHEDIR=Cache SMSCACHEFLAGS=MAXDRIVE installs the temporary program download folder on the largest available disk drive on the client.

SMSCACHEFLAGS

Configures the Configuration Manager 2007 temporary program download folder. You can use SMSCACHEFLAGS properties individually or in combination, separated by semicolons. If this property is not specified, the temporary program download folder is installed according to the SMSCACHEDIR property, the folder is not compressed, and the SMSCACHESIZE value is used as the size in MB of the folder.

Specifies further installation details for the client temporary program download folder. The following properties can be specified:

• PERCENTDISKSPACE: Specifies the folder size a percentage of the total disk space. If you specify this property, you must also specify the property SMSCACHESIZE as the percentage value to use.
  
  
• PERCENTFREEDISKSPACE: Specifies the folder size as a percentage of the free disk space. If you specify this property, you must also specify the property SMSCACHESIZE as the percentage value to use. For example, if the disk has 10 MB free and SMSCACHESIZE is specified as 50, the folder size is set to 5 MB. You cannot use this property with the PERCENTDISKSPACE property.
  
  
• MAXDRIVE: Specifies that the folder should be installed on the largest available disk. This value will be ignored if a path has been specified with the SMSCACHEDIR property.
  
  
• MAXDRIVESPACE: Specifies that the folder should be installed on the disk drive that has the most free space. This value will be ignored if a path has been specified with the SMSCACHEDIR property.
  
  
• NTFSONLY: Specifies that the folder can be installed only on disk drives formatted with the NTFS file system. This value will be ignored if a path has been specified with the SMSCACHEDIR property.
  
  
• COMPRESS: Specifies that the folder should be held in a compressed form.
  
  
• FAILIFNOSPACE: Specifies that the client software should be removed if there is insufficient space to install the folder.
  
  

Note
Multiple properties for this property can be specified by separating each with a semicolon.

If this property is not specified, the temporary program download folder will be created according to the SMSCACHEDIR property, will not be compressed ,and will be the size specified in the SMSCACHESIZE property.

Example: CCMSetup.exe SMSCACHEFLAGS=NTFSONLY;COMPRESS

Note
This setting is ignored when upgrading an existing client.

SMSCACHESIZE

Specifies the size of the temporary program download folder in MB or as a percentage when used with the PERCENTDISKSPACE or PERCENTFREEDISKSPACE property. If this property is not set, the folder defaults to a maximum size of 5120 MB.

Note
If a new package that must be downloaded would cause the folder to exceed the maximum size and if the folder cannot be purged to make sufficient space available, the package download fails and the advertised program will not run.

This setting is ignored when upgrading an existing client.

Example: CCMSetup.exe SMSCACHESIZE=100

SMSCONFIGSOURCE

Specifies the location and order that the Configuration Manager Client Installer checks for configuration settings. The property is a string containing one or more characters, each defining a specific configuration source. Use the character values R, P, M, and U, alone or in combination, as shown in the following examples:

• R: Check for configuration settings in the registry.
  
  
• P: Check for configuration settings in the installation properties provided on the command line.
  
  
• M: Check for existing settings when upgrading an older client with the Configuration Manager 2007 client software.
  
  
• U: Upgrade the SMS 2003 advanced client or upgrade the Configuration Manager 2007 client to a newer version (using the assigned site code).
  
  

By default, the client installation uses PU to check first the installation properties and then the existing settings.

Example: CCMSetup.exe SMSCONFIGSOURCE=RP

SMSDIRECTORYLOOKUP

Specifies how the client uses WINS for service location.

Service location using WINS in mixed mode includes the management point and server locator point.

Service location using WINS in native mode includes the server locator point only.

For alternative methods of locating management points and the order in which they are performed, see Configuration Manager and Service Location (Site Information and Management Points).

If WINS is not used by clients to find a server locator point, it must be directly assigned to clients, for example using the SMSSLP Client.msi property.

This property has no impact on whether the client uses WINS for name resolution. For more information about using WINS for name resolution, see Configuration Manager and Name Resolution.

You can configure how WINS is used for service location using one of the following three modes:

• NOWINS: This is the most secure method. In this mode, WINS is not used for service location and clients must have an alternative method of locating management points and a server locator point (if required).
  
  
• WINSSECURE: In this mode, the mixed mode client can use WINS for service location but verifies the management point's mixed mode certificate before communicating with it.
  
  To verify the certificate, the client checks its copy of the mixed mode trusted root key in WMI. If the signature on the management point certificate matches the client’s copy of the trusted root key, the certificate is validated, and the client communicates with the management point found through WINS. If the signature on the management point certificate does not match the client’s copy of the trusted root key, the certificate is not valid and the client will not communicate with the management point located with WINS.
  
  
• WINSPROMISCUOUS: In this mode, the mixed mode client can use WINS for service location but does not verify the management point's mixed mode certificate before communicating with it. This mode is not secure and is not recommended.
  
  

If this property is not specified, the default value of WINSSECURE will be used.

Example: CCMSetup.exe SMSDIRECTORYLOOKUP=NOWINS

SMSMP

Assign the Configuration Manager 2007 client to the specified management point. You can specify a fully qualified domain name as this property.

Example: CCMSetup.exe SMSMP=SMSMP01

SMSSITECODE

Specifies the Configuration Manager 2007 site to assign the Configuration Manager Client to. This can either be a three-character Configuration Manager 2007 site code or the word AUTO. If AUTO is specified, the Configuration Manager Client attempts to determine its Configuration Manager 2007 site assignment by using Active Directory or a server locator point.

Note
Do not use AUTO if the client will find its default management point using DNS or if you are also specifying the Internet-based management point (CCMHOSTNAME). In both of these scenarios, you must directly assign the client to its site.

Example: CCMSetup.exe SMSSITECODE=AUTO

SMSSLP

Specifies the server locator point for site assignment and locating management points for clients that cannot locate this information from Active Directory Domain Services, DNS, or WINS.

For more information about how server locator points are used, see Configuration Manager and Service Location (Site Information and Management Points).

To determine if clients need a server locator point, see Determine If You Need a Server Locator Point for Configuration Manager Clients.

Example: CCMSetup.exe SMSSLP=SMSSLP01

CCMINSTALLDIR

Identifies the folder where the Configuration Manager Client files are installed. If this property is not set, then the client software is installed in the %Windir%\System32\CCM folder. Regardless of where the Configuration Manager Client files are installed, the Ccmcore.dll file is always installed in the %Windir%\System32 folder.

Example: CCMSetup.exe CCMINSTALLDIR="C:\Temp"

CCMADMINS

Specifies one or more Windows user accounts or groups to be given access to client settings and policies. This is useful where the Configuration Manager 2007 administrator does not have local administrator privileges on the client computer. You can specify a list of accounts separated by semi-colons.

Example: CCMSetup.exe CCMADMINS="Domain\Account1;Domain\Group1"

FSP

Specifies the fallback status point that will receive and process state messages sent by Configuration Manager 2007 client computers.

For more information about the fallback status point, see About the Fallback Status Point in Configuration Manager.

Example: CCMSetup.exe FSP=SMSFP01

DNSSUFFIX

Specifies the DNS domain to use for locating the default management point in DNS, when DNS publishing is used.

For more information about locating management points in DNS, see Configuration Manager and Service Location (Site Information and Management Points).

If this property is specified, SMSSITECODE must not be set to AUTO.

When this property is specified, client assignment will look for a DNS service location resource record (SRV RR) in DNS, which includes this DNS suffix of the management point. For the exact record format, see How to Manually Publish the Default Management Point to DNS.

Note
DNS publishing is not enabled by default in Configuration Manager 2007. For more information on whether you should use DNS publishing, see Determine If You Need to Publish to DNS.

Example: CCMSetup.exe SMSSITECODE=ABC DNSSUFFIX=contoso.com