Since the release of SCCM 1810, one of the feature that I wanted to test was approve SCCM application requests via email. I believe this is really a good feature and I am sure admins would be very happy. The application approval feature of Configuration Manager would allow admins to approve application requests for users per device. When the user first requests application, it gets listed under Approval Requests. The administrator had to visit Approval Requests section and manually approve the request. To know more about what I am talking about, here is my post on approve application requests for users per device. However the new SCCM 1810 feature, approve application requests via email is really a great addition. We will look more about it in the next section.
Note – Most of all “Approve application requests for users per device” feature was introduced with SCCM 1802. Therefore ensure that you are using SCCM 1802 and above to test this feature. In addition, ensure that all the client agents are updated to new version.
This post covers the steps to approve SCCM application requests via email. The steps that I am performing are done on SCCM version 1810. If you are still not on SCCM 1810, refer the SCCM 1810 step by step guide to upgrade your configuration manager. Note that Approve Application Requests via Email feature is available starting with SCCM 1810 only.
Approve SCCM Application Requests via Email
To implement and test the approve application requests via email feature, we will breakdown the whole process into steps. This will help you to understand it better. Note that every step is important and in-case you get stuck at any step, feel free to put your question in the comments section.
Step 1 – Enable Approve Application Requests for Users Per Device
First of all you need to enable a feature called Approve application requests for users per device. To do so :-
- Launch Configuration Manager console.
- Click Administration > Overview > Updates and Servicing > Features.
- On the right pane, right click Approve application requests for users per device and click Turn On.
- Close and relaunch the console.
Step 2 – Configure Email Notification
This step is very important because you want to get an email when user requests for an application. Hence configuring email notification is required and you can refer my post on how to configure email notification in SCCM.
To Configure Email Notification :-
- Launch SCCM console.
- Navigate to Monitoring > Overview > Alerts > Subscriptions.
- Right click Subscriptions, click Configure Email Notification.
- Enable email notification for alerts. Specify either FQDN or IP Address of the SMTP server to send email alerts.
- Specify Sender address which is the email address from which alert emails are sent.
- On Test SMTP Connection window, enter the test email recipient and click Send test email.
- If you receive a test email, your configuration is correct. Proceed to Step 3.
Step 3 – Deploy an Application to User Collection
We will now deploy an application to a user collection. As an example, I will be deploying the Putty application to a user collection. Right click the application and click Deploy. Click Browse and select a User Collection.
Under Deployment Settings select the following.
- Action – Install
- Purpose – Available
- Allow end users to attempt to repair this application – Enable this option if you want the user to repair the application right from software center. To know how this feature works, read this post.
- An administrator must approve a request for this application on the device – Enable this option because this is required to test the email approval feature. Notice that there is a textbox where you can specify email addresses. If you are specifying multiple email addresses, add ; after each email address. When user requests the application via software center, an application request email goes to all the email addresses that you specify here.
Note – In my testing i found that once you specify email addresses and deploy the application, you cannot change or modify them later. Neither in application properties nor deployment settings. So ensure that you specify correct email address.
If you need to set the application available time you can do it here. Else click Next.
On the remaining pages, click Next. Finally on Completion page click Close.
Step 4 – Testing the Request and Approval Feature
The user now opens Software Center and requests the application. The user can add some details as to why the application is required and click Request button.
Once the user requests application, a message is displayed, Your request has been submitted. User has an option to cancel request in-case the application is not required.
Once you receive the email, you can now approve the application request. To approve the request, click Approve link. The email that you receive looks similar to below one.
“User” wants to install PuTTY on the device titled User Device. Please click one of the buttons below to approve or deny this request.
Note: these links only work when connected to your internal network.
When you click Approve, a link opens in the default browser. You can also right click Approve and copy the link and open it in different browser. When you do that you would see “Success! Configuration Manager received and processed your request to approve this application.
When the admin approves the request, the application is installed automatically on user’s machine. The user will now see the application installed.