User Application Deployment with SCCM 1910

This post covers on user application deployment with SCCM 1910. Using Configuration Manager you can deploy applications to user collections and device collections.

In addition to that, you can also simulate the application deployment. To know more about deploying applications with Configuration Manager, read this article.

Lets look at a scenario where we need to deploy an application to a Business unit group. With SCCM, it becomes very easy to deploy the application directly to the user collection.

In the previous SCCM versions, you had to first install and configure both Application Catalog roles to benefit with this feature.

  • Application Catalog Website Service point
  • Application Catalog Web Service point

Most of all starting with SCCM 1806, you no longer need to install the above roles. That’s because the client uses their Management Point to discover the application deployed to the user collection and shows them in the Software Center.

Furthermore starting in SCCM version 1906, you can’t install new application catalog roles. Support ends for the application catalog roles with version 1910.

So let’s see how to deploy application to users with Microsoft Endpoint Configuration Manager 1910.

Enable Active Directory User Discovery Method

Before creating a dynamic SCCM user collection based on the Department attribute, you have to enable Active Directory User Discovery method. Follow the below steps :-

  • Open the SCCM console.
  • Go to Administration > Hierarchy Configuration > Discovery Methods.
  • Make sure that the Active Directory User Discovery method is enabled.
Active Directory User discovery
Active Directory User discovery

Double click Active Directory User Discovery to view the Properties. Add Active Directory container that contains the related users. For example, we’re specifying the complete Domain to discover all Domain Users.

Enable Active Directory User discovery
Enable Active Directory User discovery

Click Active Directory Attributes tab. Under Available attributes, select department and click Add. Click OK.

User Application Deployment with SCCM 1910 Snap3

Right click AD User Discovery method and click Run Full Discovery Now. Click Yes to confirm.

Run Active Directory User discovery

To monitor the Active Directory User Discovery, open the adusdis.log file. This log is located in Configuration Manager install directory\Microsoft Configuration Manager\Logs.

User Application Deployment with SCCM 1910 Snap5

If you go to Assets and Compliance > Users Collection > All Users, the discovery method was successful.

User Collection

Create User Collection in SCCM

Now we will create a dynamic collection that contains all IT Users. Select User Collections, and on top ribbon click Create User Collection.

Create SCCM User Collection
Create SCCM User Collection

On the Create User Collection Wizard, type in the name of collection. Click Browse and specify the Limiting Collection. Click Next.

User Application Deployment with SCCM 1910 Snap8

In Membership rules, click Add Rule and select Query Rule.

Define Query Rule
Define Query Rule

Specify Query name and click Edit Query Statement.

Edit Query Statement
Edit Query Statement

On the General tab, click Show Query Language.

User Application Deployment with SCCM 1910 Snap11

Copy and Paste the following query and click OK.

select * from SMS_R_User where SMS_R_User.department = “IT”

User Application Deployment with SCCM 1910 Snap12

Click OK.

User Application Deployment with SCCM 1910 Snap13

Finally on the Completion page, click Close.

User Application Deployment with SCCM 1910 Snap14

SCCM User Application Deployment

Before deploying the application to the user collection, ensure that the deployment type is configured for user. You can follow the below steps.

Go to Software Library > Application Management > Applications. Select the application, in the Deployment Types tab, right click on the related one and click Properties.

Application Deployment Properties

In User Experience tab, select Install for system If resource is device; otherwise install for user in the Installation behavior option and click OK.

Application Deployment Properties

Right click the application and click Deploy.

User Application Deployment with SCCM 1910

On the General page, click Browse and select a target user collection. Click Next.

User Application Deployment with SCCM 1910

Select the deployment settings. You can deploy the application either as Available or Required. Click Next.

User Application Deployment with SCCM 1910

Specify the user experience settings. Click Next.

User Application Deployment with SCCM 1910 Snap20

On the Completion page, click Close.

User Application Deployment with SCCM 1910 Snap21

Login to the computer. Open the Software Center and you can see now the Microsoft Edge Chromium application.
User Application Deployment with SCCM 1910


  1. Avatar photo Deepak Rai says:

    Does user needs admin rights to install the application from software center once the app is exposed in software center?
    Any article related to this will be helpful.

    1. It shouldn’t be like that, but it acts like it is. When IT colleagues pick up from the Software Center to initiate the installation, the application is installed. When an unauthorized user starts the installation, the installation script will not run. ScriptHandler :: EnforceApp failed (0x800702e4).

  2. Does anyone know a script to create user collections based on department. Just want to save time creating them all. I know it can be done by PShell but it’s beyond me to write it 🙂

  3. I love using User collection. However, I have an issue with a few users that the application NOT showing up in there Software Center. I even created a new application and collection deployment and still with same results. I checked the logs on server and client too and nothing that pop-out significantly. Anybody experience this?

  4. Avatar photo zulfiqar khan says:

    this solution is not working in Mutiple domains any thoughts ?

  5. Is there way to deploy only to users primary device. When user login only should see application on their device not when user login to other devices

    1. Yes – from the Deployment Type – Requirements tab. Type, select User – Primary Device and set the value to True.

Leave a Reply

Your email address will not be published. Required fields are marked *