The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The current Microsoft Configuration Manager client—still commonly called the SCCM client—is installed with CCMSetup.exe, not by running client.msi directly. For a typical domain-connected Windows 11 computer, run the installer from the site share with the correct site code and management point, then verify the service, site assignment, policy retrieval, and console status.
This guide covers manual installation, client push, internet-based and Microsoft Entra scenarios, verification, and the most common failures. It assumes your organization already has a functioning Configuration Manager hierarchy.
What the SCCM client does
“SCCM” is the former name commonly used for Microsoft Endpoint Configuration Manager. Microsoft’s current documentation generally calls the product Microsoft Configuration Manager or Configuration Manager current branch.
The client agent enables Configuration Manager features such as application deployment, Software Center, software updates, hardware and software inventory, compliance settings, policy processing, and reporting. Installing the agent alone does not guarantee that every feature works: the device must also receive a site assignment, locate a management point, download policy, and communicate successfully with the site.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Windows 11 support depends on both the Windows 11 release and the Configuration Manager current-branch version and servicing level. Check Microsoft’s supported operating-systems matrix before deploying to a production device.
Before you install
Windows 11 checks
- Install the Windows updates required by your organization.
- Use an elevated account with local administrator rights, or deploy through an approved software-deployment system.
- Confirm that internal DNS resolves the management point and site server.
- Check that firewalls, proxies, and endpoint-security software do not block required traffic.
- Ensure the system clock is synchronized. Incorrect time can break certificate and HTTPS validation.
- For HTTPS, PKI, or Cloud Management Gateway (CMG) installations, verify the required certificates and trusted root CAs.
- Confirm whether the device is domain joined, workgroup joined, hybrid Microsoft Entra joined, or Microsoft Entra joined.
Configuration Manager checks
Ask your Configuration Manager administrator for these values:
Site server: CM01.contoso.com
Site code: P01
Management point: cm01.contoso.com
Distribution point: DP01.contoso.comDo not guess the three-character site code. Also distinguish between these roles: a primary site, site server, management point, and distribution point may run on the same computer in a small environment, but they are logically different.
The device’s IP subnet, IP range, Active Directory site, or VPN range must be covered by a boundary. That boundary must belong to a boundary group with the intended site assignment and suitable content locations. A client can install successfully and still remain unmanaged if these settings are missing.
Recommended method: manual CCMSetup installation
1. Locate CCMSetup.exe
The client installation files are normally in the site server’s Client folder, available through a path similar to:
\CM01SMS_P01ClientThe general format is:
\<SiteServer>SMS_<SiteCode>ClientOpen an elevated Command Prompt or PowerShell window on the Windows 11 PC. The account must have read access to the share.
2. Test DNS and connectivity
Resolve-DnsName cm01.contoso.com
Test-NetConnection cm01.contoso.com -Port 80Use port 443 when the management point uses HTTPS:
Test-NetConnection cm01.contoso.com -Port 443Ports 80 and 443 are common defaults, but your organization may use different configured ports. A successful TCP test proves only that a connection was possible; it does not prove that the management point is healthy.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
3. Run the installer
For a typical intranet installation from the site share:
\CM01SMS_P01ClientCCMSetup.exe ^
/mp:cm01.contoso.com ^
SMSSITECODE=P01 ^
SMSMP=cm01.contoso.comOr, if CCMSetup.exe is already available locally:
ccmsetup.exe /mp:cm01.contoso.com SMSSITECODE=P01 SMSMP=cm01.contoso.comWhat the parameters mean
/mp:cm01.contoso.comspecifies an initial management point used by the bootstrap process to help locate installation content. It does not, by itself, permanently assign the installed client to that management point.SMSSITECODE=P01supplies the Configuration Manager primary-site code.SMSMP=cm01.contoso.comsupplies the management point used by the installed client.
Parameters beginning with a slash are CCMSetup.exe parameters. Properties such as SMSSITECODE and SMSMP are client installation properties and generally use uppercase names with an equals sign. Keep bootstrap parameters before client properties. See Microsoft’s CCMSetup and client installation properties reference.
Do not install client.msi directly. CCMSetup.exe stages the required files and prerequisites, then launches the client installation correctly.
Installing from a local or UNC source
Use /source when the computer cannot obtain the client files through its normal management-point or distribution-point path:
ccmsetup.exe ^
/source:"C:InstallClient" ^
SMSSITECODE=P01 ^
SMSMP=cm01.contoso.comFor a UNC source:
\FileServerSoftwareConfigMgrClientCCMSetup.exe ^
/source:"\FileServerSoftwareConfigMgrClient" ^
SMSSITECODE=P01 ^
SMSMP=cm01.contoso.comThe account running setup needs read access to the local or UNC source. This bypasses a content-download problem, but it does not remove the need for later management-point communication, site assignment, and policy retrieval.
Other installation methods
Client push
In the Configuration Manager console, go to Assets and Compliance, open Devices or a device collection, select the target computer, choose Install Client, and provide the required installation options.
Client push is suitable for discovered, domain-joined computers when the installation account has local administrator rights and SMB/RPC, administrative shares, and Windows Firewall rules are available. It is not supported for workgroup computers and is a poor default for internet-only or Microsoft Entra-only devices. Push can also generate substantial network traffic, and a started push cannot simply be canceled in the same way as a queued deployment. See Microsoft’s client installation methods.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Group Policy, scripts, and software distribution
Group Policy, logon scripts, software distribution, task sequences, and software-update-point-based installation can deploy the client at scale. Select the method according to device discovery, domain membership, network location, administrative rights, and whether devices are managed through Intune or co-management.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall- Group Policy: useful for controlled domain-wide deployment, but can create additional network traffic.
- Logon script: useful for computers that regularly connect and sign in, but unreliable for infrequently used devices.
- Software distribution: appropriate when an existing deployment platform already targets the device.
- Task sequence: best suited to operating-system deployment or rebuilds.
- Intune or co-management: appropriate for cloud-managed and modern provisioning scenarios.
How to verify the installation
Think of installation as several separate stages:
- Bootstrap:
CCMSetup.exestarts. - Content acquisition: setup obtains client files and prerequisites.
- Client installation: the agent is installed.
- Site assignment: the client identifies or receives its primary site.
- Management-point location: the client locates a suitable management point.
- Policy retrieval: settings and deployments arrive.
- Reporting: discovery and inventory data return to the site.
A completed installer process proves only that the bootstrap process exited. Complete these checks instead.
Check the service
Get-Service CcmExecThe expected result is a running service named CcmExec with the display name SMS Agent Host.
Check the client files and logs
Normally these folders exist after installation:
C:WindowsCCM
C:WindowsCCMSetup
C:WindowsCCMLogsThe primary setup log is:
C:WindowsCCMSetupLogsccmsetup.logImportant logs include:
ccmsetup.log— setup, upgrade, and removalclient.msi.log— Windows Installer activityccmsetup-ccmeval.log— setup and health evaluationCcmRepair.log— repair activityLocationServices.log— management-point and location servicesClientLocation.log— site assignmentClientIDManagerStartup.log— client identity and registrationCcmMessaging.log— communication with site systems
Watch the setup log live with:
Get-Content C:WindowsCCMSetupLogsccmsetup.log -WaitCMTrace or OneTrace can make Configuration Manager logs easier to read. Microsoft maintains the Configuration Manager log file reference.
Check the Configuration Manager applet
control smscfgrcOpen the Configuration Manager Control Panel applet. On the Site tab, confirm that the intended site code is displayed. On the Actions tab, you can run actions such as:
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →- Machine Policy Retrieval & Evaluation Cycle
- Application Deployment Evaluation Cycle
- Software Updates Scan Cycle
- Discovery Data Collection Cycle
Software Center may take time to populate; do not treat an initially empty Software Center as proof that installation failed.
Check the console
In the Configuration Manager console, open Assets and Compliance > Devices and locate the computer. Confirm:
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
- Client: Yes
- Site Code: the expected code
- Recent activity or policy information
- The correct operating-system information
- The expected boundary group or management-point information, where shown
A device record can exist even when the client is missing or unhealthy. Client status, site assignment, policy activity, and logs are more meaningful than the existence of the record alone.
Microsoft Entra-joined and internet-based devices
Do not use the ordinary intranet command unchanged for a Microsoft Entra-joined Windows 11 computer that is outside the corporate network. Such a device may require a Cloud Management Gateway, Microsoft Entra authentication, tenant onboarding, certificates, and an appropriate CMG hostname.
Recommended Free Tools
An organization-specific CMG installation may resemble:
ccmsetup.exe CCMHOSTNAME="CMG.CLOUDAPP.NET/CCM_Proxy_MutualAuth/<CMG-ID>" SMSSITECODE=MEMThe actual hostname and identifier must come from your Configuration Manager environment. See Microsoft’s Entra-based client installation through CMG.
Workgroup computers
Workgroup installation is not identical to domain-joined installation:
- Client push is not supported.
- Automatic site assignment is more limited.
- Active Directory-published installation properties are unavailable.
- Explicit installation properties may be required.
- DNS, firewall, credentials, certificates, and management-point accessibility become especially important.
Microsoft documents the limitations of installation properties published to Active Directory Domain Services.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteCommon problems and fixes
CCMSetup cannot download files
Check ccmsetup.log first. Common causes include an incorrect management-point FQDN, DNS failure, unavailable management point, missing distribution-point content, firewall or proxy blocking, TLS failure, missing certificates, or a device outside the corporate network.
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
- Resolve the management-point name.
- Test the correct TCP port.
- Confirm the device matches a boundary.
- Confirm the boundary belongs to the intended boundary group.
- Verify a distribution point or other content location is available.
- For HTTPS, validate the certificate chain, clock, and trusted roots.
- Try a local or UNC
/sourcepath when appropriate.
The client installs but shows Client = No
Review the Site tab and these logs: LocationServices.log, ClientLocation.log, ClientIDManagerStartup.log, and CcmMessaging.log. Check the site code, boundary and boundary group, management-point availability, certificate configuration, and duplicate device records. Trigger Machine Policy Retrieval & Evaluation rather than assuming that waiting a fixed number of minutes will solve the problem.
Client push returns Access Denied
Check the push account’s local administrator rights, administrative shares, Windows Firewall, Remote Registry or related restrictions, SMB/RPC reachability, and discovery status. If the target is a workgroup computer, use manual setup, a script, software deployment, or another supported method instead.
Return code 7
Microsoft documents return code 7 as reboot required. Other useful codes include 0 for success, 6 for an error, 8 when setup is already running, 9 for prerequisite evaluation failure, and 10 for setup-manifest hash validation failure. Always interpret the code alongside ccmsetup.log.
Restart if appropriate:
shutdown /r /t 0CCMSetup is already running
Return code 8 means another setup instance is running. Check before launching another installer:
Get-Process ccmsetup -ErrorAction SilentlyContinue
Get-Service ccmsetup -ErrorAction SilentlyContinueReview the existing log and do not start multiple installers unless the current process is clearly stuck.
An existing client is broken
To remove the client:
ccmsetup.exe /uninstallReboot if required, then reinstall with the correct source and properties. Use /forceinstall cautiously:
ccmsetup.exe /forceinstall /mp:cm01.contoso.com SMSSITECODE=P01 SMSMP=cm01.contoso.comA forced reinstall can remove a functioning client. Microsoft notes that, beginning with Configuration Manager version 2111, client removal also removes the client bootstrap and ccmsetup.msi when present.
PKI or HTTPS errors
Confirm that the computer has a valid client-authentication certificate in the correct computer certificate store, trusts the certificate chain, can reach certificate revocation endpoints, has the correct time, and supports the site’s TLS configuration. Use /UsePKICert only when the site is configured for PKI client authentication; adding it indiscriminately can create another failure.
Quick Recap
Useful commands
# Check the Windows version
Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsBuildNumber
# Check the client service
Get-Service CcmExec
# Check whether the client namespace exists
Get-CimInstance -Namespace rootccm -ClassName SMS_Client
# Search the setup log for likely errors
Select-String -Path C:WindowsccmsetupLogsccmsetup.log `
-Pattern "error|failed|return code|0x" -CaseSensitive:$false
# Display CCMSetup help
ccmsetup.exe /?Final installation checklist
- Windows 11 and the Configuration Manager branch are supported together.
- The site code and management-point FQDN are correct.
- The client source is reachable and readable.
- DNS and the required network port work.
- The device matches the intended boundary and boundary group.
ccmsetup.logshows successful setup activity.- The
CcmExecservice is running. - The Configuration Manager applet shows the expected site code.
- The console shows Client = Yes.
- Policy, inventory, and Software Center eventually populate.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
