Deploying Applications Using Security Groups Via SCCM

[ikkhatri]

Ok so I have tested this and working pretty well for me.

SCCM to uninstall an application when you remove the computer from the Application security group.

 

I will be using the security group: “ Application – Google Chrome “ as an example.

 

In Device collections as I previously mentioned I created a folder for applications and created the collections in that folder to deploy applications.

1. I have created another folder in Device Collections called Applications – Uninstall.
2. In there I have created a collection called: Application – Google Chrome UN
3. Limiting Collection: All Desktop And Server Clients
4. Clicked Add Rule, Query Rule, and named it as Application – Google Chrome UN
5. Resource Class: System Resources then clicked Edit Query Statement then Show Query Language.
6. Clear the box and entered:

 

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId where SMS_R_System.NetbiosName not in (Select SMS_R_System.NetBiosName from SMS_R_System where SMS_R_System.SystemGroupName = "YourDOMAIN\\YOUR APPLICATION SECURITY GROUP") and SMS_R_System.Client = 1 and SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = "Google Chrome"

 

7. Then ok.

8. Clicked on add Rule and this time clicked Exclude Collection and chose the Installation Collection I created in my earlier post.

9. Next it all the way

10. Now we need to deploy the collection we just created.

11. Right clicked then clicked Deploy à application

12. Software – Chose the google chrome application

13. Click Next until you get to Deployment Settings and Change Install to Uninstall.

14. Next it all the way.