Share via

Service desk sccm security role - added a user and no change in the software center

Draconna 481 Reputation points
Jun 3, 2022, 3:44 PM

Hello, we use the sccm security role "service desk" and that is tied to an Active Directory group. Our level 1 technicians are members of that AD group.

Security team wants to add the techs elevated account to this AD group. We tested it with one adding them to the same AD group, however when they sign in with their more elevated account, hardly anything shows in sccm software center for them to deploy apps. Thank you.

208311-image.png

Microsoft Configuration Manager
0 comments No comments
{count} votes

Accepted answer
  1. Sherry Kissinger 5,526 Reputation points
    Jun 6, 2022, 7:25 PM

    No, the "queries" node in the console isn't where you see who or what is being targeted with a deployment visible in Software Center. You pretty much can just stay out of the "queries" node... I personally only go look at the queries node maybe twice a year. It's not that interesting, imo...

    For "who deserves what", some detective work is required on your part.

    1. Under Monitoring, look at "Deployments". In there you will see the list of things being deployed, and they are deployed to a collection. That collection might be "machine based" or "user/usergroup based"--but you can't easily tell that from THAT location.
    2. take note of something in that Deployments node you are curious about. specifically the Collection
    3. under "Assets and Compliance", now go look at "Device Collections" and/or "User Collections", looking for that collection you noted in #2. If it's in the "device Collections" area, then the targets are devices. The collection query might be something like... "where make is HP", because it's drivers for an HP (just making this up as I type). If it's in the "User Collections" area, then the targets are users, possibly a usergroup. Either type (devices or user) can be defined to "show up" in the Software Center; it's all in how the deployment was setup.

    You may want to see if there's an online training you can get your company to pay for, or grab a book from Amazon and read up a bit if you've been thrown into the "hey, now you support CM, congratulations" scenario...

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
  1. Garth 5,801 Reputation points
    Jun 3, 2022, 9:05 PM

    How exactly did you setup the collection for these deployment? Aka did you deploy it the the sec group ONLY? Or did you do it to the users themselves or the the computers? Post your collection query.

    1 person found this answer helpful.

  2. Amandayou-MSFT 11,141 Reputation points
    Jun 14, 2022, 6:33 AM

    Haven't heard from you for some time, is sherry's answer helpful to you? If it is helpful, please accept answer. It will make someone who has the similar issue easily find the answer.

    If you have any other issues, please don't hesitate to let us know.

    Thanks and have a nice day.

    Best regards,
    Amanda

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.