how to stop SCEPclient.exe download along with client installation files? RRS feed

  • Question

  • We plan to upgrade configmgr client to latest SCCM 2012 R2 Sp1. while upgrading the client, SCEP client also getting downloaded which is not being used in current environment. if we use the option of auto upgrade, there isn't a way to skip the download. most clients reside in WAN links, downloading of 25 MB file of SCEP  for no good reason is a concern.

    checking if there is any way to prevent this download along with client auto upgrade option.

    Thanks for your time and advice.



    Tuesday, April 19, 2016 5:19 AM


All replies

  • Hi,

    I don't believe there are a way to avoid it..


    -- My System Center blog ccmexec.com -- Twitter @ccmexec

    Tuesday, April 19, 2016 5:28 AM
  • SCEPInstall.exe is part of the Configuration Manager Client Package and will be downloaded along with all the other Prereq Components.

    I don't think you can prevent this, but you can create a User Voice for it: https://configurationmanager.uservoice.com/forums/300492-ideas

    Simon Dettling | msitproblog.com | @SimonDettling

    Tuesday, April 19, 2016 5:59 AM
  • most clients reside in WAN links, downloading of 25 MB file of SCEP  for no good reason is a concern.

    So how will you be handling software distributions in those locations then?

    Torsten Meringer | http://www.mssccmfaq.de

    Tuesday, April 19, 2016 6:12 AM
  • Dear Sir,

    During the installation process, the ccmsetup.exe reads the manifest file and fetches the remaining files to continue the client installation. The manifest file is locate in the source folder, ccmsetup.cab. You can look into the cab and extract the ccmsetup.xml, you'll see all files listed and all these files will be downloaded during the setup. Of course, SCEPInstall.exe is listed in it. You won't bypass SCEPInstall.exe unless you remove it from the list. However, to edit the manifest is not documented thus not supported.

    You can't even delete it or replace it because file hash is verified also. If hash does not match, installation will fail.

    Just for your information. You may need to go with other way to solve the difficulty during client installation/upgrading.

    Best regards


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    • Edited by Frank Dong Tuesday, April 19, 2016 10:15 AM
    Tuesday, April 19, 2016 10:12 AM
  • Concur with Torsten. If you are concerned over a one-time download of 25MB, then you've got a design flaw in your site's implementation.

    Remember though the content is downloaded using BITS so you can throttle this download and additionally, if this is truly a concern, why aren't you using something like remote DPs or BranchCache so that the content can be downloaded from peers on the same local subnet that already have the content?

    Jason | http://blog.configmgrftw.com | @jasonsandys

    Tuesday, April 19, 2016 12:49 PM
  • Thank you all for your responses.  Client network is not that great, so I was thinking if there is a better way of avoiding it other than using skip option in command line 

    Thursday, June 2, 2016 11:11 AM