Clean-up SCCM CMG Cloud Services from ConfigMgr Cloud Management Gateway

Let’s discuss the Clean-up of SCCM CMG Cloud Services from ConfigMgr Cloud Management Gateway. Most of the SCCM admins have isolated lab environments to test the new features of SCCM.

Setting up Azure cloud services for testing new SCCM CMG (Cloud Management Gateway), Azure AD User Discovery, and Cloud DP is costly.

My recommendation is to create an Azure trial subscription and test the SCCM features. You will learn how to remove SCCM CMG and other cloud services from this post.

Can’t Delete or Remove Azure AD Apps (used for Cloud Services) from SCCM Console? Here is the guide to removing those from MEMCM using WMI | WBEMTEST https://www.anoopcnair.com/remove-azure-ad-apps-from-sccm-using-wmi-delete/

Patch My PC

[Related PostHow to Remove SCCM Cloud DP]

Tips Before Removing SCCM CMG and Cloud Services

Don’t remove the Azure PaaS server and blob storage before removing the CMG from the SCCM console. You can follow the steps below to remove SCCM CMG (Cloud Management Gateway) from your environment.

When you have enabled SCCM CMG as CDP, your Cloud DP will also get removed when you delete or remove SCCM CMG.

Ensure your internet client management won’t be impacted when you perform this deletion action in a production environment. You should have an additional CMG for internet client management.

Adaptiva

There are different scenarios where you need to remove SCCM CMG and other cloud services. One of the situations is to clean up your lab environment.

Another situation is to remove SCCM CMG or other cloud services like Azure AD user discovery as part of troubleshooting or migration.

Remove SCCM CMG Tips Before Removing SCCM CMG and Cloud Services
Tips Before Removing SCCM CMG and Cloud Services 1

Video Tutorial – How to Remove SCCM CMG and Cloud Services?

The following topics are discussed in the video tutorial. I hope this will give a video experience and a better understanding.

  • Why Delete Azure Cloud Services
  • Check Azure Portal before Deleting
  • Remove SCCM CMG and Cloud DP
  • Remove the SCCM Cloud Management Connection Point Role
  • How to validate SCCM CMG Deletion (Log Files)
  • Remove Cloud Services and Azure AD User Discovery
  • Remove Co-Management Configurations
  • Remove Azure Active Directory Tenants

[Related PostHow to Remove SCCM Cloud DP]

Clean-up SCCM CMG Cloud Services from ConfigMgr Cloud Management Gateway 2

How to Remove SCCM CMG (Cloud Management Gateway & CDP)?

Yes, it’s easy to remove or delete Cloud DP and CMG if you compare it with installing both those roles or services. Follow the below steps to remove SCCM CMG, and Cloud DP configured in the CMG.

  1. Navigate to \Administration\Overview\Cloud Services\Cloud Management Gateway
  2. Select the Cloud Management Gateway – go to properties – Content – And make sure there are no packages distributed (other than default packages which can’t be removed) to that Cloud DP.
  3. Click on the Delete button from the ribbon menu to remove SCCM CMG
  4. Click on the Yes button from the confirmation windows to initiate the CMG deletion process
  5. Step #4 launches the deletion process from the SCCM side and Azure side as well
Remove SCCM CMG
Clean-up SCCM CMG Cloud Services from ConfigMgr Cloud Management Gateway 3

How to Confirm Whether SCCM CMG is Removed?

You can confirm whether the SCCM CMG got removed from Azure and SCCM. The best way is to check the log files like CloudMgr.log. Another option is to check the status monitoring in the Cloud Management Gateway node in the SCCM console.

Another option is to check the Azure Portal to confirm whether the SCCM CMG Azure blob storage account and Azure CMG Virtual server (PaaS) got removed or not.

How to – Remove SCCM Cloud Management Connection Point Role?

You can remove the connector role before or after the removal of SCCM CMG. After removing CMG, I removed the SCCM cloud management connection point role in the above video and this guide.

Follow the steps to remove the SCCM cloud management connection point role.

  1. Navigate to \Administration\Overview\Site Configuration\Servers and Site System Roles
  2. Select the server where you have installed the CMG connection point role
  3. Go to Details Pane in the SCCM console, then Right-click & select Remove Role – the cloud management connection point role
  4. The above step #3 launches the process to delete the part from the SCCM primary server or remote site system
Remove SCCM CMG Connection Point
How to – Remove SCCM Cloud Management Connection Point Role? 4

[Related PostHow to Remove SCCM Cloud DP]

Remove – Azure AD User Discovery and Azure Services from SCCM

You can remove the Azure Active Directory user discovery details from the SCCM console. This option is available under the Azure services node.

  1. Navigate to \Administration\Overview\Cloud Services\Azure Services
  2. Select the Azure service name which you want to remove the AAD User discovery
  3. Go to Details Pane in the SCCM console, then Right-click & select Remove the discovery (optional)
  4. Right-click on the Azure Service name and Delete

Remove – Azure Active Directory Tenants and Server and Client Azure Apps

You can remove the Azure Active Directory tenant details from the SCCM console. This option is available under the Azure Active Directory tenant node.

From this node, you can delete Azure server and client apps that get created during the cloud services onboarding process.

  1. Navigate to \Administration\Overview\Cloud Services\Azure Active Directory Tenant
  2. Select the Azure Tenant name which you want to remove the server and client apps
  3. Go to Details Pane in the SCCM console, then Right-click & select Remove the server app and then client app. Or you can click on the DELETE button from the ribbon menu.
  4. Right-click on Azure Active Directory Tenant name and Delete to remove the tenant details from SCCM

Remove – Co-Management Configurations from SCCM

You can remove the co-management details from the SCCM console. This option is available under the Co-Management node. From this node, you can delete SCCM co-management configurations.

  1. Navigate to \Administration\Overview\Cloud Services\Co-Management
  2. Select the Co-management option list view
  3. Right-click on Co-Management configuration and Delete to remove the co-management configuration from SCCM
Remove SCCM CMG - Co-management
Remove – Azure Active Directory Tenants and Server and Client Azure Apps 5

Resources

How to Setup Co-Management Video Tutorials

Integrate Apps with Azure AD – https://docs.microsoft.com/en-gb/azure/active-directory/develop/quickstart-v1-integrate-apps-with-azure-ad

6 thoughts on “Clean-up SCCM CMG Cloud Services from ConfigMgr Cloud Management Gateway”

  1. Hi Anoop,

    I deleted and recreate the Azure service. I am getting the following error message.

    —————————
    Configuration Manager
    —————————
    Another object with the same value for property identifierUris already exists.For more details you can refer to the AdminUILog.
    —————————
    OK
    —————————

    Please guide me.

    Reply
  2. Just out of my experience.
    In case your account has access to multiple tenants and you are receiving the error “Another object with the same value for property identifierUris already exists.”
    The wizard will create the apps in your default tenant so make sure to check the other Azure AD’s you have permissions on.
    In my case the wizard created the apps in the wrong tenant, while I was searching for the apps in the tenant of the customer… 🙂

    Reply
  3. Hello!
    It seems like there is no “Right-click & select Remove the server app and then client app.”.
    Was this possible in older Versions of SCCM?
    Thank you.

    Reply

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.