ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM

Let’s understand the ConfigMgr Client Action called User Policy Retrieval & Evaluation Cycle in a bit more detail. The users/admins can initiate the user policy evaluation cycle to speed up the troubleshooting of patching related scenarios.

I have explained about Software Updates Scan Cycle in the previous post. But, it’s also important to understand ConfigMgr Client Component Status details for troubleshooting. There are three different status details are available for each component of the client. Those are installed, disabled, and enabled.

I have seen many admins getting confused between ConfigMgr Client App and SCCM Software Center. Both are different and client actions are available with ConfigMgr Client App (a.k.a Configuration Manager Application) available in the control panel.

TL;DR

User Policy Retrieval & Evaluation Cycle

Patch My PC
Advt

There are 8 (eight) client actions available in Configuration Manager client application properties as of ConfigMgr 2010 version. The User Policy Retrieval & Evaluation Cycle client action is the Seventh (7th) one from the top.

Navigate to:

  • You can launch the client app from any computer that has an SCCM client installed.
  • Open Command Prompt
  • Run the following command – Control smscfgrc
  • Click on the Actions tab
  • Select User Policy Retrieval & Evaluation Cycle
  • Click on OK from the User Policy Retrieval & Evaluation Cycle popup window

ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM
ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM

Background Processes

1E Nomad
Advt

Let’s understand the User Policy Retrieval & Evaluation Cycle via log files. When you initiate this action from the ConfigMgr client app, you can see the Policy agent and other components are triggered.

NOTE! – The background activities of user policy client action shall be minimal when the user doesn’t have any new assignment as part of DELTA user policy sync.

This SCCM client action User Policy Retrieval & Evaluation Cycle “immediately” triggers the user based deployment policies from Windows 10 client. It was interesting to see that the ConfigMgr policy agent is checking whether it’s a cloud-enabled user or not.

IsDomainUser = 1, IsCloudUser = 1

Let’s understand the components that help to process the user collection-based deployments policies and perform a user policy evaluation as you can see below. This user policy evaluation is performed against all the policy deployments assigned to the logged-in user. The processes are shown in the following log snippets.

  • smscliui.log
    • Perform Action: Request & Evaluate User Policy – {3A88A2F3-0C39-45fa-8959-81F21BF500CE}. Message sent, id={43B9E4DE-2ACB-42AC-9415-BC22C08B1A40}
ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM
ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM
  • PolicyAgent.log
    • Requesting User policy assignments for ‘S-1-5-21-2901188661-3025291148-348095268-500’ from authority ‘SMS:MEM’. IsDomainUser = 1, IsCloudUser = 1
    • Raising event: instance of CCM_PolicyAgent_AssignmentsRequested
    • Processing User assignments from ‘SMS:MEM’. The new cookie is ‘2021-02-09 13:01:53.663’.
    • Raising event:instance of CCM_PolicyAgent_AssignmentsReceived
    • Received User delta policy update with 0 assignments
ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM
ConfigMgr User Policy Retrieval & Evaluation Cycle Client Action | SCCM
  • StatusAgent.log
    • Raising event (#1 of 1): instance of CCM_CcmHttp_Status
    • Successfully raised 1 event(s)
    • Raising event (#1 of 1):instance of CCM_PolicyAgent_AssignmentsRequested
    • Updating MDM_ConfigSetting.ClientHealthStatus with value 7
    • Event forwarder SmsClientEventForwarder:Instance0 successfully handled 1 events

Logs

Veeam Windows 10
Advt

The following are the log files that recorded few entries when I triggered the user policy evaluation Cycle. More details about SCCM clients logs are available here.

  • smscliui.log
  • PolicyAgent.log
  • StatusAgent.log

Resources

Sharing is caring!

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.