CMBuild

1.0.8

Assets/cmsiteconfig.xml

                                <?xml version="1.0" encoding="ISO-8859-1"?>

<configuration comment="ConfigMgr Site P01 on CM1.contoso.com - 1.3.06 - 9/20/2017" schemaversion="1.3">

    <cmsite sitecode="P01" forest="contoso.com">

        <control comment="Enable configuration steps and specify sequence order">

            <ci use="1" name="ENVIRONMENT" comment="platform environment checks" />

            <ci use="1" name="ACCOUNTS" comment="site accounts" />

            <ci use="1" name="ADFOREST" comment="assign AD forest" />

            <ci use="1" name="SERVERSETTINGS" comment="site system settings" />

            <ci use="1" name="DISCOVERY" comment="discovery methods" />

            <ci use="1" name="BOUNDARIES" comment="site boundaries" />

            <ci use="1" name="BOUNDARYGROUPS" comment="boundary groups" />

            <ci use="1" name="SITEROLES" comment="site roles and featurs" />

            <ci use="1" name="CLIENTSETTINGS" comment="client settings" />

            <ci use="1" name="CLIENTINSTALL" comment="client push install settings" />

            <ci use="1" name="DPGROUPS" comment="distribution point groups" />

            <ci use="1" name="FOLDERS" comment="console folders" />

            <ci use="1" name="QUERIES" comment="custom queries" />

            <ci use="1" name="COLLECTIONS" comment="device and user collections" />

            <ci use="1" name="OSIMAGES" comment="OS images" />

            <ci use="1" name="OSINSTALLERS" comment="OS upgrade installers" />

            <ci use="1" name="MTASKS" comment="site maintenance tasks" />

            <ci use="1" name="APPCATEGORIES" comment="application categories" />

            <ci use="1" name="APPLICATIONS" comment="applications" />

            <ci use="1" name="MALWAREPOLICIES" comment="endpoint protection policies" />

        </control>

        <schedules>

            <!-- still working on this one -->

            <schedule use="0" name="sch15min" unit="minutes" value="15" />

            <schedule use="0" name="schDaily" unit="days" value="1" />

            <schedule use="0" name="schWeekly" unit="days" value="7" />

        </schedules>

        <discoveries comment="https://docs.microsoft.com/en-us/powershell/sccm/configurationmanager/vlatest/set-cmdiscoverymethod">

            <discovery use="1" name="ActiveDirectoryForestDiscovery" PollingSchedule="sch15mins" options="EnableSubnetBoundaryCreation" />

            <!--<discovery use="0" name="ActiveDirectoryForestDiscovery" PollingSchedule="sch15mins" options="EnableActiveDirectorySiteBoundaryCreation" />-->

            <discovery use="1" name="ActiveDirectorySystemDiscovery" PollingSchedule="schDaily" options="EnableDeltaDiscovery:15|ADContainer:dc=contoso,dc=com|EnableFilteringExpiredLogon:90|EnableFilteringExpiredPassword:90" />

            <discovery use="1" name="ActiveDirectoryGroupDiscovery" PollingSchedule="schDaily" options="EnableDeltaDiscovery:15|ADContainer:dc=contoso,dc=com|EnableFilteringExpiredLogon:90|EnableFilteringExpiredPassword:90" />

            <discovery use="1" name="ActiveDirectoryUserDiscovery" PollingSchedule="schDaily" options="EnableDeltaDiscovery:15|ADAttributes:title,department,division|ADContainer:dc=contoso,dc=com|EnableFilteringExpiredLogon:90|EnableFilteringExpiredPassword:90" />

            <discovery use="0" name="NetworkDiscovery" PollingSchedule="" />

            <discovery use="0" name="HeartbeatDiscovery" PollingSchedule="" />

        </discoveries>

        <boundarygroups comment="Configure Boundary Groups">

            <boundarygroup use="1" name="NA-US-VA-Norfolk" SiteSystemServer="CM1.contoso.com" LinkType="FastLink" comment="Norfolk" />

            <boundarygroup use="0" name="NA-US-VA-VB" SiteSystemServer="CM1.contoso.com" LinkType="FastLink" comment="Virginia Beach" />

            <boundarygroup use="0" name="NA-US-CA-Fremont" SiteSystemServer="CM1.contoso.com" LinkType="FastLink" comment="Fremont" />

            <boundarygroup use="0" name="NA-US-NY-NewYork" SiteSystemServer="CM1.contoso.com" LinkType="FastLink" comment="New York" />

        </boundarygroups>

        <boundaries comment="Configure Site Boundaries if not set to AD discovery-automatic">

            <boundary use="1" name="NA-US-VA-Norfolk-Servers" type="IPRange" value="192.168.0.10-192.168.0.99" boundarygroup="NA-US-VA-Norfolk" comment="Norfolk" />

            <boundary use="1" name="NA-US-VA-Norfolk-Workstations" type="IPRange" value="192.168.0.100-192.168.0.150" boundarygroup="NA-US-VA-Norfolk" comment="Norfolk" />

            <boundary use="1" name="NA-US-NY-NewYork-Servers" type="IPRange" value="192.168.2.10-192.168.2.99" boundarygroup="NA-US-NY-NewYork" comment="New York" />

        </boundaries>

        <clientoptions comment="Configure Default Client Push Installation settings">

            <!-- still working on this one -->

            <CMClientPushInstallation use="1" AutomaticInstall="false" ClientCMServer="false" ClientDC="true" ClientServer="true" ClientWorkstation="true" Accounts="CONTOSO\cm-clientinstall,CONTOSO\sccmclient" InstallationProperty="SMSSITECODE=PS1" />

        </clientoptions>

        <serversettings comment="Server Settings">

            <serversetting use="1" name="CMSoftwareDistributionComponent" comment="Software Distribution Settings" key="NetworkAccessAccountName" value="CONTOSO\cm-naa" />

        </serversettings>

        <clientsettings comment="Client Settings">

            <clientsetting use="1" name="Workstations" comment="Workstation Client Settings" type="Device" priority="1">

                <settings>

                    <setting use="1" name="BackgroundIntelligentTransfer">

                        <options>

                            <option name="EnableBitsMaxBandwidth" value="True" />

                        </options>

                    </setting>

                    <setting use="1" name="ClientCache">

                        <options>

                            <option name="ConfigureBranchCache" value="True" />

                            <option name="EnableBranchCache" value="True" />

                            <option name="ConfigureCacheSize" value="True" />

                            <option name="MaxCacheSize" value="10240" />

                            <option name="EnableSuperPeer" value="True" />

                            <option name="EnableHttps" value="True" />

                        </options>

                    </setting>

                    <setting use="1" name="ComputerAgent">

                        <options>

                            <option name="AddPortalToTrustedSiteList" value="True" />

                            <option name="AllowPortalToHaveElevatedTrust" value="True" />

                            <option name="BrandingTitle" value="Contoso IT" />

                            <option name="EnableThirdPartyOrchestration" value="Yes" />

                            <option name="FinalReminderMinutesInterval" value="25" />

                            <option name="InitialReminderHoursInterval" value="6" />

                            <option name="InstallRestriction" value="OnlyAdministrators" />

                            <option name="PortalUrl" value="http://CM1.contoso.com" />

                            <option name="PowerShellExecutionPolicy" value="Bypass" />

                            <option name="SuspendBitLocker" value="Always" />

                        </options>

                    </setting>

                    <setting use="1" name="ComputerRestart">

                        <options>

                            <option name="CountdownMins" value="90" />

                            <option name="FinalWindowMins" value="15" />

                        </options>

                    </setting>

                    <setting use="1" name="EndpointProtection">

                        <options>

                            <option name="Enable" value="True" />

                            <option name="InstallEndpointProtectionClient" value="True" />

                            <option name="RemoveThirdParty" value="True" />

                            <option name="SuppressReboot" value="True" />

                            <option name="OverrideMaintenanceWindow" value="True" />

                        </options>

                    </setting>

                    <setting use="1" name="HardwareInventory">

                        <options>

                            <option name="Enable" value="True" />

                        </options>

                    </setting>

                    <setting use="1" name="PowerManagement">

                        <options>

                            <option name="Enable" value="True" />

                            <option name="AllowUserToOptOutFromPowerPlan" value="False" />

                            <option name="EnableWakeupProxy" value="True" />

                        </options>

                    </setting>

                    <setting use="1" name="RemoteTool">

                        <options>

                            <option name="AllowUnattendedComputer" value="True" />

                            <option name="PromptUserForPermission" value="False" />

                            <option name="AllowClientChange" value="False" />

                            <option name="AccessLevel" value="FullControl" />

                            <option name="ManageUnsolicitedRemoteAssistance" value="True" />

                            <option name="ManageRemoteDesktopSetting" value="True" />

                            <option name="PromptUserForClipboardPermission" value="False" />

                        </options>

                    </setting>

                    <setting use="1" name="SoftwareDeployment">

                        <options>

                        </options>

                    </setting>

                    <setting use="1" name="SoftwareInventory">

                        <options>

                            <option name="SWINVConfiguration" value="Filename=*.exe|Path=*|Subdirectories=True|ExcludeWindirAndSubfolders=False|ExcludeEncryptedAndCompressedFiles=True" />

                        </options>

                    </setting>

                    <setting use="1" name="SoftwareUpdate">

                        <options>

                            <option name="Enable" value="True" />

                            <option name="EnforceMandatory" value="True" />

                            <option name="Office365ManagementType" value="True" />

                            <option name="BatchingTimeout" value="1" />

                            <option name="TimeUnit" value="Days" />

                        </options>

                    </setting>

                </settings>

            </clientsetting>

            <clientsetting use="0" name="Servers" comment="Server Client Settings" type="Device" priority="2">

                <settings>

                    <setting use="1" name="HardwareInventory" />

                    <setting use="1" name="RemoteTool">

                        <options>

                            <option name="AllowUnattendedComputer" value="True" />

                            <option name="PromptUserForPermission" value="False" />

                            <option name="AllowClientChange" value="False" />

                            <option name="AccessLevel" value="FullControl" />

                            <option name="ManageUnsolicitedRemoteAssistance" value="True" />

                            <option name="ManageRemoteDesktopSetting" value="True" />

                            <option name="PromptUserForClipboardPermission" value="False" />

                        </options>

                    </setting>

                    <setting use="1" name="SoftwareInventory">

                        <options>

                            <option name="SWINVConfiguration" value="Filename=*.exe|Path=*|Subdirectories=True|ExcludeWindirAndSubfolders=False|ExcludeEncryptedAndCompressedFiles=True" />

                        </options>

                    </setting>

                </settings>

            </clientsetting>

        </clientsettings>

        <dpgroups comment="Distribution Point Groups">

            <dpgroup use="1" name="All Distribution Points" comment="All DP servers throughout the organization" />

            <dpgroup use="1" name="Virginia DPs" comment="DP servers in Virginia" />

            <dpgroup use="0" name="California DPs" comment="DP servers in California" />

            <dpgroup use="0" name="Azure DPs" comment="DP servers in Azure" />

        </dpgroups>

        <sitesystemroles>

            <sitesystemrole use="1" name="aisp" comment="Asset Intelligence Synchronization Point">

                <roleoptions comment="Configure Asset Intelligence Classes">

                    <roleoption use="1" name="EnableAllReportingClass" params="" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_BrowserHelperObject" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_InstalledExecutable" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_InstalledSoftware" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_SoftwareShortcut" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_SoftwareTag" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_SystemConsoleUsage" />

                    <roleoption use="0" name="EnableReportingClass" params="SMS_SystemConsoleUser" />

                    <roleoption use="0" name="EnableReportingClass" params="SoftwareLicensingProduct" />

                    <roleoption use="0" name="EnableReportingClass" params="SoftwareLicensingService" />"

                    <roleoption use="0" name="EnableReportingClass" params="Win32_USBDevice" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="scp" comment="Service Connection Point">

                <roleoptions comment="">

                    <roleoption use="1" name="Mode" params="Online" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="mp" comment="Management Point">

                <roleoptions comment="">

                    <roleoption use="1" name="PublicFqdn" params="CM1.contoso.com" />

                    <roleoption use="1" name="FdmOperation" params="False" />

                    <roleoption use="1" name="AccountName" params="NULL" />

                    <roleoption use="0" name="EnableProxy" params="ProxyAccessAccount=NAME,ProxyServerName=NAME,ProxyServerPort=INT" />

                    <roleoption use="1" name="PublishDNS" params="True" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="ssrp" comment="Reporting Services Point">

                <roleoptions comment="">

                    <roleoption use="1" name="DatabaseServerName" params="CM1.contoso.com" />

                    <roleoption use="1" name="DatabaseName" params="CM_PS1" />

                    <roleoption use="1" name="UserName" params="CONTOSO\sql-svc" />

                    <roleoption use="0" name="FolderName" params="" />

                    <roleoption use="0" name="ReportServerInstance" params="" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="0" name="cmg" comment="Cloud Management Gateway">

                <roleoptions comment="">

                    <roleoption use="1" name="CloudManagementGatewayName" params="" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="dp" comment="Distribution Point">

                <roleoptions comment="">

                    <roleoption use="1" name="Description" params="Distribution Point 1" />

                    <roleoption use="1" name="ClientCommunicationType" params="http" />

                    <roleoption use="1" name="ClientConnectionType" params="InternetAndIntranet" />

                    <roleoption use="1" name="ContentMonitoringPriority" params="Highest" />

                    <roleoption use="1" name="EnableAnonymous" params="True" />

                    <roleoption use="1" name="EnableContentValidation" params="True" />

                    <roleoption use="1" name="EnableUnknownComputerSupport" params="True" />

                    <roleoption use="1" name="EnablePxe" params="True" />

                    <roleoption use="1" name="AllowPxeResponse" params="True" />

                    <roleoption use="1" name="PxePassword" params="123" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="sup" comment="Software Update Point">

                <roleoptions comment="Software Update Point Communications Options">

                    <roleoption use="1" name="HttpPort" params="8530" />

                    <roleoption use="1" name="HttpsPort" params="8531" />

                    <roleoption use="1" name="ClientConnectionType" params="InternetAndIntranet" />

                    <roleoption use="1" name="WsusAccessAccount" params="NULL" />

                    <roleoption use="1" name="SynchronizeAction" params="SynchronizeFromMicrosoftUpdate" />

                    <roleoption use="1" name="AddUpdateClassifications" params="Definition Updates,Critical Updates,Updates" />

                    <roleoption use="1" name="AddProducts" params="Windows Server Manager - Windows Server Update Services (WSUS) Dynamic Installer" />

            <roleoption use="1" name="ImmediatelyExpireSupersedence" params="True" />

            <roleoption use="1" name="EnableCallWsusCleanupWizard" params="True" />

            <roleoption use="1" name="ContentFileOption" params="ExpressForWindows10Only" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="acwsp" comment="Application Catalog Web Service Point">

                <roleoptions>

                    <roleoption use="0" name="" params="" />

                </roleoptions>

            </sitesystemrole>

            <sitesystemrole use="1" name="acwp" comment="Application Catalog Website Point">

                <roleoptions>

                    <roleoption use="1" name="CommuncationType" params="Https" />

                    <roleoption use="1" name="ClientConnectionType" params="Intranet" />

                    <roleoption use="0" name="OrganizationName" params="Contoso" />

                    <roleoption use="1" name="ThemeColor" params="Orange" />

                </roleoptions>

            </sitesystemrole>

        <sitesystemrole use="1" name="epp" comment="Endpoint Protection Point">

        </sitesystemrole>

        </sitesystemroles>

        <folders comment="Console Folders to create">

            <folder use="1" name="Deploy Applications" path="DeviceCollection" comment="" />

            <folder use="1" name="Deploy Updates" path="DeviceCollection" comment="" />

            <folder use="1" name="Inventory Hardware" path="DeviceCollection" comment="" />

            <folder use="1" name="Inventory Software" path="DeviceCollection" comment="" />

            <folder use="1" name="Inventory Organization" path="UserCollection" comment="" />

            <folder use="1" name="Deploy Applications" path="UserCollection" comment="" />

            <folder use="1" name="Production" path="TaskSequence" comment="" />

            <folder use="1" name="Testing" path="TaskSequence" comment="" />

            <folder use="0" name="WinPE" path="DriverPackage" comment="" />

            <folder use="0" name="HP" path="DriverPackage" comment="" />

            <folder use="0" name="EliteBook.9470m" path="DriverPackage/HP" comment="" />

            <folder use="0" name="ZBook.15uG2" path="DriverPackage/HP" comment="" />

            <folder use="1" name="Windows Desktop" path="OperatingSystemImage" comment="" />

            <folder use="1" name="Windows Server" path="OperatingSystemImage" comment="" />

            <folder use="1" name="Windows Desktop" path="OperatingSystemInstaller" comment="" />

            <folder use="1" name="Contoso" path="BootImage" comment="" />

            <folder use="1" name="Google" path="Application" comment="" />

            <folder use="1" name="Microsoft" path="Application" comment="" />

            <folder use="1" name="Utilities" path="Application" comment="" />

            <folder use="1" name="Tools" path="Application\Utilities" comment="" />

        </folders>

        <queries comment="Custom queries">

            <query use="1" name="Contoso - Serial, MAC and Hostname" comment="Serial Number, MAC address and Hostname for all Devices" class="SMS_R_System" expression="select distinct SMS_R_System.Name, SMS_G_System_SYSTEM_ENCLOSURE.SerialNumber, SMS_G_System_NETWORK_ADAPTER.MACAddress, SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.IPEnabled from SMS_R_System inner join SMS_G_System_SYSTEM_ENCLOSURE on SMS_G_System_SYSTEM_ENCLOSURE.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_NETWORK_ADAPTER on SMS_G_System_NETWORK_ADAPTER.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_NETWORK_ADAPTER_CONFIGURATION on SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.ResourceID = SMS_R_System.ResourceId where SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.IPEnabled = 1 and SMS_G_System_NETWORK_ADAPTER.MACAddress not like '' order by SMS_R_System.Name" />

            <query use="1" name="Contoso - Windows Server Features" comment="Windows Server Feature Names" class="SMS_R_System" expression="select distinct SMS_G_System_SERVER_FEATURE.Name from SMS_R_System inner join SMS_G_System_SERVER_FEATURE on SMS_G_System_SERVER_FEATURE.ResourceID = SMS_R_System.ResourceId order by SMS_G_System_SERVER_FEATURE.Name" />

    <query use="1" name="Contoso - Client IP Gateways" comment="All Client IP Gateways" class="SMS_R_System" expression="select distinct SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway from SMS_R_System inner join SMS_G_System_NETWORK_ADAPTER_CONFIGURATION on SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.ResourceID = SMS_R_System.ResourceId where SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway != '' order by SMS_G_System_NETWORK_ADAPTER_CONFIGURATION.DefaultIPGateway" />

    <query use="1" name="Contoso - Windows 10 1709 SACT clients" comment="All Windows 10 1703 Clients" class="SMS_R_System" expression="select * from  SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.BuildNumber = '16299'" />

    <query use="1" name="Contoso - Windows 10 1703 SAC clients" comment="All Windows 10 1703 Clients" class="SMS_R_System" expression="select * from  SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.BuildNumber = '15063'" />

    <query use="1" name="Contoso - Windows 10 1607 SAC clients" comment="All Windows 10 1607 Clients" class="SMS_R_System" expression="select * from  SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.BuildNumber = '14393'" />

    <query use="1" name="Contoso - Windows 10 1511 SAC clients" comment="All Windows 10 1511 Clients" class="SMS_R_System" expression="select * from  SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.BuildNumber = '10586'" />

        </queries>

        <osimages comment="For bare-metal and build-and-capture installs">

            <osimage use="1" name="Windows 10 x64 Ent 1703" path="\\Fs1\SOURCES\W10x64ent1709\sources\install.wim" comment="Windows 10 x64 Enterprise 1709" folder="OperatingSystemImage\Windows Desktop" />

        <osimage use="1" name="Windows 10 x64 Ent 1703" path="\\Fs1\SOURCES\W10x64ent1703\sources\install.wim" comment="Windows 10 x64 Enterprise 1703" folder="OperatingSystemImage\Windows Desktop" />

            <osimage use="0" name="Windows Server 1709 Datacenter" path="\\Fs1\SOURCES\ws1709\sources\install.wim" comment="Windows Server 1709" folder="OperatingSystemImage\Windows Server" />

        <osimage use="0" name="Windows Server 2016 Datacenter" path="\\Fs1\SOURCES\ws2016dc\sources\install.wim" comment="Windows Server 2016 Datacenter" folder="OperatingSystemImage\Windows Server" />

        </osimages>

        <osinstallers comment="For in-place upgrades">

            <osinstaller use="1" name="Windows 10 x64 Ent 1709" path="\\Fs1\SOURCES\W10x64ent1709" comment="Windows 10 x64 Enterprise 1709" version="1709.16299.190" folder="OperatingSystemInstaller\Windows Desktop" />

    <osinstaller use="1" name="Windows 10 x64 Ent 1703" path="\\Fs1\SOURCES\W10x64ent1703" comment="Windows 10 x64 Enterprise 1703" version="1703.15063.540" folder="OperatingSystemInstaller\Windows Desktop" />

            <osinstaller use="0" name="Windows Server 2016 Datacenter 1607" path="\\Fs1\SOURCES\ws2016dc" comment="Windows Server 2016 Datacenter" version="1607.14393.1593" folder="" />

        </osinstallers>

        <collections comment="Custom Collections">

            <collection use="1" name="Users - Title - Research Analysts" type="User" comment="Users by Job Title: Research Analyst" parent="All Users" folder="UserCollection\Inventory Organization" ruletype="query" rule="select SMS_R_USER.ResourceID,SMS_R_USER.ResourceType,SMS_R_USER.Name,SMS_R_USER.UniqueUserName,SMS_R_USER.WindowsNTDomain from SMS_R_User where sms_R_User.title = 'Research Analyst'" />

            <collection use="1" name="Users - Title - Sales Managers" type="User" comment="Users by Job Title: Sales Manager" parent="All Users" folder="UserCollection\Inventory Organization" ruletype="query" rule="select distinct SMS_R_User.ResourceId, SMS_R_User.ResourceType, SMS_R_User.Name, SMS_R_User.UniqueUserName, SMS_R_User.WindowsNTDomain from  SMS_R_User where SMS_R_User.title = 'Sales Manager'" />

        <collection use="1" name="Users - Title - Solutions Architects" type="User" comment="Users by Job Title: Solutions Architect" parent="All Users" folder="UserCollection\Inventory Organization" ruletype="query" rule="select distinct SMS_R_User.ResourceId, SMS_R_User.ResourceType, SMS_R_User.Name, SMS_R_User.UniqueUserName, SMS_R_User.WindowsNTDomain from  SMS_R_User where SMS_R_User.title = 'Solutions Architect'" />

            <collection use="1" name="Users - Deploy - Dev Apps" type="User" comment="Developer Apps Bundle" parent="All Users" folder="UserCollection\Deploy Applications" ruletype="" rule="" />

            <collection use="1" name="Clients - Servers - All Windows Servers" type="Device" comment="Clients with Windows Server" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like '%Server%'" />

            <collection use="1" name="Clients - Servers - 2016" type="Device" comment="Server clients with Windows Server 2016" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like '%Server 2016%'" />

            <collection use="1" name="Clients - Servers - 2012 R2" type="Device" comment="Server clients with Windows Server 2012 R2" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like '%Server 2012 R2%'" />

        <collection use="1" name="Clients - Servers - 2012" type="Device" comment="Server clients with Windows Server 2012" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_System.OperatingSystemNameandVersion, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Server 6.2%' OR SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Advanced Server 6.2%'" />

            <collection use="1" name="Clients - Servers - 2008 R2" type="Device" comment="Server clients with Windows Server 2008 R2" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_System.OperatingSystemNameandVersion, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Server 6.1%' OR SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Advanced Server 6.1%'" />

        <collection use="1" name="Clients - Servers - 2008" type="Device" comment="Server clients with Windows Server 2008" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_System.OperatingSystemNameandVersion, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Server 6.0%' OR SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Advanced Server 6.0%'" />

        <collection use="1" name="Clients - Servers - 2003" type="Device" comment="Server clients with Windows Server 2003" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_System.OperatingSystemNameandVersion, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Server 5.2%' OR SMS_R_System.OperatingSystemNameandVersion like 'Microsoft Windows NT Advanced Server 5.2%'" />

        <collection use="1" name="Clients - Servers - Dell" type="Device" comment="Dell server clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Dell' and SMS_G_System_OPERATING_SYSTEM.Name like '%Server%'" />

            <collection use="1" name="Clients - Servers - HP" type="Device" comment="HP server clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Hewlett-Packard' and SMS_G_System_OPERATING_SYSTEM.Name like '%Server%'" />

            <collection use="1" name="Clients - Servers - Lenovo" type="Device" comment="Lenovo server clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Lenovo' and SMS_G_System_OPERATING_SYSTEM.Name like '%Server%'" />

            <collection use="1" name="Clients - Server Role - File Servers" type="Device" comment="File Servers" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SERVER_FEATURE on SMS_G_System_SERVER_FEATURE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SERVER_FEATURE.Name = 'File and Storage Services'" />

            <collection use="1" name="Clients - Server Role - Web Servers" type="Device" comment="Web Servers" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SERVER_FEATURE on SMS_G_System_SERVER_FEATURE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SERVER_FEATURE.Name = 'Web Server (IIS)'" />

            <collection use="1" name="Clients - Server Role - WSUS Servers" type="Device" comment="WSUS Servers" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SERVER_FEATURE on SMS_G_System_SERVER_FEATURE.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SERVER_FEATURE.Name = 'WSUS Services'" />

            <collection use="1" name="Clients - Workstations - All Windows Workstations" type="Device" comment="Clients with Windows desktop" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name not like '%Server%'" />

        <collection use="1" name="Clients - Workstations - Windows 10" type="Device" comment="Workstation clients with Windows 10" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like 'Microsoft Windows 10%'" />

            <collection use="1" name="Clients - Workstations - Windows 8.1" type="Device" comment="Workstation clients with Windows 8.1" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like 'Microsoft Windows 8.1%'" />

            <collection use="1" name="Clients - Workstations - Windows 7" type="Device" comment="Workstation clients with Windows 7" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId = SMS_R_System.ResourceId where SMS_G_System_OPERATING_SYSTEM.Name like 'Microsoft Windows 7%'" />

            <collection use="1" name="Clients - Workstations - Dell" type="Device" comment="Dell workstation clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Dell' and SMS_G_System_OPERATING_SYSTEM.Name not like '%Server%'" />

            <collection use="1" name="Clients - Workstations - HP" type="Device" comment="HP workstation clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Hewlett-Packard' and SMS_G_System_OPERATING_SYSTEM.Name not like '%Server%'" />

            <collection use="1" name="Clients - Workstations - Lenovo" type="Device" comment="Lenovo workstation clients" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Hardware" ruletype="query" rule="select distinct SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_R_System.ResourceId where SMS_G_System_COMPUTER_SYSTEM.Manufacturer = 'Lenovo' and SMS_G_System_OPERATING_SYSTEM.Name not like '%Server%'" />

        <collection use="1" name="Clients - Servers - SQL Server 2008" type="Device" comment="Servers with SQL Server 2008 installed" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select distinct SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID from SMS_G_System_ADD_REMOVE_PROGRAMS where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = 'Microsoft SQL Server 2008')" />

        <collection use="1" name="Clients - Servers - SQL Server 2012" type="Device" comment="Servers with SQL Server 2012 installed" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select distinct SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID from SMS_G_System_ADD_REMOVE_PROGRAMS where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = 'Microsoft SQL Server 2012')" />

        <collection use="1" name="Clients - Servers - SQL Server 2014" type="Device" comment="Servers with SQL Server 2014 installed" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select distinct SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID from SMS_G_System_ADD_REMOVE_PROGRAMS where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = 'Microsoft SQL Server 2014')" />

        <collection use="1" name="Clients - Servers - SQL Server 2016" type="Device" comment="Servers with SQL Server 2016 installed" parent="All Desktop and Server Clients" folder="DeviceCollection\Inventory Software" ruletype="query" rule="select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceId in (select distinct SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID from SMS_G_System_ADD_REMOVE_PROGRAMS where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName = 'Microsoft SQL Server 2016')" />

        </collections>

        <appcategories comment="Application Categories">

            <appcategory use="1" name="IT" enabled="true" comment="" />

            <appcategory use="1" name="Developer" enabled="true" comment="" />

            <appcategory use="1" name="Engineering" enabled="true" comment="" />

            <appcategory use="1" name="Finance" enabled="true" comment="" />

            <appcategory use="1" name="General" enabled="true" comment="" />

            <appcategory use="1" name="Sales" enabled="true" comment="" />

        </appcategories>

        <applications comment="Applications">

            <application use="1" name="7-Zip" publisher="7-Zip" version="17.01" categories="General" comment="File compression utility" folder="Utilities" keywords="file,zip,utility,archive,compression">

                <deptypes comment="Deployment Types">

                    <deptype name="x64 installer" platform="64" source="\\Fs1\APPS\Packages\7-Zip\7z1701-x64.msi" options="auto" comment="64-bit installer" />

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\7-Zip\7z1701.msi" options="auto" comment="32-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="Notepad++ 7.5" publisher="Notepad++" version="7.5.1" categories="Developer,Engineering" comment="Text and Code editor" folder="Utilities" keywords="editor,text,code,programming,script">

                <deptypes comment="Deployment Types">

                    <deptype name="x64 installer" platform="64" source="\\Fs1\APPS\Packages\Notepad++\npp.7.5.1.installer.x64.exe" options="/s" uninstall="C:\Program Files\Notepad++\uninstall.exe" detect="registry:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++,DisplayVersion,-ge,7.5" requires="" comment="64-bit installer" />

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\Notepad++\npp.7.5.1.installer.exe" options="/s" uninstall="C:\Program Files\Notepad++\uninstall.exe" detect="registry:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++,DisplayVersion,-ge,7.5" requires="" comment="32-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="Microsoft RDC Manager" publisher="Microsoft" version="2.7" categories="IT,Developer" comment="Remote Desktop Connection Manager" folder="Microsoft" keywords="remote,rdc,rdp,desktop">

                <deptypes comment="Deployment Types">

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\Microsoft\RDC Manager\rdcman.msi" options="auto" comment="32-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="Google Earth" publisher="Google" version="7.1" categories="Developer" comment="Mapping and visualization" folder="Google" keywords="google,earth,maps,model,3d">

                <deptypes comment="Deployment Types">

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\Google\EarthPro\GoogleEarth7.1.5.1557.msi" options="auto" comment="32-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="VLC Player" publisher="VideoLAN" version="2.2.6" categories="General" comment="Media player" folder="Utilities" keywords="vlc,video,audio,media,player">

                <deptypes comment="Deployment Types">

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\VLC Player\vlc-2.2.6-win32.exe" options="/S" uninstall="C:\Program Files\VideoLAN\VLC\uninstall.exe /S" detect="file:\Program Files\VideoLAN\VLC\vlc.exe" comment="32-bit installer" />

                    <deptype name="x64 installer" platform="64" source="\\Fs1\APPS\Packages\VLC Player\vlc-2.2.6-win64.exe" options="/S" uninstall="C:\Program Files\VideoLAN\VLC\uninstall.exe /S" detect="file:\Program Files\VideoLAN\VLC\vlc.exe" comment="64-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="Paint.Net" publisher="dotPDN LLC" version="4.0.17" categories="General" keywords="paint,net,image,graphic,media" comment="Paint.Net" folder="Utilities\Tools">

                <deptypes comment="Deployment Types">

                    <deptype name="x64 installer" platform="64" source="\\Fs1\APPS\Packages\Paint.Net\PaintDotNet_x64.msi" options="auto" uninstall="" detect="" comment="64-bit installer" />

                    <deptype name="x86 installer" platform="32" source="\\Fs1\APPS\Packages\Paint.Net\PaintDotNet_x86.msi" options="auto" uninstall="" detect="" comment="32-bit installer" />

                </deptypes>

            </application>

            <application use="1" name="SQL Server Management Studio" publisher="Microsoft" version="2017.2" categories="IT,Developer" comment="SQL Server Management Studio" folder="Microsoft" keywords="sql,ssms,management,database">

                <deptypes comment="Deployment Types">

                    <deptype name="x64 installer" platform="64" source="\\Fs1\APPS\CM_BUILD\SSMS\SSMS-Setup-ENU.exe" options="/S" uninstall="" comment="" />

                </deptypes>

            </application>

            <application use="0" name="Chocolatey" publisher="Chocolatey" version="0.10.8" categories="General" comment="Chocolatey base install" folder="" keywords="chocolately,nuget,apps">

                <deptypes comment="Deployment Types">

                    <deptype name="" platform="" source="" options="" uninstall="" comment="" />

                </deptypes>

            </application>

            <!--

            <application use="1" name="" publisher="" version="" categories="" keywords="" comment="" folder="">

                <deptypes comment="Deployment Types">

                    <deptype name="" platform="" source="" options="" uninstall="" detect="" comment="" />

                </deptypes>

            </application>

            -->

        </applications>

        <mtasks comment="Site Maintenance Tasks">

            <mtask use="1" name="Backup SMS Site Server" enabled="false" options="F:\BACKUPS" />

            <mtask use="1" name="Check Application Title with Inventory Information" enabled="true" options="" />

        <mtask use="1" name="Clear Install Flag" enabled="false" options="" />

            <mtask use="1" name="Clear Undiscovered Clients" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Application Request Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Application Revisions" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Client Download History" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Client Operations" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Cloud Management Gateway Traffic Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Collected Files" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Computer Association Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Console Connection Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Delete Detection Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Device Wipe Record" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Discovery Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Distribution Point Usage Stats" enabled="true" options="" />

            <mtask use="1" name="Delete Aged EP Health Status History Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Enrolled Devices" enabled="false" options="" />

            <mtask use="1" name="Delete Aged Exchange Partnership" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Inventory History" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Log Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Metering Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Metering Summary Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Notification Server History" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Notification Task History" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Passcode Records" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Replication Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Replication Summary Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Status Messages" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Threat Data" enabled="true" options="" />

            <mtask use="1" name="Delete Aged Unknown Computers" enabled="true" options="" />

            <mtask use="1" name="Delete Aged User Device Affinity Data" enabled="true" options="" />

            <mtask use="1" name="Delete Expired MDM Bulk Enroll Package Records" enabled="true" options="" />

            <mtask use="1" name="Delete Inactive Client Discovery Data" enabled="false" options="" />

            <mtask use="1" name="Delete Obsolete Alerts" enabled="true" options="" />

            <mtask use="1" name="Delete Obsolete Client Discovery Data" enabled="false" options="" />

            <mtask use="1" name="Delete Obsolete Forest Discovery Sites And Subnets" enabled="true" options="" />

            <mtask use="1" name="Delete Orphaned Client Deployment State Records" enabled="true" options="" />

            <mtask use="1" name="Evaluate Provisioned AMT Computer Certificates" enabled="true" options="" />

            <mtask use="1" name="Monitor Keys" enabled="true" options="" />

            <mtask use="1" name="Rebuild Indexes" enabled="false" options="" />

            <mtask use="1" name="Summarize File Usage Metering Data" enabled="true" options="" />

            <mtask use="1" name="Summarize Installed Software Data" enabled="true" options="" />

            <mtask use="1" name="Summarize Monthly Usage Metering Data" enabled="true" options="" />

            <mtask use="1" name="Update Application Available Targeting" enabled="true" options="" />

        </mtasks>

        <accounts comment="Site System Accounts">

            <account use="1" name="CONTOSO\sccmadmin" password="P@ssW0rd!" comment="Full site administrator" />

            <account use="1" name="CONTOSO\cm-naa" password="P@ssW0rd!" comment="Network Access Account" />

            <account use="1" name="CONTOSO\sql-svc" password="P@ssW0rd!" comment="SQL Server service account" />

        </accounts>

        <malwarepolicies comment="Endpoint Protection Malware Policies">

            <malwarepolicy use="1" name="SCEP Standard Desktop Name" path="E:\CONFIGMGR\AdminConsole\XmlStorage\EPTemplates\SCEP_Standard_Desktop.xml" comment="" />

            <malwarepolicy use="0" name="SCEP_Default_CfgMgr" path="E:\CONFIGMGR\AdminConsole\XmlStorage\EPTemplates\SCEP_Default_CfgMgr.xml" comment="" />

            <malwarepolicy use="0" name="SCEP_High_Security" path="E:\CONFIGMGR\AdminConsole\XmlStorage\EPTemplates\SCEP_High_Security.xml" comment="" />

            <malwarepolicy use="0" name="SCEP_Performance_Optimized" path="E:\CONFIGMGR\AdminConsole\XmlStorage\EPTemplates\SCEP_Performance_Optimized.xml" comment="" />

        </malwarepolicies>

    </cmsite>

</configuration>