BigFix - Use MCM to automatically provision and install software

Earlier we setup layering on applications as part of the imaging process here - https://www.dhirubhai.net/pulse/bigfix-osd-fat-images-vs-layered-brad-sexton/.?We also setup how to edit the BigFix MSI to include client settings for the client to check in to the DMZ relay for off network installs here https://www.dhirubhai.net/pulse/bigfix-edit-client-msi-off-network-installs-custom-settings-sexton/. Now we have agent less enrollment and we can use this same method to provision machines once they join your environment.?Using this process for both OSD and for MCM you are now not having to create a second method for provisioning machines or from bare metal builds.?You can use the same process and manage them the same to ensure they have what they need once they enroll their device.

1.??????Edit the BigFix MSI to include client settings to subscribe to the OSD Phases site

2.??????Upload the MSI to the MCM server

3.??????Create a policy group for BigFix automatically once the device enrolls

Edit the BigFix MSI to include client settings to subscribe to the OSD Phases site

Open the file in Orca

Click on the Tables - Registry and Right Click and select Add Row

Create a Registry value.?If you edited the MSI from earlier you could have a Registry6 value start with the next Registry# here.

This will always be 2

Add the value SOFTWARE\BigFix\EnterpriseClient\Settings\Client\OSD

Input value here

Set the value to Phase1

This will always be BESClient.exe

Save the changes to the MSI

Upload the MSI to the MCM server

Select Jump to – Configure MDM

Select Prestage Windows BigFix Installer

Select the BigFix MSI

Select the MSI you created and hit the deploy Button to prestage the MSI

Now once you deploy the BigFix agent to the machine it will automatically start the provisioning process.?This will then ensure that the machine has all of the necessary software, branding, patching, etc while the user is working in the back ground.?

Create a policy group for BigFix automatically once the device enrolls

Select the Create Policy Groups Button

Name Your Policy Group Name

Select the OS to Windows

Assign to Group and Select Over the Air Enrollment, Bulk Enrollment, and Autopilot Enrollment

Select Add BigFix Agent

Select the MSI file you would like to deploy when the machine enroll and save

Note: if you just uploaded the msi installer it might take a few minutes before it to show up in the list

Select Add Policy

Select the Policy we Created Earlier and select OK

Select Save

Select The Windows Policy we just created and Deploy – Policy Group on MDM Server

Click Deploy

Now once you deploy the BigFix agent to the machine it will automatically start the provisioning process.?This will then ensure that the machine has all of the necessary software, branding, patching, etc while the user is working in the back ground.??