Windows 10 SCCM 2012 R2 Client and SCEP 2012 install



Lately I have been playing with Windows 10 and wanted to manage with SCCM 2012 R2  and SCEP 2012 R2 in my environment.

SCCM 2012 R2 Client

I tried installing it out of the box, but it would fail. Looking at the CCMSetup log. I saw this:

Site version '5.00.7958.1000' is compatible. Client deployment will continue.        ccmsetup        C:\Windows\ccmsetup\WindowsUpdateAgent30-x64.exe is Microsoft trusted.        Ccmsetup

Installing file 'C:\Windows\ccmsetup\WindowsUpdateAgent30-x64.exe' with options '/quiet /norestart'.        Ccmsetup        

File 'C:\Windows\ccmsetup\WindowsUpdateAgent30-x64.exe' returned failure exit code 775. Fail the installation.        Ccmsetup

InstallFromManifest failed 0x80070307        ccmsetup        5/23/2015 1:06:19 AM        2812 (0x0AFC)

Sending Fallback Status Point message to '', STATEID='311'.        Ccmsetup        

Params to send FSP message '5.0.7958.1501 Deployment Error 0x80070307. Pre-req: WindowsUpdateAgent30-x64.exe'        ccmsetup

State message with TopicType 800 and TopicId {AFAC72BB-6EE4-4D36-AFF6-EF9F48E9C323} has been sent to the FSP        FSPStateMessage

'Configuration Manager Client Retry Task' is scheduled to run at 05/23/2015 06:06:19 AM (local) 05/23/2015 10:06:19 AM (UTC) time with arguments '/RetryWinTask:1'.        Ccmsetup        

CcmSetup failed with error code 0x80070307        ccmsetup

Actually it makes sense. It is failing on the Windows Update Agent install. the trick is just exclude this as part of the install. it is actually very easy. you just need to exclude the prerequisite with the /skipprereq argument. just run the ccmsetup.exe as follows:

ccmsetup.exe /skipprereq:WindowsUpdateAgent30-x64.exe 


I did this on a second machine and it failed but once I copied the client folder to the local computer, it worked with out a problem... 


SCEP 2012 R2

​I got the error: This program has compatibility issues

This was solved using Noah Swansonson's Tech Blog ( He was right on the money., however I just used 7-zip ( to extract the source from the SCEPInstall.exe then created a batch script to install everything:

  1. Use 7-Zip to extract the source files from SCEPInstall.exe to the scepinstall dir.
  2. create a text file and name it scepinstall.win10.bat (or what ever you want ending in a bat extension) in the scepinstall dir:

    msiexec.exe /i "%~dp0amd64\EppManagement.msi" /qb /l* %temp%\EppManagement.log ENABLEPROMANWMI=1 SECURITY_POLICY_LOCATION="c:\windows\CCM\EPAMPolicy.xml" MARKET="en-us"

    msiexec.exe /i "%~dp0amd64\FEPClient.msi" /qb /l* %temp%\FEPClient.msi ENABLEMANAGEMENT=1 ENABLEFIREWALLMANAGEMENT=0

    msiexec.exe /i "%~dp0amd64\dw20shared.msi" /qb /l* %temp%\dw20shared.msi

    msiexec.exe /i "%~dp0amd64\epp.msi" /qb /l* %temp%\epp.log AMPRODUCT="SCEP" PRODUCTICON="c:\Program Files\Microsoft Security Client\EppManifest.dll,-100" PRODUCTLOCALIZEDNAME="c:\Program Files\Microsoft Security Client\EppManifest.dll,-1000" REMEDIATIONEXE="c:\Program Files\Microsoft Security Client\msseces.exe" SIGNATURECATEGORYID="a38c835c-2950-4e87-86cc-6911a52c34a3" PRODUCT_SKU="SCEP 2012"

  3. Run the SCEPInstall.win10.bat (or whatever you named it) as administrator
  4. Now launch "System Center Endpoint Protection" from the start menu.
  5. if you get a "Windows Security and Maintenance" prompt asking if you trust the publisher, Click Yes, I trust the publisher and want to run this app:


This website and its content is copyright of ITHierarchy Inc - © ITHierarchy Inc 2013-2015. All rights reserved.

Any redistribution or reproduction of part or all of the contents in any form is prohibited other than the following:

  • you may print or download to a local hard disk extracts for your personal and non-commercial use only
  • you may copy the content to individual third parties for their personal use, but only if you acknowledge the website as the source of the material

You may not, except with our express written permission, distribute or commercially exploit the content. Nor may you transmit it or store it in any other website or other form of electronic retrieval system.