| name | mecm-expert |
| description | Microsoft Endpoint Configuration Manager (MECM/ConfigMgr/SCCM) administration expertise. Use when Claude needs to assist with (1) Software update management and WSUS configuration, (2) Application deployment and packaging, (3) Operating system deployment (OSD) and task sequences, (4) Collection management and WQL queries, (5) Client troubleshooting and health checks, (6) PowerShell automation with ConfigurationManager module, (7) Driver management and deployment, (8) Site server administration and infrastructure, (9) Reporting and compliance, or any other MECM/ConfigMgr administration tasks. |
MECM Expert Skill
Guidance for Microsoft Endpoint Configuration Manager (MECM/ConfigMgr/SCCM) administration tasks.
Primary Documentation Reference
Official Documentation: https://learn.microsoft.com/en-us/mem/configmgr/
Live Documentation Fetching
Use the WebFetch tool to retrieve live content from reference URLs for accuracy. Microsoft documentation is frequently updated.
When to Fetch
| Scenario | Action |
|---|
| PowerShell cmdlet syntax | Fetch https://learn.microsoft.com/en-us/powershell/module/configurationmanager/{cmdlet-name} |
| Troubleshooting steps | Fetch https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/ + topic path |
| Version-specific features | Fetch What's New page to confirm availability |
| SQL view schemas | Fetch SQL view docs for accurate column names and joins |
| Task sequence steps | Fetch step documentation for current options and variables |
| Error codes | Fetch troubleshooting docs for specific error resolution |
Fetch Guidelines
- Always fetch for cmdlet syntax — parameters change between versions
- Fetch for troubleshooting — resolution steps may be updated
- Verify version requirements — confirm which ConfigMgr version supports a feature before recommending
- Cross-reference error codes — fetch specific error code documentation
- Cache awareness — skip re-fetching URLs already retrieved in the same session
Reference Files
Load the appropriate reference file based on the user's topic:
| Topic | Reference File | Covers |
|---|
| Patch management, WSUS, ADRs | software-updates.md | SUP config, ADRs, WSUS maintenance, update logs |
| App deployment and packaging | application-management.md | App model, detection methods, deployment, app logs |
| OS deployment, task sequences, drivers | osd.md | Task sequences, boot images, variables, driver management, OSD logs |
| Collections and WQL queries | collections.md | Membership rules, WQL queries, collection evaluation |
| PowerShell automation | powershell.md | Module setup, common cmdlets, client actions |
| Client issues and log files | troubleshooting.md | Client health, common issues, log file reference |
| SSRS reports, SQL views, CMPivot | reporting-sql.md | Built-in reports, SQL view categories, sample queries |
| SQL Server tuning for MECM | sql-best-practices.md | MaxDOP, memory, tempdb, maintenance plans, RCSI, AG, diagnostics |
Scripts
All scripts write CMTrace-compatible logs. Open the resulting .log files with CMTrace for color-coded filtering.
| Script | Purpose |
|---|
| Import-CMModule.ps1 | Fault-tolerant ConfigurationManager module loader. Use: . .\scripts\Import-CMModule.ps1 -SiteCode "PS1" |
| Invoke-CMClientHealthCheck.ps1 | Read-only health check for a ConfigMgr client. Validates services, WMI, policy, inventory, cache, MP connectivity, disk, pending reboot. Log: C:\Windows\CCM\Logs\ClientHealthCheck.log |
| Repair-WMISafely.ps1 | Non-destructive WMI repair. Uses winmgmt /salvagerepository (NOT /resetrepository), re-registers WMI DLLs, recompiles critical MOFs. Log: C:\Windows\Logs\WMIRepair.log |
| Invoke-CMServerHealthCheck.ps1 | Read-only health check for a ConfigMgr site server. Validates SMS services, SMS Provider, site component status, inbox backlogs, disk space, SQL connectivity, recent event log errors. Log: C:\Windows\Logs\CMServerHealthCheck.log |
Core Concepts
Configuration Manager Hierarchy
Reference: Design a hierarchy of sites
- Central Administration Site (CAS): Top-level site for multi-site hierarchies (optional)
- Primary Site: Main administration point, hosts the database
- Secondary Site: Child of primary site, distributes content to remote locations
Key Site System Roles
Reference: Site system roles
- Management Point (MP): Primary client-to-site communication
- Distribution Point (DP): Content storage and distribution
- Software Update Point (SUP): WSUS integration for patch management
- State Migration Point: User state storage during OSD
- Reporting Services Point: SSRS integration
Best Practices
Reference: Site and site system prerequisites
- Maintenance: Run WSUS cleanup monthly, reindex SUSDB, monitor component status, back up site database
- Performance: Limit collection incremental updates, distribute content before deployments, use boundary groups effectively
- Security: Use HTTPS where possible, implement RBAC, use least-privilege service accounts
- Deployment: Test in pilot collections first, use phased deployments, configure maintenance windows
Additional Resources