Enabling Email approvals for your requested applications in Configuration Manager 2012

By default application approvals must be done from within the ConfigMgr 2012 administrator console. If you have Service Manager 2012 you can use that to implement an approval process.

For those of you who do not (yet) have Service Manager here is a tool that you can use. The solution consists of a Website and a Web Service. None of them have to be installed on the same server. Also there is no requirement to install any the components on the site server.

Download our beta 0.9.8 version here

How it works

The Coretech Application Approval Server (CAAS) is installed on the Site server and will monitor any approval requests made by users.

  1. A request is made by the end user from the software web catalog 

    imageimage

  2. CAAS will monitor the request, look up the user in Active Directory and find the manager. In this example I’m my own manager.
  3. Send an approval mail to the manager.

    image
  4. The manager approves or rejects the request.
  5. Request rejected by the manager

    image
  6. Application approved by the manager and ready for installation.

    imageimage

Installing the Website

    1. Start the installation and click Next. 

      clip_image002

    2. Enter the FQDN, the Site Code and click Next.

      clip_image004
    3. Set a checkmark in the allowed actions and Click Next.clip_image006

      Allow Action by Id:
      Allows managers to deny/approve requests that match an Id
      http://fqdn/CAAWebsite?id=GUID
      Required to work the the Coretech AA Service
      Allow Action by User: Allows managers to deny/approve requests that match an User
      http://fqdn/CAAWebsite?user=domain\username

      Allow Action by Application:
      Allows managers to deny/approve requests that match an User
      http://fqdn/CAAWebsite?application=ApplicationName

      Allow Wildcard:
      Allows managers to deny/approve requests that match on wildcard
      http://fqdn/CAAWebsite?id=C75%
      http://fqdn/CAAWebsite?user=domain\userna%
      http://fqdn/CAAWebsite?application=ApplicationNa%

    4. Select a Site to place the Virtual Directory.

Give the Virtual Directory a name (Default: CAAWebsite).

Choose an Application Pool that runs ASP.Net v4 in Integrated mode.

Click Next.

clip_image008

  1. Click Next to start the installation.clip_image010
  2. Installation Complete, click Close.clip_image012

Installing the web Service

  1. Start the Installation and click Next.

    image
  2. Enter the FQDN of the Site Server and the the Site Code.
    Enter the FQDN of the Web Server that holds the Coretech AA Website.
    Enter the Virtual Path of the Coretech AA Website (Default: CAAWebsite).
    image
  3. Enter the FQDN of the mail server to use, the port to use on the mail server and the mail address to send as.image
  4. Enter the folder to install the Service, or keep the default.image
  5. Click Next to start the installation.image
  6. Installation is complete, click Closeimage

A huge tribute goes to Claus Codam who is the main developer behind the tool

By | 2012-03-20T15:02:09+00:00 March 20th, 2012|Configuration Manager (SCCM), General info, Tools|57 Comments

About the Author:

Kent Agerlund
Microsoft Regional Director, Enterprise Mobility MVP. Microsoft Certified Trainer and Principal consultant. I have been working with Enterprise client management since 1992. Co-founder of System Center User Group Denmark in 2009. Certified MCITP: Enterprise Administrator, MCSA+Messaing, and much more. Member of: Microsoft Denmark System Center Partner Expert Team The Danish Technet Influencers program System Center Influencers Program.

57 Comments

  1. […] Enabling Email approvals for your requested applications in Configuration Manager 2012 […]

  2. […] Enabling Email approvals for your requested applications in Configuration Manager 2012 written by: admin http://blog.coretech.dk/kea/enabling-email-approvals-for-your-requested-applications-in-configuratio… […]

  3. John Andre March 29, 2012 at 12:21 - Reply

    Thanks, but i am having some issues with the installer. The webservice installer throws an 1001 event cannot find service. And it rolls back the installation. programfiles(x86)CoretechCoretech Application Approval Service only contain the file : CM_AppReqListen.InstallState

    Seen this before?

    • Martin Cayer May 4, 2012 at 17:02 - Reply

      I have the same problem in my lab.

      Error 1001 An exception error occurred during the commit phase of the installation.

      Any help would greatly be appreciated.

  4. Jan Christiansen May 5, 2012 at 1:03 - Reply

    I’m experiencing the same problem, the website installs fine, but the service install fails.

    Would it be possible to make a user/password field for log on to the mailserver ?

  5. Rob May 14, 2012 at 11:49 - Reply

    Error 1001 An exception error occurred during the commit phase of the installation.

  6. Stan May 30, 2012 at 14:53 - Reply

    thank you
    a very useful thing
    been very different if it were possible to specify the email recipients are statically

  7. Jannet Roussell July 7, 2012 at 19:15 - Reply

    There are some great websites out there but Google isn’t the best at finding them. Try finding a relevant directory, they will often list a few lesser known websites

  8. Mark July 27, 2012 at 21:51 - Reply

    I have the same 1001 error while trying to setup the Application Approval service, rerunning the install won’t fix the failed install. Is any development work being done to the beta 0.9 version and will a fixed version be published?
    thanks

  9. […] Kents Solution […]

  10. Henrik October 15, 2012 at 14:09 - Reply

    I also got an error during installation.
    “Error 1001. An exception occurred during the Commit phase of installation. …”
    The Service was created but isn´t running. Did you have any solution for this? I would nicely use your tool. So please give us any hints!
    Thanks

  11. shadster November 7, 2012 at 22:45 - Reply

    any way to have replace the “manager” lookup in AD with a static recipient? like an ITPurchasing dept for example or the group responsible for maintaining and managing licenses keys as the “approver”?

    • Claus Codam November 8, 2012 at 13:41 - Reply

      Hi Shadster,

      There is a new release coming up, which is due to release within the month.
      This will have a “fallback” e-mail address, which will either be used when no manager is found for the user, or if specified in the config, always be used.

      Would that be sufficient in your case?
      If not, then please let us know what you need specifically, and we will make sure to implement it in an upcoming release.

      Thanks.

      • shadster November 12, 2012 at 22:38 - Reply

        this would be perfect Claus!

      • Johan November 22, 2012 at 22:12 - Reply

        What about the possibility to send the request to the “owner” of the application which can be filled in within the application…?

  12. Johan December 6, 2012 at 8:05 - Reply

    Claus, any word when the “new” version will be available..?

  13. Johan January 9, 2013 at 9:44 - Reply

    Any news regarding the new version?

  14. Mihir February 5, 2013 at 8:47 - Reply

    The webservice installer throws an 1001 event cannot find service.

  15. Thanks February 7, 2013 at 13:26 - Reply

    Hey,

    There is any beta for the new version (that i will supply one email address..?)

    Thanks

  16. Jason February 12, 2013 at 17:20 - Reply

    Is there a new version that does not throw the 1001 error?

    • Claus Codam February 12, 2013 at 18:46 - Reply

      You can get the latest beta
      We are still some time away from a formal release.

  17. Mithun Vinod February 18, 2013 at 9:19 - Reply

    Hi Kent,
    I’m working on a similar setup, where-in I am trying to integrate ServiceNow with System Center 2012 Config Mgr SP1 for ticket work-flow + approvals and eventually deployment of software to user/device. Could you provide some guidance on how ServiceNow webservice could integrate with CM12 (web-service or APIs)?

  18. 1001 error February 19, 2013 at 10:14 - Reply

    1001 error
    service Coretech SCCM Application Request Listener stoped

  19. Magnus March 8, 2013 at 9:34 - Reply

    Hi….im getting this when I browse the website…
    Unable to Retrieve Manager of User. Index was out of range. Must be non-negative and less than the size of the collection.
    Any ideas?

    • Henrik March 8, 2013 at 11:06 - Reply

      Yes, you have to setup a Manager in properties of the user under organization.

      • Sebastien P June 5, 2013 at 14:31 - Reply

        Hi Henrik,

        I’ve the same message even with a manager defined under Organization. Do you have further idea ?

        Thanks and Regards,
        SeB

        • Sven September 10, 2013 at 11:07 - Reply

          Hi,

          we are facing a allmost simular problem. The message is Unable to Retrive Manager of User. An operations error occured.

          Is there any clue where the root of the problem is.

          Thank you and Regards
          Sven

  20. Mark March 11, 2013 at 23:02 - Reply

    Hello, mail arrives at administrator configuration manager? or the head do not understand. if Configuration Manager administrator happens when there are more than one

  21. Mike Stewart March 27, 2013 at 17:46 - Reply

    I have having an issue with the webpage. Page not found. Any ideas? Email part works great but when I click Approve, Deny, Details, or pending request they all fail w/ Webpage not found

  22. Erik Smith April 8, 2013 at 21:48 - Reply

    After clicking the links to Approve or Deny requests in the email message, the Application Approval page displays “No such Id”. When clicking Details or Pending Requests, no data is display although it can be seen in the SCCM console. Any suggestions to resolve these issues?

  23. Nickolaj April 22, 2013 at 5:38 - Reply

    Hey, cool tool!

    I’m trying to install the website on a Windows Server 2012, but the installations fails just seconds after starting with “The installer was interrupted before the …”.

    Looking in the log file there’s only a “nice” msi error 1603 with no usefull information.

    Any ideas?

    Thanks in advance.

    Regards,
    Nickolaj

  24. Matt Benson May 1, 2013 at 16:00 - Reply

    Great tool! Thanks for your efforts. I am wondering if it would be possible for this to work with a flat file or database of manager information as opposed to an LDAP query of AD? Unfortunately AD is not the authoritative source for this information in my environment.

    Regards,
    Matt

  25. Mason May 27, 2013 at 18:22 - Reply

    How do I setup the “fallback email”? In may case I’d prefer all approval requests to go to our helpdesk. I’ve installed the latest release but I’m not seeing any configuration options.

  26. Jon June 12, 2013 at 15:51 - Reply

    Hi, will there ever be a version 1.0?

  27. serj July 10, 2013 at 9:53 - Reply

    Hello, I`ve got problem with your tool on Windows 2012, in a test lab deployment. I installed a website, with a AppPool Net4.5 but something is wrong. It works only over http and opens with an error “Unable to Retrieve Manager of User. Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: indexDC…” + some wrong elements in a layout. I suppose there is some permissions or config problem. Can you help me with a fix?

  28. Dave July 30, 2013 at 17:10 - Reply

    I too am wondering if there will be a production version, and if there is any time line to do so?

  29. MVaj August 28, 2013 at 13:20 - Reply

    Hi,

    I’m having some issues with your soft. All installing fine and i’m receiving the email notification when app request. Unluckily, when i’m trying to approve or deny, i got the error :

    Approvalhandle Exception
    Denyhandle Exception

    Any ideas ?

  30. Manuel August 30, 2013 at 10:32 - Reply

    Hi,

    I am using your tool for test proposes and it rocks. The only thing which I don’t like is that the email is send to the manager. Is there any possibility to send this email to a group defined in AD ???

  31. IT September 17, 2013 at 21:11 - Reply

    can we have the version with specific email not the manager

  32. LoKkY October 1, 2013 at 11:53 - Reply

    Hi,there any way to put email instead of manager?. Our managers are department heads and they know nothing of IT.

    Thx for all!!!!

  33. Russo October 9, 2013 at 6:46 - Reply

    For those getting the error “Unable to Retrieve Manager of User”, make sure the user account has a manager; and also and this is the error I experienced I had a manager assigned and still had the error.

    I changed my application pool to “ASP.NET v4.0 DefaultAppPool” and if fixed it. In the website config as well under Authentication ensure Windows Authentication is enabled, In providers make sure NTLM is on the top and in advanced settings turn extended protection off and enable Kernel-mode authentication.

  34. Dave October 17, 2013 at 17:53 - Reply

    Thank you so much. Having a bit of a problem. From the server where the website is hosted, I can access the website and see ALL requests. When I try the same thing from my workstation I get and error “Handle Exception. Error:Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))”

    If I try to access a specific request from eith the server or my workstation, I get the same error.
    The email and approval process worked ok when I was on the website server and approved/denyed requests.

  35. Tomasz November 14, 2014 at 13:47 - Reply

    Hi,
    I have a problem with following things below:
    1st – once i will request some software via SCCM Application Catalog i have got an email saying that some user requested some some software what is fine but once when i click on one of the hyperlink as “This Request or All Requests” Application Approval shows up but i don’t see any software listed on this website to deny or approve. I did every single steps as you posted here http://blog.coretech.dk/kea/coretech-application-e-mail-approval-tool/ Can you help with this?

    Regards,
    Tomasz

  36. Alexandr Mouzhagitov March 23, 2015 at 17:56 - Reply

    Is it working in multi domains environments?
    I was trying without success.
    Is there any specific settings in this way?

  37. PRJ May 7, 2015 at 15:01 - Reply

    Hrmmm, there´s no xml file in the zip file…….

  38. Rakesh Kumar July 6, 2015 at 16:58 - Reply

    Hi,

    How to check whether email sent to manager or not.

  39. Atran November 16, 2016 at 2:31 - Reply

    Does it work with the SCCM 1606 current branch version

    • Murray Harris November 30, 2016 at 5:48 - Reply

      I too would like to know the answer to this.

  40. Murray Harris November 30, 2016 at 5:59 - Reply

    I have this running on SCCM 2016

  41. Santosh Dharamsale January 26, 2017 at 7:10 - Reply

    HI,

    I have installed on SCCM 2012 R2 server and i dont see any request email trigger so where can i check what is wrong with this. i checked both folders but dont find any log files.

  42. Kenneth March 3, 2017 at 11:04 - Reply

    WHen I try installing the website on Server 2016, O get the error:

    “This setup requires IIS 5.1 or higher amd Win XP or higher

    This setup cannet be isntalled on windows 2000. Please instell IIS or a newer OS and run setup again”

    IIS is installed, so that’s not the issue.

    HELP 🙂

  43. Ray August 2, 2017 at 19:26 - Reply

    Hi

    Thanks for building this. Do you happen to have an update for this?

    Ray

Leave A Comment